STRIDE, DREAD, attack trees, data flow diagrams, MITRE ATT&CK tactics and techniques and the cyber kill chain.
41 cards · basic cards · AI-written, checked twice. Edit anything.
- What does the S in STRIDE stand for?
Show answer
Spoofing- What is spoofing in threat modeling?
Show answer
Impersonating someone or something else to gain unauthorized access- What does the T in STRIDE stand for?
Show answer
Tampering- What is tampering in threat modeling?
Show answer
Unauthorized modification of data or system components- What does the R in STRIDE stand for?
Show answer
Repudiation- What is repudiation in threat modeling?
Show answer
Denial of performing an action or transaction that occurred- What does the I in STRIDE stand for?
Show answer
Information Disclosure- What is information disclosure in threat modeling?
Show answer
Unauthorized access to or exposure of sensitive data- What does the D in STRIDE stand for?
Show answer
Denial of Service- What is denial of service in threat modeling?
Show answer
Making a system or service unavailable to legitimate users- What does the E in STRIDE stand for?
Show answer
Elevation of Privilege- What is elevation of privilege in threat modeling?
Show answer
Gaining higher levels of access than authorized- What does D stand for in the DREAD framework?
Show answer
Damage potential- What does R stand for in the DREAD framework?
Show answer
Reproducibility- What does E stand for in the DREAD framework?
Show answer
Exploitability
FlashKeepers