Ravi Sir's Cyber Security Cards › Revision Cards
STRIDE: six questions for any design
Revision card: STRIDE: six questions for any design. Easy English, with a real example. Scan the QR for the full lesson.
Read card text
What this card says
What is threat modelling?
Threat modelling means looking at a design and listing how it could be attacked, before you build. It is cheaper to fix a flaw on paper than after launch.
What is STRIDE?
A checklist of six threat types, one per letter, so you miss none: Spoofing, Tampering, Repudiation, Information disclosure, Denial of service, Elevation of privilege.
How to use it
Draw the design and data flows. Go through all six letters for each part. Pick a defence for each threat, then fix the highest risk first.
| Letter | Threat | Defence |
|---|---|---|
| S | Spoofing | MFA |
| T | Tampering | Input checks |
| R | Repudiation | Good logs |
| I | Info disclosure | Encryption |
| D | Denial of service | Rate limits |
| E | Elevation | Least privilege |
Learn more in the lesson: 29.9 Threat Modelling (STRIDE)