We may earn an affiliate commission when you visit our partners.

STRIDE

Save

May 1, 2024 2 minute read

STRIDE is a threat modeling framework that helps organizations identify and mitigate security risks in their systems and applications. It is a structured approach that can be used to assess the security of a system or application, and to identify and prioritize the most important risks to address.

What is STRIDE?

STRIDE is an acronym that stands for:

Spoofing: Impersonating another user or system.
Tampering: Modifying data or code without authorization.
Repudiation: Denying responsibility for an action or event.
Information disclosure: Exposing sensitive information to unauthorized parties.
Denial of service: Preventing a user or system from accessing a resource.
Elevation of privilege: Gaining unauthorized access to higher-level privileges.

STRIDE can be used to assess the security of a system or application by identifying the potential threats that could exploit each of these vulnerabilities. Once the threats have been identified, they can be prioritized based on their likelihood and impact, and appropriate mitigation measures can be put in place.

Why learn STRIDE?

There are many reasons why someone might want to learn STRIDE. Some of the most common reasons include:

To improve their understanding of information security risks.
To be able to identify and mitigate security risks in their own systems and applications.
To prepare for a career in information security.
To comply with regulatory requirements.

How to learn STRIDE

There are many different ways to learn STRIDE. Some of the most common methods include:

Path to STRIDE

Take the first step.

We've curated four courses to help you on your path to STRIDE. Use these to develop your skills, build background knowledge, and put what you learn to practice.

Sorted from most relevant to least relevant:

Security Architecture & Review with Threat Modeling-Hands On

Security Architecture & Review with Threat Modeling-Hands...

Save

Microservices Security

Save

Performing Threat Modeling with the Microsoft Threat Modeling Methodology

Performing Threat Modeling with the Microsoft Threat...

Save

Secure Software Development: Verification and More Specialized Topics

Secure Software Development: Verification and More...

Save

Help others find this page about STRIDE: by sharing it with your friends and followers:

Facebook

Copy Link

Reading list

We've selected five books that we think will supplement your learning. Use these to develop background knowledge, enrich your coursework, and gain a deeper understanding of the topics covered in STRIDE.

Threat Modeling

Save

This classic book on threat modeling covers STRIDE and other methodologies. It is geared towards making threat modeling more accessible to developers by using entity relationship diagrams. Entities can include users, interfaces, components, and data stores and the relationships describe data flows or messages.

Writing Secure Code

Save

Covers threat modeling from the perspective of risk management. It deals with threat modeling in the system development lifecycle and integrates elements of security risk management.