What is STRIDE in threat modeling?
D4 · Operations · CompTIA Security+ SY0-701STRIDE is a threat classification model developed by Microsoft to categorize security threats during the design phase:
| Letter | Threat | Violated Property |
|---|---|---|
| S | Spoofing | Authentication |
| T | Tampering | Integrity |
| R | Repudiation | Non-repudiation |
| I | Information Disclosure | Confidentiality |
| D | Denial of Service | Availability |
| E | Elevation of Privilege | Authorization |
Memorize STRIDE and its corresponding security properties — this is high-yield exam content. Each STRIDE threat has specific countermeasures: Spoofing → strong authentication, Tampering → integrity controls/HMAC, Repudiation → audit logging, Info Disclosure → encryption, DoS → rate limiting/redundancy, EoP → least privilege/access control.