STRIDE
STRIDE is a model to identify security threats:
- Spoofing – Authenticity threat: identify as someone else
- Tampering – Integrity threat: asset modification in harmful way
- Repudiation– Non-repudiability threat
- Information disclosure – Confidentiality threat: privacy breach, . data leak
- Denial of service – Availability threat: make a system unavailable
- Elevation of privilege – Authorization threat: gain superior rights on the system