STRIDE Model
What is STRIDE Model?
STRIDE ModelA Microsoft threat-classification framework that categorizes software threats as Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, and Elevation of Privilege.
STRIDE is a threat-modeling framework developed at Microsoft in the late 1990s by Loren Kohnfelder and Praerit Garg, and embedded in the Microsoft Security Development Lifecycle (SDL). It guides analysts to enumerate threats by mapping system components in a data flow diagram (DFD) to six categories: Spoofing identity, Tampering with data, Repudiation, Information disclosure, Denial of service, and Elevation of privilege. Each category corresponds to a violated security property (authentication, integrity, non-repudiation, confidentiality, availability, authorization). STRIDE is widely used in secure-by-design programs, regulatory threat-modeling expectations (e.g., FDA premarket cybersecurity, automotive UN R155, ISO/SAE 21434) and AppSec processes, often combined with DREAD or attack trees.
● Examples
- 01
An architect annotating a DFD with STRIDE threats on every trust boundary as part of design review.
- 02
A medical-device manufacturer documenting STRIDE-based threats to satisfy FDA premarket cybersecurity expectations.
● Frequently asked questions
What is STRIDE Model?
A Microsoft threat-classification framework that categorizes software threats as Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, and Elevation of Privilege. It belongs to the Compliance & Frameworks category of cybersecurity.
What does STRIDE Model mean?
A Microsoft threat-classification framework that categorizes software threats as Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, and Elevation of Privilege.
How do you defend against STRIDE Model?
Defences for STRIDE Model typically combine technical controls and operational practices, as detailed in the full definition above.
What are other names for STRIDE Model?
Common alternative names include: STRIDE threat model.