From the course: Static Application Security Testing

Unlock the full course today

Join today to access over 24,700 courses taught by industry experts.

Application threat modeling: STRIDE

Application threat modeling: STRIDE - SonarQube Tutorial

From the course: Static Application Security Testing

Start my 1-month free trial Buy for my team

Application threat modeling: STRIDE

“

- [Instructor] Earlier in this course, 2 I promised to go into threat modeling in more detail. 3 Here's where I make good on that promise. 4 Let's start our threat modeling conversation 5 by taking a closer look at STRIDE. 6 In 2009, Praerit Garg and Loren Kohnfelder from Microsoft 7 developed a model for considering threats 8 to the confidentiality, integrity, 9 and availability of applications, 10 and the data that those applications process. 11 Their intent was to help defenders identify the threats 12 to those applications so that those developers 13 and the security teams could take necessary steps 14 to mitigate those threats before something bad happened. 15 They chose the mnemonic, STRIDE, to make it easier 16 for those defenders to remember and to apply this model. 17 The first letter, S, 18 represents the Spoofing threat category. 19 Threats of this nature involve hijacking 20 another user's identity. 21 An example…

Contents