Why does threat model STRIDE only have six threat categories?
I know STRIDE (from Microsoft) stands for Spoofing, Tampering, Repudiation, Information disclosure, Denial of service, and Elevation of privilege.
How did Loren Kohnfelder and Prakrit Garg deduce these six threats (neither five nor seven t… Continue reading Why does threat model STRIDE only have six threat categories?