stride-analysis-patterns

SKILL.md

| Spoofing | Can attacker pretend to be someone else? | Authentication | | Tampering | Can attacker modify data in transit/rest? | Integrity | | Repudiation | Can attacker deny actions? | Logging/Audit | | Info Disclosure | Can attacker access unauthorized data? | Encryption | | DoS | Can attacker disrupt availability? | Rate limiting |

| Elevation | Can attacker gain higher privileges? | Authorization |

[User] --> [Web App] --> [API Gateway] --> [Backend Services] | v [Database]

Wenden Sie die STRIDE-Methodik an, um Bedrohungen systematisch zu identifizieren. Verwenden Sie es, wenn Sie die Systemsicherheit analysieren, Sitzungen zur Bedrohungsmodellierung durchführen oder Sicherheitsdokumentation erstellen. Quelle: wshobson/agents.

Original anzeigen