stride-analysis-patterns

SKILL.md

| Spoofing | Can attacker pretend to be someone else? | Authentication | | Tampering | Can attacker modify data in transit/rest? | Integrity | | Repudiation | Can attacker deny actions? | Logging/Audit | | Info Disclosure | Can attacker access unauthorized data? | Encryption | | DoS | Can attacker disrupt availability? | Rate limiting |

| Elevation | Can attacker gain higher privileges? | Authorization |

[User] --> [Web App] --> [API Gateway] --> [Backend Services] | v [Database]

Apply STRIDE methodology to systematically identify threats. Use when analyzing system security, conducting threat modeling sessions, or creating security documentation. Source: wshobson/agents.

View raw