stride-analysis-patterns

SKILL.md

| Spoofing | Can attacker pretend to be someone else? | Authentication | | Tampering | Can attacker modify data in transit/rest? | Integrity | | Repudiation | Can attacker deny actions? | Logging/Audit | | Info Disclosure | Can attacker access unauthorized data? | Encryption | | DoS | Can attacker disrupt availability? | Rate limiting |

| Elevation | Can attacker gain higher privileges? | Authorization |

[User] --> [Web App] --> [API Gateway] --> [Backend Services] | v [Database]

Aplicar la metodología STRIDE para identificar amenazas de forma sistemática. Úselo al analizar la seguridad del sistema, realizar sesiones de modelado de amenazas o crear documentación de seguridad. Fuente: wshobson/agents.

Ver original