From 29cf143caa8348d4f38cef59c3636cf27dedbc6e Mon Sep 17 00:00:00 2001 From: Alvie Rahman Date: Tue, 24 Aug 2021 12:39:58 +0100 Subject: [PATCH] Delete threat_modelling.md --- threat_modelling.md | 20 -------------------- 1 file changed, 20 deletions(-) delete mode 100755 threat_modelling.md diff --git a/threat_modelling.md b/threat_modelling.md deleted file mode 100755 index 05f355b..0000000 --- a/threat_modelling.md +++ /dev/null @@ -1,20 +0,0 @@ ---- -author: Alvie Rahman -date: \today -title: Threat Modelling and Designing for Security Notes -tags: [ security ] ---- - -# Using STRIDE to Find Threats - -> STRIDE is a mnemonic for things that go wrong in security - -- **Spoofing** is pretending to be something or someone you're not -- **Tampering** is modifying something you're not supposed to -- **Repudiation** is means claiming you didn't do something, regardless of whether you did or not -- **Information Disclosure** is about exposing information to people who are not authorized to see - it -- **Denial of Service** are attacks designed to prevent a system from providing service, including - by crashing it, making it unusably slow, or filling all its storage -- **Elevation of Privilege** is when a program or user is technically able to do things that they're - not supposed to do