STRIDE on tplat

Spoofing

Mon, 01 Jan 0001 00:00:00 +0000

Spoofing

Spoofing is pretending to be something or someone you’re not. Spoofing violates authentication.

Typical victims include processes, external entities, or people.

Example Threats

Spoofing a person
spoofing a process
spoofing a “file” on disk
spoofing a network address
spoofing a machine
spoofing a role.

Tampering

Mon, 01 Jan 0001 00:00:00 +0000

Tampering

Tampering is modifying something you’re not supposed to modify. Tampering violates integrity. It can include packets on the wire (or wireless), bits on disk, or the bits in memory.

Typical victims include data stores, data flows, or processes.

Example Threats

Tampering with a file
racing to create a file (tampering with the file system)
tampering with a network packet
tampering with memory.

Repudiation

Mon, 01 Jan 0001 00:00:00 +0000

Repudiation

Repudiation means claiming you didn’t do something (regardless of whether you did or not). Repudiation violates non-repudation.

Typical victims include processes.

Example Threats

No logs means you can’t prove anything
logs come under attack
logs as a channel for attack.

Information Disclosure

Mon, 01 Jan 0001 00:00:00 +0000

Information Disclosure

Information Disclosure is about exposing information to people who are not authorised to see it. Information disclosure violates confidentiality.

Typical victims include processes, data stores, or data flows.

Example Threats

Network monitoring
directory of filename
file contents
API disclosure.

Denial of Service

Mon, 01 Jan 0001 00:00:00 +0000

Denial of Service

Denial of Service are attacks designed to prevent a system from providing service, including by crashing it, making it unusably slow, or filling all its storage. These threats often falls toward the bottom of the stack, because they primarily impact availability and not confidentiality or integrity. Denial of service violates availability.

Typical threats include processes, data stores, or data flows.

Example Threats

Network flooding;
program resources;
system resources.

Elevation of Privelege

Mon, 01 Jan 0001 00:00:00 +0000

Elevation of Privelege

Elevation of Privilege is when a program or user is technically able to do things that they’re not supposed to do. These threats are almost always going to fall into the highest priority category, because when they’re exploited they lead to so much damage. Denial of service violates authorisation.

Typical victims include processes.

Example Threats

Data/code confusion;
control flow/memory corruption attacks;
command injection attacks.