Threat Modeling
In some threat models used for specific targets (systems/applications, instead of the overall organization), other elements can be used (mostly in addition to, not in lieu of, the abstract); incorporating those same threat modeling techniques into the detailed specifics of the target.
6 slides · 2 min read · Domain 1
With this technique, designers can identify and troubleshoot potential vulnerabilities during the development and acquisition of the target instead of waiting until the target reaches the production environment. This practice (securing a system/application) during development is less expensive and time-consuming than addressing issues after the item has entered production.
There are various threat modeling tools, and one of the leading tools is Microsoft STRIDE that serves as a threat classification system used to inform software developers about threats during the development process.
These are the elements of STRIDE:
Spoofing Identity
The type of threat wherein an attacker poses as an entity other than the attacker, often as an authorized user.
Tampering with Data
When the attacker attempts to modify the target data in an unauthorized way.
Repudiation
When the attacker, as a participant of a transaction, can deny (or conceal) the attacker's participation in that transaction.
Information Disclosure
Just like it sounds, this category can include both inadvertent release of data (where an authorized user discloses protected data accidentally to unauthorized users, or gains access to material that their authorization should not allow) and malicious access to data (an attacker getting unauthorized access).
Denial Of Service (DOS)
An attack on the availability aspect of the CIA triad; creating a situation in the target where authorized users cannot get access to the system/application/data.
Elevation Of Privilege
When an attacker not only gains access to the target but also can attain a level of control with which to completely disable/ destroy the entire target system.
Security professionals should know each of the elements of the STRIDE model; as the term is an acronym, it is not exceptionally difficult.
However, some of the concepts seem to have been worded in such a way as to force them into an acronym, which varies from other industry usage (for instance, the term "non-repudiation" is commonly used; the STRIDE variant, "repudiation" is specific to STRIDE). Other threat models include:
- OCTAVE: Created by Carnegie-Mellon University, the OCTAVE model is designed for viewing the overall risk of IT systems across an organization. Published with two variants, OCTAVE for large organizations, OCTAVE-S for smaller operations.
- Trike: An open-source methodology and toolset from the Massachusetts Institute of Technology (MIT). Has not been updated/revised for some time.
Additional Readings:
CERT.ORG
Introducing OCTAVE Allegro: Improving the Information Security Risk Assessment Process
Click to see more
OCTOTRIKE.ORG
Click to see more