Threats

Question 1

Threat Models

Answer 1

STRIDE (Microsoft): threat based. threat categories

PASTA: Risk based on value of assets. Uses 7 steps.

VAST: Threat modeling that combines threat and risk management in the Agile programming process.

Question 2

STRIDE 6 Threat classifications

Answer 2

Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, Elevation of privilege

Question 3

PASTA threat classification meanings

Answer 3

Process for attack simulation and threat analysis

Question 4

Reduction Analysis

Answer 4

Decomposing a system or application into its parts as part of the threat analysis process.