Give a practical example for each STRIDE threat category.

Question

Accepted Answer

Spoofing = "I am Spartacus" (impersonation); Tampering = altering Johnny's grade; Repudiation = denying it happened; Info disclosure = leaking an SSN; DoS = "try again later"; Elevation = an unauthorized sudo rm -rf.
STRIDE Examples:

Threat
Example

Spoofing
"I am Spartacus." (claiming to be someone else)

Tampering
"Looks like Johnny got an A!" (modifying data/grades)

Repudiation
"Didn't Johnny get a B?" (denying an action occurred)

Information Disclosure
"Johnny's SSN is..." (exposing private data)

Denial of Service
"Please try again later." (making system unavailable)

Elevation of Privilege
sudo rm -rf /home/johnny (gaining unauthorized access)

Key Point: These examples help identify similar patterns in your own system during threat modeling.

Threat	Example
Spoofing	"I am Spartacus." (claiming to be someone else)
Tampering	"Looks like Johnny got an A!" (modifying data/grades)
Repudiation	"Didn't Johnny get a B?" (denying an action occurred)
Information Disclosure	"Johnny's SSN is..." (exposing private data)
Denial of Service	"Please try again later." (making system unavailable)
Elevation of Privilege	`sudo rm -rf /home/johnny` (gaining unauthorized access)