CCSP · Question #529
What concept does the "I" represent with the STRIDE threat model?
The correct answer is B. Information disclosure. STRIDE is a threat modeling framework where each letter represents a category of threat: S = Spoofing, T = Tampering, R = Repudiation, I = Information Disclosure, D = Denial of Service, E = Elevation of Privilege. The 'I' stands for Information Disclosure, which refers to the…
Question
What concept does the "I" represent with the STRIDE threat model?
Options
- AIntegrity
- BInformation disclosure
- CIT security
- DInsider threat
How the community answered
(28 responses)- A4% (1)
- B86% (24)
- C4% (1)
- D7% (2)
Explanation
STRIDE is a threat modeling framework where each letter represents a category of threat: S = Spoofing, T = Tampering, R = Repudiation, I = Information Disclosure, D = Denial of Service, E = Elevation of Privilege. The 'I' stands for Information Disclosure, which refers to the unauthorized exposure of data to individuals who should not have access to it. This includes data leaks, insecure storage, and unencrypted transmissions.
Topics
Community Discussion
No community discussion yet for this question.