Security Analysis Tool

STRIDE Threat Modeling

Professional threat analysis for secure system design

System Architecture & Context

ℹ️Risk Calculation Guide

Risk Score Formula:

Likelihood × Impact × Exploitability

Scale Definitions:

All Factors: 1=Low, 2=Medium, 3=High

Risk Level Thresholds:
Critical Score ≥ 18
High Score ≥ 12
Medium Score ≥ 6
Low Score < 6

STRIDE Threat Analysis

Spoofing Identity

Threats where an attacker impersonates another user, component, or system to gain unauthorized access.

Common Examples:

  • •Credential theft and account takeover
  • •Session hijacking or token replay
  • •Certificate spoofing or man-in-the-middle attacks
  • •IP address or MAC address spoofing

Tampering with Data

Threats involving unauthorized modification of data in transit or at rest.

Common Examples:

  • •Database injection attacks (SQL, NoSQL)
  • •Parameter manipulation in web requests
  • •File system tampering or unauthorized writes
  • •Memory corruption or buffer overflow attacks

Repudiation

Threats where users can deny performing actions they actually performed due to insufficient logging or audit trails.

Common Examples:

  • •Insufficient audit logging of critical actions
  • •Log tampering or deletion capabilities
  • •Weak transaction signing or approval processes
  • •Lack of non-repudiation mechanisms

Information Disclosure

Threats involving unauthorized access to or exposure of sensitive information.

Common Examples:

  • •Data breaches through unauthorized database access
  • •Information leakage through error messages or logs
  • •Side-channel attacks or timing attacks
  • •Insecure data transmission or storage

Denial of Service

Threats that prevent legitimate users from accessing system resources or services.

Common Examples:

  • •Distributed Denial of Service (DDoS) attacks
  • •Resource exhaustion through algorithmic complexity
  • •Database connection pool exhaustion
  • •Memory or disk space consumption attacks

Elevation of Privilege

Threats where attackers gain higher privileges than intended, accessing restricted functionality or data.

Common Examples:

  • •Privilege escalation through software vulnerabilities
  • •Horizontal privilege escalation (accessing other users' data)
  • •Administrative interface bypass or unauthorized access
  • •Role-based access control (RBAC) bypass

Threat Analysis Overview

0
Total Threats
0
Critical Risk
0
High Risk
0.0
Avg Risk Score

Complete the threat analysis above to see detailed summary here

Risk Distribution

No threats to visualize yet. Add threats to see distribution charts.

Export Reports