From the course: Threat Modeling: Information Disclosure in Depth

Information disclosure as a part of STRIDE

From the course: Threat Modeling: Information Disclosure in Depth

Start my 1-month free trial

Information disclosure as a part of STRIDE

- [Instructor] This course is part of a series on Threat Modeling and the STRIDE threats. STRIDE is a mnemonic that stands for Spoofing, Tampering, Repudiation, Information disclosure, Denial of service and Elevation of privilege. We'll cover how information disclosure impacts the confidentiality of communications, storage, and processes. You'll learn about how to ensure the confidentiality of your data. The confidentiality of data can be protected by something more privileged, like an operating system when the data is on that system. And encryption can provide for confidentiality anytime, both on system and when the data is being transmitted or stored outside of your control. We'll cover how to disclose the things you want to and how to best protect the things you want to keep secret.

Contents