Resources For IT Professionals
Get this Tag RSS feed
Popular Tags

Browse by Tags

 >  TechNet Articles  >  All Tags  >  TM
Tagged Content List

  • Wiki Page: EoP Threat Suits - T (Tampering)

    Tampering (T) is the second suit of threats in the STRIDE threat enumeration. Tampering describes any threat that allows an attacker (or accidentally causes a user) to alter or destroy data which the application has not allowed them to. Accordingly, the characters on the cards are green gremlins whose...
    on13 May 2012

  • Wiki Page: Elevation of Privilege - The Game

    Elevation of Privilege (abbreviated "EoP") is a card game developed by Adam Shostack with assistance from many patient Microsoft developers, and is designed to provide a fun and educational introduction to the concepts and practice of Threat Modeling. Table of Contents Resources The...
    on22 Feb 2012

  • Wiki Page: EoP Threat Suits - S (Spoofing)

    Spoofing (S) is the first suit of threats in the STRIDE threat enumeration. Spoofing describes any threat that allows an attacker (or accidentally causes a user) to pretend to be someone or something else. Accordingly, the characters on the cards are masked individuals wearing crowns - unknown attackers...
    on22 Feb 2012

  • Wiki Page: EoP Threat Suits - E (Elevation of Privilege)

    Elevation of Privilege (E) is the sixth suit of threats in the STRIDE threat enumeration. Elevation of Privilege describes any threat that allows an attacker (or accidentally causes a user) to have access to data or functionality which the application should not allow them to. Accordingly, the characters...
    on22 Feb 2012

  • Wiki Page: EoP Threat Suits - D (Denial of Service)

    Denial of Service (D) is the fifth suit of threats in the STRIDE threat enumeration. Denial of Service describes any threat that allows an attacker (or accidentally causes a user/service) to prevent, or reduce, legitimate access to services or data which the application should be providing. Accordingly...
    on22 Feb 2012

  • Wiki Page: EoP Threat Suits - I (Information Disclosure)

    Information Disclosure (I) is the fourth suit of threats in the STRIDE threat enumeration. Information Disclosure describes any threat that allows an attacker (or accidentally causes a user) to see data which the application should not allow them to. Accordingly, the characters on the cards are multi...
    on22 Feb 2012
Page 1 of 1 (6 items)
Can't find it? Write it!

Post an Article