Flashcards
STRIDE MAPPING
Flashcards do conjunto (6)
- 1SPOOFING Violation of AuthenticationSpoofing is attempting to gain access to a system by using a false identity.
Example : Pretending to be any of Paypal.com
or Paytm.com
Counter measures : Protect authentication cookies with Secure Socket Layer (SSL) - 2TAMPERING violation of integrityTampering is the unauthorized modification of data.
Example: modification of parameters exchanged between client and server in order to manipulate application data.
Counter measure:
Use data hashing and signing and tamper-resistant protocols. - 3REPUDIATION violation of AccountabilityClaiming to have not performed
an action.
Example : “I didn’t send that email,”
“I didn’t modify that file,”
Counter measure :
create secure audit trails. - 4INFORMATION DISCLOSURE violation of Confidentialityis the unwanted exposure of privatedata.
Example : a user views the contents of a table or file he or she is not authorized to open.
Counter measure :
Use strong authorization.
Secure communication links with protocols that provide message confidentiality. - 5DENIAL OF SERVICE violation of availabilityDenial of service is the process of making a system or application unavailable.
Example: By bombarding a server with requests to consume all available system resources.
Counter measure:
Use resource and bandwidth throttling techniques.
Perform a Network Vulnerability Assessment - 6ELEVATION OF PRIVILEGE violation of authorizationoccurs when a user with limited privileges assumes the identity of a privileged user to gain privileged access to an application.
Example : an attacker with limited privileges might elevate his or her privilege level to compromise and take control of a highly privileged and trusted process or account.
Counter measure:
Follow the principle of least privilege and use least privileged service accounts to run processes and access resources.
Informações
- Descrição
- FlashCards sobre STRIDE MAPPING, criado por Pavan eshwar em 23-09-2021.
- Criado por
- Pavan eshwar · set 2021
- Atualizado
- 23 set 2021
- Visualizações
- 13
- Avaliação