Field Notes: What Is STRIDE? A Quick Look at a Practical Threat Model
STRIDE turns cybersecurity's defensive principles into six threat categories: spoofing, tampering, repudiation, information disclosure, denial of service, and elevation of privilege. Developed at Microsoft in 1999, it gives teams a systematic way to ask what can go wrong and build fixes from the start.