← Back

STRIDE

A structured threat modeling methodology used to identify security risks before they become incidents.

Spoofing
Tampering
Repudiation
Information Disclosure
Denial of Service
Elevation of Privilege

The Origins of STRIDE

STRIDE was developed at Microsoft in 1999 by Loren Kohnfelder and Praerit Garg as a structured threat modeling framework.

Loren Kohnfelder
Loren Kohnfelder
Praerit Garg
Praerit Garg

1999

STRIDE introduced at Microsoft.

2002

STRIDE became embedded into Microsoft's Security Development Lifecycle (SDL).

Today

Used globally for structured threat modeling.