Q: Which of the following is a software security threat model?
-
A
Agile
-
B
Spiral model
-
C
Waterfall
-
D
STRIDE
D
Answer:
D
Explanation:
STRIDE is a software security threat model that helps identify and mitigate security risks during the software development process. It stands for Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, and Elevation of Privilege. This model categorizes potential threats and provides a structured approach for developers to address them. Unlike Agile, Spiral, and Waterfall models, which focus on software development processes, STRIDE is specifically designed for assessing and mitigating security threats, making it a valuable tool in the creation of secure software systems.
Related Topic:
Share Above MCQ