Software Architect's Handbook

Identifying and categorizing potential threats

Once we have a good understanding of the software system, we need to identify and categorize potential threats. In order to categorize threats, we have to agree on a threat classification model. A threat classification model provides a set of threat categories with definitions so that each identified threat can be categorized in a systematic and repeatable way. STRIDE is one type of threat classification model.