A security architect is performing a threat modeling exercise for a new critical microservices-based application. The application processes highly sensitive financial transactions and interacts with several external third-party APIs. The architect needs to identify potential attack vectors and vulnerabilities specific to the inter-service communication within the microservices architecture, as well as interactions with external services. Which of the following threat modeling frameworks would be MOST suitable for systematically identifying these potential threats?
- AMITRE ATT&CK Framework
- BSTRIDE (Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, Elevation of Privilege)
- COWASP Top 10
- DNIST Cybersecurity Framework
Show answer & explanationAnswer & explanation
Correct answer: B. STRIDE (Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, Elevation of Privilege)
STRIDE is a threat modeling framework specifically designed to categorize and identify threats to software systems, including interactions between components. Its categories (Spoofing, Tampering, Repudiation, Information Disclosure, DoS, Elevation of Privilege) directly map to security properties relevant to a microservices architecture and API interactions.
Why the other options are wrong
- A. MITRE ATT&CK focuses on adversary tactics and techniques post-compromise, not primarily on identifying design-level vulnerabilities during a threat modeling exercise for a new application.
- C. OWASP Top 10 lists common web application security risks but is a list of vulnerabilities, not a comprehensive framework for systematic threat identification in a design phase, especially for inter-service communication.
- D. The NIST Cybersecurity Framework provides a high-level organizational approach to cybersecurity risk management (Identify, Protect, Detect, Respond, Recover), not a detailed framework for technical threat modeling of a specific application architecture.
STRIDE Threat Model
A systematic approach to identifying and classifying threats to software, developed by Microsoft, using six categories: Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, and Elevation of Privilege.
- Used during the design phase of software development.
- Helps analyze security properties of system components and data flows.
- Each category helps identify specific types of vulnerabilities.
Memory trick: STRIDE Systematically Spots Software's Structural Risks.