Microsoft Stride Threat Taxonomy

What is spoofing?

• Altering data at rest or in transit

• Claiming to have not performed an action

• Maliciously impersonating users, websites, or servers

• Gaining unauthorised access to resources or data

What is the desired property that spoofing threatens?

• Authentication

• Integrity

• Non-repudiation

• Confidentiality

Which of these is an example of a spoofing attack?

• Man-in-the-browser

• Spear-phishing

• URL manipulation

• Session keys

What is tampering?

• Altering data at rest or in transit

• Claiming to have not performed an action

• Maliciously impersonating users, websites, or servers

• Gaining unauthorised access to resources or data

What is the desired property that tampering threatens?

• Authentication

• Integrity

• Non-repudiation

• Confidentiality

Which of these is an example of a tampering attack?

• Man-in-the-browser

• Spear-phishing

• URL manipulation

• Session keys

What is repudiation?

• Altering data at rest or in transit

• Claiming to have not performed an action

• Maliciously impersonating users, websites, or servers

• Gaining unauthorised access to resources or data

What is the desired property that repudiation threatens?

• Authentication

• Integrity

• Non-repudiation

• Confidentiality

Which of these is an example of a repudiation attack?

• Use shared account

• Encryption keys

• Botnets

• Stolen tokens

What is information disclosure?

• Altering data at rest or in transit

• Claiming to have not performed an action

• Maliciously impersonating users, websites, or servers

• Gaining unauthorised access to resources or data