Jump to content

Talk:STRIDE model

Page contents not supported in other languages.
From Wikipedia, the free encyclopedia
(Redirected from Talk:STRIDE (security))
[edit]

The linked article isn't relevant to this.

Should we add this citation?

[edit]

I'd like to add a link to http://blogs.msdn.com/b/sdl/archive/2009/08/27/the-threats-to-our-products.aspx which discusses the origin of STRIDE. However, that's my own blog post, to my employer's blog and such edits are (reasonably) frowned upon. — Preceding unsigned comment added by Emergentchaos (talkcontribs) 00:26, 21 November 2013 (UTC)[reply]

EmergentChaos, I would always go ahead and add the historical reference, including a Talk entry just before the commit to explain what you are doing, and why. I came here to discuss two things: 1) was the above, can we include a reference to the original creators, and 2) can we include a comparison to CIA (confidentiality, integrity, availability) or does anyone view that as not an appropriate comparison? DouglasHeld (80.229.146.237 (talk) 10:27, 8 January 2017 (UTC))[reply]

Would you mind adding it in? I've gotten fairly strong opinions on self-cite from Wikipedians. Also, I think a compare to CIA is entirely appropriate, as STRIDE is the absence of the properties we want, and those are CIA + AuthN, AuthZ and Non-repudiation Emergentchaos (talk) 17:12, 8 January 2017 (UTC)[reply]

So as of Aug, 2018, the link in that post which points to the actual paper is broken. The link is titled "it's attached" and points to https://blogs.msdn.microsoft.com/cfs-file.ashx/__key/communityserver-components-postattachments/00-09-88-74-86/The-threats-to-our-products.docx. If you follow that link, you get a custom page that says "Oops! That page can’t be found." That's not a useful result. I have asked people at Microsoft to fix the link, and in the meantime have an archive copy of the actual paper at https://adam.shostack.org/microsoft/The-Threats-To-Our-Products.docx I think that's the best link to use to serve up the full paper. — Preceding unsigned comment added by Emergentchaos (talkcontribs) 16:44, 25 August 2018 (UTC)[reply]

Also, @DouglasHeld I added a table to address your question #2 of 8 January 2017 — Preceding unsigned comment added by Emergentchaos (talkcontribs) 16:54, 25 August 2018 (UTC)[reply]