STRIDE is a popular threat modeling framework that helps security pros and software developers think strategically about risk. This course addresses the I in STRIDE, which stands for information disclosure. You can learn how to preserve the confidentiality of the data, secrets, and other information you store, and the policies you need to put into place to share that information safely. Topics include classic models such as data at rest and data in motion as well as information disclosure in processes and information disclosure in certain technologies such as cloud, Internet of Things and mobile, and AI and machine learning. Expert Adam Shostack also reviews the side effects of computation, the physical effects of CPUs, and the defenses you can put into place at your organization to manage metadata, secrets, and other sensitive information.
Learning Objectives
- Authorized access.
- Metadata in motion.
- Intentional disclosure.
- Side effects of disclosure.
- Disclosure in the cloud.
- Cryptography and other defenses.
- Issuing Organization: LinkedIn Learning
- Issue Date: January 8, 2025
- Credential ID: 01dd46366504ff348f19a2c595d32e724aee237024c07fb3e1491d468a71a582
- Credential URL: Course Completed
Threat Modeling: Information Disclosure in Depth
STRIDE is a threat modeling framework that helps security pros think strategically. This course addresses the I in STRIDE, which stands for information disclosure. You can learn how to preserve the confidentiality of the data, and other information.
Last Updated: January 11, 2025
