Walk the appointment system through STRIDE — Spoofing, Tampering, Repudiation, Information disclosure, DoS, Elevation of privilege. Click each threat to see how it attacks the system and the mitigation that stops it.
Walk the healthcare appointment system through the six STRIDE threats. Click each letter to see how it attacks the system and the mitigation that stops it.
🧑User
→
🚪Gateway
→
⚙️Service
→
🗄️DB
·
🛠️Admin
📋Audit
I — Information disclosure
Seeing data that should be private
Threat
A patient edits the URL id and reads another patient's report (IDOR).
Mitigation
Authorization / ownership checks, encryption at rest & in transit, least privilege.
What just happened
▹Threat modeling is just asking 'how could this be misused?' — systematically, at design time, before an attacker does it for you.
▹STRIDE gives you six lenses: Spoofing, Tampering, Repudiation, Information disclosure, Denial of service, Elevation of privilege. Walk each one across your users, APIs, data and admin actions.
▹Every STRIDE category maps to a concrete mitigation you already know — strong auth, server-side validation, audit logs, authorization, rate limiting, RBAC. The framework turns vague 'security' into a checklist.