Contents

  1. STRIDE threat classification
  2. Quotes
    1. Bruce Schneier's 5-step process for evaluating security measures
  3. References

STRIDE threat classification

Quotes

Bruce Schneier's 5-step process for evaluating security measures

This five-step process works for any security measure, past, present, or future:

1) What problem does it solve?
2) How well does it solve the problem?
3) What new problems does it add?
4) What are the economic and social costs?
5) Given the above, is it worth the costs?

from http://www.schneier.com/crypto-gram-0204.html

References