AXIOM THREAT DESK · STRIDE TAXONOMY STUDIO
STRIDE Risk Identification & Taxonomy Studio
Decomposition of all 42 architectural threats across Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, and Elevation of Privilege.
STRIDE · CATEGORY SVerified
S
Spoofing Identity
Primary Control: OAuth 2.0 / OIDC + mTLS client certificates
5/5 threats mitigatedInspect
STRIDE · CATEGORY T1 Drift Alert
T
Tampering with Data
Primary Control: Prepared SQL statements + KMS AES-GCM-256 config encryption
7/8 threats mitigatedInspect
STRIDE · CATEGORY R1 Drift Alert
R
Repudiation
Primary Control: Immutable WORM CloudTrail + Ed25519 signed audit ledger
3/4 threats mitigatedInspect
STRIDE · CATEGORY I1 Drift Alert
I
Information Disclosure
Primary Control: HashiCorp Vault secret injection + strict CORS allowlist
6/7 threats mitigatedInspect
STRIDE · CATEGORY DVerified
D
Denial of Service
Primary Control: API Gateway token-bucket rate limiter + circuit breakers
6/6 threats mitigatedInspect
STRIDE · CATEGORY EVerified
E
Elevation of Privilege
Primary Control: Row-level tenant predicates + Kubernetes RBAC least privilege
11/12 threats mitigatedInspect