AI Governance Engineer
GitHub

STRIDE

By Updated

A threat-classification checklist from Microsoft's Security Development Lifecycle: spoofing, tampering, repudiation, information disclosure, denial of service and elevation of privilege 1. For an AI system it is walked per element of the data-flow diagram and then extended with AI-specific catalogues such as MITRE ATLAS and the OWASP lists.

Developed in
ch. 15, Threat modelling the deployed system
ch. 05, Pattern: AI Threat Model
Chapters
ch. 05, Patterns · ch. 06, The Role · ch. 15, Deployment
Contrast with
ATLAS
Source
1 numbered reference, listed below

Where it is used

3 chapters of the Body of Knowledge use the term. Each link opens the first section that does.

STRIDE: mentions per chapter3 mentions of the term across 3 of the 23 chapters of the Body of Knowledge; the chapters the glossary cross-references are drawn solid.Cross-referenced chapter05 Patterns: 1 mention05 Patterns106 The Role: 1 mention06 The Role115 Deployment: 1 mention15 Deployment1No mentions in the other 20 chaptersSource: the Body of Knowledgev0.5.0
STRIDE: mentions per chapter3 mentions of the term across 3 of the 23 chapters of the Body of Knowledge; the chapters the glossary cross-references are drawn solid.Cross-referenced chapter000102030405 Patterns: 1 mention10506 The Role: 1 mention1060708101112131415 Deployment: 1 mention1151617181920212223Source: the Body of Knowledge v0.5.0
Mentions per chapter How often each chapter names the term, with the chapters the glossary cross-references drawn solid. The longest bar is where to read the term in use; bars spread across many chapters mark a term that runs through the discipline.
Mentions as a table
Mentions of STRIDE per chapter
ChapterMentionsCross-referenced
00 Preface0No
01 Definition0No
02 Why Now0No
03 Values & Principles0No
04 The Stack0No
05 Patterns1Yes
06 The Role1Yes
07 Maturity Model0No
08 Regulatory Map0No
10 Reading List0No
11 AI Defined0No
12 Governance Program0No
13 Risk Management0No
14 Development0No
15 Deployment1Yes
16 Fairness & XAI0No
17 Incidents0No
18 EU AI Act0No
19 Privacy & AI0No
20 Existing Law0No
21 AI Laws Worldwide0No
22 Principles & Standards0No
23 AI Agents0No

Patterns that use this term

One pattern page uses the term.

STRIDE: related terms and patternsThe term at the centre; related terms on solid edges, the terms it is contrasted with on dashed edges, and the patterns that use it most in the colour of their layer.RelatedContrastColour: stack layer of the pattern01 Govern-as-CodeSTRIDERelated terms (2)AI system · RelatedAI systemThreat model (AI) · RelatedThreat model (AI)Contrast with (1)ATLAS · ContrastATLASPatterns using it (1)AI Threat Model, 5 mentions · Uses the termAI Threat Model
STRIDE: related terms and patternsThe term at the centre; related terms on solid edges, the terms it is contrasted with on dashed edges, and the patterns that use it most in the colour of their layer.RelatedContrastColour: stack layer of the pattern01 Govern-as-CodeRelated terms (2)AI system · RelatedAI systemThreat model (AI) · RelatedThreat model (AI)Contrast with (1)ATLAS · ContrastATLASPatterns using it (1)AI Threat Model, 5 mentions · Uses the termAI Threat ModelSTRIDE
The term's neighbourhood Terms related to this one on solid edges, terms it is often confused with on dashed edges, and the patterns that use it most in the colour of their layer. Follow a dashed edge to check the distinction before you use either term.
Neighbourhood as a table
Neighbourhood of STRIDE
FamilyItemRelation
Related termsAI systemRelated
Related termsThreat model (AI)Related
Contrast withATLASContrast
Patterns using itAI Threat Model, 5 mentionsUses the term
  • Threat model (AI)

    A versioned record of what can go wrong with an AI system and what is done about it: data flows and trust boundaries, threats per element from STRIDE and…

  • AI system

    For governance, the object the AI definition brings into scope.

Sources

  1. [1] Threats: Microsoft Threat Modeling Tool (the STRIDE model: spoofing, tampering, repudiation, information disclosure, denial of service, elevation of privilege; the tool is a core element of the Security Development Lifecycle). Microsoft Learn. 2017-08-17. https://learn.microsoft.com/en-us/azure/security/develop/threat-modeling-tool-threats (verified: primary)

Definitions of legal terms paraphrase the cited text, which governs. Dated statements are as of .

Cite this term

García Aibar, J. (2026). STRIDE. In AI Governance Engineering: The Thesis & Body of Knowledge (v0.5.0), Glossary. https://doi.org/10.5281/zenodo.22956197. https://aigovernanceengineer.com/glossary/stride. CC BY 4.0

BibTeX

@misc{aige2026stride,
  author  = {Jorge García Aibar},
  title   = {{STRIDE}},
  note    = {Glossary, AI Governance Engineering: The Thesis \& Body of Knowledge, version 0.5.0},
  year    = {2026},
  doi     = {10.5281/zenodo.22956197},
  url     = {https://aigovernanceengineer.com/glossary/stride}
}