Blue Goat CyberBlue Goat CyberSMMedical Device Cybersecurity
    All infographics
    Threat Modeling

    STRIDE threats on a connected medical device

    The six STRIDE threat types, the security property each one breaks, and an example on a device, phone app, and cloud system.

    Infographic of a device, phone app, and cloud separated by trust boundaries, with six STRIDE cards: spoofing, tampering, repudiation, information disclosure, denial of service, and elevation of privilege, each with the property it breaks and a device example.
    Apply STRIDE to every element and data flow, especially where data crosses a trust boundary.
    Download the graphicTalk through it with us

    What the graphic says

    The full text version, so the content is readable without the image.

    Six threat types

    Examples are illustrative, on a device that talks to a phone app over Bluetooth and to a cloud dashboard.

    Spoofing (breaks authenticity)
    A fake app pairs with the device.
    Tampering (breaks integrity)
    Altered firmware or a changed dose command.
    Repudiation (breaks non-repudiation)
    No log of who changed settings.
    Information disclosure (breaks confidentiality)
    Patient data read from the cloud.
    Denial of service (breaks availability)
    Radio flooding stops therapy.
    Elevation of privilege (breaks authorization)
    Clinician features unlocked by a user.

    Keep reading

    More in Threat Modeling

    Ready when you are

    Secure your device before it reaches patients.

    30-minute strategy session. No cost, no commitment - just answers from people who've supported 275+ FDA submissions, with zero cybersecurity rejections.

    Book strategy sessionExplore services