STRIDE threat type field only supports one value

mike-goodwin / owasp-threat-dragon-core

OWASP Threat Dragon core files

Apache License 2.0

11 stars 16 forks source link

STRIDE threat type field only supports one value #56

Closed zeroXten closed 4 years ago

zeroXten commented 6 years ago

STRIDE isn't used to categorise threats, but as an aid to discovering them, so some threats may feel naturally associated with more than one STRIDE type.

p- commented 5 years ago

It would also be nice if it were a non-mandatory field.

jgadsden commented 4 years ago

Migrated to new issue in the OWASP area repo : https://github.com/OWASP/threat-dragon-core/issues/3