> ## Documentation Index
> Fetch the complete documentation index at: https://rootea.es/llms.txt
> Use this file to discover all available pages before exploring further.

# STRIDE / PASTA threat modeling

> Frameworks de threat modeling.

# STRIDE / PASTA threat modeling

<p className="glossary-answer">Frameworks de threat modeling.</p>

**Categoría:** [Frameworks & Estándares](/glosario)

🎯 **Concepto** — Frameworks de threat modeling.

* **STRIDE** (Microsoft): Spoofing, Tampering, Repudiation,
  Information disclosure, Denial of service, Elevation of
  privilege. Framework atómico per-component.
* **PASTA** (Process for Attack Simulation and Threat Analysis):
  7 etapas, top-down desde objetivos negocio. Más pesado pero
  alineado con risk management.

🔗 **Uso** — STRIDE para sprints de feature; PASTA para
proyectos críticos / regulados (banca, salud).

🛡️ **Best practice** — STRIDE en design review como gate, PASTA
anual con stakeholders no-técnicos.

***

← [Volver al glosario completo](/glosario)

<script type="application/ld+json">
  {`{"@context":"https://schema.org","@type":"DefinedTerm","name":"STRIDE / PASTA threat modeling","description":"Frameworks de threat modeling.","inDefinedTermSet":{"@type":"DefinedTermSet","name":"Glosario táctico de pentesting","url":"https://rootea.es/glosario"},"url":"https://rootea.es/glosario/stride-pasta-threat-modeling"}`}
</script>

<script type="application/ld+json">
  {`{"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Inicio","item":"https://rootea.es"},{"@type":"ListItem","position":2,"name":"Glosario táctico","item":"https://rootea.es/glosario"},{"@type":"ListItem","position":3,"name":"STRIDE / PASTA threat modeling","item":"https://rootea.es/glosario/stride-pasta-threat-modeling"}]}`}
</script>

*Última actualización: 2026-06-11*