Quiz Entry - updated: 2026.07.30
What is Information Disclosure in STRIDE and what security property does it violate?
Exposing information to someone not authorized to see it — it violates Confidentiality.
Information Disclosure:
| Aspect | Description |
|---|---|
| Property violated | Confidentiality |
| Definition | Exposing information to an unauthorized target |
| Examples | Publishing confidential customer data to a website, data breaches |
Real-world example: a fitness-tracking app published an aggregate "heat map" of users' running routes; in remote regions the only runners were soldiers, so the map inadvertently revealed secret military base outlines and patrol patterns — harmless-looking data leaking sensitive information when combined.
Mitigation:
- Encryption at rest and in transit
- Access controls
- Data classification
- Privacy by design