← ACARA Digital Technologies Years 9–10

Mapping STRIDE threats to confidentiality, integrity and availability

Each STRIDE threat attacks at least one part of the CIA triad. Tampering hits integrity, denial of service hits availability, spoofing and information disclosure hit confidentiality.

Part of: ACARA Digital Technologies Years 9–10 — Cyber Security Threats and Vulnerabilities — Module 48

Understanding Mapping STRIDE threats to confidentiality, integrity and availability in ACARA Digital Technologies Years 9–10

What it does: A spoofer who pretends to be a real user can read data meant only for that user, which breaks confidentiality. Tampering means changing data or code without permission, so the data can no longer be trusted to be accurate. That is an attack on integrity. Denial of service stops authorised users from reaching a system when they need it. That is an attack on availability. Spoofing is pretending to be someone else. Once the attacker is in, they can see private information, so confidentiality is at risk. STRIDE threats can be mapped to confidentiality, integrity or availability. Some threats affect more than one part.

Common mistakes: Tampering means changing data without permission, so it attacks integrity. The line should be tampering = "Integrity". Availability is the part of the CIA triad that denial of service attacks. Denial of service stops people from using a system, so it attacks availability. The line should be dos = "Availability".

Class: _____________________ · Name: _____________________ · Date: _________

Free printable worksheet with full answer key — or add this module to a class and your students practise it interactively.

🖨 Print worksheet + answer key Add Mapping STRIDE threats to confidentiality, integrity and availability to a class →

This module's key terms are also in a printable crossword (Modules 782–809) and word search (Modules 743–809).

Take this worksheet further — free with Cloodit

Each concept is reinforced from every angle — learned, then applied, then tested.

Learning

Duo

Which part of the CIA triad does a tampering threat mainly attack?

IntegrityAvailability

Matches

Tampering → Availability

↓

Tampering changes data, so it attacks integrity, not availability. The fix is Tampering → Integrity.

Applying

Meanings

Term

STRIDE maps to CIA

Meaning

Each STRIDE threat attacks at least one part of the CIA triad. Tampering hits integrity, denial of service hits availability, spoofing and information disclosure hit confidentiality.

Practice

Spoofing -> Confidentiality

Testing

Gaps

Spoofing ->

Check Answer

Spots

1tampering = "Availability"

2dos = "Availability"

Cloodit turns curriculum-aligned coding content into journeys students work through one biome at a time.

Students earn collectable badges

Over 100 of them, across seven natural biomes.

Study Buddy

Students build a real study resource

Turns their work into revision material ready for Flash Cards and Exam study.

Diamond Dash — one of Cloodit's live, competitive Sprint games

Students lock in with Sprints

Live, competitive practice for the start of the lesson or a teacher-led lesson finisher.

A Cloodit certificate of achievement, ready to personalise and print

Custom printable certificates

Honour your top performers, or encourage a student who's trying hard — ready to print in seconds.

Add to class →

Quick Questions

1. Which part of the CIA triad does a tampering threat mainly attack?

A. Availability

B. Integrity ✓

Tampering means changing data or code without permission, so the data can no longer be trusted to be accurate. That is an attack on integrity.

2. A denial of service attack floods a school website so students cannot log in. Which part of CIA is attacked?

A. Availability ✓

B. Confidentiality

Denial of service stops authorised users from reaching a system when they need it. That is an attack on availability.

3. An attacker pretends to be a teacher to log in to the school portal. Which STRIDE threat is this, and which CIA part does it attack?

A. Spoofing attacks confidentiality ✓

B. Spoofing attacks availability

Spoofing is pretending to be someone else. Once the attacker is in, they can see private information, so confidentiality is at risk.

4. A hacker leaks a list of student home addresses. Which STRIDE threat is this?

A. Tampering

B. Information disclosure ✓

Information disclosure means private data is exposed to people who should not see it. It attacks confidentiality.

5. True or false: Each STRIDE threat attacks at least one part of the CIA triad.

A. True ✓

B. False

STRIDE threats can be mapped to confidentiality, integrity or availability. Some threats affect more than one part.

Match the Pairs

Tampering → Integrity → Changing data without permission, so it can no longer be trusted as accurate

Denial of service → Availability → Flooding or crashing a system so real users cannot get to it when they need it

Spoofing pretends to be someone else to get into an account and see private data, so it attacks confidentiality → Spoofing → Confidentiality

Information disclosure leaks private data to people who should not see it, so it attacks confidentiality → Information disclosure → Confidentiality

Tampering → Availability → Tampering changes data, so it attacks integrity, not availability. The fix is Tampering → Integrity.

Denial of service → Confidentiality → Denial of service stops people using a system, so it attacks availability, not confidentiality. The fix is Denial of service → Availability.

Key Term

STRIDE maps to CIA

Each STRIDE threat attacks at least one part of the CIA triad. Tampering hits integrity, denial of service hits availability, spoofing and information disclosure hit confidentiality.

Fill in the Blanks

1. Spoofing -> Confidentiality

Hint: Type the CIA part that spoofing attacks by letting an attacker pretend to be someone else to see private data.

2. Tampering -> Integrity

Hint: Type the STRIDE threat that changes data without permission.

3. Denial of service -> Availability

Hint: Type the CIA part that is hit when users can no longer reach a system.

4. Information disclosure -> Confidentiality

Hint: Type the CIA part that is attacked when private data is leaked to people who should not see it.

5. Spoofing -> Confidentiality STRIDE threats map to the CIA triad

Hint: Type the three-letter acronym for the triad that each STRIDE threat attacks.

Spot the Error

Question 1

A tampering = "Availability"

B dos = "Availability"

C print(tampering, dos)

Line A — Tampering means changing data without permission, so it attacks integrity. The line should be tampering = "Integrity". Availability is the part of the CIA triad that denial of service attacks.

Question 2

A spoofing = "Confidentiality"

B tampering = "Integrity"

C dos = "Integrity"

D print(tampering, dos)

Line C — Denial of service stops people from using a system, so it attacks availability. The line should be dos = "Availability".

Question 3

A if threat == "Tampering":

B goal = "Integrity"

C elif threat == "DoS":

D goal = "Confidentiality"

Line D — A denial of service (DoS) attack floods or crashes a system so users cannot reach it. That attacks availability, not confidentiality. The line should be goal = "Availability".

Question 4

A if threat == "Disclosure":

B goal = "Confidentiality"

C elif threat == "Tampering":

D goal = "Availability"

Line D — Tampering alters data, so it attacks integrity. The line should be goal = "Integrity". Availability is attacked by denial of service.

Question 5

A threat = "Spoofing"

B goal = "Availability"

C print(threat, "->", goal)

Line B — Spoofing is pretending to be someone else to get access to private data, so it attacks confidentiality. The line should be goal = "Confidentiality".

Student with a class code? Join your class →