A replication of a controlled experiment with two STRIDE variants. (arXiv:2208.01524v1 [cs.CR])

To avoid costly security patching after software deployment,
security-by-design techniques (e.g., STRIDE threat analysis) are adopted in
organizations to root out security issues before the system is ever
implemented. Despite the global gap in cybersecurity workforce and the high
manual effort required for performing threat analysis, organizations are
ramping up threat analysis activities. However, past experimental results were
inconclusive regarding some performance indicators of threat analysis
techniques thus practitioners have little evidence for choosing the technique
to adopt. To address …

stride