Before revision: Each threat is a violation of a desirable property for a system: Threat Desired property Threat Definition Spoofing Authenticity Pretending to be something or someone other than yourself Tampering Integrity Modifying something on disk, network, memory, or elsewhere Repudiation Non-repudiability Claiming that you didn't do something or were not responsible; can be honest or false Information disclosure Confidentiality Providing information to someone not authorized to access it Denial of service Availability Exhausting resources needed to provide service Elevation of privilege Authorization Allowing someone to do something they are not authorized to do Notes on the threats Repudiation is unusual because it's a threat when viewed from a security perspective, and a desirable property of some privacy systems, for example, Goldberg's "Off the Record" messaging system.
After revision: Each threat is a violation of a desirable property for a system: Threat Desired property Threat Definition Spoofing Authenticity Pretending to be something or someone other than yourself Tampering Integrity Modifying something on disk, network, memory, or elsewhere Repudiation Non-repudiability Claiming that you didn't do something or were not responsible; can be honest or false Information disclosure Confidentiality Someone obtaining information they are not authorized to access Denial of service Availability Exhausting resources needed to provide service Elevation of privilege Authorization Allowing someone to do something they are not authorized to do Notes on the threats Repudiation is unusual because it's a threat when viewed from a security perspective, and a desirable property of some privacy systems, for example, Goldberg's "Off the Record" messaging system.