# Lab 3

## Stride examples

| DFD-Element | Concern | Example |
| -- | -- | -- |
| User | Spoofing | Send a chat message in the name of another user |
| User | Spoofing | Stolen credentials might be used to login |
| User Login | Tampering | Modify HTTP login header |
| Login | Denial of Service | Flood server with login requests |
| Login | Spoofing | Domain spoofing to impersonate server |
| Database | Information Disclosure | SQL Injection |