What's STRIDE-LM?

Original post by @BillJacobs

Hi - first post here.

I’ve been using STRIDE for some time. Heard for the first time about “STRIDE-LM” at ThreatModCon23 but was not able to pin down its definition.

I’ve since heard two possible definitions:

LM = Lateral Movement

or

LM = Leaking, Masquerading

Is there any consensus and does anyone know the origins of this addition/extension to the classic STRIDE?

Thanks,

-Bill

Original post by @DonMck

LM = Lateral Movement - It’s an extension to STRIDE proposed by Lockheed Martin - Microsoft Word - Threat-Driven Approach whitepaper v3.03a.docx (lockheedmartin.com) .

Best,

Don McKeown

Original post by @BillJacobs

Thanks Don. Appreciate the pointer to the LM White Paper.

-Bill