Open Access

A STRIDE-Based Cybersecurity Framework for Threat Detection in Federated Identity and Access Management Systems

https://doi.org/10.55640/ijctisn-v03i09-01

PDF

Lukas Schneider ¹ , Anna Müller ¹ ,

⁴ Department of Data Science and Machine Intelligence, Center for Computational Research, Berlin, Germany

⁴ Department of Artificial Intelligence and Statistical Computing, Center for Computational Research, Munich, Germany

Abstract

Federated Identity and Access Management (IAM) systems enable users to access multiple independently administered services through shared identity and authentication mechanisms. Although federation improves usability, scalability, and centralized identity governance, it also creates security dependencies across identity providers, service providers, authentication protocols, token exchanges, and trust relationships. A compromise at one component may consequently propagate across organizational boundaries. This paper proposes a STRIDE-based cybersecurity framework for systematic threat detection in federated IAM environments, with particular emphasis on federated Single Sign-On (SSO) and Multi-Factor Authentication (MFA). The framework maps major federated IAM components and trust boundaries to the STRIDE threat categories of spoofing, tampering, repudiation, information disclosure, denial of service, and elevation of privilege. The methodological design combines architectural threat decomposition, trust-boundary analysis, threat-to-control mapping, and structured assessment of observable security events. Statistical concepts concerning correlated binary outcomes are incorporated to support future empirical evaluation where authentication or detection observations are non-independent. The proposed framework identifies identity-provider compromise, assertion or token manipulation, authentication-event repudiation, sensitive identity-information exposure, federation service disruption, and privilege escalation as principal threat classes. The analysis indicates that security controls should not be evaluated independently at individual components because federated authentication creates interdependent attack surfaces. The framework therefore provides a structured foundation for threat detection, risk prioritization, and security-control validation in federated IAM architectures.

Keywords

Federated Identity Management, SSO, MFA, STRIDE

References

Dallal GE (1988). Paired Bernoulli trials. Biometrics, 44(1): 253–257.

Donner A (1989). Statistical methods in ophthalmology: An adjusted chi-square approach. Biometrics, 45(2): 605–611.

Liang K, Zeger SL (1986). Longitudinal data analysis using generalized linear models. Biometrika, 73(1): 13–22.

Lu W, Ning R, Diao K, Ding Y, Chen R, Zhou L, et al. (2022). Comparison of two main orthokeratology lens designs in efficacy and safety for myopia control. Frontiers in Medicine, 9: 798314.

Ma C, Shan G, Liu S (2015). Homogeneity test for correlated binary data. PLoS ONE, 10(4): e0124337.

Ma C, Wang K (2021). Testing the homogeneity of proportions for combined unilateral and bilateral data. Journal of Biopharmaceutical Statistics, 31(5): 686–704.

Mandel EM, Bluestone CD, Rockette HE, Blatter MM, Reisinger KS, Wucher FP, et al. (1982). Duration of effusion after antibiotic treatment for acute otitis media: Comparison of cefaclor and amoxicillin. The Pediatric Infectious Disease Journal, 1(5): 310–316.

Pei Y, Tang M, Guo J (2008). Testing the equality of two proportions for combined unilateral and bilateral data. Communications in Statistics. Simulation and Computation, 37(8): 1515–1529.

Rosner B (1982). Statistical methods in ophthalmology: An adjustment for the intraclass correlation between eyes. Biometrics, 38(1): 105–114.

Tang N, Tang M, Qiu S (2008). Testing the equality of proportions for correlated otolaryngologic data. Computational Statistics & Data Analysis, 52(7): 3719–3729.

Ganapathy, S. K. (2024). Threat Modeling for Federated SSO and MFA Systems: STRIDE-Based Analysis of Attack Vectors. International Journal of Data Science and Machine Learning, 4(02), 55-73. https://www.academicpublishers.org/journals/index.php/ijdsml/article/view/stride-analysis-sso-mfa

Most read articles by the same author(s)

1 2 3 4 5 6 7 > >>

International Journal of Cyber Threat Intelligence and Secure Networking

A STRIDE-Based Cybersecurity Framework for Threat Detection in Federated Identity and Access Management Systems

Abstract

Keywords

References

Most read articles by the same author(s)

Similar Articles