Which STRIDE category concerns tampering with attestation data to misrepresent system state?

• A. Spoofing
• B. Tampering
• C. Repudiation
• D. Elevation of Privilege

Answer: (B)

Tampering involves unauthorized modification of data to alter its meaning or state. Attestation data is a report from a trusted component that proves the system’s current state. If an attacker tampers with that data, they can present a false state to others, misrepresenting what the system actually is running. That fits the idea of tampering precisely: changing data to deceive about the truth of the system’s condition.

Spoofing is about impersonating another identity, repudiation is about denying an action or its authorship, and elevation of privilege is about gaining higher access rights. None of these center on altering data to falsely reflect the system state in attestation.