Rank the threats by decreasing risk using DREAD model

Threat type Spoofing Tampering Information Disclosure Denial of Service (DOS) Elevation of Privilege process YES YES YES YES YES Data store NO YES YES YES NO Entity or interactor YES NO NO NO YES Data flow YES YES YES YES NO