Elevation of Privilege Threat Modeling with Privacy
Description
Description
The Elevation of Privilege (EoP) card game offers a structured and engaging approach to threat modeling, enabling development teams to identify potential security vulnerabilities while software designs are still on the whiteboard.
This extended edition contains additional threat cards with Privacy anti-patterns, helping developers to spot common privacy and data handling errors at the same stage, while designs are still easy to change.
The deck adds Privacy to the classic STRIDE categories forming a new STRIPED mnemonic that prompts engineers, architects and product people to consider their designs from new angles.
Bulk Pricing
Bulk Pricing
Automatically applied at checkout:
| Buy | Discount |
|---|---|
| 5 or more decks | 10% off |
| 10 or more decks | 15% off |
| 20 or more decks | 20% off |
| 30 or more decks | 30% off |
Outcome
Outcome
Identify security and privacy work that needs doing earlier in the project lifecycle. Defuse difficult relationships. Build trust. Bring teams together in peace and harmony.
Made by Agile Stationery
Made by Agile Stationery
Experts in delivering the right kind of conversations. Slick cards in robust boxes. The best there is outside the casinos.
Elevation of Privilege Threat Modeling with Privacy
Specifications
Specifications
-
SuitsSpoofing, Tampering, Repudiation, Information Disclosure, Privacy, Elevation of Privilege, Denial of Service
-
# Cards
-
Created by
Try a branded version
Try a branded version
If you'd like to encourage the use of this technique within your team or organisation, a branded deck is a great way to demonstrate your support and commitment to the process.
How to play?
-
Set the stage
Before dealing, sketch a simple diagram of the system on a whiteboard, paper, or digital tool, just enough to show key components and data flows.
-
Deal the cards
Shuffle the deck and deal all the cards to 3-6 players. Each player organizes their hand by suit (but no peeking at your neighbour’s cards!).
-
Let the game begin
The player with the 2 of Tampering starts. Read your card and explain how the threat could affect the system.
-
Winning
Players take turns with the threats in that suit, with the highest card winning the round. The winner leads the next
round until all cards are played.
Hybrid teams? No problem
Play our threat modeling games remotely
with the power of physical cards!
