Striding Your Way to LINDDUN: Threat Modeling for Privacy
summary
Shows a concrete privacy workflow: adopts LINDDUN go with 33 threat cards, draws cards against a simple DFD-style public library management system, and exercises hotspots and DFD-like sketches to surface linkability, identification, non-repudiation and third‑party risks. Demonstrations include sending aggregated user searches to an external AI called Books Without Borders, printer labels exposing reservations, and mitigations like opt‑in, hashing/pseudonymization and PETs. Exercises run quickly and partially complete but illustrate how each card elicits specific threats and actionable mitigations.
AI-written summary · about
chapters (10)
- 0:00Introduction
- 3:58Privacy threat modeling with LINDDUN
- 8:07STRIDE framework refresher
- 9:10Data security vs privacy
- 13:29LINDDUN threat modeling
- 26:42LINDDUN GO card deck
- 32:43Library system case study
- 37:18LINDDUN GO demo
- 46:36Threat mitigation strategies
- 47:19Q&A
related talks
44mA Taste of Privacy Threat Modeling
51mA Taste Of Privacy Threat Modeling by Kim Wuyts
41mPrivacy Threat Modeling Analysis of Cloud Services Against Privacy Regulations
22mEmpowering Developers through Threat Modeling Excellence
01h 12mModelling Privacy Threats of Medical Data and Health Data Spaces
22mPrivacy Threat Modeling
49mBreaching LLM-Powered Applications: Overcoming Security and Privacy Challenges
53mThreat Modeling: uncover vulnerabilities without looking at code