Explore a systematic privacy threat modeling framework called Models of Applied Privacy (MAP) in this 16-minute conference talk from PEPR '23. Learn how MAP helps developers discover and report privacy threats early in the product development process, utilizing established frameworks to outline relevant threat actors, associated threats, and resulting harm. Discover the practical implementation of MAP as a persona picker for product owners to identify privacy requirements, communicate them to developers, and plan remediation. Examine how MAP can classify real-world privacy incidents and its potential to improve privacy-by-design practices. Gain insights from Jayati Dev of Comcast Cable and contributors Bahman Rashidi, Vaibhav Garg, Nishanth Ganeshsankar, and Dinesh Prakash on proactive privacy threat modeling and its impact on product delivery processes.
Putting Privacy on the Map - A Systematic Privacy Threat Modeling Framework
Overview
Syllabus
PEPR '23 - Putting Privacy on the Map
Taught by
USENIX
Related Courses
-
Threat Modeling using STRIDE masterclass
-
Security Architecture & Review with Threat Modeling-Hands On
-
Threat Modeling for Builders Workshop
-
Designing Security and Privacy - A Developer's Guide to Threat Modeling with OWASP SAMM
-
Adding Privacy to Threat Modeling - Game On!
-
Privacy Threat Modeling - Analysis of Cloud Services Against Privacy Regulations
