Chapter 3 - Threat Modelling
Structured identification, analysis and mitigation of threats during the development lifecycle
6 docs tagged with "LINDDUN"
View all tagsLINDDUN — Privacy Threat Modelling
The LINDDUN methodology for privacy threat modelling — the seven threat categories, mapping to data flow diagrams and application to any system with personal or regulated data, at all levels. It complements security threat modelling (STRIDE); it does not replace the legal compliance assessment.
Threat Modelling Example with LINDDUN
Application of the LINDDUN model to identify privacy threats in an authentication system
Threat Modelling Methodologies and Tools
Practical comparison of recommended approaches and tools
Threat Modelling Policy
Organisational policy that defines the mandatory nature, methodology, execution triggers, formal approval requirements, traceability and management of threat modelling artefacts throughout the lifecycle of applications classified L2 and L3.
Threat Modelling Requirements Catalogue
Canonical catalogue of threat modelling requirements (THR-001 to THR-007), with applicability by risk level and acceptance criteria for threat identification, formal disposition, requirement derivation and methodological traceability.