Privacy Threat Modeling
summary
Claims a gap in privacy risk models and presents a data‑driven hierarchical model built from 146 non‑breach privacy events mapped into clusters and generic kill‑chain privacy threat patterns. Examples include a 43% re‑identification of Washington health records, Lenovo Superfish intercepting and decrypting traffic, and Cambridge Analytica’s appropriation and decisional interference. The model defines 13 activities (notice, collection, identification, QA, sharing, etc.), maps attacks to threat actions, adapts MITRE ATT&CK ideas, and plans a web app that outputs relevant patterns and mitigations.
AI-written summary · about
chapters (11)
- 0:00Introduction to privacy risks
- 1:34Defining privacy attacks
- 3:44Case studies of privacy attacks
- 5:57Motivation for a new taxonomy
- 7:49Developing the taxonomy
- 9:54Taxonomy structure and activities
- 12:33Creating threat clusters
- 14:04Data de-identification pattern
- 16:08Superfish attack analysis
- 17:38Threat informed defense
- 19:30Future work and workshop
related talks
40mPersonal Threat Models and, Speculatively, Privacy Governance
44mA Taste of Privacy Threat Modeling
41mPrivacy Threat Modeling Analysis of Cloud Services Against Privacy Regulations
01h 12mModelling Privacy Threats of Medical Data and Health Data Spaces
15mThe Missing Link in Privacy Risk Assessments
51mA Taste Of Privacy Threat Modeling by Kim Wuyts
16mPutting Privacy on the Map
29mAnti-Privacy Anti-Patterns