Putting Privacy on the Map
summary
Models of Applied Privacy (MAP) presents a developer‑centric threat modeling framework that turns existing taxonomies into explicit personas and a persona picker product owners use to identify threats, map actors/mechanisms/impacts, and plan mitigations. The team builds an open source tool on GitHub (Comcast slmap) and validates the taxonomy against 207 real incidents, with 183 of 207 incidents matched to MAP categories, showing broad coverage and practical, early‑stage integration into development workflows.
AI-written summary · about
chapters (9)
- 0:00Privacy threat modeling intro
- 2:00Traditional modeling challenges
- 3:45Introducing MAP framework
- 6:13Visualizing threats with personas
- 7:39Privacy threat example: April
- 9:46Privacy threat example: employee
- 11:10Privacy threat example: vendors
- 13:35Validating MAP with incidents
- 15:22Summary and resources
related talks
22mPrivacy Threat Modeling
40mPersonal Threat Models and, Speculatively, Privacy Governance
44mA Taste of Privacy Threat Modeling
43mDesigning Security And Privacy: A Dev's Guide To Threat Modeling With OWASP SAMM
20mPrivacy Shift Left: A Machine-Assisted Threat Modeling Approach
01h 16mCommercial opportunities for designing privacy in: Embedding privacy ...
01h 12mModelling Privacy Threats of Medical Data and Health Data Spaces
15mTurning Privacy Risk Assessment Into 20 Questions for Developers