Glossary

LINDDUN

A privacy threat modeling framework from KU Leuven, named for its threat categories: linking, identifying, non-repudiation, detecting, data disclosure, unawareness and unintervenability, and non-compliance. Like STRIDE, it is applied to a data flow diagram of the system.

Defined in: LINDDUN privacy threat modeling

Covered in

Guide

Choose a threat modeling method and turn its findings into tests

Use the four-question frame to scope a design, pick STRIDE, attack trees, LINDDUN or PASTA by the question you need answered, and leave behind threat records and abuse-case tests the team can run.