Elevation of Privilege Threat Modeling with Privacy

Bulk Pricing (automatically applied at checkout)

The Elevation of Privilege (EoP) card game offers a structured and engaging approach to threat modeling, enabling development teams to identify potential security vulnerabilities early in the design process.

Created by Adam Shostack, EoP simplifies the complex task of threat modeling by categorising threats into six suits based on the STRIDE mnemonic: Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, and Elevation of Privilege. 

This extended edition 102 cards contains additional threat cards with privacy anti-patterns, helping developers to spot common privacy and data handling errors as well.

By participating in this game, teams can:

• Enhance Security Awareness: Developers gain insights into common security pitfalls, fostering a security-first mindset.

• Encourage Collaboration: The game play promotes teamwork, ensuring diverse perspectives in threat identification.

• Identify Threats Early: Spotting vulnerabilities during the design phase allows for timely mitigation, reducing potential risks and costs associated with later-stage fixes.

• Simplify Complex Concepts: EoP breaks down intricate security concepts into manageable scenarios, making threat modeling accessible even to those without deep security expertise.

For remote teams, our Croupier tool facilitates gameplay by generating random hands for remote players, ensuring seamless integration of EoP into virtual environments.