[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"detail-sidebar-cat-0-en-105":3,"doc-seo-656049-105":59,"doc-detail-656049-en":130},{"code":4,"msg":5,"data":6},0,"success",[7,13,18,23,28,33,38,43,48,51,55],{"id":8,"doc_module":4,"doc_module_name":9,"category_name":10,"show_sort_weight":11,"slug":12},1,"Document","Story & Novel",90,"story-novel",{"id":14,"doc_module":4,"doc_module_name":9,"category_name":15,"show_sort_weight":16,"slug":17},2,"Literature",80,"literature",{"id":19,"doc_module":4,"doc_module_name":9,"category_name":20,"show_sort_weight":21,"slug":22},4,"Exam",70,"exam",{"id":24,"doc_module":4,"doc_module_name":9,"category_name":25,"show_sort_weight":26,"slug":27},5,"Comic",60,"comic",{"id":29,"doc_module":4,"doc_module_name":9,"category_name":30,"show_sort_weight":31,"slug":32},6,"Technology",50,"technology",{"id":34,"doc_module":4,"doc_module_name":9,"category_name":35,"show_sort_weight":36,"slug":37},7,"Healthcare",40,"healthcare",{"id":39,"doc_module":4,"doc_module_name":9,"category_name":40,"show_sort_weight":41,"slug":42},8,"Research & Report",30,"research-report",{"id":44,"doc_module":4,"doc_module_name":9,"category_name":45,"show_sort_weight":46,"slug":47},9,"Religion & Spirituality",20,"religion-spirituality",{"id":46,"doc_module":4,"doc_module_name":9,"category_name":49,"show_sort_weight":46,"slug":50},"World Cup","world-cup",{"id":52,"doc_module":4,"doc_module_name":9,"category_name":53,"show_sort_weight":52,"slug":54},10,"Lifestyle","lifestyle",{"id":56,"doc_module":4,"doc_module_name":9,"category_name":57,"show_sort_weight":24,"slug":58},19,"General","general",{"code":4,"msg":60,"data":61},"ok",{"site_id":62,"language":63,"slug":64,"title":65,"keywords":66,"description":67,"schema_data":68,"social_meta":123,"head_meta":125,"extra_data":127,"updated_unix":129},105,"en","linddun-pro-privacy-threat-modeling-tutorial-version-01-april-2023","LINDDUN PRO privacy threat modeling tutorial - Version 0.1 - April 2023","","LINDDUN PRO privacy threat modeling tutorial provides a step-by-step approach to systematically uncover and address privacy threats in software designs. It explains privacy by design motivations, the role of privacy threat modeling for compliance, and how to create a data flow diagram (DFD) to model interactions. The tutorial covers background on LINDDUN PRO privacy threat types, guidance for eliciting threats, documenting and prioritizing them, and includes an example to help engineers apply the method across development lifecycle iterations.",{"@graph":69,"@context":122},[70,84,105],{"@type":71,"itemListElement":72},"BreadcrumbList",[73,77,79,82],{"item":74,"name":75,"@type":76,"position":8},"https://docshare.wps.com","Home","ListItem",{"item":78,"name":9,"@type":76,"position":14},"https://docshare.wps.com/document/",{"item":80,"name":30,"@type":76,"position":81},"https://docshare.wps.com/document/technology/",3,{"item":83,"name":65,"@type":76,"position":19},"https://docshare.wps.com/document/linddun-pro-privacy-threat-modeling-tutorial-version-01-april-2023/656049/",{"url":83,"name":65,"@type":85,"image":86,"author":91,"headline":65,"publisher":94,"fileFormat":97,"inLanguage":63,"description":67,"dateModified":98,"datePublished":99,"encodingFormat":97,"isAccessibleForFree":100,"interactionStatistic":101},"DigitalDocument",{"url":87,"@type":88,"width":89,"height":90},"https://docshare.wps.com/thumbnails/linddun-pro-privacy-threat-modeling-tutorial-version-01-april-2023/656049.png","ImageObject",300,407,{"name":92,"@type":93},"404brain","Person",{"url":74,"name":95,"@type":96},"DocShare","Organization","application/pdf","2026-10-30","2026-10-25",true,{"@type":102,"interactionType":103,"userInteractionCount":24},"InteractionCounter",{"@type":104},"ViewAction",{"@type":106,"mainEntity":107},"FAQPage",[108,114,118],{"name":109,"@type":110,"acceptedAnswer":111},"Who is the tutorial intended for and what prior knowledge is required?","Question",{"text":112,"@type":113},"The tutorial targets software engineers who want to analyze privacy in the systems they build. It does not require detailed prior knowledge on privacy or modeling, and necessary steps are explained in detail in later chapters.","Answer",{"name":115,"@type":110,"acceptedAnswer":116},"When should you perform privacy threat modeling using LINDDUN PRO?",{"text":117,"@type":113},"Ideally, start as early as possible in the development lifecycle to identify and address threats early. Re-perform analyses over time as the system evolves or new integrations are introduced.",{"name":119,"@type":110,"acceptedAnswer":120},"What are the core steps involved in LINDDUN PRO threat modeling?",{"text":121,"@type":113},"Create a DFD model of the system, then iterate over interactions between DFD elements to determine privacy threats related to sending, transfer, or receiving of personal data. The tutorial also guides threat elicitation, documentation, and prioritization.","https://schema.org",{"og:url":83,"og:type":124,"og:title":65,"og:site_name":95,"og:description":67},"article",{"robots":126,"canonical":83},"index,follow",{"doc_id":128,"site_id":62},656049,1793104046,{"code":4,"msg":5,"data":131},{"doc_id":128,"user_id":132,"nickname":92,"user_avatar":133,"doc_module":4,"category_id":29,"category_name":30,"doc_title":65,"doc_description":67,"doc_content":134,"file_id":135,"file_url":136,"file_type":137,"file_size":138,"view_count":24,"is_deleted":4,"is_public":8,"is_downloadable":8,"audit_status":8,"page_count":139,"language":140,"language_code":63,"site_id":62,"html_lang":63,"table_of_contents":141,"faqs":142,"seo_title":143,"seo_description":67,"update_tm":144,"read_time":145},1099529839291,"https://ap-avatar.wpscdn.com/davatar_6f874abed73319feea01a86fa6f0fab8","L I N D D U N P R O  \nP R IVA CY T H R EAT M O D E L I N GT U T O R IA L  \nD I ST R I N E T , K U L E U V E N  \n LINDDUN  \nThis is a pre-release version of the LINDDUN PRO Privacy Threat Modeling Tutorial.  \nThe latest version can be found at:  \n[https://downloads.linddun.org/tutorials/pro/latest/tutorial.pdf](https://downloads.linddun.org/tutorials/pro/latest/tutorial.pdf)  \nCopyright © 2023 DistriNet, KU Leuven [www. lind dun. org/pro](www. lind dun. org/pro)  \nAll rights reserved. No part of the publication may be reproduced in any form by print, photoprint, microfilm or any other means without written permission from the publisher.  \nVersion 0.1, April 2023  \nPlease refer to this document as:  \nLaurens Sion and Wouter Joosen, LINDDUN PRO privacy threat modeling tutorial, Technical Report, Department of Computer Science, KU Leuven, April 2023  \nContents  \n1 Overview 7  \n2 LINDDUN Privacy Threat Types 9  \n3 Creating the DFD model 13  \n4 Eliciting threats 17  \n5 Documenting and prioritizing threats 24  \nBibliography 29  \nIntroduction  \nPrivacy is an important quality of software systems and it is increasingly recognized as a property that has to be considered from the start when designing and building software systems. This is emphasized with the term Privacy by Design.1 This is not only desirable property from the end-user or organizational perspective, there is a lot of legislation around the world that forces organizations that process personal data to consider privacy and data protection concerns in the design and development of their software systems.2 Therefore, the use of techniques such as privacy threat modeling can also help you meet some of these compliance requirements.  \nLind dun pro is a threat modeling approach that can help you to address privacy concerns in the software that you are building by doing a systematic analysis of your software design to identify potential privacy threats. By systematically eliciting and addressing the uncovered privacy threats from the early phases of development, you can build more privacy-friendly software systems from the start, rather than reactively fixing privacy problems later on. This, of course, does not prevent you from doing these analyses for your existing systems.3 But the problems you identify may be tougher, more complex, or expensive to fix in existing systems.  \n1 Ann Cavoukian. Privacy by design [leading edge]. IEEE Technology and Society Magazine, 31(4):18–19, 2012. doi: 10.1109/MTS.2012.2225459  \n2 European Union. Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC. Official Journal of the European Union, 59(L 119):1–88, May 2016  \n3 On the contrary, it can be very insightful to perform these analyses on existing systems as well.  \nWho is this document for?  \nThis document targets software engineers that want to analyze the privacy of the software systems that they are building. The tutorial does not require any detailed background knowledge on privacy or modeling. Chapter 2 will provide the necessary background information on the lind dun privacy threat types that you will use during the analysis. While it can be useful to have some past experience with modeling (e.g., you can read a uml diagram or you have created some simple diagrams in the past), all the necessary steps will be explained in detail in chapter 3.  \n6  \nWhat is in this document?  \nThis document provides a detailed tutorial on how to perform alind dun pro threat analysis of a system using a df d4 model of that system. An example is used to describe each of the steps in detail and assist you to get up and running in performing lind dun pro threat analyses on your own software systems.  \nTo get you started on your threat modeling journey, this tutorial first provides you an overview of the lind dun pro threa","cbCaikrwJtZgWa5c","https://ap.wps.com/l/cbCaikrwJtZgWa5c","pdf",1297339,29,"English","# Overview\n## LINDDUN PRO threat modeling approach\n## Required LINDDUN materials\n# LINDDUN Privacy Threat Types\n# Creating the DFD model\n# Eliciting threats\n# Documenting and prioritizing threats\n# Bibliography","[{\"question\":\"Who is the tutorial intended for and what prior knowledge is required?\",\"answer\":\"The tutorial targets software engineers who want to analyze privacy in the systems they build. It does not require detailed prior knowledge on privacy or modeling, and necessary steps are explained in detail in later chapters.\"},{\"question\":\"When should you perform privacy threat modeling using LINDDUN PRO?\",\"answer\":\"Ideally, start as early as possible in the development lifecycle to identify and address threats early. Re-perform analyses over time as the system evolves or new integrations are introduced.\"},{\"question\":\"What are the core steps involved in LINDDUN PRO threat modeling?\",\"answer\":\"Create a DFD model of the system, then iterate over interactions between DFD elements to determine privacy threats related to sending, transfer, or receiving of personal data. The tutorial also guides threat elicitation, documentation, and prioritization.\"}]","LINDDUN PRO privacy threat modeling tutorial - Version 0.1 - April 2023 | PDF",1792965910,73]