Kim Wuyts -- The Future of Privacy Threat Modeling

Kim Wuyts discusses her work in privacy threat modeling with LINDDUN, a framework inspired by Microsoft's STRIDE for security threat modeling. LINDDUN provides a structure to analyze privacy threats across multiple categories such as linking, detecting data disclosure, and unawareness. The framework has been updated over the years to incorporate new knowledge and developments in privacy, and it has become recognized as a go-to approach for privacy threat modeling. Kim Wutz is a senior privacy researcher at the IMEC DISTRINET research group at KU Leuven, Belgium. She has more than 15 years of experience in security and privacy engineering. Kim is one of the driving forces behind the development and extension of Linden, a privacy threat modeling framework.

The Application Security Podcast is brought to you by Security Journey.

About Security Journey
Kim Wutz is a senior privacy researcher at the IMEC DISTRINET research group at KU Leuven, Belgium.
→ Learn more about Security Journey

Connect with Kim Wuyts:
→ LINDDUN
→ Threat Modeling Manifesto

Mentioned in this episode:
→ LINDDUN
→ Threat Modeling Manifesto
→ Kim Wuyts

Follow the Application Security Podcast:
➜ Home
➜ X
➜ LinkedIn
➜ YouTube
➜ Instagram
➜ Facebook

Chapters:
00:00 Meet Kim Wuyts: The Future of Privacy Threat Modeling
07:44 I think about how prolific STRIDE is in the world of
09:42 Kim, you even commented on this on LinkedIn. I was exchanging
13:51 I thought, I'm like, I'm gonna work this. I'm gonna try
19:57 You mentioned privacy by design. What's the— I've always legitimately always
23:45 I do privacy by design, like, I feel like security or
25:53 With privacy by design, do I start with a set of
27:35 It sounds like when you're describing an existing system, something that
30:37 You don't immediately start looking for, I don't know, some crypto
32:10 Very cool. So, when you think about emerging trends or new
36:00 And generally you have to do that anyway, right
37:21 Right. Okay. So, here's my final question, and then we'll go
40:18 About a key takeaway or a call to action then