Elevation of Privilege (EoP) Threat Modeling Cards
The Elevation of Privilege card game is designed to help you easily and quickly find threats to software or computer systems. It was invented at Microsoft in 2010 and has been kept up to date by the inventor, to cover threats to batteries and budgets. The game uses STRIDE threats giving you a framework for thinking, and specific actionable examples of those threats.
The game consists of 74 playing cards, 2 instruction cards, 1 play and strategy flowchart card, 6 reference cards and an An ‘about’ card. The 74 cards are in six suits. This is based on the STRIDE mnemonic introduced by Kornfelder and Garg.