Elevation of Privilege (EoP) Threat Modeling Card Game
Invented by Adam Shostack, the Elevation of Privilege card game is designed to help you easily and quickly find threats to software or computer systems. The game uses STRIDE threats giving you a framework for thinking, and specific actionable examples of those threats.
The game consists of 84 cards including:
2 instruction cards
1 play and strategy flowchart card
74 playing cards
6 reference cards
An ‘about’ card
The 74 cards are in six suits. This is based on the STRIDE mnemonic introduced by Kornfelder and Garg.
More details on how to play the game are captured here.
The privacy version adding P to STRIDE (STRIPED) by Mark Vinkovits is also available.