Elevation of Privilege (EoP) is the easy way to get started threat modeling. It is a card game that developers, architects or security experts can play.

The Elevation of Privilege (EoP) threat modeling card game is the easy way to get started threat modeling. Adam Shostack created it in 2010, after hearing Laurie Williams describe Protection Poker. Play the Game! The easiest way to get a nice physical copy is from Agile Stationery (direct, or via Amazon).

Elevation of Privilege (EoP) is the easy way to get started threat modeling. It is designed to make threat modeling easy and accessible for developers and architects. Threat modeling is a core security practice during the design phase of the Microsoft Security Development Lifecycle (SDL).

Elevation of Privilege (EoP), created by Adam Shostack, makes the process more approachable and engaging—especially for developers who aren’t security experts. Instead of working through lengthy checklists, players use a card game format to uncover vulnerabilities in the design stage, making security discussions more interactive and ...

The Elevation of Privilege (EoP) card game offers a structured and engaging approach to threat modeling, enabling development teams to identify potential security vulnerabilities early in the design process.

This application implements an online version of the card games Elevation of Privilege and OWASP Cornucopia, allowing to play the threat modeling games in remote or geo-distributed developer teams. Improve both: your application's security and your developer's awareness!

Elevation of Privilege is a card game used during a threat modeling session. It was designed by Adam Shostack at Microsoft. More details about the game itself, and the cards ready to print can be found here and here.

Alternatively, if you do not want to play a full game you can just select a few random cards. Draw a random card v1.1.2 - made with at TNG Technology Consulting and Careem - Elevation of Privilege was originally invented at Microsoft, Cornucopia was developed at OWASP, Cumulus was started at TNG Technology Consulting , Elevation of MLsec was ...

Elevation of Privilege (EoP) is the easy way to get started threat modeling. It is a card game that developers, architects or security experts can play.