Kim Wuyts -- The Future of Privacy Threat Modeling

Kim Wuyts discusses her work in privacy threat modeling with LINDDUN, a framework inspired by Microsoft's STRIDE for security threat modeling. LINDDUN provides a structure to analyze privacy threats across multiple categories such as linking, detecting data disclosure, and unawareness. The framework has been updated over the years to incorporate new knowledge and developments in privacy, and it has become recognized as a go-to approach for privacy threat modeling. Kim Wutz is a senior privacy researcher at the IMEC DISTRINET research group at KU Leuven, Belgium. She has more than 15 years of experience in security and privacy engineering. Kim is one of the driving forces behind the development and extension of Linden, a privacy threat modeling framework.The Application Security Podcast is brought to you by Security Journey.About Security JourneyKim Wutz is a senior privacy researcher at the IMEC DISTRINET research group at KU Leuven, Belgium.→ Learn more about Security JourneyConnect with Kim Wuyts:→ LINDDUN→ Threat Modeling ManifestoMentioned in this episode:→ LINDDUN→ Threat Modeling Manifesto→ Kim WuytsFollow the Application Security Podcast:➜ Home➜ X➜ LinkedIn➜ YouTube➜ Instagram➜ FacebookChapters:00:00 Meet Kim Wuyts: The Future of Privacy Threat Modeling07:44 I think about how prolific STRIDE is in the world of09:42 Kim, you even commented on this on LinkedIn. I was exchanging13:51 I thought, I'm like, I'm gonna work this. I'm gonna try19:57 You mentioned privacy by design. What's the— I've always legitimately always23:45 I do privacy by design, like, I feel like security or25:53 With privacy by design, do I start with a set of27:35 It sounds like when you're describing an existing system, something that30:37 You don't immediately start looking for, I don't know, some crypto32:10 Very cool. So, when you think about emerging trends or new36:00 And generally you have to do that anyway, right37:21 Right. Okay. So, here's my final question, and then we'll go40:18 About a key takeaway or a call to action then