Elevation of Privilege

Elevation of Privilege (EoP) is the easy way to get started threat modeling, which is a core component of the design phase in the Microsoft Security Development Lifecycle (SDL).

The EoP card game helps clarify the details of threat modeling and examines possible threats to software and computer systems.

The EoP game focuses on the following threats:

  Spoofing
  Tampering
  Repudiation
  Information Disclosure
  Denial of Service
  Elevation of Privilege

EoP uses a simple point system that allows you to challenge other developers and become your opponent's biggest threat.

Developed by Microsoft and Published under a
CC BY 3.0 Deed | Attribution 3.0 Unported
| Creative Commons
License.

No scorepad is included, buy a score available at Elevation of Privilege Scorepad or downloading the scoring sheet is recommended.