add LINDDUN GO to table of contents

jon gadsden · jon gadsden · commit dd04a91731cd · 2024-03-23T16:23:00.000Z
diff --git a/_data/draft.yaml b/_data/draft.yaml
@@ -61,9 +61,12 @@ docs:
 - title: '4.1.3 Threat Dragon'
   url: design/threat_modeling/threat_dragon
 
-- title: '4.1.4 Threat Modeling and Cornucopia'
+- title: '4.1.4 Cornucopia'
   url: design/threat_modeling/cornucopia
 
+- title: '4.1.5 LINDDUN GO'
+  url: design/threat_modeling/linddun-go
+
 - title: '4.1.6 Threat Modeling toolkit'
   url: design/threat_modeling/toolkit
 
diff --git a/_data/release.yaml b/_data/release.yaml
@@ -61,9 +61,12 @@ docs:
 - title: '4.1.3 Threat Dragon'
   url: design/threat_modeling/threat_dragon
 
-- title: '4.1.4 Threat Modeling and Cornucopia'
+- title: '4.1.4 Cornucopia'
   url: design/threat_modeling/cornucopia
 
+- title: '4.1.5 LINDDUN GO'
+  url: design/threat_modeling/linddun-go
+
 - title: '4.1.6 Threat Modeling toolkit'
   url: design/threat_modeling/toolkit
 
diff --git a/draft/02-toc.md b/draft/02-toc.md
@@ -37,7 +37,8 @@ permalink:
 4.1.1 [Threat modeling in practice](#threat-modeling-in-practice)  
 4.1.2 [Pythonic Threat Modeling](#pythonic-threat-modeling)  
 4.1.3 [Threat Dragon](#threat-dragon)  
-4.1.4 [Threat Modeling and Cornucopia](#cornucopia)  
+4.1.4 [Cornucopia](#cornucopia)  
+4.1.5 [LINDDUN GO](#linddun-go)  
 4.1.6 [Threat Modeling toolkit](#threat-modeling-toolkit)  
 4.2 [Web application checklist](#web-application-checklist)  
 4.2.1 [Checklist: Define Security Requirements](#checklist-define-security-requirements)  
diff --git a/draft/06-design/00-toc.md b/draft/06-design/00-toc.md
@@ -50,7 +50,8 @@ Sections:
 4.1.1 [Threat modeling in practice](#threat-modeling-in-practice)  
 4.1.2 [Pythonic Threat Modeling](#pythonic-threat-modeling)  
 4.1.3 [Threat Dragon](#threat-dragon)  
-4.1.4 [Threat Modeling and Cornucopia](#cornucopia)  
+4.1.4 [Cornucopia](#cornucopia)  
+4.1.5 [LINDDUN GO](#linddun-go)  
 4.1.6 [Threat Modeling toolkit](#threat-modeling-toolkit)  
 4.2 [Web application checklist](#web-application-checklist)  
 4.2.1 [Checklist: Define Security Requirements](#checklist-define-security-requirements)  
diff --git a/draft/06-design/01-threat-modeling/00-toc.md b/draft/06-design/01-threat-modeling/00-toc.md
@@ -31,7 +31,8 @@ Sections:
 4.1.1 [Threat modeling in practice](#threat-modeling-in-practice)  
 4.1.2 [Pythonic Threat Modeling](#pythonic-threat-modeling)  
 4.1.3 [Threat Dragon](#threat-dragon)  
-4.1.4 [Threat Modeling and Cornucopia](#cornucopia)  
+4.1.4 [Cornucopia](#cornucopia)  
+4.1.5 [LINDDUN GO](#linddun-go)  
 4.1.6 [Threat Modeling toolkit](#threat-modeling-toolkit)  
 
 ----
diff --git a/draft/06-design/01-threat-modeling/04-cornucopia.md b/draft/06-design/01-threat-modeling/04-cornucopia.md
@@ -12,7 +12,7 @@ permalink: /draft/design/threat_modeling/cornucopia/
 
 {% include breadcrumb.html %}
 
-### 4.1.4 Threat Modeling and Cornucopia
+### 4.1.4 Cornucopia
 
 OWASP Cornucopia is a card game used to help derive application security requirements
 during the software development life cycle.
diff --git a/draft/06-design/01-threat-modeling/05-linddun-go.md b/draft/06-design/01-threat-modeling/05-linddun-go.md
@@ -12,7 +12,7 @@ permalink: /draft/design/threat_modeling/linddun-go/
 
 {% include breadcrumb.html %}
 
-### 4.1.4 Threat Modeling and LINDDUN GO
+### 4.1.5 LINDDUN GO
 
 LINNDUN GO is a card game used to help derive privacy requirements during the software development life cycle.
 The LINNDUN GO card set can be [downloaded][linddun-go-cards] as a PDF and then printed out.
diff --git a/draft/06-design/01-threat-modeling/toc.md b/draft/06-design/01-threat-modeling/toc.md
@@ -32,7 +32,8 @@ Sections:
 4.1.1 [Threat modeling in practice](01-threat-modeling.md)  
 4.1.2 [Pythonic Threat Modeling](02-pytm.md)  
 4.1.3 [Threat Dragon](03-threat-dragon.md)  
-4.1.4 [Threat Modeling and Cornucopia](04-cornucopia.md)  
+4.1.4 [Cornucopia](04-cornucopia.md)  
+4.1.5 [LINDDUN GO](05-linddun-go.md)  
 4.1.6 [Threat Modeling toolkit](06-toolkit.md)  
 
 ----
diff --git a/draft/06-design/toc.md b/draft/06-design/toc.md
@@ -45,7 +45,8 @@ Sections:
 4.1.1 [Threat modeling in practice](01-threat-modeling/01-threat-modeling.md)  
 4.1.2 [Pythonic Threat Modeling](01-threat-modeling/02-pytm.md)  
 4.1.3 [Threat Dragon](01-threat-modeling/03-threat-dragon.md)  
-4.1.4 [Threat Modeling and Cornucopia](01-threat-modeling/04-cornucopia.md)  
+4.1.4 [Cornucopia](01-threat-modeling/04-cornucopia.md)  
+4.1.5 [LINDDUN GO](01-threat-modeling/05-linddun-go.md)  
 4.1.6 [Threat Modeling toolkit](01-threat-modeling/06-toolkit.md)  
 4.2 [Web application checklist](02-web-app-checklist/toc.md)  
 4.2.1 [Checklist: Define Security Requirements](02-web-app-checklist/01-define-security-requirements.md)  
diff --git a/draft/toc.md b/draft/toc.md
@@ -41,7 +41,8 @@ This draft version has the latest contributions to the Developer Guide so expect
 4.1.1 [Threat modeling in practice](06-design/01-threat-modeling/01-threat-modeling.md)  
 4.1.2 [Pythonic Threat Modeling](06-design/01-threat-modeling/02-pytm.md)  
 4.1.3 [Threat Dragon](06-design/01-threat-modeling/03-threat-dragon.md)  
-4.1.4 [Threat Modeling and Cornucopia](06-design/01-threat-modeling/04-cornucopia.md)  
+4.1.4 [Cornucopia](06-design/01-threat-modeling/04-cornucopia.md)  
+4.1.5 [LINDDUN GO](06-design/01-threat-modeling/05-linddun-go.md)  
 4.1.6 [Threat Modeling toolkit](06-design/01-threat-modeling/06-toolkit.md)  
 4.2 [Web application checklist](06-design/02-web-app-checklist/toc.md)  
 4.2.1 [Checklist: Define Security Requirements](06-design/02-web-app-checklist/01-define-security-requirements.md)  
diff --git a/release/02-toc.md b/release/02-toc.md
@@ -37,7 +37,8 @@ permalink:
 4.1.1 [Threat modeling in practice](#threat-modeling-in-practice)  
 4.1.2 [Pythonic Threat Modeling](#pythonic-threat-modeling)  
 4.1.3 [Threat Dragon](#threat-dragon)  
-4.1.4 [Threat Modeling and Cornucopia](#cornucopia)  
+4.1.4 [Cornucopia](#cornucopia)  
+4.1.5 [LINDDUN GO](#linddun-go)  
 4.1.6 [Threat Modeling toolkit](#threat-modeling-toolkit)  
 4.2 [Web application checklist](#web-application-checklist)  
 4.2.1 [Checklist: Define Security Requirements](#checklist-define-security-requirements)  
diff --git a/release/06-design/00-toc.md b/release/06-design/00-toc.md
@@ -50,7 +50,8 @@ Sections:
 4.1.1 [Threat modeling in practice](#threat-modeling-in-practice)  
 4.1.2 [Pythonic Threat Modeling](#pythonic-threat-modeling)  
 4.1.3 [Threat Dragon](#threat-dragon)  
-4.1.4 [Threat Modeling and Cornucopia](#cornucopia)  
+4.1.4 [Cornucopia](#cornucopia)  
+4.1.5 [LINDDUN GO](#linddun-go)  
 4.1.6 [Threat Modeling toolkit](#threat-modeling-toolkit)  
 4.2 [Web application checklist](#web-application-checklist)  
 4.2.1 [Checklist: Define Security Requirements](#checklist-define-security-requirements)  
diff --git a/release/06-design/01-threat-modeling/00-toc.md b/release/06-design/01-threat-modeling/00-toc.md
@@ -31,7 +31,8 @@ Sections:
 4.1.1 [Threat modeling in practice](#threat-modeling-in-practice)  
 4.1.2 [Pythonic Threat Modeling](#pythonic-threat-modeling)  
 4.1.3 [Threat Dragon](#threat-dragon)  
-4.1.4 [Threat Modeling and Cornucopia](#cornucopia)  
+4.1.4 [Cornucopia](#cornucopia)  
+4.1.5 [LINDDUN GO](#linddun-go)  
 4.1.6 [Threat Modeling toolkit](#threat-modeling-toolkit)  
 
 ----
diff --git a/release/06-design/01-threat-modeling/04-cornucopia.md b/release/06-design/01-threat-modeling/04-cornucopia.md
@@ -12,7 +12,7 @@ permalink: /release/design/threat_modeling/cornucopia/
 
 {% include breadcrumb.html %}
 
-### 4.1.4 Threat Modeling and Cornucopia
+### 4.1.4 Cornucopia
 
 OWASP Cornucopia is a card game used to help derive application security requirements
 during the software development life cycle.
diff --git a/release/06-design/01-threat-modeling/05-linddun-go.md b/release/06-design/01-threat-modeling/05-linddun-go.md
@@ -0,0 +1,75 @@
+---
+
+title: Threat Modeling and LINDDUN GO
+layout: col-document
+tags: OWASP Developer Guide
+contributors: Jon Gadsden
+document: OWASP Developer Guide
+order: 6150
+permalink: /draft/design/threat_modeling/linddun-go/
+
+---
+
+{% include breadcrumb.html %}
+
+### 4.1.5 LINDDUN GO
+
+LINNDUN GO is a card game used to help derive privacy requirements during the software development life cycle.
+The LINNDUN GO card set can be [downloaded][linddun-go-cards] as a PDF and then printed out.
+
+#### What is LINDDUN GO?
+
+[LINDDUN GO][linddun-go] helps identify potential privacy threats based on the key LINDDUN threats to privacy:
+
+* Linking
+* Identifying
+* Non-repudiation
+* Detecting
+* Data Disclosure
+* Unawareness
+* Non-compliance
+
+LINNDUN GO is similar to OWASP [Cornucopia][cornucopia] in that it takes the form of a set of cards that
+can be used to gamify the process of identifying application privacy / security requirements.
+The deck of 33 cards are arranged in suits that match each category of threats to privacy,
+and there is a [set of rules][linddun-go-rules] to structure the game sessions.
+Each LINDDUN GO card illustrates a single common privacy threat and suggested remediations.
+
+#### Why use it?
+
+[LINDDUN][linddun] is an approach to threat modeling from a privacy perspective.
+It is a methodology that is useful to structure and guide the identification of threats to privacy,
+and also helps with suggestions for the mitigation of any threats.
+
+[LINDDUN GO][linddun-go] gamifies this approach to privacy with a set of cards and rules
+to guide the identification process for threats to the privacy provided by the application.
+This is a change to other established processes and provides a different and useful perspective to the system.
+
+#### How to use LINDDUN GO
+
+The idea for a LINDDUN GO is that it is played in person by a diverse team with as varied a set of viewpoints as possible.
+The advice from the LINDDUN GO 'getting started' instructions is that this team contains some or all of:
+
+* domain experts
+* system architects
+* developers
+* the Data Protection Officer (DPO)
+* legal experts
+* the Chief Information Security Officer (CISO)
+* privacy champions
+
+The application should have already been described by an architecture diagram or data flow diagram
+so that the players have something to refer to during the game.
+[Download][linddun-go-cards] and printout the deck of cards.
+
+Follow the [set of rules][linddun-go-rules] to structure the game session, record the outcome and act on it.
+The outcome of the game is to identify possible privacy threats and propose remediations;
+as well as having a good time of course.
+
+----
+
+[cornucopia]: https://owasp.org/www-project-cornucopia/
+[linddun]: https://linddun.org/
+[linddun-go]: https://linddun.org/go/
+[linddun-go-cards]: https://downloads.linddun.org/linddun-go/default/latest/go.pdf
+[linddun-go-rules]: https://linddun.org/go-getting-started/
diff --git a/release/06-design/01-threat-modeling/toc.md b/release/06-design/01-threat-modeling/toc.md
@@ -32,7 +32,8 @@ Sections:
 4.1.1 [Threat modeling in practice](01-threat-modeling.md)  
 4.1.2 [Pythonic Threat Modeling](02-pytm.md)  
 4.1.3 [Threat Dragon](03-threat-dragon.md)  
-4.1.4 [Threat Modeling and Cornucopia](04-cornucopia.md)  
+4.1.4 [Cornucopia](04-cornucopia.md)  
+4.1.5 [LINDDUN GO](05-linddun-go.md)  
 4.1.6 [Threat Modeling toolkit](06-toolkit.md)  
 
 ----
diff --git a/release/06-design/toc.md b/release/06-design/toc.md
@@ -45,7 +45,8 @@ Sections:
 4.1.1 [Threat modeling in practice](01-threat-modeling/01-threat-modeling.md)  
 4.1.2 [Pythonic Threat Modeling](01-threat-modeling/02-pytm.md)  
 4.1.3 [Threat Dragon](01-threat-modeling/03-threat-dragon.md)  
-4.1.4 [Threat Modeling and Cornucopia](01-threat-modeling/04-cornucopia.md)  
+4.1.4 [Cornucopia](01-threat-modeling/04-cornucopia.md)  
+4.1.5 [LINDDUN GO](01-threat-modeling/05-linddun-go.md)  
 4.1.6 [Threat Modeling toolkit](01-threat-modeling/06-toolkit.md)  
 4.2 [Web application checklist](02-web-app-checklist/toc.md)  
 4.2.1 [Checklist: Define Security Requirements](02-web-app-checklist/01-define-security-requirements.md)  
diff --git a/release/toc.md b/release/toc.md
@@ -41,7 +41,8 @@ permalink: /release/
 4.1.1 [Threat modeling in practice](06-design/01-threat-modeling/01-threat-modeling.md)  
 4.1.2 [Pythonic Threat Modeling](06-design/01-threat-modeling/02-pytm.md)  
 4.1.3 [Threat Dragon](06-design/01-threat-modeling/03-threat-dragon.md)  
-4.1.4 [Threat Modeling and Cornucopia](06-design/01-threat-modeling/04-cornucopia.md)  
+4.1.4 [Cornucopia](06-design/01-threat-modeling/04-cornucopia.md)  
+4.1.5 [LINDDUN GO](06-design/01-threat-modeling/05-linddun-go.md)  
 4.1.6 [Threat Modeling toolkit](06-design/01-threat-modeling/06-toolkit.md)  
 4.2 [Web application checklist](06-design/02-web-app-checklist/toc.md)  
 4.2.1 [Checklist: Define Security Requirements](06-design/02-web-app-checklist/01-define-security-requirements.md)  
