Elevation of Privilege

Elevation of Privilege (EoP) is the easy way to get started threat modeling, which is a core component of the design phase in the Microsoft Security Development Lifecycle (SDL).

The EoP card game helps clarify the details of threat modeling and examines possible threats to software and computer systems.

The EoP game focuses on the following threats:

Spoofing

Tampering

Repudiation

Information Disclosure

Denial of Service

Elevation of Privilege

EoP uses a simple point system that allows you to challenge other developers and become your opponent's biggest threat.