Elevation of Privilege Card Game

The Elevation of Privilege Card Game is a game released by Microsoft which models threat modelling in software development.

Elevation of Privilege is the easy way to get started threat modeling. Threat modeling is a core component of the design phase in the Microsoft Security Development Lifecycle (SDL).

The Elevation of Privilege (EoP) card game helps clarify the details of threat modeling and examines possible threats to software and computer systems.

The EoP game focuses on the following threats:

• Spoofing
  • Tampering
  • Repudiation
  • Information Disclosure
  • Denial of Service
  • Elevation of Privilege

EoP uses a simple point system that allows you to challenge other developers and become your opponent’s biggest threat.