# LINDDUN

> Process for threat modelling, standing for linkability, identifiability, nonrepudiation, detectability, disclosure of information, unawareness, noncompliance

**Wikidata**: [Q124306912](https://www.wikidata.org/wiki/Q124306912)  
**Source**: https://4ort.xyz/entity/linddun

## Summary
LINDDUN is a threat modelling process that identifies and prioritizes potential threats from an attacker's perspective, focusing on seven key privacy and security risks: linkability, identifiability, nonrepudiation, detectability, disclosure of information, unawareness, and noncompliance.

## Key Facts
- **Instance of**: Threat modelling
- **Acronym**: Stands for linkability, identifiability, nonrepudiation, detectability, disclosure of information, unawareness, noncompliance
- **Purpose**: Helps identify and prioritize privacy and security threats in systems
- **Related to**: Threat modelling (a process for identifying and enumerating potential threats)
- **Wikidata description**: "Process for threat modelling, standing for linkability, identifiability, nonrepudiation, detectability, disclosure of information, unawareness, noncompliance"

## FAQs
### Q: What are the seven risks covered by LINDDUN?
A: LINDDUN covers linkability, identifiability, nonrepudiation, detectability, disclosure of information, unawareness, and noncompliance—key privacy and security concerns in threat modelling.

### Q: How does LINDDUN differ from other threat modelling methods?
A: Unlike generic threat modelling frameworks, LINDDUN specifically focuses on privacy and security risks, making it more tailored to evaluating data protection and user anonymity.

### Q: Who would use LINDDUN?
A: LINDDUN is used by security professionals, privacy engineers, and developers to assess and mitigate risks related to personal data and system vulnerabilities.

## Why It Matters
LINDDUN is significant in the field of threat modelling because it provides a structured approach to identifying privacy and security risks that are often overlooked in traditional threat assessments. By addressing concerns like linkability and identifiability, it helps organizations better protect sensitive data and comply with privacy regulations. Its acronym-based framework makes it easy to remember and apply, ensuring that critical vulnerabilities are systematically evaluated. This method is particularly valuable in industries handling personal information, such as healthcare and finance, where data protection is paramount.

## Notable For
- **Privacy-focused**: One of the first threat modelling frameworks to explicitly address privacy risks alongside security threats.
- **Structured approach**: Uses a clear acronym to systematically evaluate seven key privacy and security concerns.
- **Widely adopted**: Used in academic and industry settings to improve data protection and compliance.
- **Attacker-centric**: Designed to identify threats from the perspective of a hypothetical attacker, enhancing proactive security measures.
- **Regulatory alignment**: Helps organizations meet privacy regulations by systematically addressing data protection risks.

## Body
### Overview
LINDDUN is a threat modelling technique that extends traditional security-focused threat modelling to include privacy risks. It was developed to address the growing need for comprehensive risk assessment in systems handling personal data.

### Key Components
The framework is based on seven key risks:
- **Linkability**: The ability to link different pieces of data to the same individual.
- **Identifiability**: The ability to identify an individual from data.
- **Nonrepudiation**: The inability to deny actions or transactions.
- **Detectability**: The ability to detect the presence of a system or user.
- **Disclosure of information**: Unauthorized access to sensitive data.
- **Unawareness**: Users or systems being unaware of risks.
- **Noncompliance**: Failure to adhere to privacy or security policies.

### Application
LINDDUN is applied by security analysts and developers to identify and mitigate privacy and security threats in systems. It is particularly useful in industries where data protection is critical, such as healthcare and finance.

### Relationship to Threat Modelling
LINDDUN is an instance of threat modelling, a broader process for identifying and enumerating potential threats. While threat modelling generally focuses on structural vulnerabilities, LINDDUN narrows its scope to privacy and security risks, making it a specialized subset of the broader methodology.