Main Page/Crash Courses/Systems and Policies/Week two

Week 2: Threat modeling and privacy terms

• Real time lecture: July 30th 9 - 11 Pacific/12 - 2 Eastern on Zoom https://zoom.us/j/9129428892
• Recording:
• Slides:

Overview

This week we'll cover one of the building blocks of privacy advocacy and a major theme for this course: threat modeling. Threat modeling is a method for figuring out a privacy strategy that works for someone based on their unique needs, their material conditions, and their community network. Alison will teach us how to threat model, and how we can use this methodology in thinking about privacy in big and small ways. We'll discuss some example threat models, and the ways that different threat models should impact our decision-making when it comes to library privacy. We'll also introduce and discuss basic privacy terminology.

Readings

• Bruce Schneier on "The Security Mindset" https://www.schneier.com/blog/archives/2008/03/the_security_mi_1.html
• Read EFF's threat modeling one-pager: https://www.eff.org/files/2015/11/24/3mod_threat-modeling-ssd_9-3-15.pdf
• Browse through this privacy glossary. We'll go over some key terms during our conversation.

Discussion board prompt

• What threat models do you know exist in your community? Which ones resonate with you the most?

Tasks

• Lecture, readings, post to discussion board