"1000 Blank White Cards" of Threat Modeling

[mozfest-bot]

[ UUID ] 9c09a093-3781-49a4-bbe2-41bec03391c7

[ Session Name ] "1000 Blank White Cards" of Threat Modeling [ Primary Space ] Privacy and Security [ Secondary Space ] Digital Inclusion

[ Submitter's Name ] Rowan Cota [ Submitter's Affiliated Organisation ] BuzzFeed, Inc. [ Submitter's GitHub ] @cotarg

[ Other Facilitator 1's Name ] Removed by Sarah [ Other Facilitator 1's GitHub ] Private

What will happen in your session?

Using the game "1000 Blank White Cards" (1KBWC) as a framework, this session will explore threat-modeling through emergent gameplay. Participants will be invited to think about the structure presented to them and participate in an emergent design and play experience. Rather than a technical approach, we encourage folks to think creatively, outside the constraints of "what is possible" with current technology.

1KBWC is a set of rules for designing a card game on the fly that is conducive to this sort of exercise precisely because it offers few constraints, while moving quickly and encouraging creativity. These are all skills used in threat modeling, and we feel games are one of the best ways to train and encourage their development.

What is the goal or outcome of your session?

Our big goal is to teach folks a new strategy for threat modeling, whether they work with a specific software/technology, or whether they're social organizers for a ground-roots campaign. We hope that by sharing this tool we can encourage a regular threat modeling practice for folks who are vulnerable, and a variety of approaches to undertaking it, since new perspectives often reveal new information.

A smaller, secondary goal we have is to meet other folks who have techniques, strategies, and perspectives that we haven't experienced yet. We hope to encourage sharing and discussion as a result of the game, as well as the experience of participation.

If your session requires additional materials or electronic equipment, please outline your needs.

Pens and pencils would be great. We will bring cards, both printed and blank.

Time needed

60 mins

[arroway]

It reminds me of the Elevation of Privilege Threat Modeling Card Game developped by Microsoft, but in a DIY version. Sounds cool.

[cotarg]

While we'll update this issue again once some materials are uploaded, if you want to follow the development of the materials that will be used for this workshop (whether at MozFest or elsewhere!) in realtime, we're keeping a repo at: https://github.com/cotarg/congenial-carnival

[bunnybooboo]

Further to a recent email conversation we're really excited to have the opportunity to ACCEPT your session into Mozfest 2018. Things will kick up a gear for production, materials, and facilitator support soon, once this curation process finally closes September 10. @cotarg

Looking forward to meeting you in October!

[cotarg]

We’re so excited to join you all! <3

[cotarg]

And the repo for this workshop/project has been renamed to reflect what it is! https://github.com/cotarg/1KBWC-threat-modeling

[bunnybooboo]

@cotarg the scheduling app will source data from all the successful GH issues in this repo. If any of your details change, between now and event day, we have a number of opportunities to correct them. Just let us know.

Hope you have fun preparing for this workshop.