Skip to content

Home > Resources > papers > UZ25-SoK-Threat-Modeling

SoK: A Framework and Guide for Human-Centered Threat Modeling in Security and Privacy Research (Usman, Zappala 2025)

Last modified: 2026-10-27
DOI: 10.1109/sp61157.2025.00033 ยท URL: https://doi.org/10.1109/SP61157.2025.00033

Summary

Systematizes how security and privacy research models threats from the perspective of the people affected, rather than only from system assets. Proposes a framework and practical guide for human-centered threat modeling, covering who is at risk, from whom, and with what harms. Useful for e-ID work as a methodology for reasoning about holder-centric threats (surveillance, coercion, profiling) beyond the cryptographic adversary model.