Privacy Impact Tree Analysis (PITA): A Tree-Based Privacy Threat Modeling Approach

• Published in: IEEE transactions on software engineering Vol. 51; no. 7; pp. 2102 - 2124
• Main Author: Van Landuyt, Dimitri
• Format: Journal Article
• Language: English
• Published: New York IEEE 01.07.2025; IEEE Computer Society
• Subjects: Artificial intelligence; Attack trees; Cybersecurity; Data privacy; Fault tree analysis; Fault trees; Impact analysis; Pragmatics; Prevention and mitigation; Privacy; privacy by design; privacy engineering budget; privacy footprint; privacy impact; privacy threat modeling; Risk analysis; Risk assessment; Safety; Software development; Systematics; Taxonomy; Threat evaluation; Threat modeling; Threat models
• ISSN: 0098-5589; 1939-3520
• DOI: 10.1109/TSE.2025.3573380

Threat modeling involves the early identification, prioritization and mitigation of relevant threats and risks, during the design and conceptualization stages of the software development life-cycle. Tree-based analysis is a structured risk analysis technique that starts from the articulation of poss...