A Threat Model for Digital Identity Wallet in the age of eIDAS 2.0

Talks

Threat model for digital identity wallets under eIDAS 2.0, using STRIDE and LINDDUN to identify missing areas for community feedback

Add to calendar

Event details

Date:
– Central European Summer Time
– UTC
Location:
Vienna, Austria
Speakers:
Simone Onofri, W3C Senior Principal Security Specialist
Category:
Security
Website:
ThreatModCon 2026 Vienna

Digital identity wallets, introduced under eIDAS 2.0, enable decentralized and user-controlled management of personal data across online services. However, as a new model with new entities and interaction patterns, their security and privacy risks remain insufficiently understood. This session presents a structured threat modeling using STRIDE and LINDDUN, and outlines potential threats with key mitigation strategies while inviting community feedback to identify missing threats and mitigations.