non-repudiation-privacy

Excessive audit logging and digital signatures create privacy risks by producing irrefutable proof of user actions, which eliminates plausible deniability and can expose sensitive user behavior to legal subpoena.

Plausible deniability in software privacy design is the ability to prevent accountability mechanisms from creating irrefutable evidence of sensitive user actions, thereby preserving user privacy against legal or unauthorized scrutiny.

Analyze source code for non-repudiation privacy threats by mapping LINDDUN category N to identify audit logging, digital signatures, and immutable record storage that eliminate plausible deniability for sensitive user activities.

Yes, you can apply LINDDUN category N to assess healthcare application privacy risks by identifying if patient queries are logged or signed in ways that create irrefutable proof and eliminate plausible deniability.

Implementing immutable record storage can violate privacy regulations if it creates irrefutable proof of sensitive user actions without preserving plausible deniability, mapping to non-repudiation privacy threats under LINDDUN category N.

STRIDE repudiation focuses on preventing users from denying malicious actions, whereas inverse STRIDE repudiation and LINDDUN non-repudiation privacy focus on preventing systems from creating irrefutable proof that eliminates user plausible deniability.