Abstract: Wearable health devices (WHDs) continuously collect, transmit, and store sensitive biometric and physiological data, placing them at the intersection of three threat modelling traditions that have historically developed in isolation: security-oriented modelling (STRIDE), privacy-oriented modelling (LINDDUN), and regulatory compliance assessment (Privacy Impact Assessment, PIA). This paper presents a critical review of how these three frameworks address—and fail to fully address—the privacy and security risks specific to WHDs. We synthesise findings from systematic reviews, framework extension studies, and empirical case studies published between 2019 and 2025, organised around four recurring gaps identified across the literature: the structural incompleteness of any single framework when applied to continuous biometric monitoring; the persistent difficulty of mapping privacy threats onto specific GDPR obligations; the usability and tooling barriers that limit practitioner adoption of privacy-specific modelling; and the absence of a validated method for combining STRIDE, LINDDUN, and PIA into a single coherent assessment workflow. We conclude that, while each framework individually addresses a necessary dimension of the WHD threat landscape, no published, empirically validated integration of all three currently exists, and we set out the specific design requirements such an integration would need to satisfy.
Keywords: Wearable health devices, threat modelling, LINDDUN, STRIDE, Privacy Impact Assessment, GDPR, health IoT security, privacy engineering.
Title: PRIVACY-ENHANCED THREAT MODELLING FOR WEARABLE HEALTH DEVICES: A CRITICAL REVIEW OF STRIDE, LINDDUN, AND PRIVACY IMPACT ASSESSMENT INTEGRATION
Author: NWOKPURU SAMUEL ABAFU, CHINONSO JOB, ONWE, FESTUS CHIJIOKE
International Journal of Computer Science and Information Technology Research
ISSN 2348-1196 (print), ISSN 2348-120X (online)
Vol. 14, Issue 2, April 2026 - June 2026
Page No: 277-282
Research Publish Journals
Website: www.researchpublish.com
Published Date: 30-June-2026