A Comprehensive Approach for Applying Threat Modeling to Internet of Things Systems

Silva, Lucas Peixoto da; Nascimento, Bernardo S.; Dias, R; Mendonça, Diogo

doi:10.1109/wf-iot54382.2022.10152291

Cited by 2 publications

(1 citation statement)

References 25 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Data security in the Internet of Things (IoT) is a growing concern as more connected devices are deployed across different industries. The IoT devices' diverse and interconnected nature creates a complex landscape, making them susceptible to cyber threats [1][2][3]. Thus, data protection is essential to ensure user privacy, prevent malicious attacks and maintain system integrity.…”

Section: Introductionmentioning

confidence: 99%

S3: Security Score System

Valadares,

Santos,

Perkusich

2023

Preprint

View full text Add to dashboard Cite

Security in the Internet of Things (IoT) is a critical concern due to the growing number of connected devices and the limited resources to implement robust security mechanisms in most of them. Adopting standard assessment frameworks, such as CVSS (Common Vulnerability Score System), allows for systematic vulnerability assessment. At the same time, CVE (Common Vulnerabilities and Exposures) records provide unique identifiers for known security issues, making it easier to share information. However, comparing security solutions is still challenging due to the diverse nature of IoT devices and the ever-evolving threat landscape, requiring continual innovation and collaboration between stakeholders. Furthermore, there still needs to be a simple way to compare technologies and solutions, taking into account the security provided by them. In this sense, in this article, we propose a tool for calculating a security score based on the CVSS index of each existing vulnerability in a given technology. We explain how the tool performs the calculation, discuss some challenges, and propose improvements for future work.

show abstract

Section: Introductionmentioning

confidence: 99%