IoT Penetration Testing Cookbook

Step 4: Rating the threats

Using the following table, we will choose one threat and find out its risk rating:

Threat risk rating: Attacker could access to the DVR network from a long-range distance
Item	Score
Damage potential	3
Reproducibility	2
Exploitability	3
Affected users	1
Discoverability	3
Risk rating score: High	12

Wireless threats within the DVR environment can be rather simple using common wireless man-in-the-middle techniques. Other threats such as adding fake IP cameras may be a bit more difficult and not worth the time for an attacker looking to make a bigger impact.