Practical Internet of Things Security - Second Edition

Threats

It is important to distinguish between a threat and threat source (or threat actor). Each threat has a threat actor. For example, in the case of a burglar invading your home, it is tempting to consider the burglar as the actual threat, but it is more accurate and useful to consider them the threat source (or actor). They are the actor, who may attack your house for a variety of malicious purposes, most notably their self-serving desire to separate you from your valued assets. In this context, the threat is actually the potential for the burglary to be performed, or more generally represents the exploit potential.

Threats may therefore come in a variety of types, both natural and man-made. Tornados, floods, and hurricanes can be considered ...