Practical Internet of Things Security - Second Edition

Threat modeling an IoT system

A valuable reference for threat modeling can be found in Adam Shostack's book, Threat Modeling: Designing for Security.

Microsoft also defines a well-thought-out threat modeling approach, using multiple steps to determine the severity of threats introduced by a new system.

Note that threat modeling is the larger exercise of identifying threats and threat sources; attack modeling, described earlier, is attacker-focused and designed to show the nuances of how vulnerabilities may be exploited. The threat modeling process that we will follow in this example is illustrated in the following diagram:

To illustrate the ...