Threat Modeling and Countermeasures Study for the Internet of Things
Zhang Li, Tong Xin · Journal of Convergence Information Technology · 2013
There are a lot of security threats during the development of the Internet of Things and the issues are needed to be resolved in the system development process. Establishing a threat model after security threats analysis is an essential step to build a security system. A perfect designed threat model can help designers to identify security threats that exist in the system quickly and make decision timely to protect the data security and normal operation of the system. In this paper, first, we will give a security threat analysis for the perception layer, the transport layer and the application layer according to the actual situation that the system is facing such as the mass nodes manager and heterogeneous network integration and so on. Then we will show the threat modeling process focusing on the perception layer with the method of threat tree model. At last, we will give the final threat tree model and corresponding security countermeasures. This model can provide a theoretical basis for making the follow-up security measure study and finishing the risk assessment work.