Vulnerability and Threat Assessment Framework for Internet of Things Systems

Abstract

The introduction of IoT technology in different domains and systems has led to a spectacular increase in the number of connected objects. However, this increase in resourceconstrained devices was accompanied by numerous vulnerabilities, allowing attackers to penetrate deeply into IoT networks. As identifying these vulnerabilities is a difficult task, our work aims to propose a general threat and vulnerability assessment method, taking into consideration the IoT constraints to identify and assess the vulnerabilities and possible attacks on IoT networks. This method uses several existing databases but focuses on entries relevant to IoT components. We validate our approach using an IoT smart healthcare system as a case study. The suggested approach has produced an applicable methodology to provide a tool for users, vendors, and researchers to be aware of vulnerabilities and possible attacks on an IoT system.

Detection of Vulnerabilities in Smart Buildings Using the Shodan Tool

“…Vulnerability and threat are two terms that will be cited a number of times in this section. Therefore, it is important to be aware of the difference between the two and to avoid interchanging and confusion between vulnerability, threat, and risk [1]:…”