Threat modeling is well established in the software engineering field to show potential IT vulnerabilities of an artefact and to make conscious decisions about them. While this approach is applicable to the software-side of IoT devices, established frameworks like STRIDE lack explicit support for hardware components. The goal of this work is to show where in the design process threat modeling can be established based on existing documentation and how the communication with software engineering could work. This will be done in a way that maximizes compatibility to existing frameworks from the field of software engineering.
Threat Modeling based on hardware
The full text is currently only available in the Deutsch version. A translation will follow. Go to the Deutsch version
Archived. This content is no longer updated. It remains available for reference. Go to the archive
- Version
- 2019-05-23
- Source
- https://technology2.a-sit.at/en/publications/threat-modeling-based-on-hardware/