Textdokument
The PASTA threat model implementation in the IoT development life cycle
Vorschaubild nicht verfügbar
Volltext URI
Dokumententyp
Dateien
Datum
2021
Zeitschriftentitel
ISSN der Zeitschrift
Bandtitel
Quelle
INFORMATIK 2020
Workshop on Tools and Concepts for Communication and Networked Systems
Verlag
Gesellschaft für Informatik, Bonn
Zusammenfassung
Recently, IoT usage has grown rapidly. Security risks are rising analogously, though. Our paper introduces an approach to identify and address security threats by applying the PASTA (Process for Attack Simulation and Threat Analysis) threat model to the IoT domain. By adapting PASTA, we optimize the threat analysis based on domain knowledge and specific needs of IoT. With integration of the PASTA results into the development process and the IoT software development life cycle, we reduce security risks. A prototype demonstrates the feasibility of the concept for security vulnerability reduction via an integrated DevSecOps toolchain.