STRIDE & DREAD security analysis

Structured methodology to IoT System Security Analysis using STRIDE method for threat identification as well as DREAD for threat severity rating.

Structured methodology to IoT System Security Analysis using STRIDE method for threat identification as well as DREAD for threat severity rating. Input: IoT System Architecture and Assets to protect. Outputs: List of identfied and rated security threats together with potential remedies to counterfeit them.

Structured approach avoids overlooking particular aspects

None

IOT system developers

NXP applied STRIDE and DREAD methodology towards IoT which was originally developed at Microsoft for IT systems. Methodology can be reused for other use cases.