Multi-dimensional Security Risk Assessment Model Based on Three Elements in the IoT System

摘要

In order to manage and control the risk of the Internet of things (IoT) system, we first propose a multi-dimensional security risk assessment model based on three elements, which evaluates the security risk from different dimensions of assets, threats and vulnerabilities. Secondly, we design the mathematical assessment model for computing risk value of IoT system and establish the mapping relationship table that the risk value is transformed into risk level. Thirdly, according to the risk level of a certain dimension of the IoT system, defenders can decide to implement the risk plan and execute the risk management until the risk level was reduced. Finally,the real data of IoT company is used to evaluate the risk level of IoT system. The research results show that the method can obtain the risk values of all measurement dimensions, which further verifies the effectiveness and practicability of the method.