A Modeling Language for Security Threats of IoT Systems

International audienceWe propose a security-based modeling language for IoT systems with two important features: vulnerabilities are explicitly represented and interactions are allowed or denied based on the information stored on the IoT devices. An IoT system is transformed in BIP, a component-based modeling language, in which can execute the system and perform security analysis. As proof-of-concept for our approach we model an attack on the Amazon Smart-Key system