Threat models for vulnerability analysis of IoT devices for manipulation of demand attacks

Abstract

The development of Internet of Things technologies has brought, along with new opportunities, new types of risks to the table. This is exemplified by attacks like the distributed denial of service from the botnet Mirai. One of those risks comes from grid-connected high power devices. In this attack scenario, an attacker could gather a significant amount of smart devices to cause an noticeable impact on the power infrastructure. The goal of this paper is to define threat models, to help carry out vulnerability assessment on devices relevant to this attack scenario. This paper contains the development of said model for air conditioning, electric vehicle charging posts, and photovoltaic systems.