Anatomy of threat modeling an IoT device

In 2016, we witnessed mass exploitation of IoT devices that consisted of IP cameras and digital video recorders (DVRs) that contributed to the world's largest distributed denial of service (DDoS) ever recorded. This DDoS was possible due to vendor negligence that could have been prevented by basic threat model exercises. Considering the prevalence of these types of devices on the internet and the risk they pose to the internet, we will conduct a threat modeling exercise and walk through the threat modeling process for a connected DVR IP camera security system. These connected security systems can be purchased by consumers or small/medium size businesses via e-commerce sites as well as through a number of electronic stores for a fairly low price. Connected DVRs are a good example of an IoT system because they contain a number of entry...