CYBERSECURITY ON IOT SYSTEMS BASED MULTI-LAYERED SECURITY RISK ASSESSMENT

IoT systems contribute to digital transformation through the development of smart concepts. However, the IoT has also generated new security challenges that require security tools to be adapted, such as risk analysis methodologies. Many organizations use a variety of methods and frameworks to assess cybersecurity risks. However, most current risk assessment methods are for generic software systems, so there is no holistic approach to risk assessment for IoT technologies, especially due to the diversity of IoT systems The purpose of our study is based on the following question: What IoT device factors should be considered in cybersecurity risk assessment methods? In this study we first propose a cybersecurity risk assessment model based on vectors such as vulnerabilities and attacks, which evaluates the security risk from different dimensions of physical layer, network layer and application layer. Secondly, we design the mathematical assessment model for computing risk value of IoT system and then establish the mapping relationship table that the risk value is transformed into risk level.