Threat Modeling with Mitre ATT&CK Framework Mapping for SD-IOT Security Assessment and Mitigations

The integration of software-defined network (SDN) and Internet of Things (IoT) networks offers solutions to IoT network issues. However, this integration also introduces new security challenges and increases the attack surface of IoT networks. Existing studies on the security of SD-IoT networks lack structure and real-world descriptions of attack vectors. To address these limitations, our paper proposes a formal methodology for evaluating SD-IoT framework security through threat modeling. Our approach classifies attack vectors using the STRIDE model, describes their Tactics, Techniques, and Procedures (TTPs) using the Mitre ATT&CK framework, and proposes countermeasures. We demonstrate the potential of our methodology by applying it to a use case of modeling security for Software-Defined Vehicle Networks (SDVNs) in intelligent transport systems (ITS). Our preliminary findings are very promising towards a formal methodology for evaluating SDIoT framework security, which could serve as a foundation for developing a new SD-IoT security standard.