Triple-S: Security Scoring System for loT Devices

The market for the Internet of Things (loT) is growing continuously. Along with the rise of the loT, countless forms of security issues have emerged. Those are partially facilitated by the limited resources of loT devices, time-to-market pressures, as well as the diverse application domains of the loT. Therefore, it is crucial to correctly assess the security risks of such devices in order to deduce proper measures. However, the loT still lacks proficient scoring systems for comprehensive security rating of loT devices. To accommodate this lack of solutions, we introduce a novel scoring system termed Security Scoring System for loT Devices (Triple-S) that builds upon state-of-the-art solutions but overcomes their limitations. Triple-S rates the security of loT devices based on all available risks that are either inherent to the device or induced by their operational context. Our evaluation results confirm that Triple-S is a beneficial solution that closes this gap in loT security.