ABSTRACT

This chapter discusses security principles and the security engineer mindset to guide the security architecture process in making trade-offs and prioritizing decisions. Security architecture is similar but focuses on technological solutions to ensure that the goals or mission of the system are maintained even in the presence of an adversary attempting to subvert that mission. Security architecture leverages the work of system architecture by reusing its many different views of the system. The chapter presents some security analysis examples of Internet of Things (IoT) use cases that explore IoT unique security challenges and solutions. Good systems architecture creates different diagrams that communicate different perspectives of the system. Threat modeling, or threat analysis, is a technical exercise used to identify all the potential weaknesses in a system. Threat modeling does not attempt to correct the problems but instead only lists the potential problems that exist.