CitySmart is a threat-analysis template for IoT Cloud backends that are built on platforms like AWS. Adapt and customize this template to perform threat analysis for any IoT Cloud apps that your organization is building or deploying.
 
CitySmart  focuses on the smart city use case, and the information also applies to other IoT cloud use cases.
 
This template uses the ATASM (attack-based) threat modeling approach. ATASM stands for Architecture >> Threat Agents >> Attack Surfaces >> Mitigations.
 
Yep! we cover all those in great detail in this template. The template includes:  
Architecture analysis (3 IoT cloud architecture views)
Attacker goal and capability profiling
Attack entry point enumeration
Asset discovery.
Attack techniques and attacker's objective with each system component.
Risk analysis
Mitigating attacks.
 
Questions? Please contact team@resilientsoftwaresecurity.com.