Data for: A threat modelling approach to enhance the security of Internet of Things devices - Tool Performance Study

This dataset is part of the PhD thesis "A Threat Modelling Approach to Enhance the Security of Internet of Things Devices". Among others, a new modelling technique, called Cyber-Physical Data Flow Diagram (CPDFD), as well as a new software program, called TTModeler, were developed as part of the PhD thesis.

The dataset contains the results of the Tool Performance Study (TPS), which had the objectives of comparing both different modelling techniques and software programs. Participants of the study were asked to create a threat model and identify attack scenarios on a given Internet of Things (IoT) device with the help of a given tool. The aim of this study was to investigate the influence of the used modelling technique or tool on efficiency and usability. The comparison focussed on quantity, i.e. the absolute number of identified attack scenarios, and quality, i.e. the information value. Each participant was assigned to one of the following groups: TTModeler (DFD), TTModeler (CPDFD), OWASP Threat Dragon. The first two groups can be used to analyse the influence of the modelling technique, while the last two groups can be used to analyse the influence of the software tool. In total, 41 students of informatics-related study programmes participated in this study. The provided dataset summarises the results of all participants. A summary of the threat model and the questionnaire was compiled for each participant separately. The threat models and the attack scenarios they contain can be analysed in terms of quantity, quality, influence on security or privacy, and the context in the model. Note that most documents produced are in German, as the study was conducted at a German university.

This dataset and the accompanying thesis are currently embargoed.