## 6 STRIDE and LINDDUN Analysis of Threats in the Smart Home Domain
### Scenario \(\alpha\) (Communication with the Internet)
#### 6.1.2 Scenario a: LINDDUN
\begin{table}
\begin{tabular}{|l|l|l|l|l|} \hline  & \multicolumn{2}{|c|}{**Spoofing**} & \multicolumn{2}{|c|}{**Tampering**} \\ \hline Smart Home Device (SHD) & \multirow{2}{*}{**DWA**} & \multirow{2}{*}{**SSC**, XNE(ES\(\Rightarrow\)SHD)} & MFU & SSEC, XNE(ES\(\Rightarrow\)SHD) \\ \cline{1-1} \cline{3-5}  & & & RCD & UIRC, USC, RCE \\ \hline Essential Server (ES) & \multirow{2}{*}{**SWA**} & DRC, DBC, XNE(SHD\(\Rightarrow\)ES) & \multirow{2}{*}{**Reputation**} & \multirow{2}{*}{**Information Disclosure**} \\ \cline{3-5}  & & & & \\ \cline{3-5} Smart Home Device (SHD) & \multirow{2}{*}{**SDS**} & DILIL, SMU & EPI & UIRC, USC, RCE \\ \cline{3-5} Essential Server (ES) & \multirow{2}{*}{**SDS**} & SCD(ES) & DBO(ES) \\ \cline{3-5} Unessential Server (US) & \multirow{2}{*}{**SCD(US)**} & DBO(US) & \multirow{2}{*}{**ENESHID\(\Rightarrow\)ES**} \\ \cline{3-5} StID \(\Rightarrow\) ES & \multirow{2}{*}{**SDS(SHD\(\Rightarrow\)US)**} & \multirow{2}{*}{**ENESHID\(\Rightarrow\)US**} \\ \cline{3-5} StID \(\rightarrow\) US & \multirow{2}{*}{**Denial of Service**} & \multirow{2}{*}{**Elevation of Priviedge**} \\ \hline Smart Home Device (SHD) & \multirow{2}{*}{**DNA**} & \multirow{2}{*}{**DOSSHD**} & \multirow{2}{*}{**DNE(ES\(\Rightarrow\)SHD)} \\ \cline{3-5}  & DLE & DNE(SHD\(\Rightarrow\)ES)\(\Rightarrow\)for DLE, WDA & \\ \hline Essential Server (ES) & \multirow{2}{*}{**SNA**} & DOS(ES), \multirow{2}{*}{**DNLE(SHD\(\Rightarrow\)ES)**} & IDC & ARCE(ES), ASC(ES) \\ \cline{3-5}  & & WDA & & \\ \hline Unessential Server (US) & \multirow{2}{*}{**Threat Impacts**} & \multirow{2}{*}{**DLF**} & \multirow{2}{*}{**The Smart Home Device boies its functionality (totally or partially)} \\ \cline{3-5}
**DNA** & The Smart Home Device obtains wrong or no information and therefore does not carry out an action (e.g., unlocking the door or raising an alarm) \\ \cline{3-5}
**DWA** & The Smart Home Device obtains wrong information and in turn makes wrong actions (e.g., unlocking the door or raising an alarm) \\ \cline{3-5}
**EPI** & Attacker extracts private information from the device \\ \cline{3-5}
**IDC** & Attacker obtains control over the Smart Home Device indirectly by controlling an entity that already has control over it \\ \cline{3-5}
**MFU** & A malicious firmware update is sent to the Smart Home Device \\ \cline{3-5}
**NRO** & Not relevant on its own but may lead to other threats \\ \cline{3-5}
**SCD** & Depending on the data collected by the server, e.g., not critical (logs) or critical, once revealing private information or video material \\ \cline{3-5}
**RCD** & Attacker runs commands on the device to damage it or turn it into a bot \\ \cline{3-5}
**SNA** & The server obtains wrong or no information and therefore does not carry out an action (e.g., buying something or calling the fire department) \\ \cline{3-5}
**SDR** & Server denies the receipt of a message (which would have triggered actions like e.g., buying something or calling the fire department) \\ \cline{3-5}
**SDS** & Server denies the sending of a message (which might have triggered actions like unlocking the door or raising an alarm) \\ \cline{3-5}
**SWA** & The server obtains wrong information and in turn makes wrong actions (e.g., buying something or calling the fire department) \\ \cline{3-5}
**ARC** & Attacker logs into the server with randomly guessed admin credentials \\ \cline{3-5}
**ASC** & Attacker logs into the server with stolen admin credentials \\ \cline{3-5}
**DBO** & Database stores information open (i.e., accessible from outside and not protected or only weakly protected) \\ \cline{3-5}
**DIL** & There is no or no sufficient logging of messages or acknowledgements from others on the device or in the network. \\ \hline \end{tabular}
\end{table} 
Table 3: STRIDE table for Scenario \(\alpha\) (internet connectivity) showing the influence of filtering. Rating the possible improvement through the usage of filtering: no/only low (grey), some (red), medium (yellow) and high (green).