IoT Device Hijack (Attack Tree)
Paths to take control of an IoT device.
Make it your own.
title "Hijack an IoT device"
goal G "Control the device"
OR G1 "Default credentials" parent G
OR G2 "Firmware flaw" parent G
AND G3 "Network access" parent G
leaf L1 "Try admin/admin" parent G1 cost 0 skill low detect low
leaf L2 "Brute force PIN" parent G1 cost 1 skill low detect medium
leaf L3 "Exploit unsigned update" parent G2 cost 4 skill high detect medium
leaf L4 "Buffer overflow" parent G2 cost 4 skill high detect high
leaf L5 "Join the LAN" parent G3 cost 2 skill medium detect medium