Method and System for security assessment of IoT devices

[0020]The following detailed description deals primarily with the vulnerability assessment; but this is not to be construed in a limitative manner as, for the purpose of the disclosure, vulnerability and “penetration tests” are similar as they may be carried out in a similar way (see afterwards). “Penetration test” is dealt with at the end of the following detailed description as an extension of what has been described before.

[0021]FIG. 1 illustrates a block diagram of an example of a system 100 according to the disclosure.

[0022]In this FIGURE, there is shown a set of IoT devices 200 that for exemplary purposes are four devices labelled 210, 220, 230 and 240; for example, device 210 is adapted for wired communication only (through e.g. a RS 485 cable), device 220 is adapted both for wired communication (through e.g. an Ethernet cable) and wireless communication, devices 230 and 240 are adapted both for wireless communication only. These devices are vulnerable due to their ability of wi