Package InternetOfThings

R-Co

Finds a solo Controller.

R-CoPD

Finds a Controller and its control input data.

R-CoPDS

Finds a Controller with its stored control input data.

R-DcTh

Finds an IoT Thing and its control input Data.

R-DScSePD

Finds a Sensor with its onboard process and output data, and its stored copy of control input data.

R-HuiCo

Finds the control input for an IoT Controller, which is being used interactively by a Human.

R-HuiSe

Finds the control input and sensed output for an IoT Sensor, which is being used interactively by a Human, plus the interactive process that creates the output.

R-HuiThaS

Finds a Human that uses an IoT Thing and has access to a space.

R-HumThP

Finds a Human managing a Thing with an onboard process.

R-IoT

Finds a solo IoT Thing. Not used at present, but reserved for a future extension.

R-PaCo

Finds a client Process that amends an IoT Controller, along with its control input Data and onboard communication Process.

R-PcSe

Finds a client Process that alters control input to an IoT Sensor, along with its onboard simple communication Process and Data.

R-PpSe

Finds a client Process that polls an IoT Sensor, along with its onboard simple communication Process and Data.

R-PrSe

Finds a an IoT Sensor sending data to a Process, along with the onboard simple communication Process and Data.

R-PuCo

Finds a client Process that updates an IoT Controller, along with its control input Data and onboard communication Process.

R-PuSe

Finds a client Process that reads data from an IoT Sensor, along with its onboard simple communication Process and Data.

R-Se

Finds a solo Sensor.

R-SePD

Finds a Sensor with its onboard process and data.

R-SesD

Finds a Sensor and its sensed Data.

R-SHuTh

Finds a Human managing a Space in which a Thing is located.

MP-Co

Finds a Controller and optionally its human manager.

MP-Co-cD-cD

Finds a solo Controller that is bieng controlled by onboard control data.

MP-CoPD

Finds a Controller and its control input data, and optionally a human manager.

MP-CoPDS

Finds a Controller with its stored control input data.

MP-DcTh

Finds an IoT Thing and its control input Data.

MP-DScSePDmFF

Finds a Sensor with its onboard process and output data, and its stored copy of control input data, plus all flows of this data from the process (i.e., out of the sensor), all of which must be involved in the pattern.

MP-HuiCo

Finds the control input for an IoT Controller, which is being used interactively by a Human.

MP-HuiSe

Finds the control input and sensed output for an IoT Sensor, which is being used interactively by a Human, plus the interactive process that creates the output.

MP-HuiThaS-S

Finds a Human that has access to a space and uses an IoT Thing which has no specified location.

MP-HumThP-m

Finds a Human managing a Thing with an unmanaged onboard process.

MP-IoT-cD

Finds a solo IoT Thing that does not have onboard control data.

MP-Pa-uCo

Finds a client Process that amends (but does not update) an IoT Controller, along with its control input Data and onboard communication Process.

MP-PcSe

Finds a client Process that alters control input to an IoT Sensor, along with its onboard simple communication Process and Data.

MP-Pp-uSe

Finds a client Process that polls (but does not read) an IoT Sensor, along with its onboard simple communication Process and Data.

MP-PrSe

Finds a client Process that receives data from an IoT Sensor, along with its onboard simple communication Process and Data.

MP-PuCo

Finds a client Process that updates an IoT Controller, along with its control input Data and onboard communication Process.

MP-PuSe

Finds a client Process that reads data from an IoT Sensor, along with its onboard simple communication Process and Data.

MP-Se-cD-cD

Finds a Sensor with onboard control data controlling it.

MP-SePD

Finds a Sensor with its onboard process and data.

MP-SePDmFF

Finds a Sensor with its onboard process and data, plus all flows of this data from the process (i.e., out of the sensor), all of which must be involved in the pattern.

MP-SePDsFF

Finds a Sensor with its onboard process and data, plus all flows of this data from the process (i.e., out of the sensor), at least one of which must be involved in the pattern.

MP-SesD

Finds a Sensor and its sensed Data.

MP-Se-sD

Finds a Sensor that is not sensing data.

MP-Se-sD-sD

Finds a Sensor that is sensing sense data.

MP-SHuTh-Hu

Finds a Human managing a Space in which an unmanaged Thing is located.

CP-SHuTh-Hu+m

Makes the Human managing a Space the manager of any unmanaged IoT Thing within the Space.

CP-IoT-cD+cD

Finds each IoT device that does not have onboard control input data and adds the onboard control input data.

CP-DcTh+s

Finds an IoT Thing and its control input Data. Adds a link to specify that the Data is stored on the Thing.

CP-Se-sD+sD

Finds each IoT Sensor device that is not sensing data and adds the sensed output data.

CP-SesD+SP

Finds each IoT Sensor device and its sensed Data, and adds an onboard communication process that creates the Data.

CP-DcTh+DS

Finds each IoT Thing device and its control input Data, and adds an onboard communication process that serves the Data.

CP-Pa-uCo+Rel

Finds a client Process that amends an IoT Controller, and adds relationships between the client and the onboard communication Process and control input Data.

CP-PuCo+Rel

Finds a client Process that updates an IoT Controller, and adds relationships between the client and the onboard communication Process and Data.

CP-PcSe+Rel

Finds a client Process that alters control input to an IoT Sensor, along with its onboard simple communication Process and Data, and adds relationships between the client and the onboard simple communication Process and Data.

CP-PrSe+Rel

Finds an IoT Sensor sending data to a (not really client) Process, and adds a relationship between the onboard simple IoT communication Process and the client Process.

CP-Pp-uSe+Rel

Finds a client Process that polls (but does not read) an IoT Sensor to obtain data, and adds relationships between the client and the onboard simple communication Process and Data.

CP-PuSe+Rel

Finds a client Process that reads data from an IoT Sensor, and adds relationships between the client and the onboard simple communication Process and Data.

CP-HuiCo+UI

Finds the control input for an IoT Controller, which is being used interactively by a Human, and adds a user interface process, plus relationships of the Human to this process and to the input.

CP-HuiSe+Rel

Finds the control input and sensed output for an IoT Sensor, which is being used interactively by a Human, plus the interactive process that creates the output, and adds relationships of the Human to the process and data.

CP-HumThP-m+m

Finds a Human managing a Thing with an unmanaged onboard process, and makes the manager also manage the process.

Co.A.Co.6

Shutdown of physical process controlled by Controller: if IoT device Controller cannot get appropriate control inputs, it may be suspended to prevent loss of reliability, but this means shutting down the process it controls by physical means.

Co.C.CoPD.0

Data leakage at controller Controller: if the control input data for a controller leaks, it is modelled as a loss of confidentiality for the controller.

Co.E.Co-cD-cD.9

Actuator Controller is being controlled by inferred general data: Actuator Controller is being controlled by inferred general data, is this ok to you? If not then add the desired data type and the controlsThing relationship between the actuator and it.

Co.M.CoPDS.0

Loss of control due to compromised input at controller Controller: if the onboard data received by the onboard control process at a controller is not authentic, the attacker can assume control, which is represented as loss of control over the controller.

Co.U.Co.0

Loss of reliability due to unavailable controller Controller: if controller Controller is unable to run processes, the associated physical process will continue in an uncontrolled fashion, making it unreliable.

Co.U.CoPDS.0.1

Loss of control process reliability at Controller: if the onboard control input at a controller is faulty or corrupt, it means the controller will not be reliable.

Co.U.CoPDS.0.2

Loss of reliability due to out of date input at Controller: if the onboard data at a controller is out of date, it means the controller will not be reliable unless it does not require real-time updates to operate safely.

DF.A.DScSePDmFF.3

Malicious control of Sensor prevents generation of sensed output Data: if an attacker can tamper with the stored control inputs to sensor Sensor, they may be able to prevent measurement of the environment by Sensor.

DF.Auth.DScSePDmFF.3

Malicious control of Sensor alters generation of sensed output Data: if an attacker can tamper with the stored control inputs to sensor Sensor, they may be able to alter measurement of the environment by Sensor so as to deceive recipients of the data.

DF.I.DScSePDmFF.0.1

Corrupt control input causes loss of integrity in output Data from Sensor: if the control input to Sensor is faulty or corrupt, then measurement of the environment by Sensor will be affected, leading to faulty or corrupt sensor output Data.

DF.I.DScSePDmFF.0.2

Out of date control input causes loss of integrity in output Data from Sensor: if the control input to Sensor is out of date, and Sensor depends on real-time updating of this input, then measurement of the environment by Sensor will be affected, leading to faulty or corrupt sensor output Data.

Se.A.SePDmFF.0

Loss of availability at sensor Sensor: if the onboard data from a sensor is not available to any client, it is modelled as a loss of availability at the sensor.

Se.Auth.SePDsFF.0

Loss of authenticity at sensor Sensor: if the onboard data received from a sensor by any client is altered by an attacker, it is modelled as a loss of authenticity at the sensor.

Se.C.SePD.0

Data leakage at sensor Sensor: if the onboard data at a sensor leaks, it is modelled as a loss of confidentiality at the sensor.

Se.E.Se-cD-cD.9

Sensor Sensor is being controlled by inferred general data: Sensor Sensor is being controlled by inferred general data, is this ok to you? If not then add the desired data type and the controlsThing relationship between the sensor and it.

Se.E.Se-sD-sD.9

Sensor Sensor is sensing inferred general data: Sensor Sensor is sensing inferred general data, is this ok to you? If not then add the desired data type and the senses relationship between the sensor and it.

Se.I.SePDsFF.0

Loss of integrity at sensor Sensor: if the onboard data received from a sensor by any client is corrupt, it is modelled as a loss of integrity at the sensor.

Se.T.SePDsFF.0

Loss of timeliness at sensor Sensor: if the onboard data received from a sensor by any client is out of date, it is modelled as a loss of timeliness at the sensor.

PhysicalShutdown

Signifies that the physical process controlled by the Controller has been halted by physical means.

CSG-NonRealtimeSensor	The IoT device *Sensor* implements a process for measurement of a physical system where it is not necessary to get real-time updates to control input data, due to the nature of the application. This control strategy does not represent a contingency plan but indicates that the application is not sensitive to interruptions in control inputs.
CSG-SafeIoTController	The IoT controller device *Controller* is regulating a physical system where it is not necessary to get real-time updates to control input data, due to the nature of the IoT application. This control strategy does not represent a contingency plan to constrain *Controller* at run-time, but should be used to signal that the IoT application is not sensitive to temporary interruption in the flow of control inputs.
CSG-SafeIoTControlMode	The IoT controller device *Controller* can be set to operate within safety limits such that it poses no danger to the physical system it regulates, even without real-time control inputs. This strategy represents a contingency plan, which can be used to reduce risk from some threats. However, it may trigger other threats, or produce some loss of efficiency or function in the physical system.
CSG-SafeIoTControlMode-Implementation-Runtime	The IoT controller device *Controller* has been set to operate within safety limits in response to an interruption in real-time control inputs, such that it poses no danger to the physical system it regulates. This strategy represents activation of a contingency plan at runtime, and can be selected to discover what effect this would have on risk levels, allowing this to be used for decision support calculations. To activate it at runtime, signal user *HostManager* who is responsible for managing the device. The Safe IoT Controller control shoud be deselected only when the restrictions on *Controller* have been lifted.
CSG-SuspendUnreliableController	The IoT controller device *Controller* can be disabled if it becomes unreliable, to prevent it causing problems in the physical environment where it operates. This strategy represents a contingency plan, which can be used to reduce risk from some threats. However, it will trigger threats representing the resulting loss of availability.
CSG-SuspendUnreliableController-Implementation-Runtime	The IoT controller device *Controller* has been disabled when it becomes unreliable, to prevent it causing problems in the physical environment where it operates. This strategy represents activation of a contingency plan at runtime, and can be selected to discover what effect this would have on risk levels, allowing this to be used for decision support calculations. To activate it at runtime, signal user *HostManager* who is responsible for managing the device. The Disabled Host control should be deselected only when the host has been restarted.
CSG-SuspendUnreliableController-Trigger	This strategy represents a state in which IoT controller device *Controller* is suspended due to using a contingency plan. It is used as a trigger for threats representing side effects, and should not be used for any other purpose.

SafeControlMode	This control applied at an IoT Controller signifies that the Controller is (temporarily) operating in a way that is safe without receiving real time control inputs.
SafeControlSetting	This control applied at an IoT Controller signifies that the Controller is capable of operating in a way that is safe without receiving real time control inputs.
SafeIoTController	This control applied at an IoT Thing signifies that real-time updating of control inputs is not necessary for operation of the Thing.
SafetyTraining	This control indicates that a Human has been given safety training so they are able to manage risks in the physical world by preventing physical consequences of problems in the IT domain.
SuspendUnreliableController	The controller may be temporarily taken out of service to prevent unreliable behaviour that may threaten safety in the physical environment where it operates.

Role_Controller	An IoT Thing acting as a controller.
Role_Sensor	An IoT Thing acting as a sensor.
Role_Thing	An IoT Thing.

ControlData	Data used to control the physical actuator hardware in an IoT device.
Controller	A Thing that is able to affect aspects of the physical environment in ways defined by data sent to it. A Controller has no console allowing login, but it may have an interface allowing some interaction with a human user.
ControlProcess	A simple process that runs on a controller and handles conversion of input data into control signals for robotic or other interaction with the real (physical) world.
IoTProcess	Base class for inferred onboard sensor acquisition and control processes running on an IoT Thing.
SensedData	Data sensed by the physical sensor hardware in an IoT device.
Sensor	A Thing that can sense its physical environment and produce data describing aspects of that environment including the device user. A sensor has no console allowing login, but it may have an interface allowing some interaction with a human user.
SensorProcess	A simple process that runs on a sensor and handles the acquisition and sending of data from the real (physical) world.
Thing	A device with onboard processing able to interact with the physical world.

(empty)