Threat Modelling with the GDPR towards a Security and Privacy Metrics Framework for IoT Smart-farm Application

This paper considers a balance between privacy and security provisions for IoT devices constrained by processing ability, energy consumption, and storage. Risk-driven testing is invoked in conjunction with the seven GDPR principles towards a metrics framework suitable for such an energy-conscious network within the domain of IoT-oriented smart-farms. The resulting metrics framework demonstrates how the influence of privacy can minimise processing requirements, whilst threat modeling assures security. The research concludes that several redundant security provisions can be replaced with privacy alternatives that improve energy efficiency.