AN ATTACK: I.E., A THREAT ACTION Attacker i.e., a threat agent COUNTER MEASURE Passive A SYSTEM RESOURCE: TARGET OF THE ATTACK Vulnerability or active attack Threat consequences Figure 5: Threats, Vulnerabilities and Attacks (Source: IETF) such large-scale cyber-attacks can cascade into national and international security threats. Finally, for all types of IoT devices, the potential loss of confidential information via the device, its communication infrastructure, or its backend servers remains a significant threat. Table 1 briefly discusses some of the threats and vulnerabilities facing IoT that are most commonly cited by sources such as IRTF47, OWASP48 and others 49,50, as a prerequisite to discussing IoT security challenges. 47 State-of-the-Art and Challenges for the Internet of Things Security, IRTF T2T Research Group, https://datatracker.ietf.org/doc/ draft-irtf-t2trg-iot-seccons/?include_text=1 48 OWASP IoT Project, https://www.owasp.org/index.php/OWASP_Internet_of_Things_Project 49 Practical Internet of Things Security, Brian Russell, from p257, 2016. 50 https://www.enisa.europa.eu/publications/baseline-security-recommendations-for-iot 21