Cross-Site Request Forgeries

FAST is your Friendly Assessment of Security and Threats

FAST is a revolutionary automatic threat modeling.

We designed FAST to simplify the lives of developers and product manufacturers when doing security-by-design.

FAST relies on a simple survey to perform an automatic threat modeling and elaborate a list of security measures adapted to your use-case.

This free tool demonstrates FAST for IoT security. FAST premium is an advanced version.

FAST premium is available to cetome clients. It is a fully customizable tool that supports much more options. You want to receive access to FAST premium? Contact us!

FAST is provided with no guarantee. FAST does not retain any data.

IoT Product Description

For each of the questions below, please pick one answer. If your product has a multiple usages, please choose the last answer.

Who will use the IoT product? *

Individual users (wearable, smart home) A limited group of users (smart building, enterprise) A large group of unrelated users (smart city, train station)

Where will this IoT product be installed? *

Wearable device Indoors Outdoors

Development process

Is the development process externalized to a third-party?
For example: white-label device, external development team.

Does the product use open source libraries?
Please select "Yes" if you don't know.

Who will install the product? *

The user A trained person (installer, technician, engineer)

How long is the support period planned for? *

Note: this usually goes until the end-of-life of the product

Ecosystem and Data

Describe your product ecosystem and data collection. You can leave options unselected where necessary.

Applications and Services

Is there a mobile application?

Is there a Cloud system?

Is there a web interface?

This is generally used for administration purposes

The device has a web server

The web interface is in the Cloud

Does the product collect personal data?

Personal data is collected. It stored in the device. Personal data is collected. It is stored in a Mobile App or in the Cloud

Does the product collect telematics or usage data?

Telematics is collected and stored in the device Telematics is collected and sent to the manufacturer or a third-party

Device Usage and Functionalities

Describe the functionnalities of your product. Only select answers when the functionality is present.

How powerful is the device? *

Not very powerful: it can only support a few functions
For example, a sensor. It may require code optimization
For example: a micro-controller, a light bulb. It can support multiple functions, frameworks, libraries...
For example, a Raspberry Pi, a camera, a TV.

Sensors and Actuators

The device contains sensors.
For example, the device can measure the room temperature.

The device can perform actions on the physical world.
For example, the device turns the heating on remotely.

Connectivity

Is the product permanently connected to a network?
This could be a local network or the Internet.

Can the device act as gateway to provide network access to other devices?
For example, the device is an IoT Hub.

Can the user access the device from the Internet?
For example, via an app, a mobile application, a web interface.

How is firmware updated?

Remotely / Over-the-air (direct update from the device) Locally (via mobile app, USB, etc.)

Are physical interfaces accessible to the user?

Outside the case (e.g. USB port, Ethernet port) Inside the case (e.g. JTAG)