Threat Modelling and Vulnerability Assessment for IoT Solutions: A Case Study

This replication package accompanies the paper titled "Threat Modelling and Vulnerability Assessment for IoT Solutions: A Case Study", which investigates how industry practitioners perform threat modelling and vulnerability assessment in real-world IoT software development. Through a case study in collaboration with an IoT-focused company, the paper explores how security practices such as threat identification and vulnerability testing are integrated into the development lifecycle. The study combines semi-structured interviews with artefact analysis to identify common security challenges and practices. Key contributions include a thematic map of findings, tool recommendations, and guidelines for improving security practices in IoT development. Contents of the Replication Package This package contains the protocols and outputs from the interview study and artefact analysis that support the findings presented in the paper.