Method and system for security assessment of IoT devices

A method for security assessment of a plurality of IoT devices through a computerized system, wherein the security assessment comprises a vulnerability assessment and is carried out without installing any software and any hardware on the IoT devices for the purpose of vulnerability assessment, wherein the computerized system performs the following steps:

• at least wireless communication medium is selected to be used for the vulnerability assessment and at least one communication protocol is determined to be used for the vulnerability assessment, then
• at least one vulnerability scan tool is selected based on said selected wireless communication medium and said determined at least one communication protocol, then
• said selected at least one vulnerability scan tool is executed on at least some of the one IoT devices, and then
• vulnerability data from said executed at least one vulnerability scan tool are collected and preferably stored in a vulnerability result database;
• wherein the computerized system performs a scan of a predetermined frequency bandwidth in order to identify IoT devices to be vulnerability assessed and at least one communication protocol to be used for the vulnerability assessment;
• wherein execution of a vulnerability scan tool comprises performing an attempt of communication with an IoT device and recording a reaction of the IoT device to the attempt of communication, and vulnerability data are obtained from said reaction.