IoT Security-Quality-Metrics Method and Its Conformity with Emerging Guidelines

Round 1

Reviewer 1 Report

In this paper, a security-quality-metric method adapted for IoT is proposed. The proposed method is evaluated for compliance with relevant cyber security regulations and IoT guidelines.
The paper's subject is quite exciting and approaches the security of IoT devices from a different perspective. The proposed method can help mitigate the security challenges of IoT devices. In addition, it can contribute to establishing a standard among manufacturers in terms of security
quality during the production of IoT devices. However, the deficiencies noted in the paper are listed below.

 The paper is quite challenging to understand. Some sentences are pretty long and complex—for example, the first sentence in paragraph eight of section one.
 The organization of the paper is complex, and the language is heavy. What is described in the paper, it isn't easy to follow the terms and relate them to each other. For example, what are the items mentioned in the section “4.2. Requirements of IoT Security Quality”? What is the relation between these items and the model given in “Figure 2”? For the paper to be more fluent and clear, the organization and writing language need to be revised.
 There are punctuation errors in some parts of the paper. For example, in the section “4.2. Requirements of IoT Security Quality”, there is no dot at the end of the second paragraph.
 Figures 3, 4, and 5 are difficult to understand. It is not clear how the percentages in the figures are determined or how they are calculated. What does it mean if the percentage values are low or high? It should be clearly stated.

Recent and important references are forgotten. For instance, doi: 10.1007/s10586-021-03380-7

The paper is interesting. I believe that research community needs this kind of survey papers.

Author Response

Please see the attachment.

Author Response File: Author Response.doc

Reviewer 2 Report

The submitted paper is very well written and well organized. It can be seen that various and extensive studies have been conducted. The Question and Metrics for the five areas presented in Appendix A seem reasonable and practical. It would be nice if authors could show an example of applying the proposed method to one specific IOT application.

Author Response

Please see the attachment.

Author Response File: Author Response.doc

Round 2

Reviewer 1 Report

The authors have addressed my comments. It can be accepted after a spell checking.

Author Response

Please see the attachment.

Author Response File: Author Response.doc