Patent attributes
Techniques for dynamically generating a trust level for an IoT device are described. A plurality of characteristics for a first device of a first device type are analyzed against a set of expected characteristics of the first device type. Embodiments monitor runtime behavior of the first device over a window of time to collect runtime behavior data and analyze the runtime behavior data for the first device to determine whether the device is operating in a manner consistent with the first device type. Upon determining that the analyzed plurality of characteristics is consistent with the set of expected characteristics and that the first device is operating in a manner consistent with the first device type, embodiments generate a security profile for the first device designating the first device as a trusted device.