Assessing Risk in IoT Devices