MITRE CWE (Common Weakness Enumeration) here
MITRE CAPEC (Common Attack Pattern Enumeration and Classification) here
Attack Defense Tree
SAG
Survey on different models
Enisa recommendations, guides
WP2018 O.1.3.1 IoT standards
WP2018 O-1-1-1 1 Good practices for security of IoT
Certification ?
white_paper_ARMOUR-IoT-Certification