  The Internet of Things is a paradigm that refers to the ubiquitous presence
around us of physical objects equipped with sensing, networking, and processing
capabilities that allow them to cooperate with their environment to reach
common goals. However, any threat affecting the availability of IoT
applications can be crucial financially and for the safety of the physical
integrity of users. This feature calls for IoT applications that remain
operational and efficiently handle possible threats. However, designing an IoT
application that can handle threats is challenging for stakeholders due to the
high susceptibility to threats of IoT applications and the lack of modeling
mechanisms that contemplate resilience as a first-class representation. In this
paper, an architectural Design Decision Model for Resilient IoT applications is
presented to reduce the difficulty of stakeholders in designing resilient IoT
applications. Our approach is illustrated and demonstrates the value through
the modeling of a case.
