Testing the cybersecurity of Internet-connected devices for vulnerability to unauthorized access, use, modification, misdirection, or disruption