Is there any research on thingworx' security?
Yun, is there anything specific you are looking into? Since ThingWorx is a web application, in its base/ simple form, it will be as secure as your Tomcat is.
Yes, since I want to do some performance evaluation on thingworx so I will look into as many as aspects I can find. Do you have any other idea that I can measure on thingworx, numeric or theoretical?
We have a Security section at our Help Center that provides information, security-wise, related to ThingWorx. But as this is a web application hosted on a server, in theory, it will be as secure as your server/ Tomcat security configurations.