The Internet of things (IoT) has become an integral part of our life at both work and home. However, these IoT devices are prone to vulnerability exploits due to their low cost, low resources, the diversity of vendors, and proprietary firmware. Moreover, short range communication protocols (e.g., Bluetooth or ZigBee) open additional opportunities for the lateral movement of an attacker within an organization. Thus, the type and location of IoT devices may significantly change the level of network security of the organizational network. In this paper, we quantify the level of network security based on an augmented attack graph analysis that accounts for the physical location of IoT devices and their communication capabilities. We use the depth-first branch and bound (DFBnB) heuristic search algorithm to solve two optimization problems: Full Deployment with Minimal Risk (FDMR) and Maximal Utility without Risk Deterioration (MURD). An admissible heuristic is proposed to accelerate the search. The proposed method is evaluated using a real network with simulated deployment of IoT devices. The results demonstrate (1) the contribution of the augmented attack graphs to quantifying the impact of IoT devices deployed within the organization on security, and (2) the effectiveness of the optimized IoT deployment. CCS CONCEPTS• Security and privacy → Distributed systems security; Mobile and wireless security.

No abstract

No abstract

The current research integrates, for the first-time, the relatively new and rapidly evolving disciplines of QMS, SoS, Globalization and Systems approaches such as Systems Thinking, by defining a novel field of research concerning G-QMS in global SoS organizations. This is an exploratory study which uses the Grounded Theory combined with an analytical review and professional experience to provide a framework for identifying new key variables in the multidimensional environment of global management. The purpose of this study is the creation a theoretical foundation for this field of research, and introduce logical deductions regarding G-QMS in global SoS organizations that can be used as foundational principles for a definition and model of G-QMS. Methodology: The study paradigm combines analytical review, which integrates the four main disciplines, and a structured qualitative study based on semi-structured interviews, and used Grounded Theory. Results and conclusions: The findings show that G-QMS is a necessary condition for these organizations, while the management of G-QMS is inseparable from the management of the SoS. The final results reveal 18 aspects to be considered in any definition determined for G-QMS in global SoS organizations, and any model to be developed. From these, 8 base anchors for the model were analyzed and mapped, as well as its main factors. Each of these base anchors makes its own contribution to any further development in this area. However, considering them all together creates an initial model of G-QMS in global SoS organizations.

The present study is innovative in its integration of several novel and quickly developing disciplines of QMS, SoS, Globalization and Systems approaches including Systems Thinking. We inaugurate G-QMS in global SoS organizations as a new field of research. This is an exploratory study that uses the Grounded Theory combined with an analytical review and professional experience to provide a framework for identifying of new key variables in the multidimensional environment of global management. The purpose of this study is to create a theoretical foundation for this field, and introduce logical deductions regarding G-QMS in global SoS organizations that can be used as foundational principles for defining and modeling of G-QMS. The methodology of the study includes a paradigm that combines analytical review, which integrates the four main disciplines into a structured qualitative study based on semi-structured interviews, and used Grounded Theory. The findings show that G-QMS is a necessary condition for these organizations, while the management of G-QMS is inseparable from the management of the SoS. The final results reveal 18 aspects to be considered in any definition determined for G-QMS in global SoS organizations, and any model to be developed. From these, 8 base anchors for the model were analyzed and mapped, as well as its main factors. In conclusions, each of these base anchors makes its own contribution to any further development in this area. However, considering them all together creates an initial model of G-QMS in global SoS organizations.