Attacks on the Internet of Services – The Security Impact of Cross-organizational Service-based Collaboration

Parts of digital business processes, composed of services, can be outsourced to third party organizations, which can be distributed all over the world. In an Internet of Services scenario, market places are used to mediate between service providers and consumers in order to bring to-gether partners for cross-organizational collaboration. Existing research on outsourced services in the context of the Internet of Services focuses on technical aspects, such as Web services, and does not take into account business-specific threats and corresponding attacks. In this paper, we present an attack taxonomy which can be used to structure both technological and business-oriented attacks on the Internet of Services and describe specific attack scenarios that should be considered within the IT risk management process. Understanding such attacks is the first step towards making the Internet of Services more secure and to design suitable countermeasures