  For years, attack graphs have been an important tool for security assessment
of enterprise networks, but IoT devices, a new player in the IT world, might
threat the reliability of this tool. In this paper, we review the challenges
that must be addressed when using attack graphs to model and analyze enterprise
networks that include IoT devices. In addition, we propose novel ideas and
countermeasures aimed at addressing these challenges.
