A Survey on Security Threats and Countermeasures in Internet of Medical Things (IoMT)
Abstract
Internet of medical things (IoMT) is an emerging technology aiming to improve the patient's quality of life by enabling personalized e‐health services without limitations on time and location. Nevertheless, IoMT devices (eg, medical sensors) that constitute the key underlying elements of the IoMT edge network are vulnerable to various types of security threats and thus, they pose a significant risk to patient's privacy and safety. Based on that and the fact that the security is a critical factor for the successful integration of IoMT technology into pervasive healthcare systems, there is an urgent need for novel security mechanisms to preserve the security of the IoMT edge network. Toward this direction, the first step is the comprehensive understanding of existing and potential threats to the IoMT edge network environment. Thus, in this article, we provide a categorization of security threats to the edge network environment based on the major security objectives that they target. Moreover, we present a categorization of security countermeasures, derived from the literature, against threats to IoMT edge networks. The authors' intent is to provide a foundation for organizing research efforts toward the development of proper security countermeasures for protecting IoMT edge networks against internal and external threats.
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Integrity signals
Registry
Cites
Statistics
Claims the paper makes
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
Attacks from an intruder can access information sent from the hardware system by directly attacking at the decryption point or by weakening the authentication procedure, such as eavesdropping, reply, MITM, rouge, DoS, and DDoS attacks, and these hamper the network layer of the IoMT.
“Then, some attacks from the intruder can access the information sent from the hardware system by directly attacking at the decryption point or by weakening the authentication procedure such as Eavesdropping attack, reply attack, MITM attack, rouge attack, DoS attack, DDoS attack and these type of attack causes to hamper the network layer of the IoMT [200].”
From Federated learning-based AI approaches in smart healthcare: Concepts, taxonomies, challenges and open issues (2023) · cites this paper as [200]
Self-check
Percentages, sums and reported differences re-computed from the paper’s own numbers.
The self-check needs the paper’s full text.
Cites
The Internet of Things: A survey
Atzori, L., Iera, A., & Morabito, G. (2010) · Computer Networks · doi:10.1016/j.comnet.2010.05.010 · Cited by 15,613 · see citing works
The Internet of Things for Health Care: A Comprehensive Survey
Islam, S. M. R., Kwak, D., Kabir, M. H., Hossain, M., & Kwak, K.-S. (2015) · IEEE Access · doi:10.1109/access.2015.2437951 · Cited by 3,199 · see citing works
The sybil attack in sensor networks
Newsome, J., Shi, E., Song, D. X., & Perrig, A. (2004) · ACM/IEEE International Conference on Information Processing in Sensor Networks (IPSN) · doi:10.1145/984622.984660 · Cited by 1,298 · see citing works
The Fog Computing Paradigm: Scenarios and Security Issues
Stojmenovic, I., & Wen, S. (2014) · Annals of Computer Science and Information Systems · doi:10.15439/2014f503 · Cited by 1,037 · see citing works
Sensor Networks for Emergency Response: Challenges and Opportunities
Lorincz, K., Malan, D. J., Fulford-Jones, T. R. F., Nawoj, A., Clavel, A., Shnayder, V., Mainland, G., Welsh, M., & Moulton, S. L. (2004) · IEEE Pervasive Computing · doi:10.1109/mprv.2004.18 · Cited by 1,033 · see citing works
Security in the Internet of Things: A Review
Suo, H., Wan, J., Zou, C., & Liu, J. (2012) · International Conference on Computer Science and Electronics Engineering (ICCSEE) · doi:10.1109/iccsee.2012.373 · Cited by 792 · see citing works
Pacemakers and Implantable Cardiac Defibrillators: Software Radio Attacks and Zero-Power Defenses
Halperin, D., Heydt-Benjamin, T. S., Ransford, B., Clark, S. S., Defend, B., Morgan, W., Fu, K. E., Kohno, T., & Maisel, W. H. (2008) · IEEE Symposium on Security and Privacy (S&P) · doi:10.1109/sp.2008.31 · Cited by 762 · see citing works
Fog Computing for the Internet of Things: Security and Privacy Issues
Alrawais, A., Alhothaily, A., Hu, C., & Cheng, X. (2017) · IEEE Internet Computing · doi:10.1109/mic.2017.37 · Cited by 727 · see citing works
BSN-Care: A Secure IoT-Based Modern Healthcare System Using Body Sensor Network
Gope, P., & Hwang, T. (2015) · IEEE Sensors Journal · doi:10.1109/jsen.2015.2502401 · Cited by 723 · see citing works
Jamming sensor networks: attack and defense strategies
Xu, W., Ma, K., Trappe, W. K., & Zhang, Y. (2006) · IEEE Network · doi:10.1109/mnet.2006.1637931 · Cited by 664 · see citing works
Securing Fog Computing for Internet of Things Applications: Challenges and Solutions
Ni, J., Zhang, K., Lin, X., & Shen, X. (2018) · IEEE Communications Surveys & Tutorials · doi:10.1109/comst.2017.2762345 · Cited by 659 · see citing works
Enabling technologies for fog computing in healthcare IoT systems
Mutlag, A. A., Abd Ghani, M. K., Arunkumar, N., Mohammed, M. A., & Mohd, O. (2019) · Future Generation Computer Systems · doi:10.1016/j.future.2018.07.049 · Cited by 590 · see citing works
Manogaran, G., Varatharajan, R., Lopez, D., Kumar, P. M., Sundarasekar, R., & Thota, C. (2017) · Future Generation Computer Systems · doi:10.1016/j.future.2017.10.045 · Cited by 512 · see citing works
Denial-of-Service in Wireless Sensor Networks: Attacks and Defenses
Raymond, D., & Midkiff, S. F. (2008) · IEEE Pervasive Computing · doi:10.1109/mprv.2008.6 · Cited by 465 · see citing works
Security attacks in IoT: A survey
Deogirikar, J., & Vidhate, A. V. (2017) · International Conference on I-SMAC (IoT in Social, Mobile, Analytics and Cloud) (I-SMAC) · doi:10.1109/i-smac.2017.8058363 · Cited by 442 · see citing works
Security and privacy in the Internet of Things: Current status and open issues
Abomhara, M., & Køien, G. M. (2014) · doi:10.1109/prisms.2014.6970594 · Cited by 418 · see citing works
Anatomy of Threats to the Internet of Things
Makhdoom, I., Abolhasan, M., Lipman, J., Liu, R. P., & Ni, W. (2018) · IEEE Communications Surveys & Tutorials · doi:10.1109/comst.2018.2874978 · Cited by 418 · see citing works
Enabling Technologies for the Internet of Health Things
Rodrigues, J. J. P. C., Segundo, D. B. R., Junqueira, H. A., Sabino, M. H., Prince, R. M., Al-Muhtadi, J. F., & de Albuquerque, V. H. C. (2018) · IEEE Access · doi:10.1109/access.2017.2789329 · Cited by 415 · see citing works
Security and trust issues in Fog computing: A survey
Zhang, P., Zhou, M., & Fortino, G. (2018) · Future Generation Computer Systems · doi:10.1016/j.future.2018.05.008 · Cited by 364 · see citing works
Channel surfing and spatial retreats
Xu, W., Wood, T., Trappe, W. K., & Zhang, Y. (2004) · Workshop on Wireless Security · doi:10.1145/1023646.1023661 · Cited by 350 · see citing works
JAM: a jammed-area mapping service for sensor networks
Wood, A. D., Stankovic, J. A., & Son, S. H. (2004) · International Symposium on System-on-Chip · doi:10.1109/real.2003.1253275 · Cited by 348 · see citing works
A Lightweight Authentication Mechanism for M2M Communications in Industrial IoT Environment
Esfahani, A., Μαντάς, Γ., Matischek, R., Saghezchi, F. B., Rodrı́guez, J., Bicaku, A., Maksuti, S., Tauber, M., Schmittner, C., & Bastos, J. (2017) · IEEE Internet of Things Journal · doi:10.1109/jiot.2017.2737630 · Cited by 340 · see citing works
Mutual Authentication in IoT Systems Using Physical Unclonable Functions
Aman, M. N., Chua, K. C., & Sikdar, B. (2017) · IEEE Internet of Things Journal · doi:10.1109/jiot.2017.2703088 · Cited by 316 · see citing works
Li, X., Ibrahim, M. H., Kumari, S., Sangaiah, A. K., Gupta, V., & Choo, K. R. (2017) · Computer Networks · doi:10.1016/j.comnet.2017.03.013 · Cited by 300 · see citing works
Security and privacy issues in implantable medical devices: A comprehensive survey
Cámara, C., Lopez, P. P., & Tapiador, J. (2015) · Journal of Biomedical Informatics · doi:10.1016/j.jbi.2015.04.007 · Cited by 296 · see citing works
Internet of Things (IoT): Taxonomy of security attacks
Nawir, M., Amir, A., Yaakob, N., & Lynn, O. B. (2016) · International Conference on Electronic Design · doi:10.1109/iced.2016.7804660 · Cited by 294 · see citing works
End-to-end security scheme for mobility enabled healthcare Internet of Things
Moosavi, S. R., Gia, T. N., Nigussie, E., Rahmani, A. M., Virtanen, S., Tenhunen, H., & Isoaho, J. (2016) · Future Generation Computer Systems · doi:10.1016/j.future.2016.02.020 · Cited by 280 · see citing works
Cyberentity Security in the Internet of Things
Ning, H., Liu, H., & Yang, L. T. (2013) · Computer · doi:10.1109/mc.2013.74 · Cited by 235 · see citing works
Digital identity guidelines: revision 3
Grassi, P. A., Garcia, M. E., & Fenton, J. L. (2017) · doi:10.6028/nist.sp.800-63-3 · Cited by 230 · see citing works
Glossary of key information security terms
Kissel, R. (2013) · doi:10.6028/nist.ir.7298r2 · Cited by 220 · see citing works
Health care service delivery based on the Internet of things: A systematic and comprehensive study
Uşak, M., Kubiatko, M., Shabbir, M. S., Dudnik, O. V., Jermsittiparsert, K., & Rajabion, L. (2019) · International Journal of Communication Systems · doi:10.1002/dac.4179 · Cited by 202 · see citing works
Survey of Security and Privacy Issues of Internet of ThingsPreprint
Borgohain, T., Kumar, U., & Sanyal, S. (2015) · arXiv (Cornell University) · doi:10.48550/arxiv.1501.02211 · Cited by 195 · see citing works
Lightweight Cryptography for the Internet of Things
Hassan, A. (2020) · Advances in intelligent systems and computing · doi:10.1007/978-3-030-63092-8_52 · Cited by 176 · see citing works
An introduction to information security
Nieles, M., Dempsey, K., & Pillitteri, V. Y. (2017) · doi:10.6028/nist.sp.800-12r1 · Cited by 164 · see citing works
Security and Privacy in the Internet of Medical Things: Taxonomy and Risk Assessment
Alsubaei, F., Abuhussein, A., & Shiva, S. (2017) · 2017 IEEE 42nd Conference on Local Computer Networks Workshops (LCN Workshops) · doi:10.1109/lcn.workshops.2017.72 · Cited by 162 · see citing works
One time password authentication scheme based on elliptic curves for Internet of Things (IoT)
Shivraj, V. L., Rajan, M. A., Singh, M., & Balamuralidhar, P. (2015) · National Symposium on Information Technology: Towards New Smart World (NSITNSW) · doi:10.1109/nsitnsw.2015.7176384 · Cited by 160 · see citing works
Towards viable certificate-based authentication for the internet of things
Hummen, R., Ziegeldorf, J. H., Shafagh, H., et al. (2013) · doi:10.1145/2463183.2463193 · Cited by 142 · see citing works
Secure anonymous mutual authentication for star two-tier wireless body area networks
Ibrahim, M. H., Kumari, S., Das, A. K., et al. (2016) · Computer Methods and Programs in Biomedicine · doi:10.1016/j.cmpb.2016.07.022 · Cited by 133 · see citing works
Secure and Scalable Cloud-Based Architecture for e-Health Wireless Sensor Networks
Lounis, A., Hadjidj, A., Bouabdallah, A., et al. (2012) · Proceedings/Proceedings - International Conference on Computer Communications and Networks · doi:10.1109/icccn.2012.6289252 · Cited by 131 · see citing works
Privacy-Preserving Authentication and Key Agreement Protocols for D2D Group Communications
Wang, M., & Yan, Z. (2017) · IEEE Transactions on Industrial Informatics · doi:10.1109/tii.2017.2778090 · Cited by 98 · see citing works
A Lightweight Mutual Authentication and Key Agreement Scheme for Medical Internet of Things
Xu, Z., Xu, C., Liang, W., Xu, J., & Chen, H. (2019) · IEEE Access · doi:10.1109/access.2019.2912870 · Cited by 95 · see citing works
Scholl, M., Stine, K., Hash, J., Bowen, P., Johnson, L. A., Smith, C. D., & Steinberg, D. I. (2008) · doi:10.6028/nist.sp.800-66r1 · Cited by 84 · see citing works
Enhancing IoT security through network softwarization and virtual security appliances
Zarca, A. M., Bernabé, J. B., Farris, I., Khettab, Y., Taleb, T., & Skármeta, A. (2018) · International Journal of Network Management · doi:10.1002/nem.2038 · Cited by 79 · see citing works
Smart Attacks against Intelligent Wearables in People-Centric Internet of Things
Liu, J., & Sun, W. Y. (2016) · IEEE Communications Magazine · doi:10.1109/mcom.2016.1600553cm · Cited by 78 · see citing works
Security for 5G Communications
Μαντάς, Γ., Komninos, N., Rodrı́guez, J., et al. (2015) · doi:10.1002/9781118867464.ch9 · Cited by 74 · see citing works
A New Framework Architecture for Next Generation e-Health Services
Fengou, M.-A., Μαντάς, Γ., Lymberopoulos, D. K., et al. (2012) · IEEE Journal of Biomedical and Health Informatics · doi:10.1109/titb.2012.2224876 · Cited by 70 · see citing works
Self-citationCyber Attacks Classification in IoT-Based-Healthcare Infrastructure
Djenna, A., & Saidouni, D. E. (2018) · Cyber Security in Networking Conference (CSNet) · doi:10.1109/csnet.2018.8602974 · Cited by 64 · see citing works
A Trigger Identification Service for Defending Reactive Jammers in WSN
Ying, X., Shen, Y., Nguyen, N. P., et al. (2011) · IEEE Transactions on Mobile Computing · doi:10.1109/tmc.2011.86 · Cited by 57 · see citing works
A Comparison of Link Layer Attacks on Wireless Sensor Networks
Mohammadi, S., & Jadidoleslamy, H. (2011) · International Journal on Applications of Graph Theory In wireless Ad Hoc Networks And sensor Networks · doi:10.5121/jgraphhoc.2011.3103 · Cited by 46 · see citing works
Security in Smart Home Environment
Μαντάς, Γ., Lymberopoulos, D. K., & Komninos, N. (2010) · IGI Global eBooks · doi:10.4018/978-1-61520-805-0.ch010 · Cited by 43 · see citing works
Self-citationApplication-layer denial of service attacks: taxonomy and survey
Μαντάς, Γ., Stakhanova, N., Gonzalez, H., et al. (2015) · International Journal of Information and Computer Security · doi:10.1504/ijics.2015.073028 · Cited by 36 · see citing works
Privacy Preservation in Smart Cities
Qu, Y., Nosouhi, M. R., Cui, L., et al. (2018) · Elsevier eBooks · doi:10.1016/b978-0-12-815032-0.00006-8 · Cited by 35 · see citing works
MoSHCA - my mobile and smart health care assistant
Hommersom, A., Lucas, P., Velikova, M., et al. (2013) · IEEE International Conference on e-Health Networking, Applications and Services (Healthcom) · doi:10.1109/healthcom.2013.6720664 · Cited by 34 · see citing works
Single Hop Detection of Node Clone Attacks in Mobile Wireless Sensor Networks
Lou, Y. X., Zhang, Y., & Liu, S. (2012) · Procedia Engineering · doi:10.1016/j.proeng.2012.01.393 · Cited by 33 · see citing works
Strength of Crowd (SOC)—Defeating a Reactive Jammer in IoT with Decoy Messages
Sciancalepore, S., Oligeri, G., & Pietro, R. D. (2018) · Sensors · doi:10.3390/s18103492 · Cited by 28 · see citing works
Securing Heterogeneous IoT with Intelligent DDoS Attack Behavior LearningPreprint
Dao, N., Phan, T. V., ad, U. S., et al. (2017) · arXiv (Cornell University) · doi:10.48550/arxiv.1711.06041 · Cited by 23 · see citing works
An Overview of Enabling Technologies for the Internet of Things
Alsubaei, F. S., Abuhussein, A., & Shiva, S. G. (2018) · Wiley eBooks · doi:10.1002/9781119456735.ch3 · Cited by 22 · see citing works
Practical security overview of IEEE 802.15.4
Reziouk, A., Laurent, E., & Demay, J.-C. (2016) · International Conference on Engineering & MIS (ICEMIS) · doi:10.1109/icemis.2016.7745382 · Cited by 20 · see citing works
PKI Security in Large-Scale Healthcare Networks
Μαντάς, Γ., Lymberopoulos, D. K., & Komninos, N. (2010) · Journal of Medical Systems · doi:10.1007/s10916-010-9573-1 · Cited by 15 · see citing works
Self-citationIntegrity mechanism for eHealth tele-monitoring system in smart home environment
Μαντάς, Γ., Lymberopoulos, D. K., & Komninos, N. (2009) · doi:10.1109/iembs.2009.5334524 · Cited by 15 · see citing works
Self-citationFusion: coalesced confidential storage and communication framework for the IoT
Bağcı, İ. E., Raza, S., Roedig, U., et al. (2015) · Security and Communication Networks · doi:10.1002/sec.1260 · Cited by 15 · see citing works
A new framework for ubiquitous context-aware healthcare applications
Μαντάς, Γ., Lymberopoulos, D. K., & Komninos, N. (2010) · IEEE International Conference on Information Technology and Applications in Biomedicine · doi:10.1109/itab.2010.5687758 · Cited by 15 · see citing works
Self-citationGrimes, R. A. (2017) · Wiley eBooks · doi:10.1002/9781119396260 · Cited by 15 · see citing works
Blackwell Encyclopedia of Sociology
(2007) · The Blackwell Encyclopedia of Sociology · doi:10.1111/b.9781405124331.2007.00015.x · Cited by 14 · see citing works
Esfahani, A., Μαντάς, Γ., Silva, H., et al. (2016) · EURASIP Journal on Wireless Communications and Networking · doi:10.1186/s13638-016-0601-9 · Cited by 12 · see citing works
Benadda, B., Beldjilali, B., Mankouri, A., et al. (2018) · International Journal of Communication Systems · doi:10.1002/dac.3499 · Cited by 12 · see citing works
Group profile management in ubiquitous healthcare environment
Fengou, M.-A., Μαντάς, Γ., & Lymberopoulos, D. K. (2012) · doi:10.1109/embc.2012.6346379 · Cited by 10 · see citing works
Self-citation- Towards Secure Network Coding–Enabled Wireless Sensor Networks in Cyber-Physical Systems
Rawat, D. B., Rodrigues, J. J. P. C., & Stojmenovic, I. (2015) · CRC Press eBooks · doi:10.1201/b19290-27 · Cited by 7 · see citing works
The Internet of Things and People in Health Care
Russo, N. L., & Eriksson, J. (2018) · doi:10.1002/9781119456735.ch16 · Cited by 6 · see citing works
Biometric Smartcard Authentication for Fog Computing
Munir, K., & Mohammed, L. A. (2018) · International Journal of Network Security & Its Applications · doi:10.5121/ijnsa.2018.10604 · Cited by 6 · see citing works
Towards Personalized Services in the Healthcare Domain
Fengou, M.-A., Αθανασίου, Γ., Μαντάς, Γ., et al. (2013) · Springer eBooks · doi:10.1007/978-1-4614-8495-0_19 · Cited by 4 · see citing works
Dominguez, R. (2018) · The Blackwell Encyclopedia of Sociology · doi:10.1002/9781405165518.wbeos0993 · Cited by 4 · see citing works
Security Mechanisms and Technologies for Constrained IoT Devices
Tiloca, M., & Raza, S. (2018) · doi:10.1002/9781119456735.ch8 · Cited by 2 · see citing works
Flagged first, then by citations
Research works printed but not linked: 5
- [2][2] Anshuman Kalla Pawani Prombage Madhusanka Liyanage, ''Introduction to IoT.,'' in IoT Security: Advances in Authentication , 2020, pp. 1-25. -
- [32][32] NIST, 'Cissp Wordig Grossale,' Nist Ir , vol. 7298, no. Revision 2, p. 222, 2013. -
- [41][41] W. You and W. Learn, 'Fog Computing and the Internet of Things : Extend the Cloud to Where the Things Are,' pp. 1-6, 2020. -
- [47][47] A. Alrawais, A. Alhothaily, C. Hu, and X. Cheng, 'Fog Computing for the Internet of Things: Security and Privacy Issues,' IEEE Internet Comput. , vol. 21, no. 2, pp. 34-42, Mar. 2017. -
- [62][62] E. Edition, E. Edition, O. Systems, S. Edition, B. D. Communications, and S. Edition, Cryptography and Network Security , Eighth Edition . . -
Cited by
Sorted by citations
Rahman, A., Hossain, M. S., Muhammad, G., Kundu, D., Debnath, T., Rahman, M., Khan, M. S. I., Tiwari, P., & Band, S. S. (2023) · Cluster Computing · doi:10.1007/s10586-022-03658-4 · Cited by 399 · see citing works
Federated learning for secure IoMT-applications in smart healthcare systems: A comprehensive review
Rani, S., Kataria, A., Kumar, S., & Tiwari, P. (2023) · Knowledge-Based Systems · doi:10.1016/j.knosys.2023.110658 · Cited by 228 · see citing works
Rasool, R. U., Ahmad, H. F., Rafique, W., Qayyum, A., & Qadir, J. (2022) · Journal of Network and Computer Applications · doi:10.1016/j.jnca.2022.103332 · Cited by 177 · see citing works
- Authors
- Papaioannou, M., Karageorgou, M., Mantas, G., Sucasas, V., Essop, I., Rodriguez, J., & Lymberopoulos, D.
- Affiliations
- Instituto de Telecomunicações Aveiro Portugal
- University of Patras (GR)
- Instituto de Telecomunicações (PT)
- University of Greenwich (GB)
- Venue
- Transactions on Emerging Telecommunications Technologies
- Publisher
- Wiley
- Published
- 2020-07-23
- Volume
- 33
- Issue
- 6
- ISSN
- 2161-3915 (ISSN-L)
- OpenAlex
- W3045149779
- Cited by
- 245
- References
- 73
- Citations by year
- 2026: 32 · 2025: 44 · 2024: 42 · 2023: 61 · 2022: 46 · 2021: 17 · 2020: 3
- FWCI
- 14.92
- Type
- journal article
- Language
- en
- Open access
- closed
- Locations
- Transactions on Emerging Telecommunications Technologies (publishedVersion)
- Greenwich Academic Literature Archive (University of Greenwich) (acceptedVersion)
- Topics
- Physical Sciences › Computer Science › Computer Networks and Communications › IoT and Edge/Fog Computing
- Physical Sciences › Computer Science › Information Systems › Internet of Things and AI
- Physical Sciences › Engineering › Biomedical Engineering › Wireless Body Area Networks
- Keywords
- Internet of Medical Things, security countermeasures, biomedical sensors, patient privacy, pervasive healthcare, threat categorization, security objectives
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
