Review of Security and Privacy for the Internet of Medical Things (IoMT)
Abstract
Day-by-day modern circular economy (CE) models gain ground and penetrate the traditional business sectors. The Internet of Medical Things (IoMT) is the main enabler for this interplay of CE with healthcare. Novel services, like remote sensing, assisting of elder people, and e-visit, enhance the people's health and convenience, while reducing the per-patient cost for the medical institutions. However, the rise of mobile, wearable, and telemedicine solutions means that security can no longer be examined within the neat, physical walls as it was considered before. The problem for a healthcare system further increases as the Bring Your Own Device (BYOD) reality, affects the way that the health services are accommodated nowadays. Both patients and healthcare staff utilize their personal devices (e.g. smart phones or tablets) in order to access, deliver, and process medical data. As the IoMT is materialized and the underlying devices maintain so valuable data, they become a popular target for ransomware and other attacks. In the CE case, the problem is further emerging as several of these assets can be used over-and-over by many actuators. However, medical users and vendors are less aware of the underlying vulnerabilities and spend less on the IoMT security. Nevertheless, the risk from exploiting vulnerabilities can be drastically reduced when the known and relevant controls are placed. This paper presents an overview of the core security and privacy controls that must be deployed in modern IoMT settings in order to safeguard the involved users and stakeholders. The overall approach can be considered as a best-practices guide towards the safe implementation of IoMT systems, featuring CE.
Integrity signals
Registry
Cites
Statistics
Claims the paper makes
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
In IoT-based healthcare, security and privacy are among the most serious topics.
“One of the most serious topics is security, and privacy [197].”
From Federated learning-based AI approaches in smart healthcare: Concepts, taxonomies, challenges and open issues (2023) · cites this paper as [197]
Cites
The Internet of Things for Health Care: A Comprehensive Survey
Islam, S. M. R., Kwak, D., Kabir, M. H., Hossain, M., & Kwak, K.-S. (2015) · IEEE Access · doi:10.1109/access.2015.2437951 · Cited by 3,117 · see citing works
Lin, J., Yu, W., Zhang, N., Yang, X., Zhang, H., & Zhao, W. (2017) · IEEE Internet of Things Journal · doi:10.1109/jiot.2017.2683200 · Cited by 2,793 · see citing works
Spectre Attacks: Exploiting Speculative Execution
Kocher, P. C., Horn, J., Fogh, A., Genkin, D., Gruss, D., Haas, W., Hamburg, M., Lipp, M., Mangard, S., Prescher, T., et al. (2019) · IEEE Symposium on Security and Privacy (S&P) · doi:10.1109/sp.2019.00002 · Cited by 1,847 · see citing works
Internet of Things in the 5G Era: Enablers, Architecture, and Business Models
Palattella, M. R., Dohler, M., Grieco, A., Rizzo, G., Torsner, J., Engel, T., & Ladid, L. (2016) · IEEE Journal on Selected Areas in Communications · doi:10.1109/jsac.2016.2525418 · Cited by 1,459 · see citing works
Guidelines on security and privacy in public cloud computing
Jansen, W., & Grance, T. (2011) · doi:10.6028/nist.sp.800-144 · Cited by 698 · see citing works
Internet of Things: Security vulnerabilities and challenges
Andrea, I., Chrysostomou, C., & Hadjichristofi, G. (2015) · 2015 IEEE Symposium on Computers and Communication (ISCC) · doi:10.1109/iscc.2015.7405513 · Cited by 520 · see citing works
A Practical Wireless Attack on the Connected Car and Security Protocol for In-Vehicle CAN
Woo, S., Jo, H. J., & Lee, D. H. (2014) · IEEE Transactions on Intelligent Transportation Systems · doi:10.1109/tits.2014.2351612 · Cited by 502 · see citing works
Security issues in cloud environments: a survey
Fernandes, D. A. B., Soares, L. F. B., Gomes, J. V., Freire, M. M., & Inácio, P. R. M. (2013) · International Journal of Information Security · doi:10.1007/s10207-013-0208-7 · Cited by 499 · see citing works
Information security and privacy in healthcare: current state of research
Appari, A., & Johnson, M. E. (2010) · International Journal of Internet and Enterprise Management · doi:10.1504/ijiem.2010.035624 · Cited by 407 · see citing works
A Smart Home is No Castle: Privacy Vulnerabilities of Encrypted IoT TrafficPreprint
Apthorpe, N. J., Reisman, D., & Feamster, N. (2017) · arXiv.org · doi:10.48550/arxiv.1705.06805 · Cited by 360 · see citing works
Internet of Things (IoT): Taxonomy of security attacks
Nawir, M., Amir, A., Yaakob, N., & Lynn, O. B. (2016) · International Conference on Electronic Design · doi:10.1109/iced.2016.7804660 · Cited by 294 · see citing works
Security Issues and Challenges for the IoT-based Smart Grid
Bekara, C. (2014) · Procedia Computer Science · doi:10.1016/j.procs.2014.07.064 · Cited by 254 · see citing works
BYOD: Security and Privacy Considerations
Miller, K., Voas, J. M., & Hurlburt, G. F. (2012) · IT Professional · doi:10.1109/mitp.2012.93 · Cited by 223 · see citing works
Extended Functionality Attacks on IoT Devices: The Case of Smart Lights
Ronen, E., & Adi Shamir, Z. (2016) · IEEE European Symposium on Security and Privacy · doi:10.1109/eurosp.2016.13 · Cited by 220 · see citing works
KASLR is Dead: Long Live KASLR
Gruss, D., Lipp, M., Schwarz, M., et al. (2017) · Lecture notes in computer science · doi:10.1007/978-3-319-62105-0_11 · Cited by 197 · see citing works
Efficient location privacy algorithm for Internet of Things (IoT) services and applications
Sun, G., Chang, V., Ramachandran, M., Sun, Z., Li, G., Yu, H., & Liao, D. (2017) · Journal of Network and Computer Applications · doi:10.1016/j.jnca.2016.10.011 · Cited by 159 · see citing works
Risk-Based Adaptive Security for Smart IoT in eHealth
Abie, H., & Balasingham, I. (2012) · International Conference on Body Area Networks · doi:10.4108/icst.bodynets.2012.250235 · Cited by 132 · see citing works
Understanding DDoS Attack & its Effect in Cloud Environment
Deshmukh, R. V., & Devadkar, K. (2015) · Procedia Computer Science · doi:10.1016/j.procs.2015.04.245 · Cited by 128 · see citing works
A localization method for the Internet of Things
Chen, Z., Xia, F., Huang, T., et al. (2011) · The Journal of Supercomputing · doi:10.1007/s11227-011-0693-2 · Cited by 112 · see citing works
A Medical Healthcare System for Privacy Protection Based on IoT
Gong, T., Huang, H., Li, P., Zhang, K., & Jiang, H. (2015) · 2015 Seventh International Symposium on Parallel Architectures, Algorithms and Programming (PAAP) · doi:10.1109/paap.2015.48 · Cited by 103 · see citing works
Anonymous authentication for privacy-preserving IoT target-driven applications
Alcaide, A., Palomar, E., Montero-Castillo, J., & Ribagorda, A. (2013) · Computers & Security · doi:10.1016/j.cose.2013.05.007 · Cited by 101 · see citing works
SCOTRES: Secure Routing for IoT and CPS
Hatzivasilis, G., Papaefstathiou, I., & Manifavas, C. (2017) · IEEE Internet of Things Journal · doi:10.1109/jiot.2017.2752801 · Cited by 93 · see citing works
Self-citationSecurity/privacy of wearable fitness tracking IoT devices
Zhou, W., & Piramuthu, S. (2014) · Iberian Conference on Information Systems and Technologies (CISTI) · doi:10.1109/cisti.2014.6877073 · Cited by 85 · see citing works
Hatzivasilis, G., Fysarakis, K., Soultatos, O., Askoxylakis, I. G., Papaefstathiou, I., & Demetriou, G. (2018) · Computer Communications · doi:10.1016/j.comcom.2018.02.007 · Cited by 71 · see citing works
Self-citationA novel attack to spatial cloaking schemes in location-based services
Niu, B., Zhu, X., Li, Q., et al. (2014) · Future Generation Computer Systems · doi:10.1016/j.future.2014.10.026 · Cited by 48 · see citing works
Hardware Security for Device Authentication in the Smart Grid
Paverd, A., & Martin, A. (2013) · Lecture notes in computer science · doi:10.1007/978-3-642-38030-3_5 · Cited by 46 · see citing works
Hybrid Intrusion Detection System for Private Cloud: A Systematic Approach
Rajendran, P. K., Muthukumar, B., & Nagarajan, G. (2015) · Procedia Computer Science · doi:10.1016/j.procs.2015.04.189 · Cited by 40 · see citing works
cTPM: a cloud TPM for cross-device trusted applications
Chen, C., Raj, H., Saroiu, S., et al. (2014) · doi:10.5555/2616448.2616466 · Cited by 39 · see citing works
Software Security, Privacy, and Dependability: Metrics and Measurement
Hatzivasilis, G., Papaefstathiou, I., & Manifavas, C. (2016) · IEEE Software · doi:10.1109/ms.2016.61 · Cited by 36 · see citing works
Self-citationNew directions in IoT privacy using attribute-based authentication
Alpár, G., Batina, L., Batten, L., et al. (2016) · ACM International Conference on Computing Frontiers (CF) · doi:10.1145/2903150.2911710 · Cited by 34 · see citing works
Yu, R., Bai, Z., Yang, L., Wang, P., Move, O. A., & Liu, Y. (2016) · IEEE Access · doi:10.1109/access.2016.2607766 · Cited by 33 · see citing works
Three Misuse Patterns for Cloud Computing
Hashizume, K., Yoshioka, N., & Fernández, E. B. (2012) · IGI Global eBooks · doi:10.4018/978-1-4666-2125-1.ch003 · Cited by 29 · see citing works
Jha, N. K. (2017) · ACM Great Lakes Symposium on VLSI (GLSVLSI) · doi:10.1145/3060403.3066861 · Cited by 27 · see citing works
A Privacy Preserving Method Using Privacy Enhancing Techniques for Location Based Services
Buchanan, W. J., Kwecka, Z., & Ekonomou, E. (2012) · Mobile Networks and Applications · doi:10.1007/s11036-012-0362-6 · Cited by 23 · see citing works
A novel model for preserving Location Privacy in Internet of Things
Ullah, I., & Ali Shah, M. (2016) · 2016 22nd International Conference on Automation and Computing (ICAC) · doi:10.1109/iconac.2016.7604976 · Cited by 23 · see citing works
Research on IoT Privacy Security Risks
Xi, W., & Ling, L. (2016) · International Conference on Industrial Informatics - Computing Technology, Intelligent Technology, Industrial Information Integration (ICIICII) · doi:10.1109/iciicii.2016.0069 · Cited by 19 · see citing works
A Secure Document Self-Destruction Scheme: An ABE Approach
Xiong, J., Yao, Z., Ma, J., et al. (2013) · doi:10.1109/hpcc.and.euc.2013.18 · Cited by 18 · see citing works
Disposal of waste computer hard disk drive: data destruction and resources recycling
Yan, G., Xue, M., & Xu, Z. (2013) · Waste Management & Research The Journal for a Sustainable Circular Economy · doi:10.1177/0734242x13481085 · Cited by 18 · see citing works
Risk assessment of a cardiology eHealth service in HYGEIAnet
Stathiakis, N., Chronaki, C. E., Skipenes, E., et al. (2003) · Computers in cardiology · doi:10.1109/cic.2003.1291125 · Cited by 11 · see citing works
Value networks of embedded SIM-based remote subscription management
Vesselkov, A., Hämmäinen, H., & Ikalainen, P. (2015) · doi:10.1109/ctte.2015.7347220 · Cited by 10 · see citing works
Research on secure destruction of digital information
Dong, H., She, K., & Yu, C. (2009) · International Conference on Apperceiving Computing and Intelligence Analysis · doi:10.1109/icacia.2009.5361082 · Cited by 9 · see citing works
A Survey on IoT Privacy Issues and Mitigation Techniques
Tank, B., Upadhyay, H., & Patel, H. B. (2016) · International Conference on Information and Communication Technology for Competitive Strategies (ICTCS) · doi:10.1145/2905055.2905057 · Cited by 9 · see citing works
Bergren, M. D., Murphy, E. A., & Bergren, M. D. (2005) · The Journal of School Nursing · doi:10.1177/10598405050210041001 · Cited by 5 · see citing works
AnonymousData.co: A Proposal for Interactive Anonymization of Electronic Medical Records
Moque, C., Pomares, A., & González, R. A. (2012) · Procedia Technology · doi:10.1016/j.protcy.2012.09.082 · Cited by 3 · see citing works
Applicability of existing anonymization methods to large location history data in urban travel
Yamaguchi, R. S., Hirota, K., Hamada, K., Takahashi, K., Matsuzaki, K., Sakuma, J., & Shirai, Y. (2012) · Conference proceedings/Conference proceedings - IEEE International Conference on Systems, Man, and Cybernetics · doi:10.1109/icsmc.2012.6377859 · Cited by 3 · see citing works
Privacy Guidelines for Internet of Things: A Cheat Sheet
Perera, C. (2017) · ORCA Online Research @Cardiff (Cardiff University) · doi:10.48550/arxiv.1708.05261 · Cited by 2 · see citing works
Flagged first, then by citations
Cited by
Sorted by citations
R.M., S. P., Maddikunta, P. K. R., M., P., Koppu, S., Gadekallu, T. R., Chowdhary, C. L., & Alazab, M. (2020) · Computer Communications · doi:10.1016/j.comcom.2020.05.048 · Cited by 470 · see citing works
Rahman, A., Hossain, M. S., Muhammad, G., Kundu, D., Debnath, T., Rahman, M., Khan, M. S. I., Tiwari, P., & Band, S. S. (2023) · Cluster Computing · doi:10.1007/s10586-022-03658-4 · Cited by 399 · see citing works
Federated Learning for Privacy Preservation in Smart Healthcare Systems: A Comprehensive Survey
Ali, M., Naeem, F., Tariq, M., & Kaddoum, G. (2023) · IEEE Journal of Biomedical and Health Informatics · doi:10.1109/jbhi.2022.3181823 · Cited by 366 · see citing works
Federated learning for secure IoMT-applications in smart healthcare systems: A comprehensive review
Rani, S., Kataria, A., Kumar, S., & Tiwari, P. (2023) · Knowledge-Based Systems · doi:10.1016/j.knosys.2023.110658 · Cited by 228 · see citing works
- Authors
- Hatzivasilis, G., Soultatos, O., Ioannidis, S., Verikoukis, C., Demetriou, G., & Tsatsoulis, C.
- Affiliations
- Foundation for Research and Technology Hellas (GR)
- Centre Tecnologic de Telecomunicacions de Catalunya (ES)
- École nationale des ponts et chaussées (FR)
- Nodalpoint Systems
- Venue
- 2019 15th International Conference on Distributed Computing in Sensor Systems (DCOSS)
- Publisher
- IEEE
- Published
- 2019-05
- Pages
- 457-464
- OpenAlex
- W2969281952
- Cited by
- 172
- References
- 46
- Citations by year
- 2026: 13 · 2025: 23 · 2024: 23 · 2023: 30 · 2022: 33 · 2021: 32 · 2020: 15 · 2019: 3
- FWCI
- 16.53
- Type
- conference paper
- Language
- en
- Open access
- closed
- Locations
- International Conference on Distributed Computing in Smart Systems and the Internet of Things (DCOSS-IoT) (publishedVersion)
- Topics
- Physical Sciences › Computer Science › Information Systems › Internet of Things and AI
- Physical Sciences › Computer Science › Computer Networks and Communications › IoT and Edge/Fog Computing
- Physical Sciences › Computer Science › Information Systems › Information and Cyber Security
- Keywords
- Internet of Medical Things, IoMT security, privacy, Bring Your Own Device, ransomware, medical device vulnerabilities, security countermeasures, circular economy, telemedicine, wearable devices, healthcare data protection, best practices
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
