Security and Privacy in the Internet of Medical Things: Taxonomy and Risk Assessment
Abstract
As the number of devices (things) connected to the Internet (Internet of things: IoT) is growing, achieving robust security and privacy (S&P) is becoming increasingly challenging. With the heavy use of medical things (MT), the S&P in the medical domain poses a serious issue that continues to grow. Due to the criticality and sensitivity of the data in the healthcare domain, ensuring the S&P of the Internet of medical things (IoMT) makes matters even more problematic. Lack of proper S&P in IoMT will not only leave patients' privacy at risk but may also put patients' lives at risk. In this paper, we provide a taxonomy of the S&P issues of IoMT. We also provide an approach to quantify IoMT risks and demonstrate how to assess risks in two IoMT devices. This work aims to increase the S&P awareness among IoMT stakeholders by enabling them to identify and quantify potential IoMT S&P risks.
Integrity signals
Registry
Cites
Statistics
Claims the paper makes
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
The network layer of IoT/IoMT undergoes a number of attacks.
“It is observed that the network layer of IoT/IoMT undergoes a number of attacks [77].”
From IoT cyber risk: A holistic analysis of cyber risk assessment frameworks, risk vectors, and risk ranking process (2020) · cites this paper as [77]
If there is going to be a replay attack (confidentiality and integrity are affected) and DoS attack (affects availability), then the impact of the risk is high and this could happen in the network layer of the implantable devices.
“If there is going to be a replay attack (confidentiality and integrity are affected) and DoS attack (affects availability), then the impact of the risk is high and this could happen in the network layer of the implantable devices [77].”
From IoT cyber risk: A holistic analysis of cyber risk assessment frameworks, risk vectors, and risk ranking process (2020) · cites this paper as [77]
Cites
Internet of Things: A Survey on Enabling Technologies, Protocols, and Applications
Al-Fuqaha, A., Guizani, M., Mohammadi, M., Aledhari, M., & Ayyash, M. (2015) · IEEE Communications Surveys & Tutorials · doi:10.1109/comst.2015.2444095 · Cited by 8,630 · see citing works
Security of the Internet of Things: perspectives and challenges
Jing, Q., Vasilakos, A. V., Wan, J., Lu, J., & Qiu, D. (2014) · Wireless Networks · doi:10.1007/s11276-014-0761-7 · Cited by 1,257 · see citing works
Towards an Analysis of Security Issues, Challenges, and Open Problems in the Internet of Things
Hossain, M., Fotouhi, M., & Hasan, R. (2015) · IEEE World Congress on Services (SERVICES) · doi:10.1109/services.2015.12 · Cited by 491 · see citing works
Security Issues in Healthcare Applications Using Wireless Medical Sensor Networks: A Survey
Kumar, P., & Lee, H. J. (2011) · Sensors · doi:10.3390/s120100055 · Cited by 414 · see citing works
GPS Vulnerability to Spoofing Threats and a Review of Antispoofing Techniques
Jafarnia-Jahromi, A., Broumandan, A., Nielsen, J., et al. (2012) · International Journal of Navigation and Observation · doi:10.1155/2012/127072 · Cited by 413 · see citing works
Proposed Security Model and Threat Taxonomy for the Internet of Things (IoT)
Babar, S. D., Mahalle, P. N., Stango, A., Prasad, N. R., & Prasad, R. (2010) · Communications in computer and information science · doi:10.1007/978-3-642-14478-3_42 · Cited by 280 · see citing works
Trustworthiness of Medical Devices and Body Area Networks
Zhang, M., Raghunathan, A., & Jha, N. K. (2014) · Proceedings of the IEEE · doi:10.1109/jproc.2014.2322103 · Cited by 134 · see citing works
A taxonomy of security and privacy requirements for the Internet of Things (IoT)
Alqassem, I., & Svetinović, D. (2014) · doi:10.1109/ieem.2014.7058837 · Cited by 91 · see citing works
Towards a reference ontology for security in the Internet of Things
Mozzaquatro, B. A., Jardim‐Gonçalves, R., & Agostinho, C. (2015) · doi:10.1109/iwmn.2015.7322984 · Cited by 45 · see citing works
The bumpy road towards iPhone 5c NAND mirroring
Skorobogatov, S. P. (2016) · Apollo (University of Cambridge) · doi:10.17863/cam.23095 · Cited by 25 · see citing works
The bumpy road towards iPhone 5c NAND mirroringPreprint
Skorobogatov, S. P. (2016) · arXiv (Cornell University) · doi:10.48550/arxiv.1609.04327 · Cited by 18 · see citing works
An overview of healthcare perspective based security issues in Wireless Sensor Networks
Mamta, ., & Prakash, S. (2016) · International Conference on Computing for Sustainable Global Development · Cited by 8 · see citing works
Flagged first, then by citations
Cited by
Sorted by citations
An exhaustive survey on security and privacy issues in Healthcare 4.0
Hathaliya, J. J., & Tanwar, S. (2020) · Computer Communications · doi:10.1016/j.comcom.2020.02.018 · Cited by 462 · see citing works
Machine Learning for Healthcare Wearable Devices: The Big Picture
Sabry, F., Eltaras, T., Labda, W., Alzoubi, K., & Malluhi, Q. (2022) · Journal of Healthcare Engineering · doi:10.1155/2022/4653923 · Cited by 321 · see citing works
A Survey on Security Threats and Countermeasures in Internet of Medical Things (IoMT)
Papaioannou, M., Karageorgou, M., Mantas, G., Sucasas, V., Essop, I., Rodriguez, J., & Lymberopoulos, D. (2022) · Transactions on Emerging Telecommunications Technologies · doi:10.1002/ett.4049 · Cited by 245 · see citing works
Yaqoob, T., Abbas, H., & Atiquzzaman, M. (2019) · IEEE Communications Surveys & Tutorials · doi:10.1109/comst.2019.2914094 · Cited by 236 · see citing works
Kumar, R., & Tripathi, R. (2021) · The Journal of Supercomputing · doi:10.1007/s11227-020-03570-x · Cited by 177 · see citing works
Kandasamy, K., Srinivas, S., Achuthan, K., & Rangan, V. P. (2020) · EURASIP Journal on Information Security · doi:10.1186/s13635-020-00111-0 · Cited by 160 · see citing works
Dew-Cloud-Based Hierarchical Federated Learning for Intrusion Detection in IoMT
Singh, P., Gaba, G. S., Kaur, A., Hedabou, M., & Gurtov, A. (2023) · IEEE Journal of Biomedical and Health Informatics · doi:10.1109/jbhi.2022.3186250 · Cited by 103 · see citing works
Blockchain-Based Personalized Federated Learning for Internet of Medical Things
Lian, Z., Wang, W., Han, Z., & Su, C. (2023) · IEEE Transactions on Sustainable Computing · doi:10.1109/tsusc.2023.3279111 · Cited by 75 · see citing works
Vijayakumar, K. P., Pradeep, K., Balasundaram, A., & Prusty, M. R. (2023) · Processes · doi:10.3390/pr11041072 · Cited by 66 · see citing works
- Authors
- Alsubaei, F., Abuhussein, A., & Shiva, S.
- Affiliations
- University of Memphis (US)
- St. Cloud State University (US)
- Venue
- 2017 IEEE 42nd Conference on Local Computer Networks Workshops (LCN Workshops)
- Publisher
- IEEE
- Published
- 2017-10
- Pages
- 112-120
- OpenAlex
- W2768332178
- Cited by
- 162
- References
- 12
- Citations by year
- 2026: 9 · 2025: 15 · 2024: 14 · 2023: 26 · 2022: 27 · 2021: 32 · 2020: 21 · 2019: 13 · 2018: 4 · 2017: 1
- FWCI
- 8.50
- Type
- conference paper
- Language
- en
- Open access
- closed
- Locations
- IEEE Conference on Local Computer Networks Workshops (LCN Workshops) (publishedVersion)
- Topics
- Physical Sciences › Computer Science › Computer Networks and Communications › IoT and Edge/Fog Computing
- Physical Sciences › Computer Science › Information Systems › Internet of Things and AI
- Physical Sciences › Computer Science › Information Systems › Blockchain Technology Applications and Security
- Keywords
- Internet of Medical Things, privacy and security, risk assessment, healthcare data privacy, risk quantification, medical device security
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
