CoChat
Sign Up
Cited by 225IoT and Edge/Fog ComputingInternet of Things and AIThoreau and American Literature

The DOI matches its Crossref record; 140 of the 140 references it cites were found in a registry or an index.

A Survey on Security and Privacy Issues in Modern Healthcare Systems: Attacks and Defenses

Newaz, Akm Iqtidar, Sikder, Amit Kumar, Rahman, Mohammad Ashiqur, Uluagac, A. Selcuk·2021·ACM Transactions on Computing for Healthcare
DOI 10.1145/3453176
Open this paper in CoChat — free account

Abstract

Recent advancements in computing systems and wireless communications have made healthcare systems more efficient than before. Modern healthcare devices can monitor and manage different health conditions of patients automatically without any manual intervention from medical professionals. Additionally, the use of implantable medical devices, body area networks, and Internet of Things technologies in healthcare systems improve the overall patient monitoring and treatment process. However, these systems are complex in software and hardware, and optimizing between security, privacy, and treatment is crucial for healthcare systems because any security or privacy violation can lead to severe effects on patients’ treatments and overall health conditions. Indeed, the healthcare domain is increasingly facing security challenges and threats due to numerous design flaws and the lack of proper security measures in healthcare devices and applications. In this article, we explore various security and privacy threats to healthcare systems and discuss the consequences of these threats. We present a detailed survey of different potential attacks and discuss their impacts. Furthermore, we review the existing security measures proposed for healthcare systems and discuss their limitations. Finally, we conclude the article with future research directions toward securing healthcare systems against common vulnerabilities.

Overview

Integrity signals

Registry

Crossref · 10.1145/3453176

Cites

140 of 140 references verified0 citation errors · 0 not checkable

Statistics

Recomputing p-values needs the paper’s full text.

Verification

Claims the paper makes

This paper’s full text isn’t openly available, so its claims and self-check weren’t run. The registry and citation checks still apply.

Claims other papers make about this one

Each is checked against this paper’s own text: does it say what the citing paper says it does?

Citations

Cites

Show all 140 references

Research works printed but not linked: 78

  1. Meng Zhang , Anand Raghunathan , and Niraj K . Jha . 2014 . Trustworthiness of medical devices and body area networks.Proceedings of the IEEE 102, 8 (2014), 1174–1188. Meng Zhang, Anand Raghunathan, and Niraj K. Jha. 2014. Trustworthiness of medical devices and body area networks.Proceedings of the IEEE 102, 8 (2014), 1174–1188.
  2. Aravind Kailas and Mary Ann Ingram . 2009 . Wireless communications technology in telehealth systems . In Proceedings of the 2009 1st International Conference on Wireless Communication, Vehicular Technology, Information Theory, and Aerospace & Electronic Systems Technology.IEEE , Los Alamitos, CA, 926–930. Aravind Kailas and Mary Ann Ingram. 2009. Wireless communications technology in telehealth systems. In Proceedings of the 2009 1st International Conference on Wireless Communication, Vehicular Technology, Information Theory, and Aerospace & Electronic Systems Technology.IEEE, Los Alamitos, CA, 926–930.
  3. Xiaoyu Zhang , Hanjun Jiang , Xinkai Chen , Lingwei Zhang , and Zhihua Wang . 2009 . An energy efficient implementation of on-demand MAC protocol in medical Wireless Body Sensor Networks . In Proceedings of the International Symposium on Circuits and Systems. IEEE , Los Alamitos, CA. Xiaoyu Zhang, Hanjun Jiang, Xinkai Chen, Lingwei Zhang, and Zhihua Wang. 2009. An energy efficient implementation of on-demand MAC protocol in medical Wireless Body Sensor Networks. In Proceedings of the International Symposium on Circuits and Systems. IEEE, Los Alamitos, CA.
  4. 24x7. 2018 . Global Medical Device Market to Grow 4.5% . Retrieved May 25, 2021 from https://www.24x7mag.com/medical-equipment/global-medical-device-market-grow-4-5/ 24x7. 2018. Global Medical Device Market to Grow 4.5%. Retrieved May 25, 2021 from https://www.24x7mag.com/medical-equipment/global-medical-device-market-grow-4-5/
  5. Lisa Vaas . 2013 . Doctors disabled wireless in Dick Cheney’s pacemaker to thwart hacking. Naked Security by SOPHOS . Retrieved May 25, 2021 fromhttps://nakedsecurity.sophos.com/2013/10/22/doctors-disabled-wireless-in-dick-cheneys-pacemaker-to-thwart-hacking/ Lisa Vaas. 2013. Doctors disabled wireless in Dick Cheney’s pacemaker to thwart hacking. Naked Security by SOPHOS. Retrieved May 25, 2021 fromhttps://nakedsecurity.sophos.com/2013/10/22/doctors-disabled-wireless-in-dick-cheneys-pacemaker-to-thwart-hacking/
  6. Ahmed Hasnain Jalal , Amit Kumar Sikder , Fahmida Alam, Sharraf Samin, Sharmin S. Rahman, Md Morshed A. Khan, and Masudur R. Siddiquee. Early diagnosis with alternative approaches: Innovation in lung cancer care. Shanghai Chest 5 ( 2021 ), 1–14. Ahmed Hasnain Jalal, Amit Kumar Sikder, Fahmida Alam, Sharraf Samin, Sharmin S. Rahman, Md Morshed A. Khan, and Masudur R. Siddiquee. Early diagnosis with alternative approaches: Innovation in lung cancer care. Shanghai Chest 5 (2021), 1–14.
  7. Chunxiao Li , Anand Raghunathan , and Niraj K. Jha . 2011. Hijacking an insulin pump: Security attacks and defenses for a diabetes therapy system . In Proceedings of the Conference on e-Health Networking Applications and Services (Healthcom’11) . IEEE, Los Alamitos, CA, 150–156. Chunxiao Li, Anand Raghunathan, and Niraj K. Jha. 2011. Hijacking an insulin pump: Security attacks and defenses for a diabetes therapy system. In Proceedings of the Conference on e-Health Networking Applications and Services (Healthcom’11). IEEE, Los Alamitos, CA, 150–156.
  8. Younghyun Kim , Woosuk Lee , Anand Raghunathan , Vijay Raghunathan , and Niraj K . Jha . 2015 . Reliability and security of implantable and wearable medical devices. In Implantable Biomedical Microsystems. Elsevier , 167–199. Younghyun Kim, Woosuk Lee, Anand Raghunathan, Vijay Raghunathan, and Niraj K. Jha. 2015. Reliability and security of implantable and wearable medical devices. In Implantable Biomedical Microsystems. Elsevier, 167–199.
  9. D. Stalin David and A. Jeyachandran . 2016. A comprehensive survey of security mechanisms in healthcare applications . In Proceedings of the 2016 IEEE International Conference on Communications and Electronics Systems (ICCES’16) . D. Stalin David and A. Jeyachandran. 2016. A comprehensive survey of security mechanisms in healthcare applications. In Proceedings of the 2016 IEEE International Conference on Communications and Electronics Systems (ICCES’16).
  10. Karim Abouelmehdi , Abderrahim Beni-Hessane , and Hayat Khaloufi . 2018. Big healthcare data: Preserving security and privacy. Journal of Big Data 5 ( 2018 ), Article 1. Karim Abouelmehdi, Abderrahim Beni-Hessane, and Hayat Khaloufi. 2018. Big healthcare data: Preserving security and privacy. Journal of Big Data 5 (2018), Article 1.
  11. Zigbee Alliance . n.d. Home Page. Retrieved May 25, 2021 from https://www.zigbee.org/ Zigbee Alliance. n.d. Home Page. Retrieved May 25, 2021 from https://www.zigbee.org/
  12. Wenyi Liu , A. Selcuk Uluagac , and Raheem Beyah . 2014 . MACA: A privacy-preserving multi-factor cloud authentication system utilizing big data . In Proceedings of the Conference on Computer Communications Workshops (INFOCOM WKSHPS’14) . IEEE, Los Alamitos, CA, 518–523. Wenyi Liu, A. Selcuk Uluagac, and Raheem Beyah. 2014. MACA: A privacy-preserving multi-factor cloud authentication system utilizing big data. In Proceedings of the Conference on Computer Communications Workshops (INFOCOM WKSHPS’14). IEEE, Los Alamitos, CA, 518–523.
  13. Steve Hanna , Rolf Rolles , Andrés Molina-Markham , Pongsin Poosankam , Jeremiah Blocki , Kevin Fu , and Dawn Song . 2011 . Take two software updates and see me in the morning: The case for software security evaluations of medical devices . In Proceedings of the 2nd USENIX Conference on Health Security and Privacy (HealthSec’11) . Steve Hanna, Rolf Rolles, Andrés Molina-Markham, Pongsin Poosankam, Jeremiah Blocki, Kevin Fu, and Dawn Song. 2011. Take two software updates and see me in the morning: The case for software security evaluations of medical devices. In Proceedings of the 2nd USENIX Conference on Health Security and Privacy (HealthSec’11).
  14. Eric Clausing , Michael Schiefer , Ulf Lösche , and Maik Morgenstern . 2015. Security Evaluation of Nine Fitness Trackers . Independent IT–Security Institute . Eric Clausing, Michael Schiefer, Ulf Lösche, and Maik Morgenstern. 2015. Security Evaluation of Nine Fitness Trackers. Independent IT–Security Institute.
  15. Becker’s Clinical Leadership & Infection Control . 2016 . Medical Devices at Risk of DoS Attacks—5 Insights . Retrieved May 26, 2021 from https://www.beckersasc.com/asc-quality-infection-control/medical-devices-at-risk-of-denial-of-service-attacks-5-insights.html Becker’s Clinical Leadership & Infection Control. 2016. Medical Devices at Risk of DoS Attacks—5 Insights. Retrieved May 26, 2021 from https://www.beckersasc.com/asc-quality-infection-control/medical-devices-at-risk-of-denial-of-service-attacks-5-insights.html
  16. Ding Ding , Mauro Conti , and Agusti Solanas . 2016 . A smart health application and its related privacy issues . In Proceedings of the IEEE SCSP Workshop. Ding Ding, Mauro Conti, and Agusti Solanas. 2016. A smart health application and its related privacy issues. In Proceedings of the IEEE SCSP Workshop.
  17. Peter Mell , Karen Scarfone , and Sasha Romanosky . 2007. A Complete Guide to the Common Vulnerability Scoring System Version 2.0 , Vol. 1 . FIRST. Peter Mell, Karen Scarfone, and Sasha Romanosky. 2007. A Complete Guide to the Common Vulnerability Scoring System Version 2.0, Vol. 1. FIRST.
  18. IEEE Cybersecurity . 2016 . WearFit: Security Design Analysis of a Wearable Fitness Tracker . Retrieved May 25, 2021 from https://cybersecurity.ieee.org/blog/2016/02/17/wearfit-security-design-analysis-of-a-wearable-fitness-tracker/ IEEE Cybersecurity. 2016. WearFit: Security Design Analysis of a Wearable Fitness Tracker. Retrieved May 25, 2021 from https://cybersecurity.ieee.org/blog/2016/02/17/wearfit-security-design-analysis-of-a-wearable-fitness-tracker/
  19. U.S. Food and Drug Administration . 2016. Postmarket Management of Cybersecurity in Medical Devices Draft Guidance for Industry and Food and Drug Administration Staff. U.S. Food and Drug Administration , Silver Spring, MD . U.S. Food and Drug Administration. 2016. Postmarket Management of Cybersecurity in Medical Devices Draft Guidance for Industry and Food and Drug Administration Staff. U.S. Food and Drug Administration, Silver Spring, MD.
  20. AAMI. 2018 . Orangeworm Cyberattack Group Puts Healthcare Industry in the Crosshairs . Retrieved May 25, 2021 from http://www.aami.org/newsviews/newsdetail.aspx?ItemNumber=6205/ AAMI. 2018. Orangeworm Cyberattack Group Puts Healthcare Industry in the Crosshairs. Retrieved May 25, 2021 from http://www.aami.org/newsviews/newsdetail.aspx?ItemNumber=6205/
  21. Guy Martin , Paul Martin , Chris Hankin , Ara Darzi , and James Kinross . 2017. Cybersecurity and healthcare: How safe are we?BMJ 358 ( 2017 ), j3179. Guy Martin, Paul Martin, Chris Hankin, Ara Darzi, and James Kinross. 2017. Cybersecurity and healthcare: How safe are we?BMJ 358 (2017), j3179.
  22. Hacker News . 2019 . New Zeppelin Ransomware Targeting Tech and Health Companies . Retrieved May 25, 2021 from https://thehackernews.com/2019/12/zeppelin-ransomware-attacks.html Hacker News. 2019. New Zeppelin Ransomware Targeting Tech and Health Companies. Retrieved May 25, 2021 from https://thehackernews.com/2019/12/zeppelin-ransomware-attacks.html
  23. Health IT Security . 2019 . 56% of Health Providers Still Rely on Legacy Windows 7 Systems . Retrieved May 25, 2021 from https://healthitsecurity.com/news/56-of-health-providers-still-rely-on-legacy-windows-7-systems/ Health IT Security. 2019. 56% of Health Providers Still Rely on Legacy Windows 7 Systems. Retrieved May 25, 2021 from https://healthitsecurity.com/news/56-of-health-providers-still-rely-on-legacy-windows-7-systems/
  24. Billy Rios and Jonathan Butts . 2017 . Security Evaluation of the Implantable Cardiac Device Ecosystem Architecture and Implementation Interdependencies . Retrieved May 25, 2021 from https://www.ledecodeur.ch/wp-content/uploads/2017/05/Pacemaker-Ecosystem-Evaluation.pdf Billy Rios and Jonathan Butts. 2017. Security Evaluation of the Implantable Cardiac Device Ecosystem Architecture and Implementation Interdependencies. Retrieved May 25, 2021 from https://www.ledecodeur.ch/wp-content/uploads/2017/05/Pacemaker-Ecosystem-Evaluation.pdf
  25. Jaewoo Shim , K. H. Lim , J. M. Jung , S. J. Cho , M. K. Park , and S. C. Han . 2017 . A case study on vulnerability analysis and firmware modification attack for a wearable fitness tracker . IT Convergence Practice 5 , 4 (2017), 25 – 33 . Jaewoo Shim, K. H. Lim, J. M. Jung, S. J. Cho, M. K. Park, and S. C. Han. 2017. A case study on vulnerability analysis and firmware modification attack for a wearable fitness tracker. IT Convergence Practice 5, 4 (2017), 25–33.
  26. CISION. 2019 . Vulnerabilities Disclosed by CyberMDX Allow Attackers to Take Over Infusion Pumps . Retrieved May 25, 2021 from https://www.prnewswire.com/il/news-releases/vulnerabilities-disclosed-by-cybermdx-allow-attackers-to-take-over-infusion-pumps-300867517.html CISION. 2019. Vulnerabilities Disclosed by CyberMDX Allow Attackers to Take Over Infusion Pumps. Retrieved May 25, 2021 from https://www.prnewswire.com/il/news-releases/vulnerabilities-disclosed-by-cybermdx-allow-attackers-to-take-over-infusion-pumps-300867517.html
  27. Emma McMahon , Ryan Williams , Malaka El , Sagar Samtani , Mark Patton , and Hsinchun Chen . 2017 . Assessing medical device vulnerabilities on the Internet of Things . In Proceedings of the International Conference on Intelligence and Security Informatics (ISI’17) . IEEE, Los Alamitos, CA, 176–178. Emma McMahon, Ryan Williams, Malaka El, Sagar Samtani, Mark Patton, and Hsinchun Chen. 2017. Assessing medical device vulnerabilities on the Internet of Things. In Proceedings of the International Conference on Intelligence and Security Informatics (ISI’17). IEEE, Los Alamitos, CA, 176–178.
  28. Tom Mahler Nir Nissim Erez Shalom Israel Goldenberg Guy Hassman Arnon Makori Itzik Kochav Yuval Elovici and Yuval Shahar. 2018. Know your enemy: Characteristics of cyber-attacks on medical imaging devices. arxiv:1801.05583. Tom Mahler Nir Nissim Erez Shalom Israel Goldenberg Guy Hassman Arnon Makori Itzik Kochav Yuval Elovici and Yuval Shahar. 2018. Know your enemy: Characteristics of cyber-attacks on medical imaging devices. arxiv:1801.05583. · arXiv
  29. UpGuard. 2019 . Medical Procedure: How a Misconfigured Storage Bucket Exposed Medical Data . Retrieved May 25, 2021 from https://www.upguard.com/breaches/data-leak-hipaa-medico-s3/ UpGuard. 2019. Medical Procedure: How a Misconfigured Storage Bucket Exposed Medical Data. Retrieved May 25, 2021 from https://www.upguard.com/breaches/data-leak-hipaa-medico-s3/
  30. Renchi Yan , Teng Xu , and Miodrag Potkonjak . 2014 . Semantic attacks on wireless medical devices . In Proceedings of the 2014 IEEE SENSORS Conference. IEEE , Los Alamitos, CA. Renchi Yan, Teng Xu, and Miodrag Potkonjak. 2014. Semantic attacks on wireless medical devices. In Proceedings of the 2014 IEEE SENSORS Conference. IEEE, Los Alamitos, CA.
  31. Youngseok Park , Yunmok Son , Hocheol Shin , Dohyun Kim , and Yongdae Kim . 2016 . This ain’t your dose: Sensor spoofing attack on medical infusion pump . In Proceedings of the 10th USENIX Workshop on Offensive Technologies. Youngseok Park, Yunmok Son, Hocheol Shin, Dohyun Kim, and Yongdae Kim. 2016. This ain’t your dose: Sensor spoofing attack on medical infusion pump. In Proceedings of the 10th USENIX Workshop on Offensive Technologies.
  32. Threat Post . 2011 . Blind Attack on Wireless Insulin Pumps Could Deliver Lethal Dose . Retrieved May 25, 2021 from https://threatpost.com/blind-attack-wireless-insulin-pumps-could-deliver-lethal-dose-102711/75808/ Threat Post. 2011. Blind Attack on Wireless Insulin Pumps Could Deliver Lethal Dose. Retrieved May 25, 2021 from https://threatpost.com/blind-attack-wireless-insulin-pumps-could-deliver-lethal-dose-102711/75808/
  33. Jenny Knackmuß , Thomas Möller , Wilfried Pommerien , and Reiner Creutzburg . 2015 . Security risk of medical devices in IT networks: The case of an infusion pump unit . In Proceedings of the 2015 SPIE Conference. 9411 . Jenny Knackmuß, Thomas Möller, Wilfried Pommerien, and Reiner Creutzburg. 2015. Security risk of medical devices in IT networks: The case of an infusion pump unit. In Proceedings of the 2015 SPIE Conference. 9411.
  34. Brian Cusack , Bryce Antony , Gerard Ward , and Shaunak Mody . 2017 . Assessment of security vulnerabilities in wearable devices . In Proceedings of the Australian Information Security Management Conference. Brian Cusack, Bryce Antony, Gerard Ward, and Shaunak Mody. 2017. Assessment of security vulnerabilities in wearable devices. In Proceedings of the Australian Information Security Management Conference.
  35. Tamara Bonaci , Jeffrey Herron , Charlie Matlack , and Howard Jay Chizeck . 2014 . Securing the exocortex: A twenty-first century cybernetics challenge . In Proceedings of the Conference on Norbert Wiener in the 21st Century (21CW’14) . IEEE, Los Alamitos, CA, 1–8. Tamara Bonaci, Jeffrey Herron, Charlie Matlack, and Howard Jay Chizeck. 2014. Securing the exocortex: A twenty-first century cybernetics challenge. In Proceedings of the Conference on Norbert Wiener in the 21st Century (21CW’14). IEEE, Los Alamitos, CA, 1–8.
  36. Qiaoyang Zhang and Zhiyao Liang . 2017 . Security analysis of bluetooth low energy based smart wristbands . In Proceedings of the 2017 2nd International Conference on Frontiers of Sensors Technologies (ICFST’17) . Qiaoyang Zhang and Zhiyao Liang. 2017. Security analysis of bluetooth low energy based smart wristbands. In Proceedings of the 2017 2nd International Conference on Frontiers of Sensors Technologies (ICFST’17).
  37. Kassem Fawaz , Kyu-Han Kim , and Kang G. Shin . 2016. Protecting privacy of BLE device users . In Proceedings of the 25th USENIX Security Symposium. Kassem Fawaz, Kyu-Han Kim, and Kang G. Shin. 2016. Protecting privacy of BLE device users. In Proceedings of the 25th USENIX Security Symposium.
  38. Kerolos Lotfy and Matthew L. Hale . 2016. Assessing pairing and data exchange mechanism security in the wearable Internet of Things . In Proceedings of the International Conference on Mobile Services (MS’16) . IEEE, Los Alamitos, CA, 25–32. Kerolos Lotfy and Matthew L. Hale. 2016. Assessing pairing and data exchange mechanism security in the wearable Internet of Things. In Proceedings of the International Conference on Mobile Services (MS’16). IEEE, Los Alamitos, CA, 25–32.
  39. QianQian Li , Ding Ding , and Mauro Conti . 2015 . Brain-computer interface applications: Security and privacy challenges . In Proceedings of the 2015 IEEE Conference on Communications and Network Security (CNS’15) . QianQian Li, Ding Ding, and Mauro Conti. 2015. Brain-computer interface applications: Security and privacy challenges. In Proceedings of the 2015 IEEE Conference on Communications and Network Security (CNS’15).
  40. Jerome Radcliffe . 2011 . Hacking medical devices for fun and insulin: Breaking the human SCADA system . In Proceedings of the Black Hat Conference. Jerome Radcliffe. 2011. Hacking medical devices for fun and insulin: Breaking the human SCADA system. In Proceedings of the Black Hat Conference.
  41. Hacker News . 2020 . A Dozen Vulnerabilities Affect Millions of Bluetooth LE Powered Devices . Retrieved May 25, 2021 from https://thehackernews.com/2020/02/hacking-bluetooth-vulnerabilities.html Hacker News. 2020. A Dozen Vulnerabilities Affect Millions of Bluetooth LE Powered Devices. Retrieved May 25, 2021 from https://thehackernews.com/2020/02/hacking-bluetooth-vulnerabilities.html
  42. Vahab Pournaghshband , Majid Sarrafzadeh , and Peter Reiher . 2012 . Securing legacy mobile medical devices . In Proceedings of the International Conference on Wireless Mobile Communication and Healthcare. 163–172 . Vahab Pournaghshband, Majid Sarrafzadeh, and Peter Reiher. 2012. Securing legacy mobile medical devices. In Proceedings of the International Conference on Wireless Mobile Communication and Healthcare. 163–172.
  43. Jagmohan Chauhan , Suranga Seneviratne , Mohamed Ali Kaafar , Anirban Mahanti , and Aruna Seneviratne . 2016 . Characterization of early smartwatch apps . In Proceedings of the International Conference on Pervasive Computing and Communication Workshops (PerCom Workshops’16) . IEEE, Los Alamitos, CA. Jagmohan Chauhan, Suranga Seneviratne, Mohamed Ali Kaafar, Anirban Mahanti, and Aruna Seneviratne. 2016. Characterization of early smartwatch apps. In Proceedings of the International Conference on Pervasive Computing and Communication Workshops (PerCom Workshops’16). IEEE, Los Alamitos, CA.
  44. A. K. M. Iqtidar Newaz , Amit Kumar Sikder , Leonardo Babun , and A. Selcuk Uluagac . 2020. Heka: A novel intrusion detection system for attacks to personal medical devices . In Proceedings of the 2020 IEEE Conference on Communications and Network Security (CNS’20) . IEEE, Los Alamitos, CA, 1–9. A. K. M. Iqtidar Newaz, Amit Kumar Sikder, Leonardo Babun, and A. Selcuk Uluagac. 2020. Heka: A novel intrusion detection system for attacks to personal medical devices. In Proceedings of the 2020 IEEE Conference on Communications and Network Security (CNS’20). IEEE, Los Alamitos, CA, 1–9.
  45. Tony F. Wu , Karthik Ganesan , Yunqing Alexander Hu , H.-S. Philip Wong, S. Simon Wong, and Subhasish Mitra. 2016 . TPAD : Hardware Trojan prevention and detection for trusted integrated circuits.IEEE Transactions on Computer-Aided Design of Integrated Circuits and Systems 35, 4 (2016), 521–534. Tony F. Wu, Karthik Ganesan, Yunqing Alexander Hu, H.-S. Philip Wong, S. Simon Wong, and Subhasish Mitra. 2016. TPAD: Hardware Trojan prevention and detection for trusted integrated circuits.IEEE Transactions on Computer-Aided Design of Integrated Circuits and Systems 35, 4 (2016), 521–534.
  46. Stuart Schechter . 2010 . Security that is meant to be skin deep using ultraviolet micropigmentation to store emergency-access keys for implantable medical devices . Microsoft. Retrieved May 25, 2021 from https://www.microsoft.com/en-us/research/publication/security-that-is-meant-to-be-skin-deep-using-ultraviolet-micropigmentation-to-store-emergency-access-keys-for-implantable-medical-devices Stuart Schechter. 2010. Security that is meant to be skin deep using ultraviolet micropigmentation to store emergency-access keys for implantable medical devices. Microsoft. Retrieved May 25, 2021 from https://www.microsoft.com/en-us/research/publication/security-that-is-meant-to-be-skin-deep-using-ultraviolet-micropigmentation-to-store-emergency-access-keys-for-implantable-medical-devices
  47. Guido Bertoni , Joan Daemen , Michaël Peeters , and Gilles Van Assche . 2013 . Keccak. In Proceedings of the Annual International Conference on the Theory and Applications of Cryptographic Techniques. 313–314 . Guido Bertoni, Joan Daemen, Michaël Peeters, and Gilles Van Assche. 2013. Keccak. In Proceedings of the Annual International Conference on the Theory and Applications of Cryptographic Techniques. 313–314.
  48. Lu Shi , Jiawei Yuan , Shucheng Yu , and Ming Li . 2013 . ASK-BAN: Authenticated secret key extraction utilizing channel characteristics for body area networks . In Proceedings of the 6th ACM Conference on Security and Privacy in Wireless and Mobile Networks. ACM , New York, NY. Lu Shi, Jiawei Yuan, Shucheng Yu, and Ming Li. 2013. ASK-BAN: Authenticated secret key extraction utilizing channel characteristics for body area networks. In Proceedings of the 6th ACM Conference on Security and Privacy in Wireless and Mobile Networks. ACM, New York, NY.
  49. Saied Hosseini-Khayat . 2011 . A lightweight security protocol for ultra-low power ASIC implementation for wireless implantable medical devices . In Proceedings of the 5th International Symposium on Medical Information and Communication Technology. IEEE , Los Alamitos, CA. Saied Hosseini-Khayat. 2011. A lightweight security protocol for ultra-low power ASIC implementation for wireless implantable medical devices. In Proceedings of the 5th International Symposium on Medical Information and Communication Technology. IEEE, Los Alamitos, CA.
  50. Meng Zhang , Mehran Mozaffari Kermani , Anand Raghunathan , and Niraj K. Jha . 2013. Energy-efficient and secure sensor data transmission using encompression . In Proceedings of the 26th International Conference on VLSI Design. IEEE , Los Alamitos, CA, 31–36. Meng Zhang, Mehran Mozaffari Kermani, Anand Raghunathan, and Niraj K. Jha. 2013. Energy-efficient and secure sensor data transmission using encompression. In Proceedings of the 26th International Conference on VLSI Design. IEEE, Los Alamitos, CA, 31–36.
  51. Kubra Saeedi . 2019 . Machine Learning for Ddos Detection in Packet Core Network for IoT . Retrieved May 25, 2021 from https://www.diva-portal.org/smash/get/diva2:1360486/FULLTEXT02.pdf Kubra Saeedi. 2019. Machine Learning for Ddos Detection in Packet Core Network for IoT. Retrieved May 25, 2021 from https://www.diva-portal.org/smash/get/diva2:1360486/FULLTEXT02.pdf
  52. Sudip Vhaduri and Christian Poellabauer . 2017 . Wearable device user authentication using physiological and behavioral metrics . In Proceedings of the 28th Annual International Symposium on Personal, Indoor, and Mobile Radio Communications (PIMRC’17) . IEEE, Los Alamitos, CA. Sudip Vhaduri and Christian Poellabauer. 2017. Wearable device user authentication using physiological and behavioral metrics. In Proceedings of the 28th Annual International Symposium on Personal, Indoor, and Mobile Radio Communications (PIMRC’17). IEEE, Los Alamitos, CA.
  53. A. K. M. Iqtidar Newaz , Amit Kumar Sikder , Mohammad Ashiqur Rahman , and A. Selcuk Uluagac . 2019. Healthguard: A machine learning-based security framework for smart healthcare systems . In Proceedings of the 2019 6th International Conference on Social Networks Analysis, Management, and Security (SNAMS’19) . IEEE, Los Alamitos, CA, 389–396. A. K. M. Iqtidar Newaz, Amit Kumar Sikder, Mohammad Ashiqur Rahman, and A. Selcuk Uluagac. 2019. Healthguard: A machine learning-based security framework for smart healthcare systems. In Proceedings of the 2019 6th International Conference on Social Networks Analysis, Management, and Security (SNAMS’19). IEEE, Los Alamitos, CA, 389–396.
  54. Xiali Hei , Xiaojiang Du , Jie Wu , and Fei Hu . 2010 . Defending resource depletion attacks on implantable medical devices . In Proceedings of the 2010 IEEE Global Telecommunications Conference (GLOBECOM’10) . Xiali Hei, Xiaojiang Du, Jie Wu, and Fei Hu. 2010. Defending resource depletion attacks on implantable medical devices. In Proceedings of the 2010 IEEE Global Telecommunications Conference (GLOBECOM’10).
  55. Chenglong Fu , Xiaojiang Du , Longfei Wu , Qiang Zeng , Amr Mohamed , and Mohsen Guizani . 2019. POKs based secure and energy-efficient access control for implantable medical devices . In Security and Privacy in Communication Systems . Springer , 105–125. Chenglong Fu, Xiaojiang Du, Longfei Wu, Qiang Zeng, Amr Mohamed, and Mohsen Guizani. 2019. POKs based secure and energy-efficient access control for implantable medical devices. In Security and Privacy in Communication Systems. Springer, 105–125.
  56. Gautam Srivastava , Jorge Crichigno , and Shalini Dhar . 2019 . A light and secure healthcare blockchain for IoT medical devices . In Proceedings of the 2019 IEEE Canadian Conference of Electrical and Computer Engineering (CCECE’19) . IEEE, Los Alamitos, CA, 1–5. Gautam Srivastava, Jorge Crichigno, and Shalini Dhar. 2019. A light and secure healthcare blockchain for IoT medical devices. In Proceedings of the 2019 IEEE Canadian Conference of Electrical and Computer Engineering (CCECE’19). IEEE, Los Alamitos, CA, 1–5.
  57. Gautam Srivastava , Reza M. Parizi , Ali Dehghantanha , and Kim-Kwang Raymond Choo . 2019 . Data sharing and privacy for patient IoT devices using blockchain . In Proceedings of the International Conference on Smart City and Informatization. 334–348 . Gautam Srivastava, Reza M. Parizi, Ali Dehghantanha, and Kim-Kwang Raymond Choo. 2019. Data sharing and privacy for patient IoT devices using blockchain. In Proceedings of the International Conference on Smart City and Informatization. 334–348.
  58. Charles Lamech and Jim Plusquellic . 2012 . Trojan detection based on delay variations measured using a high-precision, low-overhead embedded test structure . In Proceedings of the 2012 Conference on Hardware-Oriented Security and Trust (HOST’12) . IEEE, Los Alamitos, CA, 75–82. Charles Lamech and Jim Plusquellic. 2012. Trojan detection based on delay variations measured using a high-precision, low-overhead embedded test structure. In Proceedings of the 2012 Conference on Hardware-Oriented Security and Trust (HOST’12). IEEE, Los Alamitos, CA, 75–82.
  59. Kyung Sup Kwak , Sana Ullah , and Niamat Ullah . 2010 . An overview of IEEE 802.15. 6 standard . In Proceedings of the Applied Sciences in Biomedical and Communication Technologies (ISABEL’10) . IEEE, Los Alamitos, CA, 1–6. Kyung Sup Kwak, Sana Ullah, and Niamat Ullah. 2010. An overview of IEEE 802.15. 6 standard. In Proceedings of the Applied Sciences in Biomedical and Communication Technologies (ISABEL’10). IEEE, Los Alamitos, CA, 1–6.
  60. Kris Tiri , Moonmoon Akmal , and Ingrid Verbauwhede . 2002 . A dynamic and differential CMOS logic with signal independent power consumption to withstand differential power analysis on smart cards . In Proceedings of the 2020 Solid-State Circuits Conference. IEEE , Los Alamitos, CA. Kris Tiri, Moonmoon Akmal, and Ingrid Verbauwhede. 2002. A dynamic and differential CMOS logic with signal independent power consumption to withstand differential power analysis on smart cards. In Proceedings of the 2020 Solid-State Circuits Conference. IEEE, Los Alamitos, CA.
  61. Kris Tiri and Ingrid Verbauwhede . 2004 . Charge recycling sense amplifier based logic: Securing low power security ICs against DPA . In Proceedings of the 30th European Conference on Solid-State Circuits. 179–182 . Kris Tiri and Ingrid Verbauwhede. 2004. Charge recycling sense amplifier based logic: Securing low power security ICs against DPA. In Proceedings of the 30th European Conference on Solid-State Circuits. 179–182.
  62. Shane S. Clark , Benjamin Ransford , Amir Rahmati , Shane Guineau , Jacob Sorber , Wenyuan Xu , Kevin Fu , et al. 2013 . WattsUpDoc: Power side channels to nonintrusively discover untargeted malware on embedded medical devices . In Proceedings of the 2013 USENIX Conference on Safety, Security, Privacy, and Interoperability of Health Information Technologies (HealthTech’13) . Shane S. Clark, Benjamin Ransford, Amir Rahmati, Shane Guineau, Jacob Sorber, Wenyuan Xu, Kevin Fu, et al. 2013. WattsUpDoc: Power side channels to nonintrusively discover untargeted malware on embedded medical devices. In Proceedings of the 2013 USENIX Conference on Safety, Security, Privacy, and Interoperability of Health Information Technologies (HealthTech’13).
  63. 10.5555/2372366.2372372 · DOI
  64. Chunqiang Hu , Xiuzhen Cheng , Fan Zhang , Dengyuan Wu , Xiaofeng Liao , and Dechang Chen . 2013 . OPFKA: Secure and efficient ordered-physiological-feature-based key agreement for wireless body area networks . In Proceedings of the 2013 IEEE INFOCOM Conference. IEEE , Los Alamitos, CA, 2274–2282. Chunqiang Hu, Xiuzhen Cheng, Fan Zhang, Dengyuan Wu, Xiaofeng Liao, and Dechang Chen. 2013. OPFKA: Secure and efficient ordered-physiological-feature-based key agreement for wireless body area networks. In Proceedings of the 2013 IEEE INFOCOM Conference. IEEE, Los Alamitos, CA, 2274–2282.
  65. Sang-Yoon Chang , Yih-Chun Hu , Hans Anderson , Ting Fu , and Evelyn Y. L. Huang . 2012. Body area network security: Robust key establishment using human body channel . In Proceedings of the 3rd USENIX Conference on Health Security and Privacy (HealthSec’12) . 5. Sang-Yoon Chang, Yih-Chun Hu, Hans Anderson, Ting Fu, and Evelyn Y. L. Huang. 2012. Body area network security: Robust key establishment using human body channel. In Proceedings of the 3rd USENIX Conference on Health Security and Privacy (HealthSec’12). 5.
  66. Sriram Cherukuri , Krishna K. Venkatasubramanian , and Sandeep K. S. Gupta . 2003. Biosec: A biometric based approach for securing communication in wireless networks of biosensors implanted in the human body . In Proceedings of the International Conference on Parallel Processing Workshops. IEEE , Los Alamitos, CA. Sriram Cherukuri, Krishna K. Venkatasubramanian, and Sandeep K. S. Gupta. 2003. Biosec: A biometric based approach for securing communication in wireless networks of biosensors implanted in the human body. In Proceedings of the International Conference on Parallel Processing Workshops. IEEE, Los Alamitos, CA.
  67. Hang Cai and Krishna K . Venkatasubramanian . 2019 . Data-driven detection of sensor-hijacking attacks on electrocardiogram sensors. In Mission-Oriented Sensor Networks and Systems: Art and Science. Springer , 757–781. Hang Cai and Krishna K. Venkatasubramanian. 2019. Data-driven detection of sensor-hijacking attacks on electrocardiogram sensors. In Mission-Oriented Sensor Networks and Systems: Art and Science. Springer, 757–781.
  68. Eric Freudenthal , David Herrera , Frederick Kautz , Carlos Natividad , Alexandria Ogrey , Justin Sipla , Abimael Sosa , Carlos Betancourt , and Leonardo Estevez . 2007 . Suitability of NFC for medical device communication and power delivery . In Proceedings of the 2007 Engineering in Medicine and Biology Workshop. IEEE , Los Alamitos, CA, 51–54. Eric Freudenthal, David Herrera, Frederick Kautz, Carlos Natividad, Alexandria Ogrey, Justin Sipla, Abimael Sosa, Carlos Betancourt, and Leonardo Estevez. 2007. Suitability of NFC for medical device communication and power delivery. In Proceedings of the 2007 Engineering in Medicine and Biology Workshop. IEEE, Los Alamitos, CA, 51–54.
  69. Priyanka Bagade , Ayan Banerjee , Joseph Milazzo , and Sandeep K. S . Gupta . 2013 . Protect your BSN : No handshakes, just namaste! In In Proceedings of the 2013 IEEE International Conference on Body Sensor Networks . Priyanka Bagade, Ayan Banerjee, Joseph Milazzo, and Sandeep K. S. Gupta. 2013. Protect your BSN: No handshakes, just namaste! In In Proceedings of the 2013 IEEE International Conference on Body Sensor Networks.
  70. Tamara Denning , Kevin Fu , and Tadayoshi Kohno . 2008 . Absence makes the heart grow fonder: New directions for implantable medical device security . In Proceedings of the 3rd Conference on Hot Topics in Security (HOTSEC’08) . Article 5, 7 pages. Tamara Denning, Kevin Fu, and Tadayoshi Kohno. 2008. Absence makes the heart grow fonder: New directions for implantable medical device security. In Proceedings of the 3rd Conference on Hot Topics in Security (HOTSEC’08). Article 5, 7 pages.
  71. Fengyuan Xu , Zhengrui Qin , Chiu C. Tan , Baosheng Wang , and Qun Li . 2011 . IMDGuard: Securing IMD with the external wearable guardian . In Proceedings of the 2011 IEEE INFOCOM Conference. Fengyuan Xu, Zhengrui Qin, Chiu C. Tan, Baosheng Wang, and Qun Li. 2011. IMDGuard: Securing IMD with the external wearable guardian. In Proceedings of the 2011 IEEE INFOCOM Conference.
  72. Amit Kumar Sikder , Hidayet Aksu , and A. Selcuk Uluagac . 2017. 6thSense: A context-aware sensor-based attack detector for smart devices . In Proceedings of the 26th USENIX Security Symposium (USENIX Security’17) . 397–414. Amit Kumar Sikder, Hidayet Aksu, and A. Selcuk Uluagac. 2017. 6thSense: A context-aware sensor-based attack detector for smart devices. In Proceedings of the 26th USENIX Security Symposium (USENIX Security’17). 397–414.
  73. Patricia A. H. Williams and Andrew J . Woodward . 2015 . Cybersecurity vulnerabilities in medical devices: A complex environment and multifaceted problem. Medical Devices (Auckland, NZ) 8 (2015), 305. Patricia A. H. Williams and Andrew J. Woodward. 2015. Cybersecurity vulnerabilities in medical devices: A complex environment and multifaceted problem. Medical Devices (Auckland, NZ) 8 (2015), 305.
  74. Ioannis Chatzigiannakis and Andreas Strikos . 2007 . A decentralized intrusion detection system for increasing security of wireless sensor networks . In Proceedings of the 2007 IEEE Conference on Emerging Technologies and Factory Automation (EFTA’17) . IEEE, Los Alamitos, CA, 1408–1411. Ioannis Chatzigiannakis and Andreas Strikos. 2007. A decentralized intrusion detection system for increasing security of wireless sensor networks. In Proceedings of the 2007 IEEE Conference on Emerging Technologies and Factory Automation (EFTA’17). IEEE, Los Alamitos, CA, 1408–1411.
  75. Md Hasan Shahriar , Nur Imtiazul Haque , Mohammad Ashiqur Rahman , and Miguel Alonso . 2020 . G-IDS: Generative adversarial networks assisted intrusion detection system . In Proceedings of the 2020 IEEE 44th Annual Computers, Software, and Applications Conference (COMPSAC’20) . IEEE, Los Alamitos, CA, 376–385. Md Hasan Shahriar, Nur Imtiazul Haque, Mohammad Ashiqur Rahman, and Miguel Alonso. 2020. G-IDS: Generative adversarial networks assisted intrusion detection system. In Proceedings of the 2020 IEEE 44th Annual Computers, Software, and Applications Conference (COMPSAC’20). IEEE, Los Alamitos, CA, 376–385.
  76. Amit Kumar Sikder , Leonardo Babun , Z. Berkay Celik , Abbas Acar , Hidayet Aksu , Patrick McDaniel , Engin Kirda , and A. Selcuk Uluagac . 2020. Kratos: Multi-user multi-device-aware access control system for the smart home . In Proceedings of the 13th ACM Conference on Security and Privacy in Wireless and Mobile Networks (WiSec’20) . 1–12. Amit Kumar Sikder, Leonardo Babun, Z. Berkay Celik, Abbas Acar, Hidayet Aksu, Patrick McDaniel, Engin Kirda, and A. Selcuk Uluagac. 2020. Kratos: Multi-user multi-device-aware access control system for the smart home. In Proceedings of the 13th ACM Conference on Security and Privacy in Wireless and Mobile Networks (WiSec’20). 1–12.
  77. Samuel G. Finlayson , Hyung Won Chung , Isaac S. Kohane, and Andrew L. Beam. 2018 . Adversarial attacks against medical deep learning systems. arxiv:1804.05296. Samuel G. Finlayson, Hyung Won Chung, Isaac S. Kohane, and Andrew L. Beam. 2018. Adversarial attacks against medical deep learning systems. arxiv:1804.05296. · arXiv
  78. A. K. M. Newaz , Nur Imtiazul Haque , Amit Kumar Sikder , Mohammad Ashiqur Rahman , and A. Selcuk Uluagac . 2020. Adversarial attacks to machine learning-based smart healthcare systems . In Proceedings of the IEEE Global Communications Conference (GLOBECOM’20) . A. K. M. Newaz, Nur Imtiazul Haque, Amit Kumar Sikder, Mohammad Ashiqur Rahman, and A. Selcuk Uluagac. 2020. Adversarial attacks to machine learning-based smart healthcare systems. In Proceedings of the IEEE Global Communications Conference (GLOBECOM’20).

Cited by

Sorted by citations

See all 225

Related

Metadata

Authors
Newaz, A. I., Sikder, A. K., Rahman, M. A., & Uluagac, A. S.
Affiliations
Florida International University (US)
ORCID
Venue
ACM Transactions on Computing for Healthcare
Publisher
Association for Computing Machinery (ACM)
Published
2021-07-21
Volume
2
Issue
3
Pages
1-44
ISSN
  • 2637-8051 (ISSN-L)
  • 2691-1957
DOI
10.1145/3453176
OpenAlex
W3186626619
Cited by
225
References
140
Citations by year
2026: 33 · 2025: 53 · 2024: 62 · 2023: 35 · 2022: 31 · 2021: 10
FWCI
15.48
Type
journal article
Language
en
Open access
closed
Licence
www.acm.org/publications/policies/copyright_policy#Background (vor)
Locations
ACM Transactions on Computing for Healthcare (publishedVersion)
Funders
National Science Foundation (SF-CAREER-CNS-1453647, NSF-CNS-171811)
Topics
  • Physical Sciences › Computer Science › Computer Networks and Communications › IoT and Edge/Fog Computing
  • Physical Sciences › Computer Science › Information Systems › Internet of Things and AI
  • Health Sciences › Health Professions › Health Information Management › Thoreau and American Literature
Keywords
healthcare privacy, security threats, biomedical implants, body area networks, Internet of Things, patient monitoring, security vulnerabilities, security measures

About these checks

Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.

Statistics and arithmetic are recomputed, not judged.

Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.

What counts as a claim ›How we measure confidence ›How we check this ›

Are you an author, or do you see a problem with this page? Request a review