A Bleeding Digital Heart: Identifying Residual Data Generation from Smartphone Applications Interacting with Medical Devices

Grispos, George; Glisson, William Bradley; Cooper, Peter

doi:10.24251/hicss.2019.516

Cited by 15 publications

(5 citation statements)

References 24 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Further complicating matters, a separate report from Irdeto [6] suggests that 42% of IoT attacks results in compromised user or device data. Hence, cybercriminals who maliciously collect information from these devices could cross-link this information from other sources and develop detailed intelligence about individuals and businesses [6], [7].…”

Section: Introductionmentioning

confidence: 99%

A Digital Forensics Investigation of a Smart Scale IoT Ecosystem

Grispos¹,

Tursi²,

Choo³

et al. 2021

Preprint

Self Cite

View full text Add to dashboard Cite

The introduction of Internet of Things (IoT) ecosystems into personal homes and businesses prompts the idea that such ecosystems contain residual data, which can be used as digital evidence in court proceedings. However, the forensic examination of IoT ecosystems introduces a number of investigative problems for the digital forensics community. One of these problems is the limited availability of practical processes and techniques to guide the preservation and analysis of residual data from these ecosystems. Focusing on a detailed case study of the iHealth Smart Scale ecosystem, we present an empirical demonstration of practical techniques to recover residual data from different evidence sources within a smart scale ecosystem. We also document the artifacts that can be recovered from a smart scale ecosystem, which could inform a digital (forensic) investigation. The findings in this research provides a foundation for future studies regarding the development of processes and techniques suitable for extracting and examining residual data from IoT ecosystems.

show abstract

Section: Introductionmentioning

confidence: 99%

A Digital Forensics Investigation of a Smart Scale IoT Ecosystem

Grispos¹,

Tursi²,

Choo³

et al. 2021

Preprint

Self Cite

View full text Add to dashboard Cite

show abstract

“…Similar to other industries (e.g., banking, finance, and governments), the number of medical and healthcare applications that provide an Internet interface for medical devices is increasing [12,16]. A number of these devices, and their accompanying smartphone applications, are FDA-approved for use in medical settings [17,18].…”

Section: Introductionmentioning

confidence: 99%

Investigating Protected Health Information Leakage from Android Medical Applications

Grispos

Flynn

Glisson

et al. 2021

Lecture Notes of the Institute for Computer Sciences, Social Informatics and Telecommunications Engineering

Self Cite

View full text Add to dashboard Cite

As smartphones and smartphone applications are widely used in a healthcare context (e.g., remote healthcare), these devices and applications may need to comply with the Health Insurance Portability and Accountability Act (HIPAA) of 1996. In other words, adequate safeguards to protect the user's sensitive information (e.g., personally identifiable information and/or medical history) are required to be enforced on such devices and applications. In this study, we forensically focus on the potential of recovering residual data from Android medical applications, with the objective of providing an initial risk assessment of such applications. Our findings (e.g., documentation of the artifacts) also contribute to a better understanding of the types and location of evidential artifacts that can, potentially, be recovered from these applications in a digital forensic investigation.

show abstract

“…However, previous research demonstrates that smartphones and their accompanying applications can contain user-related residual data [13][14][15][16][17]. From the perspective of a medical device, research indicates that smartphone residual data can be used to identify metadata related to a specific patient and their interactions with the medical device itself [18]. Further complicating matters, researchers have established that residual artifacts generated by smartphone applications can be used to identify broad user behavior patterns [19].…”

Section: Introductionmentioning

confidence: 99%

Knock! Knock! Who Is There? Investigating Data Leakage from a Medical Internet of Things Hijacking Attack

Flynn¹,

Grispos²,

Glisson³

et al. 2020

Proceedings of the Annual Hawaii International Conference on System Sciences

Self Cite

View full text Add to dashboard Cite

The amalgamation of Medical Internet of Things (MIoT) devices into everyday life is influencing the landscape of modern medicine. The implementation of these devices potentially alleviates the pressures and physical demands of healthcare systems through the remote monitoring of patients. However, there are concerns that the emergence of MIoT ecosystems is introducing an assortment of security and privacy challenges. While previous research has shown that multiple vulnerabilities exist within MIoT devices, minimal research investigates potential data leakage from MIoT devices through hijacking attacks.The research contribution of this paper is twofold. First, it provides a proof of concept that certain MIoT devices and their accompanying smartphone applications are vulnerable to hijacking attacks. Second, it highlights the effectiveness of using digital forensics tools as a lens to identify patient and medical device information on a hijacker's smartphone.

show abstract

A Bleeding Digital Heart: Identifying Residual Data Generation from Smartphone Applications Interacting with Medical Devices

Cited by 15 publications

References 24 publications

A Digital Forensics Investigation of a Smart Scale IoT Ecosystem

A Digital Forensics Investigation of a Smart Scale IoT Ecosystem

Investigating Protected Health Information Leakage from Android Medical Applications

Knock! Knock! Who Is There? Investigating Data Leakage from a Medical Internet of Things Hijacking Attack

Contact Info

Product

Resources

About