A Survey: To Govern, Protect, and Detect Security Principles on Internet of Medical Things (IoMT)

Abstract

The integration of medical equipment into the Internet of Things (IoT) led to the introduction of Internet of Medical Things (IoMT). Variation of IoT devices have been equipped in medical facilities. These devices provided convenience to healthcare provider since they can continuously monitor their patients in real-time, while allowing them to have greater physical flexibility and mobility. However, users of healthcare services (such as patients and medical staff) often are less concerned about security issues associated with IoT. These alleviate existing problems and jeopardize the lives of their patients by making them susceptible to attacks. Furthermore, IoMT applications have direct access to healthcare services because it handles sensitive patient information. Therefore, it is extremely important to preserve and establish the security and privacy of IoMT. This further justifies the need to investigate and address the related issues. Despite existing literature on security and privacy mechanisms, the domain still requires more attention. Therefore, this paper aims to discuss the security and privacy principles, as well as challenges associated with IoMT. Besides, a comprehensive analysis of privacy and security solutions for IoMT is also presented. In addition, we introduced a novel taxonomy of IoMT security and privacy based on cyber security principles such as "govern," "protect," and "detect". In conclusion, this paper provides a discussion on existing challenges and future direction for researchers.

Cybersecurity for Sustainable Smart Healthcare: State of the Art, Taxonomy, Mechanisms, and Essential Roles

“…Intrusion detection systems are deployed to safeguard healthcare solutions, IoMT devices, servers, and healthcare users and to secure sensitive patient medical information [139]. Alhaj et al [166] and Zubair et al [93] defined an intrusion detection system as a security mechanism or control (i.e., hardware or software product) that monitors and analyzes network/system traffic and activities within a healthcare environment to detect and respond to potential anomalies, unauthorized access attempts, or suspicious activities. Intrusion detection systems have three components: information sources, analyses, and responses.…”

Data Protection in Internet of Medical Things Using Blockchain and Secret Sharing Method

“…These continually proposed IoMT solutions has shown that blockchain technology and the IPFS are effective and trending for enhancing data security and privacy in IoMT. The usage of blockchain in IoMT has been reviewed by Hölbl et al (2018); Bigini et al (2020); Gupta et al (2022); Alhaj et al (2022). Interestingly, it can be seen through these surveys that the IPFS was often used with blockchain in IoMT solutions, as an outsourced decentralized data storage.…”

Enhancing the Internet of Medical Things (IoMT) Security with Meta-Learning: A Performance-Driven Approach for Ensemble Intrusion Detection Systems

“…The scalability and interoperability of security mechanisms across diverse IoMT and IoT devices also pose challenges for ensemble-based IDSs, as they must ensure seamless integration and communication while maintaining robust security protocols [ 20 , 21 ]. Furthermore, the rapid proliferation of connected devices and the increasing complexity of IoMT and IoT ecosystems introduce challenges in managing and securing a vast network of interconnected devices, requiring ensemble-based IDSs to adapt to the scale and diversity of these environments to effectively mitigate security risks [ 2 , 22 ].…”