A Precision Cybersecurity Workflow for Cyber-physical Systems: The IoT Healthcare Use Case

Spegni, Francesco; Sabatelli, Antonio; Merlo, Alessio; Pepa, Lucia; Spalazzi, Luca; Verderame, Luca

doi:10.1007/978-3-031-25460-4_24

Cited by 2 publications

(2 citation statements)

References 35 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Additionally, the systems are getting more complex, integrating systems of systems, which makes it difficult to ensure security and recover in case of security attacks. Traditional static methods for IoT security can not handle this level of complexity [17], [18], [19].…”

Section: Introductionmentioning

confidence: 99%

Towards Smarter Security Orchestration and Automatic Response for CPS and IoT

Nguyen,

Dautov,

Song

et al. 2023

2023 IEEE International Conference on Cloud Computing Technology and Science (CloudCom)

View full text Add to dashboard Cite

HAL is a multi-disciplinary open access archive for the deposit and dissemination of scientific research documents, whether they are published or not. The documents may come from teaching and research institutions in France or abroad, or from public or private research centers. L'archive ouverte pluridisciplinaire HAL, est destinée au dépôt et à la diffusion de documents scientifiques de niveau recherche, publiés ou non, émanant des établissements d'enseignement et de recherche français ou étrangers, des laboratoires publics ou privés.

show abstract

Section: Introductionmentioning

confidence: 99%

Towards Smarter Security Orchestration and Automatic Response for CPS and IoT

Nguyen,

Dautov,

Song

et al. 2023

2023 IEEE International Conference on Cloud Computing Technology and Science (CloudCom)

View full text Add to dashboard Cite

show abstract

“…], Radoglou-Grammatikis et al[97] Radoglou-Grammatikis et al[98], Rahmadika et al[99], Ram and Kumar[100], Rao et al[101], Rao et al[102], Ravi et al[103], Rehman et al[104], Saba[105], Saheed and Arowolo[106], Said et al[107], Salem and Mehaoua[108], Schneble and Thamilarasu[109], Sehatbakhsh et al[110], Sharma et al[111], Singh et al[112], Siniosoglou et al[113], Spegni et al[114], Tabassum et al[115], Tahir et al[116], Thamilarasu et al[117], Thamilarasu et al[24], Thapa et al[118], Toor et al[119], Wa Umba et al[120], Wagan et al [121], Wahab et al [122], Wang et al [123], Yan et al [124], Zaabar et al [125], Zachos et al [126], Zubair et al [127] 99 Specification-based Abdulhammed et al [128], Choudhary et al [129], Fang et al [130], Mitchell and Chen [29], Mitchell and Chen [131], Li et al [132], Raiyat Aliabadi et al [133], You et al [134], Zhang et al [135] 9 Signature-based Boujrad et al [136], Meng et al [25], Mpungu et al [137], Zhang et al [138] 4 Hybrid Begli et al [139], Chen et al [140], Dupont et al [141], Meng et al [142], Kolokotronis et al [143], Lakka et al [144], Tariq et al [145] 7 researchers substantiate why their approach works best (e.g., Saheed et al with their swarm-based approach [106]), others focus on optimizing parts of their approach. E.g., Priya et al measure the benefits of different dimensionality reduction approaches [96].…”

mentioning

confidence: 99%

Attack Detection for Medical Cyber-Physical Systems–A Systematic Literature Review

et al. 2023

View full text Add to dashboard Cite

The threat situation due to cyber attacks in hospitals is emerging and patient life is at risk. One significant source of potential vulnerabilities is medical cyber-physical systems (MCPS). Detecting intrusions in this environment faces challenges different from other domains, mainly due to the heterogeneity of devices, the diversity of connectivity types, and the variety of terminology. To summarize existing results, we conducted a structured literature review (SLR) following the guidelines of Kitchenham et al. for SLRs in software engineering. We developed six research questions regarding detection approach, detection location, included features, adversarial focus, utilized datasets, and intrusion prevention. We identified that most researchers focused on an anomaly-based detection approach at the network layer. The primary focus was on the detection of malicious insiders. While several researchers used publicly available datasets for training and testing their algorithms, the lack of suitable datasets resulted in the development of testbeds consisting of various medical devices. Based on the results, we formulated five future research topics. First, the special conditions of hospital networks, the MCPS deployed within them, and the contrasts to other IT and OT environments should be examined. Thereupon, MCPS-specific datasets should be created that allow researchers to address the health domain's unique requirements and possibilities. At the same time, endeavors aimed at standardization in this area should be supported and expanded. Moreover, the use of medical context for attack detection should be further explored. Last but not least, efforts for MCPS-tailored intrusion prevention should be intensified. This way, the emerging threat landscape can be addressed, IT security in hospitals can be improved, and patient health can be protected.

show abstract

A Precision Cybersecurity Workflow for Cyber-physical Systems: The IoT Healthcare Use Case

Cited by 2 publications

References 35 publications

Towards Smarter Security Orchestration and Automatic Response for CPS and IoT

Towards Smarter Security Orchestration and Automatic Response for CPS and IoT

Attack Detection for Medical Cyber-Physical Systems–A Systematic Literature Review

Contact Info

Product

Resources

About