Malicious behavior monitoring of embedded medical devices

Abdulhammed, Razan; Faezipour, Miad; Elleithy, Khaled

doi:10.1109/lisat.2017.8001952

Cited by 3 publications

(2 citation statements)

References 9 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…The authors promise this approach could detect unknown attacks while keeping the overhead and false positive rate low [131]. Refining this work, Abdulhammed et al create a hardware approach (Field Programmable Gate Array (FPGA) chip) that employs behavior rules to detect anomalies [128]. Their approaches address the resource constraints of MCPS.…”

Section: A Rq 1 -Utilized Detection Approach and Employed Technologymentioning

confidence: 99%

Attack Detection for Medical Cyber-Physical Systems–A Systematic Literature Review

et al. 2023

View full text Add to dashboard Cite

The threat situation due to cyber attacks in hospitals is emerging and patient life is at risk. One significant source of potential vulnerabilities is medical cyber-physical systems (MCPS). Detecting intrusions in this environment faces challenges different from other domains, mainly due to the heterogeneity of devices, the diversity of connectivity types, and the variety of terminology. To summarize existing results, we conducted a structured literature review (SLR) following the guidelines of Kitchenham et al. for SLRs in software engineering. We developed six research questions regarding detection approach, detection location, included features, adversarial focus, utilized datasets, and intrusion prevention. We identified that most researchers focused on an anomaly-based detection approach at the network layer. The primary focus was on the detection of malicious insiders. While several researchers used publicly available datasets for training and testing their algorithms, the lack of suitable datasets resulted in the development of testbeds consisting of various medical devices. Based on the results, we formulated five future research topics. First, the special conditions of hospital networks, the MCPS deployed within them, and the contrasts to other IT and OT environments should be examined. Thereupon, MCPS-specific datasets should be created that allow researchers to address the health domain's unique requirements and possibilities. At the same time, endeavors aimed at standardization in this area should be supported and expanded. Moreover, the use of medical context for attack detection should be further explored. Last but not least, efforts for MCPS-tailored intrusion prevention should be intensified. This way, the emerging threat landscape can be addressed, IT security in hospitals can be improved, and patient health can be protected.

show abstract

Section: A Rq 1 -Utilized Detection Approach and Employed Technologymentioning

confidence: 99%

Attack Detection for Medical Cyber-Physical Systems–A Systematic Literature Review

et al. 2023

View full text Add to dashboard Cite

show abstract

“…If the intrusion detection is offline, the implementation process will be very easy in contrast to the real time intrusion detection. While, the real time one have the benefit to understand the behavior of the attacker [3].…”

Section: Introductionmentioning

confidence: 99%

A Review of Intrusion Detection Systems

Shaikha

Abduallah

2017

ACAD J NAWROZ UNIV

View full text Add to dashboard Cite

The transformation of vast amount of information through the network channels appeared widely from one site to another and these information may be disclosed to the third party or the attackers. Thus, the protection process of transformed information is a complex process that can be established through the Intrusion Detection System (IDS). Concealment and unity of information are the most important issues achieved through the intrusion detection system. The process of intrusion detection can be used with wireless or wired networks via making use of hardware or software techniques. Consequently, this caused to have lots of new techniques for IDS in various environments and different levels of network. Unfortunately, most of these techniques do not implemented together for increasing the security of the network. This leaded us to provide a review of the recent papers including a general view of intrusion detection in various environments through the networking and using various techniques. As a result, the most important intend for this paper is to embrace the most new progressions in this region. This may help the researchers to have a general knowledge on different techniques for protection through IDS and various types of intrusion and its detection techniques.

show abstract