Security Tradeoffs in Cyber Physical Systems: A Case Study Survey on Implantable Medical Devices

AlTawy, Riham; Youssef, Amr M.

doi:10.1109/access.2016.2521727

Cited by 126 publications

(71 citation statements)

References 73 publications

Supporting

Mentioning

Contrasting

Unclassified

Order By: Relevance

“…One example of a usability issue is the aforementioned trade-off between the usability of an implant outside a medical environment and its vulnerability to cybersecurity attacks. Another one, again in the context of implantable devices, is the fact that authentication may be problematic in emergency situations (Camara et al, 2015;Altawy and Youssef, 2016). Because usability can differ for different demographics, there is a tight connection between this desideratum and one of the outstanding ethical issues concerning ICT in health, emerging from our review: the fact that vulnerable groups and those with special needs must be taken into particular consideration.…”

Section: Usabilitymentioning

confidence: 96%

Cybersecurity in health – disentangling value tensions

Loi

Christen

Kleine

et al. 2019

JICES

View full text Add to dashboard Cite

Purpose Cybersecurity in healthcare has become an urgent matter in recent years due to various malicious attacks on hospitals and other parts of the healthcare infrastructure. The purpose of this paper is to provide an outline of how core values of the health systems, such as the principles of biomedical ethics, are in a supportive or conflicting relation to cybersecurity. Design/methodology/approach This paper claims that it is possible to map the desiderata relevant to cybersecurity onto the four principles of medical ethics, i.e. beneficence, non-maleficence, autonomy and justice, and explore value conflicts in that way. Findings With respect to the question of how these principles should be balanced, there are reasons to think that the priority of autonomy relative to beneficence and non-maleficence in contemporary medical ethics could be extended to value conflicts in health-related cybersecurity. Research limitations/implications However, the tension between autonomy and justice, which relates to the desideratum of usability of information and communication technology systems, cannot be ignored even if one assumes that respect for autonomy should take priority over other moral concerns. Originality/value In terms of value conflicts, most discussions in healthcare deal with the conflict of balancing efficiency and privacy given the sensible nature of health information. In this paper, the authors provide a broader and more detailed outline.

show abstract

Section: Usabilitymentioning

confidence: 96%

Cybersecurity in health – disentangling value tensions

Loi

Christen

Kleine

et al. 2019

JICES

View full text Add to dashboard Cite

show abstract

“…Generally, IoT devices work in diverse surroundings to accomplish different goals. However, their operation must meet a comprehensive security requirement in cyber and physical states [60,62]. IoT systems are complex and contain multidisciplinary arrangements.…”

Section: Iot Security Threatsmentioning

confidence: 99%

“…Currently, collecting valuable personal information, particularly personal health data, has become rampant on the black market [62]. The value of personal health information on the black market is $50 compared with $1.50 for credit card information and $3 for a social security number [62]. Moreover, an attacker can eavesdrop on communication channels to track the location of the IoT device holder if its communication channel is within range [72,73], thus causing a violation of privacy.…”

Section: ) Cyber Threatsmentioning

confidence: 99%

A Survey of Machine and Deep Learning Methods for Internet of Things (IoT) Security

Al-Garadi

Mohamed

Al-Ali

et al. 2020

IEEE Commun. Surv. Tutorials

838

333

View full text Add to dashboard Cite

The Internet of Things (IoT) integrates billions of smart devices that can communicate with one another with minimal human intervention. It is one of the fastest developing fields in the history of computing, with an estimated 50 billion devices by the end of 2020. On the one hand, IoT technologies play a crucial role in enhancing several real-life smart applications that can improve life quality. On the other hand, the crosscutting nature of IoT systems and the multidisciplinary components involved in the deployment of such systems have introduced new security challenges. Implementing security measures, such as encryption, authentication, access control, network security and application security, for IoT devices and their inherent vulnerabilities is ineffective. Therefore, existing security methods should be enhanced to secure the IoT ecosystem effectively. Machine learning and deep learning (ML/DL) have advanced considerably over the last few years, and machine intelligence has transitioned from laboratory curiosity to practical machinery in several important applications. The ability to monitor IoT devices intelligently provides a significant solution to new or zero-day attacks. ML/DL are powerful methods of data exploration for learning about 'normal' and 'abnormal' behaviour according to how IoT components and devices perform within the IoT environment. Consequently, ML/DL methods are important in transforming the security of IoT systems from merely facilitating secure communication between devices to security-based intelligence systems. The goal of this work is to provide a comprehensive survey of ML methods and recent advances in DL methods that can be used to develop enhanced security methods for IoT systems.IoT security threats that are related to inherent or newly introduced threats are presented, and various potential IoT system attack surfaces and the possible threats related to each surface are discussed. We then thoroughly review ML/DL methods for IoT security and present the opportunities, advantages and shortcomings of each method. We discuss the opportunities and challenges involved in applying ML/DL to IoT security. These opportunities and challenges can serve as potential future research directions.

show abstract

“…With the improvement of wireless communication technologies, the implantable medical devices (IMDs), such as pacemakers, cranial nerve stimulators, and cochlear implants, have been widely used in the medical services field [1,2]. All these micro devices implanted in patients' body can continuously monitor and collect data to reflect the patient's health.…”

Section: Introductionmentioning

confidence: 99%

Trusted Authority Assisted Three‐Factor Authentication and Key Agreement Protocol for the Implantable Medical System

Mao

Zhang

et al. 2018

Wireless Communications and Mobile Computing

View full text Add to dashboard Cite

The application of implantable medical devices (IMDs), which solves the problems of geographical distance limitation and real-time health monitoring that plague patients and doctors, has caused great repercussions in the medical community. Despite the great potential of wide application, it also brings some security and privacy issues, such as the leakage of health data and unauthorized access to IMDs. Although a number of authentication and key agreement (AKA) schemes have been developed, we find that some subtle attacks still remain to be addressed. Then we propose an improved AKA scheme which achieves strong security features including user anonymity and known key security. It is formally proved to be secure under the Real-or-Random model. Moreover, a comprehensive security analysis shows that our scheme can resist various attacks and satisfy the desired requirements. Finally, the performance analysis shows the superiority of our protocol which is suitable for the implantable medical system.

show abstract

Security Tradeoffs in Cyber Physical Systems: A Case Study Survey on Implantable Medical Devices

Cited by 126 publications

References 73 publications

Cybersecurity in health – disentangling value tensions

Cybersecurity in health – disentangling value tensions

A Survey of Machine and Deep Learning Methods for Internet of Things (IoT) Security

Trusted Authority Assisted Three‐Factor Authentication and Key Agreement Protocol for the Implantable Medical System

Contact Info

Product

Resources

About