## 4 Experimental Results
### Comparison with Available Solutions  
By comparing the proposed cyber threat-hunting platform to existing commercial solutions, such as Darktrace [41], CrowdStrike Falcon [42], and Tenable.io [43], several key differences can be identified in terms of functionality, scope, and intended use.  
The proposed platform in this research is designed primarily for evaluation purposes, with a focus on analyzing attack patterns and identifying vulnerabilities in smart health systems by leveraging deception technologies, such as honeypots and decoys. Unlike commercial platforms that are primarily aimed at providing real-time protection and automated threat responses, the proposed platform enables the creation of controlled environments where attacker behavior can be monitored and analyzed in depth. In contrast, platforms like Darktrace and CrowdStrike rely on AI-powered behavioral analytics to detect anomalies in real-time, providing immediate defensive actions to mitigate threats [41; 42]. On the other hand, while commercial platforms prioritize real-time incident response, the proposed platform is centered on customization and granular control for targeted evaluation of specific attack vectors. This makes it more suitable for researchers and cybersecurity evaluators, who aim to gather detailed insights into vulnerabilities and attack vectors.  
\begin{table}
\begin{tabular}{c c c c} \hline \hline \multirow{2}{*}{**Recommendation**} & **Addressed** & **Responsible** & & \\  & **Vulnerability/Challenge (s)** & **Stakeholder/(s)** & **Suggested Actions** \\ \hline Collaboration and & & & \\ information sharing & Lack of user awareness & Government and solution suppliers & \(\bullet\) & Promote collaboration and sharing of threat intelligence information \\ \hline \hline \multirow{4}{*}{
\begin{tabular}{c} Compliance with \\ regulations \\ \end{tabular} } & & & \(\bullet\) & Ensure adherence to relevant cybersecurity regulations and standards in the healthcare domain. \\  & Unknown attack sources & Government and solution suppliers & \(\bullet\) & Allocate resources for advanced threat intelligence tools for better threat prediction and response. \\ \hline \hline \end{tabular}
\end{table}
Table 13: _Cont._In terms of detection mechanisms, the proposed platform relies on deception-based tactics to lure attackers and observe how they interact with vulnerable systems, whereas commercial solutions utilize real-time threat detection methods. For instance, Darktrace employs self-learning AI technology to continuously adapt to new threats, and CrowdStirie specializes in endpoint detection and response (EDR) to safeguard devices and networks against sophisticated attacks [41; 43]. In this respect, the proposed platform offers a deeper analysis of attack behavior, which can be used to improve the security posture of smart healthcare systems before real-world deployment.  
Furthermore, the scope of the proposed platform is directed toward generating evaluative reports, helping stakeholders understand the potential threats and vulnerabilities present in their infrastructure. Commercial platforms, in contrast, are focused on real-time remediation and automated patching of vulnerabilities as they are detected. This difference in scope is particularly evident when comparing the proposed platform's vulnerability analysis with Tenable.io's continuous vulnerability scanning and CrowdStirie's real-time endpoint protection [41; 42; 43].  
Lastly, while commercial solutions are designed for immediate and continuous protection against cyber threats, the proposed platform is intended to provide a more controlled and research-driven approach. This allows healthcare providers and other stakeholders to assess and address vulnerabilities before they are exploited in real environments. For a better understanding, Table 14 provides a brief comparison of our solution with the commonly available commercial solutions.