## 1 Introduction  
The introduction of IoT devices into healthcare, which is also known as the Medical Internet of Things (MIoT), has transformed the delivery of medical services, leading to more efficient and effective smart health ecosystems [1]. These systems, which include a variety of linked medical equipment, wearables, and sensors, enable real-time monitoring, remote diagnostics, and individualized patient care [1, 2, 3]. However, the fast adoption of IoT technology in healthcare has created substantial security risks, since these devices are frequently excellent targets for cybercriminals looking to exploit flaws and obtain unauthorized access to important health information [1, 2, 3]. Overall, some of the key MIoT applications in healthcare include hearables, moodables, ingestible sensors, smart video pills, healthcare charting solutions, and computer vision solutions [2, 3, 4, 5]. Wearable medical devices, which monitor health metrics like heart rate and blood glucose levels, are a major driver of IoT growth in healthcare. The market for these devices was valued at USD 19.6 billion in 2020 and is projected to reach USD 139.3 billion by 2028 [4; 5]. On the other hand, the global IoT in healthcare market size was valued at USD 139.74 billion in 2023 and is projected to grow from USD 175.61 billion in 2024 to USD 822.54 billion by 2032, exhibiting a CAGR of 21.3% [4; 5; 6; 7]. Thus, it is evident that the employment of IoT in healthcare is becoming paramount day by day. The threat landscape in healthcare is especially troubling because of the sensitivity of the data involved [8; 9; 10; 11; 12]. Malicious actors value patient information, such as personal health information, medical diagnostic results, and treatment plans, which can eventually be sold in the black market for lucrative prices. Furthermore, medical devices, ranging from infusion pumps to implanted cardiac devices, must be kept in good working order to guarantee patient safety [1; 2; 3]. A cyberattack in this setting might have serious effects, ranging from data breaches to life-saving medical equipment being compromised, eventually endangering the lives of patients [12; 13; 14; 15; 16]. According to the latest reports [6], in 2022, healthcare organizations globally faced an average of 1463 cyberattacks per week, a 74% increase from the previous year. The U.S. remained the most affected by data breaches, with 344 incidents being reported. Cloud breaches have become more prevalent, with 73% of healthcare companies storing data in the cloud and 61% experiencing attacks on their cloud infrastructure [6; 7]. The growing network of interconnected medical devices, often managed separately by individual medical departments, has led to significant security challenges, allowing cybercriminals to exploit unpatched devices, access healthcare networks, and cause data breaches that can disrupt hospital operations and compromise patient care [8; 9; 10; 11; 12]. Figure 1 showcases the distribution of cyber-attacks that target the global healthcare industry from October 2021 to September 2022 [7]. Accordingly, it is evident that most of the cyber-attacks noticed during the period were network and application anomalies, accounting for 63%. Despite the crucial necessity of cybersecurity in healthcare, the industry confronts distinct hurdles in safeguarding IoT-enabled smart health systems [17; 18; 19; 20]. The massive volumes of data generated by these devices, together with their incorporation into larger networks, provide several access points for potential attackers [18; 19; 20; 21]. Furthermore, the resource limits of many IoT devices, such as low processing power and memory, frequently prevent the deployment of standard security mechanisms [13; 21; 22; 23; 24]. This puts healthcare professionals in a vulnerable position, necessitating new solutions to manage the risks associated with this complex terrain. Figure 1: Distribution of the cyber-attacks in the healthcare industry worldwide (from October 2021 to September 2022).