# Towards Design and Development of Security Assessment Framework for Internet of Medical Things
## 2 Related Works
As a result, further research is needed to mitigate or prevent cyberattacks on this type of attack surface. In addition, intrusions of security measures used in public healthcare CPS implementations have been observed, illustrating their lack of adequacy in securing data as well as communication. Medical equipment is susceptible to attacks, requiring the creation of a secure system. The objective is to develop a system that provides both safety and confidentiality. Only authorized personnel can obtain, recognize, and configure gadgets, whereas privacy guarantees that personal data on devices are kept private. Well-protected medical equipment necessitates precise security methods that take into account threat landscape changes. All possible attack layers within the medical equipment setting should be assessed throughout the planning stage. In the advancement of clinical equipment, security is the most essential requirement. However, according to [PERSON] and [PERSON] [8], access management, network searching, threat decrease, the underlying basis of trust, cryptographic signature, encryption techniques, and software updates, among many other security measures, can be utilized to either prevent or mitigate the destruction of medical equipment. All of these methods cannot be implemented on a single system. According to the management of risk, several processes can be combined to provide strong coverage against virtual risks. The proposed method has the advantage of detecting and neutralizing insider attackers who have more information about the medical equipment, whereas [PERSON] and [PERSON]'s [30] method failed to do so. [PERSON] et al. [13] suggested a blockchain-based methodology to secure storage and access of medical data. [PERSON] combined the hash function with the blockchain for the verification of the user's authenticity. With this technique, the overall security of electronic medical data is improved, and it allows for the secure storage of data and the authentication of data. [PERSON] et al. [34] proposed a honey encryption-based technique for the security of healthcare data. The authors first encrypt the message using honeycomb-based encryption to secure data from brute force attacks by producing ciphertexts when attackers want to decrypt the data with incorrect keys, yielding feasible gazing plaintexts. [PERSON] et al. [35] suggested a hybrid methodology for healthcare big data encryption. In their work, they used an attribute-based honey encryption technique for securing large data sets. In this work, first, the authors encrypt the data using the attribute-based technique, and then they impose the honey encryption technique for another encryption. This hybrid methodology improves the security of healthcare data overall and protects the data from brute force attacks and unwanted access. [PERSON] et al. [36] proposed a hoop-based cloud data security technique. The authors developed a novel encryption technique that is a combination of three different techniques. This triple encryption technique provides very strong data encryption and security. With this technique, it is very difficult for hackers to find the decryption key. This is novel research in big data security. Ultimately, the majority of the suggested works define the established solution(s) by utilizing post-deployment variables such as architectures, as well as responses from existing subscribers, which necessitates technical expertise that most interested IoMT parties lack. As a result, we introduce the Internet of Medical Things Security evaluation approach, a fuzzy logic-based framework that employs a comprehensive collection of evaluation characteristics covering all IoMT situations as well as stakeholders' selection of alternatives. The work is significant because it enables stakeholders to conveniently evaluate as well as start comparing security and privacy variables in any IoMT solution from their point of view and also in accordance with their security measures.