## 2 Background and Literature Study
### Necessity of Data Security and Privacy  
Reaping the great benefits of these smart systems can provide a plethora of new challenges. There is a necessity for the production and collection of masses of data within smart systems, and these data must be held with the highest levels of privacy and security. This is essential to maintain the integrity, reliability, and confidentiality of overly sensitive patient data, health records, and healthcare providers' reputations, as well as trust. Data mismanagement may lead to disciplinary measures against healthcare providers who fail to adhere to mandatory laws and regulations. Examples of these laws that are mandatory to follow when processing patient data include the Health Insurance Portability and Accountability Act of 1996 (HIPAA) in the United States of America and the General Data Protection Regulation 2018 (GDPR) in the European Union. Non-compliance with such laws can result in disciplinary action, fines, lawsuits, and loss of accreditation. Moreover, the accuracy and reliability of data are essential to safeguard the integrity of clinical decision-making and research findings, ensuring they remain unbiased and uninfluenced. In summary, healthcare data must be securely and confidentially managed, safeguarding both patients from potential harm and healthcare providers from legal liabilities. On the other hand, as straightforward as this may seem, many providers cut corners when following these regulations and laws. A review of IBM's _Threat Intelligence_ report [35] uncovers alarming statistics for security within healthcare. It is one of the top ten sectors affected by cyber threats and exploits. It is also highlighted that backdoor attacks were detected in 27% of the cases, followed by web shells in 18%. Adverse, Business Email Compromise (BEC), cryptocurrency miners, loaders, reconnaissance and scanning tools, and remote access tools accounted for 9% each. Among the observed impacts, reconnaissance was the most prevalent, constituting 50% of the cases. Additionally, data theft and digital currency mining were identified in 25% of cases each. There are other forms of cyber-attacks, e.g., predictive jamming attacks in IoT infrastructure like LoRaWAN [36] and hacking into a pacemaker [37]. For a better understanding of what kind of cyber-attacks happened within the healthcare industry, some news and literature are shown in Table 1, outlining the attacks, the nature of the attacks that occurred (in no order), and possible mitigation techniques that need to be incorporated to safeguard the system [38, 39, 40, 41, 42, 43, 44, 45, 46, 47], while the nature of these cyber-attacks is listed in [48, 49, 50, 51, 52, 53, 54, 55, 56, 57], followed by an elaboration of each attack in the following paragraphs. SQL Injection: A type of security vulnerability that allows an attacker to interfere with the queries an application makes to its database. Such vulnerability occurs when an attacker can insert or inject malicious SQL code into a query. This can lead to various harmful outcomes, such as unauthorised access to sensitive data, data modification, or even deletion of the entire database. Zero-Day Exploits: A type of cyber-attack that targets a software vulnerability unknown to the software developer or the public. Because the developers are unaware of the vulnerability, there is no patch or fix available at the time of the attack, making it particularly dangerous and effective to the attacker. Insider Threats: These refer to risks posed by individuals within an organisation who have access to critical systems and data. These threats can come from employees, contractors, business partners, or anyone else with inside knowledge and access to the organisation's operations. Insider Threats can be intentional, such as sabotage or data theft, or unintentional, such as accidental data breaches or policy violations.