## 4 Experimental Results
### Recommendations and Comparison  
In summary, the designed cyber threat hunting platform for smart health ecosystems offers valuable insights on the following:  
* Understanding attack patterns and trends (for example, where assaults originate, the attacker's reputation, the methods they use, and the destination ports they target to compromise underlying services);
* Identifying actively exploited vulnerabilities and methods they used to escalate privileges to gain further access (for example, attackers seek to implant backdoors on the target host, exploit vulnerabilities pertaining to remote access, invoke sensitive environmental files, use commonly used user credentials for brute force attacks, and so on);
* The ways to improve cyber defense mechanisms, such as changing the default user credentials, regular updating of software, and so on. Based on these findings, numerous important vulnerabilities and security and privacy challenges can be identified, as follows:  
* Default user credentials;
* Attackers frequently attempt to attack devices with the default usernames and passwords specified by manufacturers or solution providers. Thus, updating the default credentials is an important security precaution to avoid unwanted access;
* Lack of user awareness;
* The lack of user awareness may render the smart heath ecosystem vulnerable to numerous cyber-attacks, as doctors, nurses, and the ultimate end users may have little understanding of cyber security. Thus, delivering cybersecurity training and developing a security-conscious culture is critical;
* Attribution challenges;* Identifying the real source of an attack can be difficult, especially when attackers leverage compromised resources from many Internet service providers and other measures to conceal their origins;
* Unknown attack sources;
* Many attacks come from unknown sources, making it difficult to predict and prevent prospective risks. Thus, enhanced threat detection and response techniques are required;
* Network port vulnerabilities;
* Attackers target network ports that have known vulnerabilities. Ensuring that ports are correctly set up, patched, and monitored is critical for reducing these risks;
* Exploitation of TCP and UDP services;
* Attackers mostly target vulnerabilities in TCP and UDP services. Hence, regular updates and patches to these services can help guard against known vulnerabilities;
* Use of proxies and VPNs;
* Attackers use proxies and VPNs to mask their true locations and identities. Detecting and mitigating such anonymization techniques is critical to network security. The key stakeholders engaged in the smart health domain, including medical staff, solution suppliers/manufacturers, government, and others, have a vital role in ensuring the security and privacy of smart health systems. Overall, medical staff should implement security measures and be aware of security and privacy concerns. Solution suppliers must prioritize security and data protection in their solutions where the government can establish regulations and standards. Lastly, collaboration and adherence to best practices are essential to creating a secure and privacy-conscious smart health ecosystem. In this regard, Table 13 provides recommendations for mitigating cyber-attacks based on insights obtained from the proposed cyber hunting intelligence platform. These recommendations are linked to the vulnerabilities/challenges discussed earlier and specify the stakeholders responsible for taking action before attacks occur.