# Health IoT Threats: Survey of Risks and Vulnerabilities
## 5 Discussion
#### Standards and Solutions  
The incorporation of IoT in healthcare mandates a strategic approach that goes beyond what our current conventional security measures offer. This involves developing a security-first approach within every healthcare organization, where the importance of data security and patient privacy is ingrained in every aspect of healthcare delivery. In other words, it should be a security [155] and privacy-by-design approach. Practitioners must gain a robust understanding of IoT security's delicate intricacies, including obtaining discernment of the distinctive susceptibilities of different IoT devices and the imperative of preserving such devices with consistent refreshes and protection fixes to mitigate any potential vulnerabilities. Overall, it is crucial to secure all layers of healthcare IoT systems to safeguard patient data, prevent cyberattacks, and ensure patient safety. Healthcare organizations must take proactive steps to secure their IoT systems, stay informed of the latest security threats and best practices, and implement appropriate security controls at all layers of the system. By doing so, the IoT perception layer can continue to enable the development of innovative healthcare technologies that improve patient outcomes and enhance the quality of care. The National Institute of Standards and Technology guidelines for securing IoT devices in healthcare settings can provide a useful framework for healthcare organizations to improve their security posture. Collaboration between different stakeholders is essential to address the challenges of securing healthcare IoT systems and protecting patient data and safety. The importance of security and privacy in healthcare IoT cannot be overstated. The systematic literature review highlights that healthcare IoT involves sensitive and personal data, such as patient's health records and biometric data, and breaches can have severe consequences for patients, healthcare providers, and organizations. For example, data breaches can result in identity theft, financial loss, reputational damage, and legal liabilities. Furthermore, compromised healthcare IoT devices can lead to medical errors, delayed diagnoses, and incorrect treatments. Therefore, ensuring the security and privacy of healthcare IoT should be a top priority for all stakeholders involved. The review emphasizes the need for comprehensive security measures that address security and privacy issues and attacks at multiple layers of the IoT architecture. Single-layer security measures, such as firewalls or encryption, may not be sufficient to protect against sophisticated attacks that exploit vulnerabilities at different layers. Therefore, organizations must adopt a multilayered approach that includes physical security, network security, data security, and access control. This approach should also include periodic \begin{table}
\begin{tabular}{c c c} \hline \hline
**Architectural Component** & **Associated Threats** & **Potential Impact** \\ \hline \multirow{3}{*}{Medical Devices and Sensors} & Physical tampering & \multirow{3}{*}{Compromised patient data} \\  & Node capture & False medical readings \\  & Battery drainage attacks & \\  & Sensor data manipulation & Device malfunction \\ \hline \multirow{3}{*}{Communication Infrastructure} & Man-in-the-middle attacks & \multirow{3}{*}{Data interception} \\  & DDoS attacks & \\  & Protocol vulnerabilities & \\  & Network eavesdropping & Unauthorized access \\ \hline \multirow{3}{*}{Data Processing and Storage} & Data breaches & \multirow{3}{*}{Privacy violations} \\  & Malware infections & \\  & Unauthorized access & \\  & SQL injection & \\ \hline \multirow{3}{*}{User Interface and Services} & Authentication bypass & \multirow{3}{*}{Unauthorized access} \\  & Session hijacking & \\ \cline{1-1}  & Cross-site scripting & \\ \cline{1-1}  & Phishing attacks & \\ \hline \hline \end{tabular}
\end{table} 
Table 9: Mapping of Security Threats to Architectural Components.