# Health IoT Threats: Survey of Risks and Vulnerabilities
## 4 Results
### Taxonomy of Analyzed Vulnerabilities  
A taxonomy that offers a clear explanation for selecting particular vulnerabilities for research has been developed, in addition to a review of the significant security and privacy issues. This taxonomy classifies the vulnerabilities according to a number of important factors that affect the performance and security of health-related IoT systems. Among these characteristics are:  
* _Impact on Data Integrity:_ Issues that could bring incorrect diagnosis or treatment decisions by jeopardizing the availability and integrity of patient data.
* _Threat to Patient Safety:_ Challenges include tampered medical equipment or malfunctioning life support systems that threaten the health and safety of patients.
* _System Availability:_ Vulnerabilities that impact IoT system availability and cause delays or disruptions in service for critical healthcare operations.
* _Attack Type:_ This refers to the type of attack, which can be divided into three categories: application-based, network-based, and physical.  
\begin{table}
\begin{tabular}{c p{142.3 pt} p{142.3 pt} p{142.3 pt}} \hline \hline
**IoT Layer** & \begin{tabular}{c} **Key Security and** \\ **Privacy Threats** \\ \end{tabular} & **Impact on Healthcare** & **Proposed Solutions** \\ \hline \multirow{3}{*}{\begin{tabular}{c} Perception \\ Layer \\ \end{tabular} } & - Device tampering & - Compromised patient data integrity - Replay attacks & - Compromised patient data integrity - Unauthorized access & - Physical security controls - Secure node authentication protocols \\ \hline \multirow{3}{*}{\begin{tabular}{c} Network \\ Layer \\ \end{tabular} } & - Denial of service (DoS) & - Disruption of critical healthcare services - IP Spoofing & - Disruption of critical healthcare services - Data interception & - Encryption of network communications - Firewalls \\ \hline \multirow{3}{*}{\
\begin{tabular}{c} Application \\ Layer \\ \end{tabular} } & - Malware attacks & - Loss of sensitive patient information - Weak credentials & - Loss of sensitive patient information - Service downtime & - Regular software updates - Access control mechanisms \\ \hline \multirow{3}{*}{
\begin{tabular}{c} General \\ Issues \\ \end{tabular} } & - Lack of encryption - Inadequate authentication mechanisms & - Vulnerabilities in patient privacy - Data breaches & - Multifactor authentication - Data encryption \\ \hline \hline \end{tabular}
\end{table}
Table 7: Summary of Key Security and Privacy Threats in Health IoT.  
* _Exposure Level:_ A measure of an IoT system's vulnerability to outside attacks, which can be impacted by communication protocols, network architecture, and device mobility. An overview of this taxonomy and the vulnerabilities that belong to each characteristic can be viewed in Table 8 below.  
Healthcare providers can use this taxonomy to prioritize security measures according to the specific threats they face, in addition to deploying it to better understand how risks are determined. A more detailed approach to risk management can be implemented by examining vulnerabilities utilizing these classifications, addressing both short-term threats and long-term security needs.