## 6 Classification of Attacks in IoMT
\begin{table}
\begin{tabular}{p{113.8 pt} p{113.8 pt} p{113.8 pt} p{113.8 pt} p{113.8 pt}} \hline \hline
**Type Layer** & **Attack** & **Brief Description** & **Effects** & **References** \\ \hline
**Eavesdropping** & An attacker intercepts and tracks the necessary hardware and communication to capture data. Data obtained in this manner (unlawfully) can be utilized in a variety of ways. & Confidentiality, Non-repudiation, Privacy & [50] \\ \hline
**Replay** & An attacker can use an authentication message that was previously transmitted between two legitimate users. In this situation, an attacker can intercept a signed packet and send it back to target multiple times. & Authorization & [52, 53] \\ \hline
**Man-in-the-middle** & It’s a cyber-attack that targets two IoMT devices’ communication and gains access to their private data. The attacker can listen in on or monitor the communication between the two devices in this attack. The attacker can alter the intercepted data before they are transmitted to their intended destination. & Confidentiality, Authorization & [54] \\ \hline
**Rogue access** & A fake gateway is placed inside the wireless network range in this attack to give genuine users access and intercept traffic. & & [55] \\ \hline
**Network** & Unlike DoS attacks, which are carried out by a single node, a DDoS attack is carried out by several sources, flooding a specified target with messages or connection requests with the purpose of rendering the service inaccessible to legitimate users. & Availability & [56, 57] \\ \hline
**Sinkhole** & A malicious node attracts traffic in this attack by offering a better connection quality. Once the attack is successful, other attacks (such as eavesdropping or selective forwarding) can be launched, in which the malicious node isolates specific nodes by discarding packets that pass through them. & Confidentiality & [58] \\ \hline
**Sniffing** & Data transferred between two nodes is passively intercepted by sniffing attacks. Due to the fact that the attacker can observe the data passed between the system’s layers. & Confidentiality & [58] \\ \hline
**Selective Forwarding** & A malicious node may simply change, drop, or selectively forward some messages to other nodes in the network. As a result, the information received by the destination is incomplete. & All & [52, 59] \\ \hline
**Brute Force** & The attackers usually use automated tools to create multiple password combinations until they succeed. The dictionary attack is an example of a serious vulnerability for IoMT devices. & Confidentiality, Integrity & [60, 61] \\ \hline
**Application** & **SQL injection** & An SQL injection attack involves introducing a faulty SQL statement into the application’s backend database. A successful SQL injection attack can compromise or change sensitive patient data. & All & [58, 62] \\ \hline
**Account hijacking** & At the network level, many IoT devices communicate in transparent text or with insecure encryption. Intercepting the packet when an end user is authenticating allows an attacker to undertake account hijacking. & Confidentiality, Integrity & [43] \\ \hline
**Ransomware** & Ransomware encrypts important information and demands a large fee to unlock it. In return for money, attackers can encrypt sensitive data such as health information and keep the decryption key. & Integrity, Availability & [35] \\ \hline \hline \end{tabular}
\end{table} 
Table 3: _Cont._