# Health IoT Threats: Survey of Risks and Vulnerabilities
## 2 Background of the Research
Since IoT is a combination of heterogeneous networks of sensor network, mobile communication network, and the Internet, the same security and privacy threats of each of these networks directly pose security and privacy problems for IoT [5; 61]. In addition, privacy protection problems, heterogeneous network authentication, and access control problems, information storage and management [5], confidentiality, and trustworthiness are other security areas for further consideration and investigation. To address these security and privacy concerns, healthcare organizations are encouraged to implement robust security measures such as encryption, secure data storage, and access controls [62]. Additionally, there is a need for healthcare organizations to prioritize the development of industry-wide security and privacy standards for IoT devices and systems [54]. In 2020, a comprehensive survey of IoT in healthcare reported that the healthcare industry is one of the most promising fields for IoT applications due to its ability to transform healthcare services, reduce costs, and improve patient outcomes [26]. The survey also highlighted the importance of addressing the security and privacy challenges that arise with IoT systems in healthcare. Similarly, a 2020 study found that IoT technology can improve healthcare delivery by enhancing the quality of services, reducing healthcare costs, and improving patient outcomes. However, the study also cautioned that the risks associated with the use of IoT technology in healthcare, including cybersecurity concerns, must be managed appropriately [34]. While previous studies have explored the security and privacy concerns of IoT in general, there is however a notable research gap regarding the layered aspect of the IoT structure in the healthcare setting [28; 29; 30; 35]. Each of the IoT layers, which includes perception, network, and application, has its security risks that when ignored stand to expose patient-sensitive information and the integrity of the data at stake. For example, the perception layer which collects data through sensors and wearable devices within the IoT infrastructure is highly prone to both physical attacks and data theft. The network layer where the data are encapsulated and sent from one point to another is faced with threats like eavesdropping, DDoS attacks, and man-in-the-middle strategies. The application layer which is a user interface and data storage system is vulnerable to weak authentication security, malware, and ransomware intrusions [32; 34; 35]. Reviewed studies always negate giving such distinct levels an inclusive scrutiny and treat them separately by concentrating on their security measures from the network scope [30; 31]. It is therefore very important and timely to conduct such reviews along the IoT system layers for all IoT healthcare systems and deficiencies addressed. Table 2 compares our survey with other survey papers in the same area to demonstrate the gap in the literature this paper is trying to fill. Several studies have identified the security and privacy issues and attacks facing healthcare IoT systems. For example, a 2021 review of the existing literature on privacy and security in IoT-based healthcare systems identified the key challenges and potential solutions [27]. Another 2019 study reviewed the existing literature on IoT technologies and applications in healthcare and presented a case study of an IoT-based healthcare system [35]. Additionally, a 2018 study identified the security and privacy challenges in IoT-based healthcare systems and proposed potential solutions for addressing these challenges [66]. Some of the key security and privacy challenges identified in these studies include the vulnerability of IoT devices to attacks, data breaches, and unauthorized access to sensitive patient information. Owing to the highlighted severity of the security and privacy concerns, a comprehensive review of the existing research studies is essential to provide a clear understanding of their types and prevalence.