# Health IoT Threats: Survey of Risks and Vulnerabilities
## 4 Results
### Overview of IoT Security and Privacy in Healthcare
#### 4.1.1 The Perception Layer
Physical or device exploitation in healthcare can be significant because many devices in healthcare have been designed and developed to record, store, and protect the health records of individuals [17]. In addition, data encryption requires protected distribution. Flexible encryption algorithms are suitable in cryptography because of hardware limitations. The resources of the IoT devices (battery power, memory, and CPU) are not drained rapidly. Moreover, some IoT medical devices have limited resources, such as memory and processing power, making it challenging to implement effective security controls. IoT sensors mostly have little external security features or protection, so they cannot handle complicated security and public key encryption techniques/algorithms or frequency hopping communication [5; 82]. Also, most IoT devices just support short passwords [61] that compromise trust management in devices. These types of deficiencies result from memory, computational, and energy constraints; therefore, they make these devices prone to physical tampering and jamming attacks [69; 77; 61]. Additionally, the lack of industry standards for IoT devices can lead to inconsistencies in security protocols and make it difficult to ensure interoperability. The list of security and privacy issues of medical IoT in the perception layer is provided in Table 4.  
Another study found that healthcare organizations are particularly vulnerable to phishing attacks, which can be used to steal sensitive patient information [83]. Such findings highlight the need for robust and proactive measures to address the security and privacy risks associated with the IoT perception layer, although the main reason of compromising security and privacy of IoT in this layer is hardware limitations [77]. Furthermore, some inherent challenges make securing the IoT perception layer in healthcare more difficult. For instance, the large number of connected devices and sensors in a typical healthcare IoT system makes it difficult to manage and secure them all. To address these challenges, ongoing research is needed to identify vulnerabilities and develop effective security solutions for the IoT perception layer in healthcare. For instance,researchers have proposed using machine learning algorithms to identify potential attacks and anomalies in data patterns, allowing for rapid detection and response to security threats [84]. Other researchers have suggested using blockchain technology to create a tamper-proof audit trail for medical data, ensuring its integrity and confidentiality [85]. It is also essential for healthcare organizations to stay informed of the latest security threats and implement best practices for securing their IoT systems. This includes using strong passwords, regularly updating software and firmware, and encrypting sensitive data in transit and at rest. Regular security audits and risk assessments can also help identify vulnerabilities and weaknesses in the system, allowing for proactive security measures to be implemented. In conclusion, the IoT perception layer plays a crucial role in healthcare IoT systems, but it also poses significant security and privacy risks. Healthcare organizations must proactively secure their IoT systems and stay informed of the latest security threats and best practices. Ongoing research and collaboration among healthcare professionals, cyber-security experts, and technology vendors are also necessary to develop effective security solutions and ensure the safety and integrity of patient data and healthcare systems. With proper security measures in place, the IoT perception layer can continue to enable the development of innovative healthcare technologies that improve patient outcomes and enhance the quality of care.