{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,4,10]],"date-time":"2026-04-10T19:52:30Z","timestamp":1775850750526,"version":"3.50.1"},"reference-count":49,"publisher":"Springer Science and Business Media LLC","issue":"1","license":[{"start":{"date-parts":[[2024,11,9]],"date-time":"2024-11-09T00:00:00Z","timestamp":1731110400000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2024,11,9]],"date-time":"2024-11-09T00:00:00Z","timestamp":1731110400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Int. J. Inf. Secur."],"published-print":{"date-parts":[[2025,2]]},"DOI":"10.1007\/s10207-024-00923-y","type":"journal-article","created":{"date-parts":[[2024,11,9]],"date-time":"2024-11-09T02:59:29Z","timestamp":1731121169000},"update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":13,"title":["MLRA-Sec: an adaptive and intelligent cyber-security-assessment model for internet of medical things (IoMT)"],"prefix":"10.1007","volume":"24","author":[{"given":"Sondes","family":"Ksibi","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Faouzi","family":"Jaidi","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Adel","family":"Bouhoula","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2024,11,9]]},"reference":[{"key":"923_CR1","unstructured":"Statista: Number of internet of things (IoT) active connections in healthcare in the European Union (EU) in 2016, 2019, 2022 and 2025 (2020). www.statista.com\/statistics\/691848\/iot-active-connections-in-healthcare-in-the-eu\/"},{"key":"923_CR2","unstructured":"Statista: Number of internet of things (IoT) connections worldwide in 2022 and 2023, by application (2023). http:\/\/www.statista.com\/statistics\/1403198\/"},{"key":"923_CR3","unstructured":"Bera, A.: 80 insightful internet of things statistics (infographic) (2019). https:\/\/safeatlast.co\/blog\/iot-statistics\/"},{"key":"923_CR4","unstructured":"Mckinsey: Digital ecosystems for insurers: opportunities through the internet of things (2019). https:\/\/www.mckinsey.com\/industries\/financial-services\/our-insights"},{"key":"923_CR5","doi-asserted-by":"crossref","unstructured":"Ksibi, S., Jaidi, F., Bouhoula, A.: A comprehensive study of security and cyber-security risk management within e-health systems: synthesis, analysis and a novel quantified approach. Mobile Netw. Appl pp. 1\u201321 (2022)","DOI":"10.1007\/s11036-022-02042-1"},{"issue":"1","key":"923_CR6","first-page":"7142170","volume":"2018","author":"F Ja\u00efdi","year":"2018","unstructured":"Ja\u00efdi, F., Labbene Ayachi, F., Bouhoula, A.: A methodology and toolkit for deploying reliable security policies in critical infrastructures. Secur. Commun. Netw. 2018(1), 7142170 (2018)","journal-title":"Secur. Commun. Netw."},{"key":"923_CR7","doi-asserted-by":"crossref","unstructured":"Jaidi, F., Ayachi, F.L.: A risk awareness approach for monitoring the compliance of RBAC-based policies. In: 2015 12th International Joint Conference on e-Business and Telecommunications (ICETE), Vol.\u00a04, IEEE, 2015, pp. 454\u2013459","DOI":"10.5220\/0005577304540459"},{"key":"923_CR8","doi-asserted-by":"crossref","unstructured":"Ksibi, S., Jaidi, F., Bouhoula, A.: IoMT security model based on machine learning and risk assessment techniques. In: International Wireless Communications and Mobile Computing (IWCMC). IEEE 2023, 614\u2013619 (2023)","DOI":"10.1109\/IWCMC58020.2023.10182654"},{"issue":"3","key":"923_CR9","first-page":"13","volume":"7","author":"A Abdullah","year":"2015","unstructured":"Abdullah, A., Ismael, A., Rashid, A., Abou-ElNour, A., Tarique, M.: Real time wireless health monitoring application using mobile devices. Int. J. Comput. Netw. Commun. (IJCNC) 7(3), 13\u201330 (2015)","journal-title":"Int. J. Comput. Netw. Commun. (IJCNC)"},{"key":"923_CR10","unstructured":"AllTheResearch: Global internet of medical things (IoMT) market\u2014segment analysis, opportunity assessment, competitive intelligence, industry outlook 2016\u20132026 (2019). https:\/\/www.alltheresearch.com\/report\/166\/internet-of-medical-things-market"},{"key":"923_CR11","unstructured":"OWASP: Top IoT vulnerabilities (2016). https:\/\/www.owasp.org\/index"},{"key":"923_CR12","doi-asserted-by":"publisher","first-page":"395","DOI":"10.1016\/j.future.2017.11.022","volume":"82","author":"MA Khan","year":"2018","unstructured":"Khan, M.A., Salah, K.: IoT security: Review, blockchain solutions, and open challenges. Future Gener. Comput. Syst. 82, 395\u2013411 (2018)","journal-title":"Future Gener. Comput. Syst."},{"issue":"2","key":"923_CR13","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1145\/3379542","volume":"20","author":"X Jiang","year":"2020","unstructured":"Jiang, X., Lora, M., Chattopadhyay, S.: An experimental analysis of security vulnerabilities in industrial IoT devices. ACM Trans. Intern. Technol. (TOIT) 20(2), 1\u201324 (2020)","journal-title":"ACM Trans. Intern. Technol. (TOIT)"},{"issue":"2","key":"923_CR14","doi-asserted-by":"publisher","first-page":"97","DOI":"10.1007\/s41635-017-0029-7","volume":"2","author":"K Chen","year":"2018","unstructured":"Chen, K., Zhang, S., Li, Z., Zhang, Y., Deng, Q., Ray, S., Jin, Y.: Internet-of-things security and vulnerabilities: taxonomy, challenges, and practice. J. Hardw. Syst. Secur. 2(2), 97\u2013110 (2018)","journal-title":"J. Hardw. Syst. Secur."},{"key":"923_CR15","doi-asserted-by":"publisher","first-page":"41","DOI":"10.1016\/j.iot.2018.11.003","volume":"5","author":"PIR Grammatikis","year":"2019","unstructured":"Grammatikis, P.I.R., Sarigiannidis, P.G., Moscholios, I.D.: Securing the internet of things: challenges, threats and solutions. Intern. Things 5, 41\u201370 (2019)","journal-title":"Intern. Things"},{"key":"923_CR16","doi-asserted-by":"crossref","unstructured":"Caralli, R.A., Stevens, J.F., Young, L.R., Wilson, W.R.: Improving the information security risk assessment process (2007)","DOI":"10.21236\/ADA470450"},{"key":"923_CR17","unstructured":"Wynn, J., Whitmore, J., Upton, G., Spriggs, L., McKinnon, D., McInnes, R., Graubart, R., Clausen, L.: Threat assessment and remediation analysis (TARA): methodology description version 1.0, Technical report, MITRE CORP BEDFORD MA (2011)"},{"key":"923_CR18","unstructured":"Institute, C.: What is capability maturity model integration (CMMI) (2017). http:\/\/cmmiinstitute.com\/capability-maturity-model-integration"},{"key":"923_CR19","unstructured":"FIRST, S.: Common vulnerability scoring system sig (2017). https:\/\/www.first.org\/cvss\/"},{"key":"923_CR20","unstructured":"Shaw, R., Takanti, V., Zullo, T., Director, M., Llc, E.: Best practices in cyber supply chain risk management Boeing and Exostar cyber security supply chain risk management interviews (2017)"},{"key":"923_CR21","unstructured":"F.\u00a0A. of\u00a0Information\u00a0Risk: Quantitative information risk management | the fair institute (2017). http:\/\/www.fairinstitute.org\/"},{"key":"923_CR22","unstructured":"ISO.: International Standard: Risk Management: Principles and Guidelines. ISO 31000. Principes Et Lignes Directrices, ISO, 2009"},{"key":"923_CR23","first-page":"37","volume":"800","author":"JT Force","year":"2018","unstructured":"Force, J.T.: Risk management framework for information systems and organizations. NIST Spec. Public. 800, 37 (2018)","journal-title":"NIST Spec. Public."},{"key":"923_CR24","unstructured":"F.\u00a0A. of\u00a0Information\u00a0Risk, What is a cyber value-at-risk model? (2017). http:\/\/www.fairinstitute.org\/blog\/what-is-a-cyber-value-at-risk-model"},{"key":"923_CR25","doi-asserted-by":"publisher","first-page":"14","DOI":"10.1016\/j.compind.2018.08.002","volume":"102","author":"P Radanliev","year":"2018","unstructured":"Radanliev, P., De Roure, D.C., Nicolescu, R., Huth, M., Montalvo, R.M., Cannady, S., Burnap, P.: Future developments in cyber risk assessment for the internet of things. Comput. Ind. 102, 14\u201322 (2018)","journal-title":"Comput. Ind."},{"key":"923_CR26","doi-asserted-by":"crossref","unstructured":"Radanliev, P., De\u00a0Roure, D., Cannady, S., Montalvo, R.\u00a0M., Nicolescu, R., Huth, M.: Economic impact of IoT cyber risk-analysing past and present to predict the future developments in IoT risk analysis and IoT cyber insurance (2018)","DOI":"10.1049\/cp.2018.0003"},{"issue":"4","key":"923_CR27","doi-asserted-by":"publisher","first-page":"697","DOI":"10.1080\/09720529.2019.1642628","volume":"22","author":"V Malik","year":"2019","unstructured":"Malik, V., Singh, S.: Security risk management in IoT environment. J. Discrete Math. Sci. Cryptogr. 22(4), 697\u2013709 (2019)","journal-title":"J. Discrete Math. Sci. Cryptogr."},{"key":"923_CR28","doi-asserted-by":"crossref","unstructured":"Radanliev, P., De\u00a0Roure, D.C., Nurse, J. R., Burnap, P., Anthi,E., Uchenna, A., Santos, O., Montalvo, R.M., et al.: Cyber risk management for the internet of things (2019)","DOI":"10.20944\/preprints201904.0133.v1"},{"issue":"3","key":"923_CR29","doi-asserted-by":"publisher","first-page":"66","DOI":"10.3390\/computers8030066","volume":"8","author":"O Akinrolabu","year":"2019","unstructured":"Akinrolabu, O., New, S., Martin, A.: CSCCRA: A novel quantitative risk assessment model for SaaS cloud service providers. Computers 8(3), 66 (2019)","journal-title":"Computers"},{"key":"923_CR30","doi-asserted-by":"crossref","unstructured":"Abou El\u00a0Houda, Z., Moudoud, H., Khoukhi, L.: Secure and efficient federated learning for robust intrusion detection in IoT networks. In: GLOBECOM 2023-2023 IEEE Global Communications Conference, IEEE, pp. 2668\u20132673 (2023)","DOI":"10.1109\/GLOBECOM54140.2023.10436768"},{"issue":"5","key":"923_CR31","doi-asserted-by":"publisher","first-page":"2978","DOI":"10.1109\/TNSE.2022.3161479","volume":"9","author":"H Moudoud","year":"2022","unstructured":"Moudoud, H., Mlika, Z., Khoukhi, L., Cherkaoui, S.: Detection and prediction of FDI attacks in IoT systems via hidden Markov model. IEEE Transactions on Network Science and Engineering 9(5), 2978\u20132990 (2022)","journal-title":"IEEE Transactions on Network Science and Engineering"},{"key":"923_CR32","doi-asserted-by":"crossref","unstructured":"Banse, C., Kunz, I., Schneider, A., Weiss, K.: Cloud property graph: Connecting cloud security assessments with static code analysis. In: 2021 IEEE 14th International Conference on Cloud Computing (CLOUD), IEEE, pp. 13\u201319 (2021)","DOI":"10.1109\/CLOUD53861.2021.00014"},{"key":"923_CR33","doi-asserted-by":"crossref","unstructured":"Sun, Y., Lin, D., Song, H., Yan, M., Cao, L.: A method to construct vulnerability knowledge graph based on heterogeneous data. In: 2020 16th International Conference on Mobility, Sensing and Networking (MSN), IEEE, pp. 740\u2013745 (2020)","DOI":"10.1109\/MSN50589.2020.00126"},{"key":"923_CR34","first-page":"1197","volume":"40","author":"S Ksibi","year":"2024","unstructured":"Ksibi, S., Jaidi, F., Bouhoula, A.: Securing IoMT applications: an approach for enhancing the reliability of security policies within cloud databases. J. Inf. Sci. Eng. 40, 1197\u20131209 (2024)","journal-title":"J. Inf. Sci. Eng."},{"issue":"4","key":"923_CR35","doi-asserted-by":"publisher","first-page":"3723","DOI":"10.1109\/COMST.2019.2914094","volume":"21","author":"T Yaqoob","year":"2019","unstructured":"Yaqoob, T., Abbas, H., Atiquzzaman, M.: Security vulnerabilities, attacks, countermeasures, and regulations of networked medical devices-a review. IEEE Commun. Surv. Tutor. 21(4), 3723\u20133768 (2019)","journal-title":"IEEE Commun. Surv. Tutor."},{"issue":"17","key":"923_CR36","doi-asserted-by":"publisher","first-page":"4828","DOI":"10.3390\/s20174828","volume":"20","author":"D Koutras","year":"2020","unstructured":"Koutras, D., Stergiopoulos, G., Dasaklis, T., Kotzanikolaou, P., Glynos, D., Douligeris, C.: Security in iomt communications: A survey. Sensors 20(17), 4828 (2020)","journal-title":"Sensors"},{"key":"923_CR37","doi-asserted-by":"crossref","unstructured":"Jagannathan, S., Sorini, A.: A cybersecurity risk analysis methodology for medical devices. In: IEEE Symposium on Product Compliance Engineering (ISPCE). IEEE 2015, pp. 1\u20136 (2015)","DOI":"10.1109\/ISPCE.2015.7138706"},{"key":"923_CR38","doi-asserted-by":"crossref","unstructured":"Alsubaei, F., Abuhussein, A., Shiva, S.: A framework for ranking IoMT solutions based on measuring security and privacy. In: Proceedings of the Future Technologies Conference (FTC) 2018: Volume 1, Springer, pp. 205\u2013224 (2019)","DOI":"10.1007\/978-3-030-02686-8_17"},{"issue":"16","key":"923_CR39","doi-asserted-by":"publisher","first-page":"8148","DOI":"10.3390\/app12168148","volume":"12","author":"FA Alzahrani","year":"2022","unstructured":"Alzahrani, F.A., Ahmad, M., Ansari, M.T.J.: Towards design and development of security assessment framework for internet of medical things. Appl. Sci. 12(16), 8148 (2022)","journal-title":"Appl. Sci."},{"key":"923_CR40","doi-asserted-by":"crossref","unstructured":"Lopatina, K., Dokuchaev, V., Maklachkova, V.: Data risks identification in healthcare sensor networks. In: 2021 International Conference on Engineering Management of Communication and Technology (EMCTECH), IEEE, pp. 1\u20137 (2021)","DOI":"10.1109\/EMCTECH53459.2021.9619178"},{"key":"923_CR41","doi-asserted-by":"crossref","unstructured":"Ksibi, S., Jaidi, F., Bouhoula, A.: A user-centric fuzzy ahp-based method for medical devices security assessment. In: 2022 15th International Conference on Security of Information and Networks (SIN), IEEE, pp. 01\u201307 (2022)","DOI":"10.1109\/SIN56466.2022.9970530"},{"key":"923_CR42","doi-asserted-by":"crossref","unstructured":"Ahmed, M., Byreddy, S., Nutakki, A., Sikos, L.F., Haskell-Dowland, P.: ECU-IOHT: A dataset for analyzing cyberattacks in internet of health things. Ad Hoc Netw. 122, 102621 (2021)","DOI":"10.1016\/j.adhoc.2021.102621"},{"key":"923_CR43","doi-asserted-by":"crossref","unstructured":"Malamas, V., Chantzis, F., Dasaklis, T.K., Stergiopoulos, G., Kotzanikolaou, P., Douligeris, C.: Risk assessment methodologies for the internet of medical things: a survey and comparative appraisal. IEEE Access 9, 40049\u201340075 (2021)","DOI":"10.1109\/ACCESS.2021.3064682"},{"key":"923_CR44","doi-asserted-by":"crossref","unstructured":"Ksibi, S., Jaidi, F., Bouhoula, A.: IoMT applications perspectives: from opportunities and security challenges to cyber-risk management. In: Decision Making and Security Risk Management for IoT Environments. Springer, Berlin. pp. 21\u201337 (2023)","DOI":"10.1007\/978-3-031-47590-0_2"},{"key":"923_CR45","doi-asserted-by":"publisher","first-page":"627","DOI":"10.1016\/j.procs.2017.08.314","volume":"113","author":"S Darwish","year":"2017","unstructured":"Darwish, S., Nouretdinov, I., Wolthusen, S.D.: Towards composable threat assessment for medical IoT (MIoT). Procedia Comput. Sci. 113, 627\u2013632 (2017)","journal-title":"Procedia Comput. Sci."},{"issue":"5","key":"923_CR46","doi-asserted-by":"publisher","first-page":"3242","DOI":"10.1109\/JIOT.2020.3002255","volume":"8","author":"M Shafiq","year":"2020","unstructured":"Shafiq, M., Tian, Z., Bashir, A.K., Du, X., Guizani, M.: CORRAUC: a malicious bot-IoT traffic detection method in IoT network using machine-learning techniques. IEEE Intern. Things J. 8(5), 3242\u20133254 (2020)","journal-title":"IEEE Intern. Things J."},{"key":"923_CR47","unstructured":"Atuhurra, J., Hara, T., Zhang, Y., Sasabe, M., Kasahara, S.: Dealing with imbalanced classes in bot-IoT dataset, arXiv preprint arXiv:2403.18989 (2024)"},{"issue":"2","key":"923_CR48","doi-asserted-by":"publisher","first-page":"446","DOI":"10.3390\/s21020446","volume":"21","author":"A Churcher","year":"2021","unstructured":"Churcher, A., Ullah, R., Ahmad, J., Ur Rehman, S., Masood, F., Gogate, M., Alqahtani, F., Nour, B., Buchanan, W.J.: An experimental analysis of attack classification using machine learning in IoT networks. Sensors 21(2), 446 (2021)","journal-title":"Sensors"},{"key":"923_CR49","volume-title":"Can Smart Thermometers Track the Spread of the Coronavirus?","author":"D McNeil","year":"2020","unstructured":"McNeil, D.: Can Smart Thermometers Track the Spread of the Coronavirus? The New York Times, New York (2020)"}],"container-title":["International Journal of Information Security"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10207-024-00923-y.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s10207-024-00923-y\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10207-024-00923-y.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,2,12]],"date-time":"2025-02-12T05:19:34Z","timestamp":1739337574000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s10207-024-00923-y"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,11,9]]},"references-count":49,"journal-issue":{"issue":"1","published-print":{"date-parts":[[2025,2]]}},"alternative-id":["923"],"URL":"https:\/\/doi.org\/10.1007\/s10207-024-00923-y","relation":{},"ISSN":["1615-5262","1615-5270"],"issn-type":[{"value":"1615-5262","type":"print"},{"value":"1615-5270","type":"electronic"}],"subject":[],"published":{"date-parts":[[2024,11,9]]},"assertion":[{"value":"9 November 2024","order":1,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Declarations"}},{"value":"\u2018Not applicable\u2019","order":2,"name":"Ethics","group":{"name":"EthicsHeading","label":"Ethics approval"}}],"article-number":"21"}}