{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,26]],"date-time":"2026-06-26T20:55:19Z","timestamp":1782507319147,"version":"3.54.5"},"reference-count":115,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2021,1,1]],"date-time":"2021-01-01T00:00:00Z","timestamp":1609459200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/legalcode"}],"funder":[{"name":"European Union and Greek national funds through the Operational Program Competitiveness, Entrepreneurship and Innovation, under the call RESEARCH\u2013CREATE\u2013INNOVATE","award":["T1EDK-01958"],"award-info":[{"award-number":["T1EDK-01958"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Access"],"published-print":{"date-parts":[[2021]]},"DOI":"10.1109\/access.2021.3064682","type":"journal-article","created":{"date-parts":[[2021,3,9]],"date-time":"2021-03-09T21:29:07Z","timestamp":1615325347000},"page":"40049-40075","source":"Crossref","is-referenced-by-count":49,"title":["Risk Assessment Methodologies for the Internet of Medical Things: A Survey and Comparative Appraisal"],"prefix":"10.1109","volume":"9","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-9238-6796","authenticated-orcid":false,"given":"Vangelis","family":"Malamas","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Fotis","family":"Chantzis","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-1240-4822","authenticated-orcid":false,"given":"Thomas K.","family":"Dasaklis","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"George","family":"Stergiopoulos","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-8771-9020","authenticated-orcid":false,"given":"Panayiotis","family":"Kotzanikolaou","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-6849-6693","authenticated-orcid":false,"given":"Christos","family":"Douligeris","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref39","first-page":"671","article-title":"Producing a systematic review","author":"denyer","year":"2009","journal-title":"Sage Handbook of Organizational Research Methods"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1186\/s13635-020-00111-0"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.4018\/IJEHMC.2016040101"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.4018\/IJSI.2019040103"},{"key":"ref31","first-page":"546","article-title":"A review on identification & analysis of security issues and challenges of IoT based healthcare","volume":"8","author":"vani","year":"2019","journal-title":"Int J Innov Technol Exploring Eng"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1155\/2019\/9629381"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2019.2914094"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1155\/2018\/5978636"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2016.2521727"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1016\/j.jbi.2015.04.007"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.14419\/ijet.v7i1.7.9380"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1108\/ICS-07-2018-0084"},{"key":"ref29","first-page":"5694","article-title":"Security requirements and technologies for the Internet of Things (IoT) applications: A systematic literature review","volume":"96","author":"ibrahim","year":"2018","journal-title":"J Theor Appl Inf Technol"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1007\/s11277-019-06405-y"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1016\/j.comnet.2018.03.012"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1016\/j.comnet.2018.11.025"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1016\/j.jisa.2017.11.002"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2017.2694844"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2017.2683200"},{"key":"ref101","doi-asserted-by":"publisher","DOI":"10.6028\/NIST.SP.800-121r2"},{"key":"ref25","first-page":"2237","article-title":"Internet of Things: A survey on security threats and study on azure and AWS IoT frameworks","volume":"10","author":"kolli","year":"2018","journal-title":"J Adv Res Dyn Control Syst"},{"key":"ref100","author":"souppaya","year":"2013"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1109\/WCNCW.2018.8369033"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1016\/j.procs.2017.08.314"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.1007\/s10207-020-00522-7"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1145\/3301326.3301330"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1109\/NTMS.2015.7266525"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1109\/ICCSA.2019.000-8"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1109\/ISSA.2017.8251776"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1109\/ISMVL.2012.29"},{"key":"ref53","first-page":"3648","article-title":"Attack-graph threat modeling assessment of ambulatory medical devices","author":"luckett","year":"2017","journal-title":"Proc 50th Hawaii Int Conf Syst Sci"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1109\/ICTTA.2008.4530274"},{"key":"ref40","doi-asserted-by":"crossref","DOI":"10.1371\/journal.pmed.1000097","article-title":"Preferred reporting items for systematic reviews and meta-analyses: The PRISMA statement","volume":"6","author":"moher","year":"2009","journal-title":"PLoS Med"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2018.2855563"},{"key":"ref3","year":"2019","journal-title":"Internet of Things (IoT) Healthcare Market by Component (Implantable Sensor Devices Wearable Sensor Devices System and Software) Application (Patient Monitoring Clinical Operation and Workflow Optimization Clinical Imaging Fitness and Wellness Measurement)—Global Opportunity Analysis and Industry Forecast 2014–2021"},{"key":"ref6","author":"gayle","year":"2017","journal-title":"NHS Seeks to Recover From Global Cyber-Attack as Security Concerns Resurface"},{"key":"ref5","author":"fox-brewster","year":"2017","journal-title":"Medical Devices Hit by Ransomware for the First Time in U S Hospitals (Forbes)"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.2147\/MDER.S50048"},{"key":"ref7","year":"2016","journal-title":"Anatomy of Attack MEDJACK 2 Hospitals Under Siege"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1109\/LCN.Workshops.2017.72"},{"key":"ref9","year":"2019","journal-title":"Global Medical Device Nomenclature"},{"key":"ref46","year":"2012"},{"key":"ref45","year":"2013"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1109\/CHASE.2017.69"},{"key":"ref47","year":"2010","journal-title":"DHS risk lexicon"},{"key":"ref42","year":"2012"},{"key":"ref41","year":"2010","journal-title":"NIPP supplemental tool Executing a critical infrastructure risk management approach"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.6028\/NIST.SP.800-123"},{"key":"ref43","year":"2016"},{"key":"ref73","doi-asserted-by":"publisher","DOI":"10.1049\/cp.2018.0003"},{"key":"ref72","doi-asserted-by":"publisher","DOI":"10.1109\/MeMeA.2014.6860088"},{"key":"ref71","doi-asserted-by":"publisher","DOI":"10.1109\/SACI.2016.7507369"},{"key":"ref70","doi-asserted-by":"publisher","DOI":"10.1016\/j.jnca.2017.01.033"},{"key":"ref76","year":"2016"},{"key":"ref77","year":"2016"},{"key":"ref74","year":"2010"},{"key":"ref75","doi-asserted-by":"crossref","DOI":"10.6028\/NIST.IR.8259-draft","article-title":"Core cybersecurity feature baseline for securable IoT devices, a starting point for IoT device manufacturers","author":"fagan","year":"2019"},{"key":"ref78","year":"2019","journal-title":"Medical Device Cyber-Security Guidance for Industry"},{"key":"ref79","year":"2019","journal-title":"Medical Device Vendor Instructions"},{"key":"ref60","year":"2011"},{"key":"ref62","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2018.2874978"},{"key":"ref61","article-title":"Threat modeling: A summary of available methods","author":"shevchenko","year":"2018"},{"key":"ref63","year":"2008"},{"key":"ref64","year":"2020","journal-title":"IoT Security Testing Methodology"},{"key":"ref65","doi-asserted-by":"publisher","DOI":"10.1016\/j.ifacol.2017.08.657"},{"key":"ref66","doi-asserted-by":"publisher","DOI":"10.1016\/j.pmcj.2019.101068"},{"key":"ref67","doi-asserted-by":"publisher","DOI":"10.5220\/0009105801640175"},{"key":"ref68","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-02686-8_17"},{"key":"ref69","first-page":"641","article-title":"Test-based risk assessment and security certification proposal for the Internet of Things","author":"garc\u00eda","year":"2018","journal-title":"Proc IEEE 4th World Forum Internet Things (WF-IoT)"},{"key":"ref2","author":"marr","year":"2019","journal-title":"Why The Internet Of Medical Things (IoMT) Will Start To Transform Healthcare In 2018"},{"key":"ref1","year":"2019","journal-title":"Federal Food Drug and Cosmetic Act (FD&C Act)"},{"key":"ref95","author":"radack","year":"2007","journal-title":"Common Vulnerability Scoring System"},{"key":"ref109","first-page":"1","article-title":"CT-GAN: Malicious tampering of 3D medical imagery using deep learning","volume":"abs 1901 3597","author":"mirsky","year":"2019","journal-title":"CoRR"},{"key":"ref94","article-title":"Rubric for applying CVSS to medical devices","author":"chase","year":"2019"},{"key":"ref108","year":"2020","journal-title":"Health Insurance Portability and Accountability Act (HIPAA)"},{"key":"ref93","year":"2019"},{"key":"ref107","doi-asserted-by":"publisher","DOI":"10.1109\/PIMRC.2017.8292272"},{"key":"ref92","year":"2019","journal-title":"Secure Medical Device Testing"},{"key":"ref106","doi-asserted-by":"publisher","DOI":"10.1109\/ICCCN.2017.8038507"},{"key":"ref91","year":"2006"},{"key":"ref105","year":"2020"},{"key":"ref90","author":"heyl","year":"2020","journal-title":"Overview of UL 2900"},{"key":"ref104","year":"2020","journal-title":"NTIA Software Component Transparency"},{"key":"ref103","year":"0"},{"key":"ref102","first-page":"1","author":"wilson","year":"2003"},{"key":"ref111","doi-asserted-by":"publisher","DOI":"10.1145\/2508701"},{"key":"ref112","first-page":"33","article-title":"Combating malware with whitelisting in IoT-based medical devices","volume":"167","author":"chakravartula","year":"2017","journal-title":"Int J Comput Appl"},{"key":"ref110","author":"ortiz","year":"2020","journal-title":"Attacking Digital Imaging and Communication in Medicine (DICOM) File Format Standard"},{"key":"ref98","year":"2016"},{"key":"ref99","year":"0","journal-title":"Security and Privacy Controls for Federal Information Systems and Organizations"},{"key":"ref96","doi-asserted-by":"publisher","DOI":"10.1007\/s10270-010-0166-8"},{"key":"ref97","doi-asserted-by":"publisher","DOI":"10.1145\/3145905"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.3390\/s20174828"},{"key":"ref11","year":"2019","journal-title":"Medical Device Classification"},{"key":"ref12","year":"2019","journal-title":"Content of Premarket Submissions for Management of Cybersecurity in Medical Devices"},{"key":"ref13","year":"2019"},{"key":"ref14","year":"2013"},{"key":"ref15","year":"2017","journal-title":"European Medical Device Regulation 2017\/745"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/MPRV.2008.16"},{"key":"ref82","year":"2019"},{"key":"ref17","first-page":"2130","article-title":"Survey of Internet of Things security","volume":"54","author":"zhang","year":"2017","journal-title":"Jisuanji Yanjiu yu Fazhan\/Computer Research and Development"},{"key":"ref81","year":"2019","journal-title":"Secure Medical Device Deployment Standard"},{"key":"ref18","first-page":"162","article-title":"Internet of Things: Survey on security","volume":"27","author":"mena","year":"2018","journal-title":"Inform & Secur J"},{"key":"ref84","article-title":"Considerations for managing Internet of Things (IoT) cybersecurity and privacy risks","author":"boeckl","year":"2018"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1016\/j.jnca.2017.04.002"},{"key":"ref83","year":"2020"},{"key":"ref114","year":"2020"},{"key":"ref113","year":"2019","journal-title":"OWASP Top 10—IoT"},{"key":"ref80","article-title":"Smart hospitals security and resilience for smart health service and infrastructures November 2016 smart hospitals about ENISA","author":"mayol","year":"2016"},{"key":"ref115","year":"2020","journal-title":"Compromised Vendor Credentials Allow Hancock Hospital Breach"},{"key":"ref89","year":"2017"},{"key":"ref85","author":"o\u2019brien","year":"2018","journal-title":"Securing Wireless Infusion Pumps"},{"key":"ref86","year":"2008"},{"key":"ref87","author":"stoneburner","year":"2002"},{"key":"ref88","year":"2010"}],"container-title":["IEEE Access"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/6287639\/9312710\/09373445.pdf?arnumber=9373445","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2021,12,17]],"date-time":"2021-12-17T19:57:16Z","timestamp":1639771036000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9373445\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2021]]},"references-count":115,"URL":"https:\/\/doi.org\/10.1109\/access.2021.3064682","relation":{},"ISSN":["2169-3536"],"issn-type":[{"value":"2169-3536","type":"electronic"}],"subject":[],"published":{"date-parts":[[2021]]}}}