{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,26]],"date-time":"2026-05-26T20:07:25Z","timestamp":1779826045867,"version":"3.53.1"},"reference-count":48,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by-nc-nd\/4.0\/"}],"funder":[{"name":"AI-Informed Holistic EVs Integration Approaches for Distribution Grids (AHEAD) Research Project [European Climate, Infrastructure and Environment Executive Agency (CINEA) European Union (EU)]","award":["101160665"],"award-info":[{"award-number":["101160665"]}]},{"name":"Security and Rights in the Cyberspace"},{"name":"National Recovery and Resilience Plan (NRRP) Ministero dell\u2019Universit\u00e0 e della Ricerca (MUR) Program"},{"name":"EU\u2013NGEU","award":["PE00000014"],"award-info":[{"award-number":["PE00000014"]}]},{"name":"Made in Italy\u2013Circular and Sustainable"},{"DOI":"10.13039\/100031478","name":"NextGenerationEU","doi-asserted-by":"publisher","award":["CUP MICS D43C22003120001"],"award-info":[{"award-number":["CUP MICS D43C22003120001"]}],"id":[{"id":"10.13039\/100031478","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Access"],"published-print":{"date-parts":[[2026]]},"DOI":"10.1109\/access.2026.3693997","type":"journal-article","created":{"date-parts":[[2026,5,15]],"date-time":"2026-05-15T19:54:34Z","timestamp":1778874874000},"page":"75749-75762","source":"Crossref","is-referenced-by-count":0,"title":["Evaluating Threats and Proposing Evidence-Based Recommendations for Mobile Digital Therapeutics Applications"],"prefix":"10.1109","volume":"14","author":[{"ORCID":"https:\/\/orcid.org\/0009-0000-1644-136X","authenticated-orcid":false,"given":"Marco","family":"Balossini","sequence":"first","affiliation":[{"name":"Politecnico di Milano, Milan, Italy"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Dario A.","family":"Gervasio","sequence":"additional","affiliation":[{"name":"Politecnico di Milano, Milan, Italy"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1770-6486","authenticated-orcid":false,"given":"Enrico G.","family":"Caiani","sequence":"additional","affiliation":[{"name":"Politecnico di Milano, Milan, Italy"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-4710-5283","authenticated-orcid":false,"given":"Stefano","family":"Zanero","sequence":"additional","affiliation":[{"name":"Politecnico di Milano, Milan, Italy"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8284-6074","authenticated-orcid":false,"given":"Michele","family":"Carminati","sequence":"additional","affiliation":[{"name":"Politecnico di Milano, Milan, Italy"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-7533-4510","authenticated-orcid":false,"given":"Stefano","family":"Longari","sequence":"additional","affiliation":[{"name":"Politecnico di Milano, Milan, Italy"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.3403\/30448241"},{"key":"ref2","volume-title":"Device Classification Under Section 513(F)(2)(De Novo)","year":"2017"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1108\/978-1-78756-675-020211006"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.2196\/jmir.4052"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1891\/0889-8391.4.4.406"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.30574\/wjarr.2024.24.3.3997"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1177\/20552076241277441"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.3389\/fpubh.2023.1196596"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1007\/s12599-023-00804-z"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1016\/j.cmpb.2021.106319"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1126\/scitranslmed.aaa3487"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/COMSNETS.2011.5716518"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1145\/2379776.2379779"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.35946\/arcr.v36.1.15"},{"key":"ref15","first-page":"314","article-title":"Threat modeling for mobile health systems","volume-title":"Proc. IEEE Wireless Commun. Netw. Conf. Workshops (WCNCW)","author":"Gro\u00dfe-Kampmann"},{"issue":"4","key":"ref16","first-page":"51","article-title":"Data protection and cybersecurity in digital therapeutics","volume":"2021","author":"Casalicchio","year":"2021","journal-title":"Tendenze"},{"key":"ref17","first-page":"1","article-title":"Security and privacy issues related to the use of mobile health apps","volume-title":"Proc. 25th Australasian Conference on Information Systems (ACIS)","author":"Adhikari"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/ICSTW.2015.7107459"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-18467-8_38"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2018.2799522"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1145\/3556974"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/URTC51696.2020.9668870"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1007\/s10664-022-10236-0"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-79007-2_19"},{"key":"ref25","first-page":"4909","article-title":"\u2018There are rabbit holes i want to go down that I\u2019m not allowed to go down\u2019: An investigation of security expert threat modeling practices for medical devices","volume-title":"Proc. 33rd USENIX Security Symp.","author":"Thompson"},{"key":"ref26","volume-title":"Threat Modeling: Designing for Security","author":"Shostack","year":"2014"},{"key":"ref27","volume-title":"OWASP mobile application security testing guide","author":"Holguera","year":"2022"},{"key":"ref28","volume-title":"Mobile Operating System Market Share Worldwide","year":"2024"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1016\/j.cosrev.2021.100372"},{"key":"ref30","volume-title":"Product Library\u2013Digital Therapeutics Alliance","year":"2021"},{"key":"ref31","volume-title":"Directory | DiGA Directory","year":"2024"},{"key":"ref32","volume-title":"MobSF\/Mobile-Security-Framework-MobSF","year":"2024"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-48865-8_6"},{"key":"ref34","volume-title":"Skylot\/Jadx","year":"2023"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-01701-9_10"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-63688-7_19"},{"key":"ref37","volume-title":"PHP PHP 5.6.38 Security Vulnerabilities, CVEs","year":"2018"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1145\/3538707"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1145\/3595292"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.5958\/0974-360x.2018.01028.4"},{"key":"ref41","year":"2022","journal-title":"Directive (EU) 2022\/2555 of the European Parliament and of the Council of 14 December 2022 on Measures for a High Common Level of Cybersecurity Across the Union, Amending Regulation (EU), no. 910\/2014 and Directive (EU) 2018\/1972, and Repealing Directive (EU) 2016\/1148 (NIS 2 Directive) (Text With EEA Relevance)"},{"key":"ref42","volume-title":"NIST Special Publication 800-63B","year":"2026"},{"key":"ref43","year":"2017","journal-title":"Regulation (EU) 2017\/745 of the European Parliament and of the Council of 5 April 2017 on Medical Devices, Amending Directive 2001\/83\/EC, Regulation (EC), no. 178\/2002 and Regulation (EC), no. 1223\/2009 and Repealing Council Directives 90\/385\/EEC and 93\/42\/EEC (Text With EEA Relevance.)"},{"key":"ref44","volume-title":"MDCG 2019-16 Rev.1\u2014Guidance on Cybersecurity for Medical Devices","year":"2020"},{"key":"ref45","volume-title":"Regulation (EU) 2016\/679 of the European Parliament and of the Council of 27 April 2016 on the Protection of Natural Persons With Regard To the Processing of Personal Data and on the Free Movement of Such Data, and Repealing Directive 95\/46\/EC (General Data Protection Regulation) (Text With EEA Relevance)","year":"2016"},{"key":"ref46","volume-title":"Cybersecurity in Medical Devices: Quality System Considerations and Content of Premarket Submissions","year":"2023"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.4135\/9781412971942.n180"},{"key":"ref48","volume-title":"Health Software and Health IT Systems Safety, Effectiveness and Security Part 5-1: Security\u2014Activities in the Product Life Cycle","year":"2021"}],"container-title":["IEEE Access"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/6287639\/11323511\/11520812.pdf?arnumber=11520812","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,5,26]],"date-time":"2026-05-26T19:42:24Z","timestamp":1779824544000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11520812\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026]]},"references-count":48,"URL":"https:\/\/doi.org\/10.1109\/access.2026.3693997","relation":{},"ISSN":["2169-3536"],"issn-type":[{"value":"2169-3536","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026]]}}}