{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,23]],"date-time":"2026-07-23T15:27:28Z","timestamp":1784820448194,"version":"3.55.0"},"reference-count":162,"publisher":"Association for Computing Machinery (ACM)","issue":"12","license":[{"start":{"date-parts":[[2023,3,28]],"date-time":"2023-03-28T00:00:00Z","timestamp":1679961600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"name":"European Commission Horizon 2020 Programme","award":["H2020-SU-DS-2019\/883335"],"award-info":[{"award-number":["H2020-SU-DS-2019\/883335"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":["ACM Comput. Surv."],"published-print":{"date-parts":[[2023,12,31]]},"abstract":"<jats:p>Currently, healthcare is critical environment in our society, which attracts attention to malicious activities and has caused an important number of damaging attacks. In parallel, the recent advancements in technologies, computing systems, and wireless communications are changing healthcare environment by adding different improvements and complexity to it. This article reviews the current state of the literature and provides a holistic view of cybersecurity in healthcare. With this purpose in mind, the article enumerates the main stakeholders and architecture implemented in the healthcare environment, as well as the main security issues (threats, attacks, etc.) produced in healthcare. In this context, this work maps the threats collected with a widely used knowledge-based framework, MITRE ATT&amp;CK, building a contribution not seen so far. This article also enumerates the security mechanisms created to protect healthcare, identifying the principal research lines addressed in the literature, and listing the available public security-focused datasets used in machine-learning to provide security in the medical domain. To conclude, the research challenges that need to be addressed for future research works in this area are presented.<\/jats:p>","DOI":"10.1145\/3571156","type":"journal-article","created":{"date-parts":[[2022,11,18]],"date-time":"2022-11-18T12:02:17Z","timestamp":1668772937000},"page":"1-38","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":85,"title":["A Comprehensive Review of the State-of-the-Art on Security and Privacy Issues in Healthcare"],"prefix":"10.1145","volume":"55","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-4077-4030","authenticated-orcid":false,"given":"Antonio","family":"L\u00f3pez Mart\u00ednez","sequence":"first","affiliation":[{"name":"University of Murcia, Murcia, Spain"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-7768-9665","authenticated-orcid":false,"given":"Manuel","family":"Gil P\u00e9rez","sequence":"additional","affiliation":[{"name":"University of Murcia, Murcia, Spain"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-8433-159X","authenticated-orcid":false,"given":"Antonio","family":"Ruiz-Mart\u00ednez","sequence":"additional","affiliation":[{"name":"University of Murcia, Murcia, Spain"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2023,3,28]]},"reference":[{"key":"e_1_3_1_2_2","doi-asserted-by":"publisher","DOI":"10.1016\/j.adhoc.2021.102621"},{"key":"e_1_3_1_3_2","doi-asserted-by":"publisher","DOI":"10.1007\/s10916-010-9449-4"},{"key":"e_1_3_1_4_2","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2930962"},{"key":"e_1_3_1_5_2","doi-asserted-by":"publisher","DOI":"10.21227\/553g-yn97"},{"issue":"16","key":"e_1_3_1_6_2","first-page":"27","article-title":"Security, privacy, and reliability in digital healthcare systems using blockchain","volume":"10","author":"al. Aitizaz Ali et","year":"2021","unstructured":"Aitizaz Ali et al.2021. Security, privacy, and reliability in digital healthcare systems using blockchain. Electronics 10, 16 (2021), 27 pages.","journal-title":"Electronics"},{"key":"e_1_3_1_7_2","doi-asserted-by":"publisher","DOI":"10.1109\/JSAC.2020.3020605"},{"key":"e_1_3_1_8_2","doi-asserted-by":"publisher","DOI":"10.1109\/CHASE.2017.69"},{"key":"e_1_3_1_9_2","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2016.2521727"},{"key":"e_1_3_1_10_2","doi-asserted-by":"crossref","first-page":"153","DOI":"10.1007\/978-3-030-18075-1_8","volume-title":"Internet of things in the healthcare sector: Overview of security and privacy issues. Security, Privacy, and Trust in the IoT Environment","author":"Amaraweera Suvini P.","year":"2019","unstructured":"Suvini P. Amaraweera and Malka N. Halgamuge. 2019. Internet of things in the healthcare sector: Overview of security and privacy issues. Security, Privacy, and Trust in the IoT Environment. 153\u2013179."},{"key":"e_1_3_1_11_2","doi-asserted-by":"publisher","DOI":"10.1504\/IJIEM.2010.035624"},{"key":"e_1_3_1_12_2","first-page":"55","volume-title":"Proceedings of the 30th USENIX Security Symposium (USENIX Security 21).","author":"Arias-Cabarcos Patricia","year":"2021","unstructured":"Patricia Arias-Cabarcos, Thilo Habrich, Karen Becker, Christian Becker, and Thorsten Strufe. 2021. Inexpensive brainwave authentication: New techniques and insights on user acceptance. In Proceedings of the 30th USENIX Security Symposium (USENIX Security 21).USENIX Association, 55\u201372."},{"key":"e_1_3_1_13_2","doi-asserted-by":"publisher","DOI":"10.1007\/s40264-019-00878-3"},{"key":"e_1_3_1_14_2","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2017.2780263"},{"key":"e_1_3_1_15_2","unstructured":"Bachelor\u2019s in Healthcare Practice Management. 2022. Patient Confidentiality in Healthcare. (2022). Retrieved from https:\/\/online.maryville.edu\/blog\/patient-confidentiality."},{"key":"e_1_3_1_16_2","doi-asserted-by":"publisher","DOI":"10.2196\/13585"},{"key":"e_1_3_1_17_2","first-page":"15","volume-title":"Proceedings of the 18th Brazilian Symposium on Information and System Security.","author":"al. Vitor H. Bezerra et","year":"2018","unstructured":"Vitor H. Bezerra et al.2018. Providing IoT host-based datasets for intrusion detection research. In Proceedings of the 18th Brazilian Symposium on Information and System Security.SBC, 15\u201328."},{"key":"e_1_3_1_18_2","first-page":"9","article-title":"Transforming healthcare cybersecurity from reactive to proactive: Current status and future recommendations","volume":"44","author":"al. Soumitra S. Bhuyan et","year":"2020","unstructured":"Soumitra S. Bhuyan et al.2020. Transforming healthcare cybersecurity from reactive to proactive: Current status and future recommendations. Journal of Medical Systems 44, (2020), 9 pages.","journal-title":"Journal of Medical Systems"},{"key":"e_1_3_1_19_2","unstructured":"Sergio Caltagirone Andrew Pendergast and Christopher Betz. 2013. The Diamond Model of Intrusion Analysis. (2013). Retrieved from https:\/\/www.activeresponse.org\/wp-content\/uploads\/2013\/07\/diamond.pdf."},{"key":"e_1_3_1_20_2","doi-asserted-by":"publisher","DOI":"10.1016\/j.jbi.2015.04.007"},{"issue":"8","key":"e_1_3_1_21_2","first-page":"458","article-title":"A medical vulnerability scoring system incorporating health and data sensitivity metrics","volume":"15","author":"Carre\u00f3n Nadir A.","year":"2021","unstructured":"Nadir A. Carre\u00f3n, Christa Sonderer, Aakarsh Rao, and Roman Lysecky. 2021. A medical vulnerability scoring system incorporating health and data sensitivity metrics. International Journal of Computer and Information Technology 15, 8 (2021), 458\u2013466.","journal-title":"International Journal of Computer and Information Technology"},{"key":"e_1_3_1_22_2","first-page":"229","volume-title":"Proceedings of the 2017 IEEE International Conference on Healthcare Informatics.","author":"al. Luiz F. M. Carvalho et","year":"2017","unstructured":"Luiz F. M. Carvalho et al.2017. Provider-consumer anomaly detection for healthcare systems. In Proceedings of the 2017 IEEE International Conference on Healthcare Informatics.IEEE, 229\u2013238."},{"issue":"14","key":"e_1_3_1_23_2","first-page":"7","article-title":"Security and privacy issues with IoT in healthcare","volume":"4","author":"Chacko Anil","year":"2018","unstructured":"Anil Chacko and Thaier Hayajneh. 2018. Security and privacy issues with IoT in healthcare. EAI Endorsed Transactions on Pervasive Health and Technology 4, 14 (2018), 7 pages.","journal-title":"EAI Endorsed Transactions on Pervasive Health and Technology"},{"key":"e_1_3_1_24_2","unstructured":"Melissa Chase and Steven C. Coley. 2020. Rubric for Applying CVSS to Medical Devices. (2020). Retrieved from https:\/\/www.mitre.org\/publications\/technical-papers\/rubric-for-applying-cvss-to-medical-devices."},{"key":"e_1_3_1_25_2","doi-asserted-by":"publisher","DOI":"10.1109\/MIS.2020.2988604"},{"key":"e_1_3_1_26_2","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2020.2969881"},{"key":"e_1_3_1_27_2","doi-asserted-by":"publisher","DOI":"10.1002\/aorn.13226"},{"key":"e_1_3_1_28_2","doi-asserted-by":"publisher","DOI":"10.3390\/electronics8070768"},{"key":"e_1_3_1_29_2","doi-asserted-by":"crossref","unstructured":"Salaheddin Darwish Ilia Nouretdinov and Stephen D. Wolthusen. 2017. Towards composable threat assessment for medical IoT (MIoT). In Procedia Computer Science Vol. 113. Elsevier B.V. 627\u2013632.","DOI":"10.1016\/j.procs.2017.08.314"},{"key":"e_1_3_1_30_2","doi-asserted-by":"publisher","DOI":"10.1109\/CESYS.2016.7889823"},{"key":"e_1_3_1_31_2","doi-asserted-by":"publisher","DOI":"10.1109\/JSAC.2020.3020599"},{"key":"e_1_3_1_32_2","doi-asserted-by":"publisher","DOI":"10.4018\/IJPHIM.2019010105"},{"key":"e_1_3_1_33_2","doi-asserted-by":"publisher","DOI":"10.1016\/j.jksuci.2016.01.002"},{"key":"e_1_3_1_34_2","doi-asserted-by":"publisher","DOI":"10.1016\/S1361-3723(20)30053-1"},{"key":"e_1_3_1_35_2","doi-asserted-by":"publisher","DOI":"10.1109\/CSNET.2018.8602974"},{"key":"e_1_3_1_36_2","doi-asserted-by":"publisher","DOI":"10.1002\/sec.939"},{"key":"e_1_3_1_37_2","doi-asserted-by":"publisher","DOI":"10.1109\/MCC.2018.011791712"},{"key":"e_1_3_1_38_2","unstructured":"EU GDPR. 2016. Regulation (EU) 2016\/679 (General Data Protection Regulation). (2016). Retrieved from http:\/\/data.europa.eu\/eli\/reg\/2016\/679\/2016-05-04."},{"key":"e_1_3_1_39_2","unstructured":"European Medicines Agency. 2022. Science Medicines Health. (2022). Retrieved from https:\/\/www.ema.europa.eu."},{"key":"e_1_3_1_40_2","unstructured":"European Parliament. 2017. Regulation (EU) 2017\/745 on Medical Devices. (2017). Retrieved from https:\/\/ec.europa.eu\/growth\/single-market\/european-standards\/harmonised-standards\/medical-devices_en."},{"key":"e_1_3_1_41_2","first-page":"12","volume-title":"Procedia Computer Science","author":"Fatima Aqsa","year":"2018","unstructured":"Aqsa Fatima and Ricardo Colomo-Palacios. 2018. Security aspects in healthcare information systems: A systematic mapping. Procedia Computer Science. 138, 12\u201319."},{"issue":"5","key":"e_1_3_1_42_2","article-title":"Intelligent and dynamic ransomware spread detection and mitigation in integrated clinical environments","volume":"19","author":"al. Lorenzo Fern\u00e1ndez Maim\u00f3 et","year":"2019","unstructured":"Lorenzo Fern\u00e1ndez Maim\u00f3 et al.2019. Intelligent and dynamic ransomware spread detection and mitigation in integrated clinical environments. Sensors 19, 5 (2019), 1114.","journal-title":"Sensors"},{"key":"e_1_3_1_43_2","article-title":"Security and privacy in distributed healthcare environments","author":"Flowerday Stephen","year":"2022","unstructured":"Stephen Flowerday and Christos Xenakis. 2022. Security and privacy in distributed healthcare environments. Methods of Information in Medicine. (2022).","journal-title":"Methods of Information in Medicine."},{"key":"e_1_3_1_44_2","unstructured":"France 24. 2021. Cyber Attacks Hit Two French Hospitals in One Week. (2021). Retrieved from https:\/\/www.france24.com\/en\/europe\/20210216-cyber-attacks-hit-two-french-hospitals-in-one-week."},{"key":"e_1_3_1_45_2","doi-asserted-by":"publisher","DOI":"10.1145\/1134680.1134693"},{"key":"e_1_3_1_46_2","doi-asserted-by":"publisher","DOI":"10.5281\/zenodo.4743746"},{"key":"e_1_3_1_47_2","unstructured":"Google. 2022. Dataset Search. (2022). Retrieved from https:\/\/datasetsearch.research.google.com."},{"key":"e_1_3_1_48_2","doi-asserted-by":"publisher","DOI":"10.1109\/MNET.001.1900063"},{"key":"e_1_3_1_49_2","first-page":"75","volume-title":"Connected Health in Smart Cities","author":"Habibzadeh Hadi","year":"2019","unstructured":"Hadi Habibzadeh and Tolga Soyata. 2019. Connected Health in Smart Cities. Springer, Cham, Chapter Toward uniform smart healthcare ecosystems: A survey on prospects, security, and privacy considerations, 75\u2013112."},{"key":"e_1_3_1_50_2","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2020.3000421"},{"key":"e_1_3_1_51_2","first-page":"2798571","article-title":"An object proxy-based dynamic layer replacement to protect IoMT applications","volume":"2019","author":"Han Bo","year":"2019","unstructured":"Bo Han, Zhao Yin-Liang, and Zhu Chang-Peng. 2019. An object proxy-based dynamic layer replacement to protect IoMT applications. Security and Communication Networks 2019, Article 2798571 (2019), 9 pages.","journal-title":"Security and Communication Networks"},{"key":"e_1_3_1_52_2","unstructured":"Richard Harang and Ethan M. Rudd. 2020. SOREL-20M: A large scale benchmark dataset for malicious PE detection. arXiv:2012.07634. Retrieved from https:\/\/arxiv.org\/abs\/2012.07634."},{"key":"e_1_3_1_53_2","doi-asserted-by":"publisher","DOI":"10.1016\/j.comcom.2020.02.018"},{"key":"e_1_3_1_54_2","doi-asserted-by":"publisher","DOI":"10.1016\/j.compeleceng.2019.04.017"},{"key":"e_1_3_1_55_2","doi-asserted-by":"publisher","DOI":"10.21227\/bhxy-ep04"},{"key":"e_1_3_1_56_2","unstructured":"HIPAA Journal. 2022. HIPAA Compliance Checklist 2022. (2022). https:\/\/www.hipaajournal.com\/hipaa-compliance-checklist."},{"issue":"6","key":"e_1_3_1_57_2","first-page":"797","article-title":"The design and implementation of simulated threat generator based on MITRE ATT&CK for cyber warfare training","volume":"22","author":"Hong Suyoun","year":"2019","unstructured":"Suyoun Hong, Kwangsoo Kim, and Taekyu Kim. 2019. The design and implementation of simulated threat generator based on MITRE ATT&CK for cyber warfare training. Journal of the Korea Institute of Military Science and Technology 22, 6 (2019), 797\u2013805.","journal-title":"Journal of the Korea Institute of Military Science and Technology"},{"key":"e_1_3_1_58_2","doi-asserted-by":"publisher","DOI":"10.21227\/0s0p-s959"},{"key":"e_1_3_1_59_2","doi-asserted-by":"publisher","DOI":"10.21227\/9w13-2t13"},{"key":"e_1_3_1_60_2","doi-asserted-by":"publisher","DOI":"10.1016\/j.jii.2021.100217"},{"key":"e_1_3_1_61_2","unstructured":"IEEE. 2022. IEEEDataPort. Retrieved from https:\/\/ieee-dataport.org."},{"key":"e_1_3_1_62_2","unstructured":"Information Technology Laboratory. 2019. Common Vulnerability Scoring System (CVSS) v3. https:\/\/nvd.nist.gov\/vuln-metrics\/cvss."},{"key":"e_1_3_1_63_2","unstructured":"Information Technology Laboratory. 2022. National Vulnerability Database. Retrieved from https:\/\/nvd.nist.gov."},{"key":"e_1_3_1_64_2","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2015.2437951"},{"key":"e_1_3_1_65_2","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2018.2810337"},{"key":"e_1_3_1_66_2","doi-asserted-by":"publisher","DOI":"10.1007\/s12652-020-02728-y"},{"key":"e_1_3_1_67_2","doi-asserted-by":"publisher","DOI":"10.21227\/q0mg-6961"},{"key":"e_1_3_1_68_2","unstructured":"Khlood Jastaniah Ning Zhang and Mustafa A. Mustafa. 2022. Efficient privacy-friendly and flexible IoT data aggregation with user-centric access control. arXiv:2203.00465. Retrieved from https:\/\/arxiv.org\/abs\/2203.00465."},{"key":"e_1_3_1_69_2","doi-asserted-by":"crossref","unstructured":"Alistair E. W. Johnson et al.2016. MIMIC-III a freely accessible critical care database. Scientific Data 3 Article 160035 (2016) 9 pages. 160035","DOI":"10.1038\/sdata.2016.35"},{"issue":"4","key":"e_1_3_1_70_2","first-page":"240","article-title":"Internet of medical things (IoMT): Applications, benefits and future challenges in healthcare domain","volume":"12","author":"Joyia Gulraiz J.","year":"2017","unstructured":"Gulraiz J. Joyia, Rao M. Liaqat, Aftab Farooq, and Saad Rehman. 2017. Internet of medical things (IoMT): Applications, benefits and future challenges in healthcare domain. Journal of Communications 12, 4 (2017), 240\u2013247.","journal-title":"Journal of Communications"},{"key":"e_1_3_1_71_2","unstructured":"Kaggle Inc.2022. Kaggle. https:\/\/www.kaggle.com."},{"key":"e_1_3_1_72_2","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-81473-1_8"},{"key":"e_1_3_1_73_2","doi-asserted-by":"publisher","DOI":"10.21227\/q70p-q449"},{"key":"e_1_3_1_74_2","doi-asserted-by":"publisher","DOI":"10.1016\/B978-0-323-26208-8.00008-X"},{"issue":"1","key":"e_1_3_1_75_2","first-page":"11","article-title":"MEDiSN: Medical emergency detection in sensor networks","volume":"10","author":"al. Jeonggil Ko et","year":"2010","unstructured":"Jeonggil Ko et al.2010. MEDiSN: Medical emergency detection in sensor networks. ACM Transactions on Embedded Computing Systems 10, 1, Article 11 (2010), 29 pages.","journal-title":"ACM Transactions on Embedded Computing Systems"},{"key":"e_1_3_1_76_2","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2910029"},{"issue":"3","key":"e_1_3_1_77_2","first-page":"1","article-title":"New dangers in the new world: Cyber attacks in the healthcare industry","volume":"10","author":"Kumar Caleb","year":"2017","unstructured":"Caleb Kumar. 2017. New dangers in the new world: Cyber attacks in the healthcare industry. Int. J. Sci. Technol. Soc 10, 3 (2017), 1\u201315.","journal-title":"Int. J. Sci. Technol. Soc"},{"key":"e_1_3_1_78_2","doi-asserted-by":"publisher","DOI":"10.1016\/j.compeleceng.2018.08.015"},{"key":"e_1_3_1_79_2","doi-asserted-by":"publisher","DOI":"10.1109\/RWS50334.2020.9241271"},{"key":"e_1_3_1_80_2","first-page":"453","volume-title":"Proceedings of the International Conference on Information Networking.","author":"Lee Young S.","year":"2014","unstructured":"Young S. Lee, Esko Alasaarela, and HoonJae Lee. 2014. Secure key management scheme based on ECC algorithm for patient\u2019s medical information in healthcare system. In Proceedings of the International Conference on Information Networking.IEEE, 453\u2013457."},{"key":"e_1_3_1_81_2","doi-asserted-by":"publisher","DOI":"10.1016\/j.comcom.2020.06.026"},{"key":"e_1_3_1_82_2","first-page":"387","volume-title":"Proceedings of the 19th International Conference on Information and Communications Security.","author":"al. Xueping Liang et","year":"2017","unstructured":"Xueping Liang et al.2017. Towards decentralized accountability and self-sovereignty in healthcare systems. In Proceedings of the 19th International Conference on Information and Communications Security.Springer, Cham, 387\u2013398."},{"issue":"3","key":"e_1_3_1_83_2","doi-asserted-by":"crossref","first-page":"243","DOI":"10.3390\/healthcare8030243","article-title":"Enhancing privacy and data security across healthcare applications using blockchain and distributed ledger concepts","volume":"8","author":"Liu Haibing","year":"2020","unstructured":"Haibing Liu, Rub\u00e9n Gonz\u00e1lez Crespo, and Oscar Sanju\u00e1n Mart\u00ednez. 2020. Enhancing privacy and data security across healthcare applications using blockchain and distributed ledger concepts. Healthcare 8, 3, Article 243 (2020), 17 pages.","journal-title":"Healthcare"},{"issue":"9","key":"e_1_3_1_84_2","doi-asserted-by":"crossref","first-page":"e14017","DOI":"10.2196\/14017","article-title":"Literature on wearable technology for connected health: Scoping review of research trends, advances, and barriers","volume":"21","author":"al. Tatjana Loncar-Turukalo et","year":"2019","unstructured":"Tatjana Loncar-Turukalo et al.2019. Literature on wearable technology for connected health: Scoping review of research trends, advances, and barriers. Journal of Medical Internet Research 21, 9, Article e14017 (2019), 23 pages.","journal-title":"Journal of Medical Internet Research"},{"issue":"3","key":"e_1_3_1_85_2","first-page":"185","article-title":"Cyberthreats to hospitals: Panacea, a toolkit for people-centric cybersecurity","volume":"16","author":"al. Sabina Magalini et","year":"2021","unstructured":"Sabina Magalini et al.2021. Cyberthreats to hospitals: Panacea, a toolkit for people-centric cybersecurity. Journal of Strategic Innovation and Sustainability. 16, 3 (2021), 185\u2013191.","journal-title":"Journal of Strategic Innovation and Sustainability."},{"key":"e_1_3_1_86_2","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2018.2845399"},{"key":"e_1_3_1_87_2","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2020.2986013"},{"key":"e_1_3_1_88_2","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-50660-9_5"},{"key":"e_1_3_1_89_2","doi-asserted-by":"publisher","DOI":"10.1109\/SEH.2019.00019"},{"key":"e_1_3_1_90_2","unstructured":"Lockheed Martin. 2011. The Cyber Kill Chain. (2011). Retrieved from https:\/\/www.lockheedmartin.com\/en-us\/capabilities\/cyber\/cyber-kill-chain.html."},{"issue":"1","key":"e_1_3_1_91_2","first-page":"10","article-title":"Proposal for a secure data sharing and processing in cloud applications for healthcare domain","volume":"3","author":"Marwan Mbarek","year":"2021","unstructured":"Mbarek Marwan, Ali Karti, and Hassan Ouahmane. 2021. Proposal for a secure data sharing and processing in cloud applications for healthcare domain. International Journal of Information Technology and Applied Sciences 3, 1 (2021), 10\u201317.","journal-title":"International Journal of Information Technology and Applied Sciences"},{"key":"e_1_3_1_92_2","doi-asserted-by":"publisher","DOI":"10.1016\/j.jnca.2019.02.027"},{"key":"e_1_3_1_93_2","doi-asserted-by":"publisher","DOI":"10.1016\/j.smhl.2018.05.001"},{"key":"e_1_3_1_94_2","doi-asserted-by":"publisher","DOI":"10.24251\/HICSS.2021.466"},{"key":"e_1_3_1_95_2","doi-asserted-by":"publisher","DOI":"10.1109\/ICC.2016.7511484"},{"key":"e_1_3_1_96_2","doi-asserted-by":"publisher","DOI":"10.1109\/I2CT.2018.8529426"},{"key":"e_1_3_1_97_2","doi-asserted-by":"publisher","DOI":"10.1109\/MPRV.2018.03367731"},{"key":"e_1_3_1_98_2","doi-asserted-by":"publisher","DOI":"10.1109\/tnsm.2018.2815280"},{"key":"e_1_3_1_99_2","unstructured":"Microsoft Corporation. 2009. The STRIDE Threat Model. (2009). Retrieved from https:\/\/msdn.microsoft.com\/library\/ee823878."},{"key":"e_1_3_1_100_2","first-page":"2177","volume-title":"Proceedings of the IEEE 37th International Conference on Distributed Computing Systems.","author":"al. Markus Miettinen et","year":"2017","unstructured":"Markus Miettinen et al.2017. IoT SENTINEL: Automated device-type identification for security enforcement in IoT. In Proceedings of the IEEE 37th International Conference on Distributed Computing Systems.IEEE, 2177\u20132184."},{"key":"e_1_3_1_101_2","doi-asserted-by":"crossref","unstructured":"Yisroel Mirsky Tomer Doitshman Yuval Elovici and Asaf Shabtai. 2018. Kitsune: An ensemble of autoencoders for online network intrusion detection. arXiv:1802.09089. Retrieved from https:\/\/arxiv.org\/abs\/1802.09089.","DOI":"10.14722\/ndss.2018.23204"},{"key":"e_1_3_1_102_2","doi-asserted-by":"publisher","DOI":"10.1109\/JSEN.2018.2850908"},{"key":"e_1_3_1_103_2","doi-asserted-by":"publisher","DOI":"10.21227\/r7v2-x988"},{"key":"e_1_3_1_104_2","doi-asserted-by":"publisher","DOI":"10.1109\/ISMICT.2019.8743798"},{"key":"e_1_3_1_105_2","doi-asserted-by":"publisher","DOI":"10.1109\/ICGS3.2019.8688019"},{"key":"e_1_3_1_106_2","doi-asserted-by":"publisher","DOI":"10.1016\/j.future.2018.07.049"},{"key":"e_1_3_1_107_2","first-page":"1","volume-title":"Proc. 262nd IIER Int. Conf.","author":"Nanayakkara Nipuni","year":"2019","unstructured":"Nipuni Nanayakkara, Malka Halgamuge, and Ali Syed. 2019. Security and privacy of internet of medical things (IoMT) based healthcare applications: A review. In Proc. 262nd IIER Int. Conf.Institute for Technology and Research, 1\u201318."},{"key":"e_1_3_1_108_2","doi-asserted-by":"crossref","unstructured":"Somayeh Nasiri Farahnaz Sadoughi Mohammad H. Tadayon and Afsaneh Dehnad. 2019. Security requirements of internet of things-based healthcare system: A survey study. Acta Informatica Medica 27 4 (2019) 253\u2013258.","DOI":"10.5455\/aim.2019.27.253-258"},{"issue":"3","key":"e_1_3_1_109_2","first-page":"27","article-title":"A survey on security and privacy issues in modern healthcare systems: Attacks and defenses","volume":"2","author":"Newaz Akm I.","year":"2021","unstructured":"Akm I. Newaz, Amit K. Sikder, Mohammad A. Rahman, and A. Selcuk Uluagac. 2021. A survey on security and privacy issues in modern healthcare systems: Attacks and defenses. ACM Transactions on Computing for Healthcare 2, 3, Article 27 (2021), 44 pages.","journal-title":"ACM Transactions on Computing for Healthcare"},{"key":"e_1_3_1_110_2","first-page":"379","volume-title":"Proceedings of the 2018 International Conference on Soft Computing and Signal Processing.","author":"Nidhya R.","year":"2018","unstructured":"R. Nidhya, S. Karthik, and G. Smilarubavathy. 2018. An end-to-end secure and energy-aware routing mechanism for IoT-based modern health care system. In Proceedings of the 2018 International Conference on Soft Computing and Signal Processing.Springer, Singapore, 379\u2013388."},{"key":"e_1_3_1_111_2","unstructured":"Harun Oz Ahmet Aris Albert Levi and A. Selcuk Uluagac. 2022. A survey on ransomware: Evolution taxonomy and defense solutions. ACM Computing Surveys (2022) 36. Just Accepted."},{"key":"e_1_3_1_112_2","doi-asserted-by":"publisher","DOI":"10.1109\/TSMCC.2009.2032660"},{"issue":"6","key":"e_1_3_1_113_2","doi-asserted-by":"crossref","first-page":"e4049","DOI":"10.1002\/ett.4049","article-title":"A survey on security threats and countermeasures in internet of medical things (IoMT)","volume":"33","author":"al. Maria Papaioannou et","year":"2022","unstructured":"Maria Papaioannou et al.2022. A survey on security threats and countermeasures in internet of medical things (IoMT). Transactions on Emerging Telecommunications Technologies 33, 6, Article e4049 (2022), 15 pages.","journal-title":"Transactions on Emerging Telecommunications Technologies"},{"key":"e_1_3_1_114_2","doi-asserted-by":"crossref","unstructured":"Juha Partala et al.2013. Security threats against the transmission chain of a medical health monitoring system. In Proceedings of the 2013 IEEE 15th International Conference on e-Health Networking Applications and Services (Healthcom 2013). IEEE 243\u2013248.","DOI":"10.1109\/HealthCom.2013.6720675"},{"key":"e_1_3_1_115_2","doi-asserted-by":"publisher","DOI":"10.1080\/17434440.2018.1483235"},{"key":"e_1_3_1_116_2","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2020.2973314"},{"key":"e_1_3_1_117_2","unstructured":"QED Secure Solutions. 2018. Risk Scoring System for Medical Devices. (2018). Retrieved from https:\/\/www.riskscoringsystem.com\/medical."},{"issue":"2","key":"e_1_3_1_118_2","first-page":"683","article-title":"Optimal cluster-based data aggregation in WSN for healthcare application","volume":"16","author":"NY Sree Ranjani","year":"2021","unstructured":"Sree Ranjani NY, A. G. Ananth, and L. Sudershan Reddy. 2021. Optimal cluster-based data aggregation in WSN for healthcare application. Advances in Dynamical Systems and Applications (ADSA) 16, 2 (2021), 683\u2013701.","journal-title":"Advances in Dynamical Systems and Applications (ADSA)"},{"key":"e_1_3_1_119_2","doi-asserted-by":"publisher","DOI":"10.1109\/IWCMC.2017.7986505"},{"key":"e_1_3_1_120_2","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2950849"},{"key":"e_1_3_1_121_2","doi-asserted-by":"publisher","DOI":"10.1109\/IBCAST.2019.8667166"},{"key":"e_1_3_1_122_2","doi-asserted-by":"publisher","DOI":"10.26599\/TST.2021.9010046"},{"key":"e_1_3_1_123_2","unstructured":"Meghan Roos. 2021. Cyberattack Throws Southern California Hospital System Offline for Days. (2021). Retrieved from https:\/\/www.newsweek.com\/cyberattack-throws-southern-california-hospital-system-offline-days-1588355."},{"key":"e_1_3_1_124_2","doi-asserted-by":"publisher","DOI":"10.1109\/TII.2018.2824815"},{"key":"e_1_3_1_125_2","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2014.40"},{"key":"e_1_3_1_126_2","doi-asserted-by":"publisher","DOI":"10.1016\/j.jiph.2020.06.027"},{"key":"e_1_3_1_127_2","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2017.2767561"},{"key":"e_1_3_1_128_2","doi-asserted-by":"publisher","DOI":"10.1109\/MC.2017.195"},{"key":"e_1_3_1_129_2","unstructured":"Yasmine N. M. Saleh Claude C. Chibelushi Ayman A. Abdel-Hamid and Abdel-Hamid Soliman. 2020. Privacy preservation for wireless sensor networks in healthcare: State of the art and open research challenges. arXiv:2012.12958. Retrieved from https:\/\/arxiv.org\/abs\/2012.12958."},{"key":"e_1_3_1_130_2","doi-asserted-by":"publisher","DOI":"10.1145\/2667218"},{"key":"e_1_3_1_131_2","doi-asserted-by":"crossref","first-page":"101838","DOI":"10.1016\/j.cose.2020.101838","article-title":"A new biometrics-based key establishment protocol in WBAN: Energy efficiency & security robustness analysis","volume":"96","author":"Sammoud Amal","year":"2020","unstructured":"Amal Sammoud, Mohamed Chalouf, Omessaad Hamdi, Nicolas Montavont, and Ammar Bouallegue. 2020. A new biometrics-based key establishment protocol in WBAN: Energy efficiency & security robustness analysis. Computers & Security 96, Article 101838 (2020), 15 pages.","journal-title":"Computers & Security"},{"key":"e_1_3_1_132_2","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2021.3064259"},{"key":"e_1_3_1_133_2","doi-asserted-by":"publisher","DOI":"10.1109\/I2CT.2018.8529764"},{"key":"e_1_3_1_134_2","first-page":"1","volume-title":"2018 IEEE International Symposium on Hardware Oriented Security and Trust","author":"Sehatbakhsh Nader","year":"2018","unstructured":"Nader Sehatbakhsh, Monjur Alam, Alireza Nazari, Alenka Zajic, and Milos Prvulovic. 2018. Syndrome: Spectral analysis for anomaly detection on medical IoT and embedded devices. In 2018 IEEE International Symposium on Hardware Oriented Security and Trust. IEEE, 1\u20138."},{"issue":"3","key":"e_1_3_1_135_2","doi-asserted-by":"crossref","first-page":"452","DOI":"10.3390\/electronics9030452","article-title":"A systematic literature review on privacy by design in the healthcare sector","volume":"9","author":"Semantha Farida H.","year":"2020","unstructured":"Farida H. Semantha, Sami Azam, Kheng C. Yeo, and Bharanidharan Shanmugam. 2020. A systematic literature review on privacy by design in the healthcare sector. Electron 9, 3, Article 452 (2020), 29 pages.","journal-title":"Electron"},{"key":"e_1_3_1_136_2","doi-asserted-by":"publisher","DOI":"10.11648\/j.ajtab.20180402.14"},{"key":"e_1_3_1_137_2","doi-asserted-by":"publisher","DOI":"10.1016\/j.jksuci.2017.07.001"},{"key":"e_1_3_1_138_2","doi-asserted-by":"publisher","DOI":"10.1016\/j.dcan.2021.07.002"},{"key":"e_1_3_1_139_2","doi-asserted-by":"publisher","DOI":"10.5220\/0006639801080116"},{"issue":"2","key":"e_1_3_1_140_2","first-page":"59","article-title":"A survey on healthcare data: A security perspective","volume":"17","author":"Singh A. K.","year":"2021","unstructured":"A. K. Singh, A. Anand, Z. Lv, H. Ko, and A. Mohan. 2021. A survey on healthcare data: A security perspective. ACM Transactions on Multimidia Computing Communications and Applications 17, 2s, Article 59 (2021), 26 pages.","journal-title":"ACM Transactions on Multimidia Computing Communications and Applications"},{"key":"e_1_3_1_141_2","unstructured":"Harman Singh. 2021. The GDPR: Sensitive Personal Data Differences Examples and Data Protection. (2021). Retrieved from https:\/\/thecyphere.com\/blog\/sensitive-data."},{"issue":"11","key":"e_1_3_1_142_2","doi-asserted-by":"crossref","first-page":"3930","DOI":"10.3390\/s18113930","article-title":"A secure and efficient group key management protocol with cooperative sensor association in WBANs","volume":"18","author":"Tan Haowen","year":"2018","unstructured":"Haowen Tan and Ilyong Chung. 2018. A secure and efficient group key management protocol with cooperative sensor association in WBANs. Sens 18, 11, Article 3930 (2018), 25 pages.","journal-title":"Sens"},{"key":"e_1_3_1_143_2","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2019.2923261"},{"key":"e_1_3_1_144_2","doi-asserted-by":"crossref","unstructured":"Noshina Tariq Ayesha Qamar Muhammad Asim and Farrukh A. Khan. 2020. Blockchain and smart healthcare security: A survey. Procedia Computer Science 175 (2020) 615\u2013620.","DOI":"10.1016\/j.procs.2020.07.089"},{"key":"e_1_3_1_145_2","doi-asserted-by":"publisher","DOI":"10.1016\/j.heliyon.2021.e05969"},{"key":"e_1_3_1_146_2","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2020.3026260"},{"key":"e_1_3_1_147_2","unstructured":"The EU MDR. 2021. Medical Device Regulation (EU) 2017\/745 (EU MDR). Retrieved from https:\/\/eumdr.com."},{"key":"e_1_3_1_148_2","unstructured":"The MITRE Corporation. 2021. MITRE ATT&CK v9.0. https:\/\/attack.mitre.org\/versions\/v9."},{"key":"e_1_3_1_149_2","doi-asserted-by":"publisher","DOI":"10.21227\/sf59-sz80"},{"key":"e_1_3_1_150_2","doi-asserted-by":"publisher","DOI":"10.21227\/skhs-0b39"},{"key":"e_1_3_1_151_2","unstructured":"U.S. Food & Drug Administration. 2022. Medical Device Safety. Retrieved from https:\/\/www.fda.gov\/medical-devices\/medical-device-safety."},{"issue":"22","key":"e_1_3_1_152_2","doi-asserted-by":"crossref","first-page":"6578","DOI":"10.3390\/s20226578","article-title":"MQTTset, a new dataset for machine learning techniques on MQTT","volume":"20","author":"Vaccari Ivan","year":"2020","unstructured":"Ivan Vaccari, Giovanni Chiola, Maurizio Aiello, Maurizio Mongelli, and Enrico Cambiaso. 2020. MQTTset, a new dataset for machine learning techniques on MQTT. Sens 20, 22, Article 6578 (2020), 17 pages.","journal-title":"Sens"},{"key":"e_1_3_1_153_2","first-page":"1","volume-title":"Proceedings of the 2018 IEEE international symposium on circuits and systems.","author":"al. Junchao Wang et","year":"2018","unstructured":"Junchao Wang et al.2018. An ASIC implementation of security scheme for body area networks. In Proceedings of the 2018 IEEE international symposium on circuits and systems.IEEE, 1\u20135."},{"key":"e_1_3_1_154_2","doi-asserted-by":"publisher","DOI":"10.1109\/ISMICT51748.2021.9434905"},{"key":"e_1_3_1_155_2","unstructured":"Longfei Wu Haotian Chi and Xiaojiang Du. 2018. A secure proxy-based access control scheme for implantable medical devices. arXiv:1803.07751. Retrieved from https:\/\/arxiv.org\/abs\/1803.07751."},{"key":"e_1_3_1_156_2","doi-asserted-by":"publisher","DOI":"10.1016\/j.future.2017.08.042"},{"key":"e_1_3_1_157_2","first-page":"1","volume-title":"Proc. 2017 Netw. Dist. Syst. Sec. Symp.","author":"al. Weitao Xu et","year":"2017","unstructured":"Weitao Xu et al.2017. KEH-Gait: Towards a mobile healthcare user authentication system by kinetic energy harvesting. In Proc. 2017 Netw. Dist. Syst. Sec. Symp.Internet Society, 1\u201315."},{"key":"e_1_3_1_158_2","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2019.2914094"},{"key":"e_1_3_1_159_2","doi-asserted-by":"publisher","DOI":"10.1109\/CCWC47524.2020.9031212"},{"key":"e_1_3_1_160_2","doi-asserted-by":"publisher","DOI":"10.1109\/JPROC.2014.2322103"},{"key":"e_1_3_1_161_2","doi-asserted-by":"publisher","DOI":"10.1109\/ICC.2018.8422883"},{"key":"e_1_3_1_162_2","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2018.2825289"},{"key":"e_1_3_1_163_2","volume-title":"Proc. 3rd Int. Conf. Future Netw. Dist. Syst.","author":"Zubair Mohammed","year":"2019","unstructured":"Mohammed Zubair, Devrim Unal, Abdulla Al-Ali, and Abdullatif Shikfa. 2019. Exploiting bluetooth vulnerabilities in e-health IoT devices. In Proc. 3rd Int. Conf. Future Netw. Dist. Syst.ACM, Article 10, 7 pages."}],"container-title":["ACM Computing Surveys"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3571156","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3571156","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T18:08:20Z","timestamp":1750183700000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3571156"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,3,28]]},"references-count":162,"journal-issue":{"issue":"12","published-print":{"date-parts":[[2023,12,31]]}},"alternative-id":["10.1145\/3571156"],"URL":"https:\/\/doi.org\/10.1145\/3571156","relation":{},"ISSN":["0360-0300","1557-7341"],"issn-type":[{"value":"0360-0300","type":"print"},{"value":"1557-7341","type":"electronic"}],"subject":[],"published":{"date-parts":[[2023,3,28]]},"assertion":[{"value":"2021-12-23","order":0,"name":"received","label":"Received","group":{"name":"publication_history","label":"Publication History"}},{"value":"2022-11-08","order":1,"name":"accepted","label":"Accepted","group":{"name":"publication_history","label":"Publication History"}},{"value":"2023-03-28","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}