{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,6]],"date-time":"2026-06-06T09:02:19Z","timestamp":1780736539249,"version":"3.54.1"},"reference-count":58,"publisher":"Association for Computing Machinery (ACM)","issue":"2","license":[{"start":{"date-parts":[[2026,6,6]],"date-time":"2026-06-06T00:00:00Z","timestamp":1780704000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/legalcode"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":["Digital Threats"],"published-print":{"date-parts":[[2026,6,30]]},"abstract":"<jats:p>The Internet of Medical Things (IoMT) has transformed healthcare delivery through medical devices, remote patient monitoring, and real-time clinical decision support. However, the proliferation of IoMT devices introduces security vulnerabilities that put patient safety and data privacy at risk. Intrusion Detection Systems (IDS) have emerged as essential components for protecting IoMT networks from cyberattacks. This article presents a systematic review of IoMT-IDS research, analyzing 53 high-quality papers published between 2020 and 2025, identified through database searches spanning 2016\u20132025 across IEEE Xplore, Springer, ScienceDirect, and ACM Digital Library. We organize the literature through a comprehensive taxonomy spanning classical machine learning approaches, deep learning architectures, transformer-based models, federated learning frameworks, and anomaly detection techniques. Our analysis reveals significant diversity across detection approaches and impressive within-dataset performance achievements, yet identifies persistent gaps in evaluation practices. While detection performance is consistently reported across studies, four other evaluation dimensions remain unaddressed: computational efficiency profiling, explainability integration, standardized benchmarking practices, and cross-dataset generalization assessment. We synthesize the literature into these five evaluation dimensions as a foundation for comprehensive IoMT-IDS assessment. We then analyze state-of-the-art approaches, highlight tradeoffs between competing requirements, and chart future research directions toward unified evaluation methodologies that support deployment in safety-critical healthcare environments.<\/jats:p>","DOI":"10.1145\/3816026","type":"journal-article","created":{"date-parts":[[2026,5,15]],"date-time":"2026-05-15T14:55:23Z","timestamp":1778856923000},"page":"1-38","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":0,"title":["A Systematic Review of Intrusion Detection Systems for Internet of Medical Things: Performance, Efficiency, Explainability, and Generalization"],"prefix":"10.1145","volume":"7","author":[{"ORCID":"https:\/\/orcid.org\/0009-0002-4677-8435","authenticated-orcid":false,"given":"Oswald","family":"Adohinzin","sequence":"first","affiliation":[{"name":"Beacom College, Dakota State University, Madison, South Dakota, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6784-6199","authenticated-orcid":false,"given":"Youssef","family":"Harrath","sequence":"additional","affiliation":[{"name":"Beacom College, Dakota State University, Madison, South Dakota, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2026,6,6]]},"reference":[{"key":"e_1_3_1_2_2","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2023.3296809"},{"key":"e_1_3_1_3_2","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2024.3360289"},{"key":"e_1_3_1_4_2","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2025.3526883"},{"key":"e_1_3_1_5_2","first-page":"449","volume-title":"2020 4th World Conference on Smart Trends in Systems, Security and Sustainability (WorldS4)","author":"Al-Sarawi Shadi","year":"2020","unstructured":"Shadi Al-Sarawi, Mohammed Anbar, Rosni Abdullah, and Ahmad B. Al Hawari. 2020. Internet of things market analysis forecasts, 2020\u20132030. In 2020 4th World Conference on Smart Trends in Systems, Security and Sustainability (WorldS4). IEEE, 449\u2013453."},{"key":"e_1_3_1_6_2","doi-asserted-by":"publisher","DOI":"10.1109\/JBHI.2022.3167256"},{"key":"e_1_3_1_7_2","first-page":"609","volume-title":"2023 IEEE International Conference on Dependable, Autonomic and Secure Computing, International Conference on Pervasive Intelligence and Computing, International Conference on Cloud and Big Data Computing, International Conference on Cyber Science and Technology Congress (DASC\/PiCom\/CBDCom\/CyberSciTech)","author":"Alani Mohammed M.","year":"2023","unstructured":"Mohammed M. Alani, Atefeh Mashatan, and Ali Miri. 2023. Explainable ensemble-based detection of cyber attacks on internet of medical things. In 2023 IEEE International Conference on Dependable, Autonomic and Secure Computing, International Conference on Pervasive Intelligence and Computing, International Conference on Cloud and Big Data Computing, International Conference on Cyber Science and Technology Congress (DASC\/PiCom\/CBDCom\/CyberSciTech). IEEE, 609\u2013614. DOI: 10.1109\/DASC\/PiCom\/CBDCom\/Cy59711.2023.10361448"},{"key":"e_1_3_1_8_2","doi-asserted-by":"publisher","DOI":"10.1109\/TCE.2024.3412199"},{"key":"e_1_3_1_9_2","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2022.3225038"},{"key":"e_1_3_1_10_2","doi-asserted-by":"publisher","DOI":"10.1007\/s10207-023-00805-9"},{"key":"e_1_3_1_11_2","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2023.3327024"},{"key":"e_1_3_1_12_2","doi-asserted-by":"publisher","DOI":"10.1007\/s42452-025-07071-5"},{"key":"e_1_3_1_13_2","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2025.3543127"},{"key":"e_1_3_1_14_2","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2025.3545918"},{"key":"e_1_3_1_15_2","doi-asserted-by":"publisher","DOI":"10.1007\/s10586-025-05325-w"},{"key":"e_1_3_1_16_2","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2024.3472907"},{"key":"e_1_3_1_17_2","doi-asserted-by":"publisher","DOI":"10.1016\/j.iot.2025.101631"},{"key":"e_1_3_1_18_2","doi-asserted-by":"publisher","DOI":"10.1109\/TCE.2025.3544885"},{"key":"e_1_3_1_19_2","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2022.3172432"},{"key":"e_1_3_1_20_2","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2020.3045653"},{"key":"e_1_3_1_21_2","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2025.3563158"},{"key":"e_1_3_1_22_2","first-page":"829","volume-title":"International Conference on Advanced Communication and Computational Technology","author":"Goyal Nitin","year":"2019","unstructured":"Nitin Goyal, Jasminder Kaur Sandhu, and Luxmi Verma. 2019. CDMA-based security against wormhole attack in underwater wireless sensor networks. In International Conference on Advanced Communication and Computational Technology. Springer, 829\u2013835."},{"key":"e_1_3_1_23_2","doi-asserted-by":"publisher","DOI":"10.1016\/j.compeleceng.2022.108158"},{"key":"e_1_3_1_24_2","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2019.2946359"},{"key":"e_1_3_1_25_2","doi-asserted-by":"publisher","DOI":"10.1016\/j.iot.2023.100887"},{"key":"e_1_3_1_26_2","doi-asserted-by":"publisher","DOI":"10.1038\/s41598-025-07790-0"},{"key":"e_1_3_1_27_2","doi-asserted-by":"publisher","DOI":"10.1016\/j.comcom.2024.02.023"},{"key":"e_1_3_1_28_2","doi-asserted-by":"publisher","DOI":"10.1145\/3634748"},{"key":"e_1_3_1_29_2","first-page":"327","volume-title":"ACM International Conference Proceeding Series","author":"Ji Xiayan","year":"2023","unstructured":"Xiayan Ji, Hyonyoung Choi, Oleg Sokolsky, and Insup Lee. 2023. Incremental anomaly detection with guarantee in the internet of medical things. In ACM International Conference Proceeding Series. ACM, 327\u2013339. DOI: 10.1145\/3576842.3582374"},{"key":"e_1_3_1_30_2","doi-asserted-by":"crossref","first-page":"1164","DOI":"10.1109\/ICMLA61862.2024.00179","volume-title":"2024 International Conference on Machine Learning and Applications (ICMLA \u201924)","author":"Kalakoti Rajesh","year":"2024","unstructured":"Rajesh Kalakoti, Sven Nomm, and Hayretdin Bahsi. 2024. Explainable transformer-based intrusion detection in Internet of Medical Things (IoMT) networks. In 2024 International Conference on Machine Learning and Applications (ICMLA \u201924). Institute of Electrical and Electronics Engineers Inc., 1164\u20131169. DOI: 10.1109\/ICMLA61862.2024.00179"},{"key":"e_1_3_1_31_2","doi-asserted-by":"publisher","DOI":"10.1109\/TII.2022.3231424"},{"key":"e_1_3_1_32_2","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2023.3346320"},{"key":"e_1_3_1_33_2","doi-asserted-by":"publisher","DOI":"10.2307\/2529310"},{"key":"e_1_3_1_34_2","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2024.3452421"},{"key":"e_1_3_1_35_2","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2020.2986013"},{"key":"e_1_3_1_36_2","doi-asserted-by":"publisher","DOI":"10.1038\/s41598-024-80581-1"},{"key":"e_1_3_1_37_2","doi-asserted-by":"publisher","DOI":"10.1016\/j.compbiomed.2024.108036"},{"key":"e_1_3_1_38_2","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2025.3553966"},{"key":"e_1_3_1_39_2","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2024.3480011"},{"key":"e_1_3_1_40_2","doi-asserted-by":"publisher","DOI":"10.1007\/s10462-024-11101-w"},{"key":"e_1_3_1_41_2","doi-asserted-by":"publisher","DOI":"10.1109\/JBHI.2021.3101686"},{"key":"e_1_3_1_42_2","doi-asserted-by":"publisher","DOI":"10.1007\/s12243-025-01118-9"},{"key":"e_1_3_1_43_2","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2024.3377561"},{"key":"e_1_3_1_44_2","doi-asserted-by":"publisher","DOI":"10.1016\/j.iot.2025.101677"},{"key":"e_1_3_1_45_2","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2020.2973314"},{"issue":"1","key":"e_1_3_1_46_2","doi-asserted-by":"crossref","first-page":"3999039","DOI":"10.1155\/2022\/3999039","article-title":"Intrusion detection systems in cloud computing paradigm: Analysis and overview","volume":"2022","author":"Rana Pooja","year":"2022","unstructured":"Pooja Rana, Isha Batra, Arun Malik, Agbotiname Lucky Imoize, Yongsung Kim, Subhendu Kumar Pani, Nitin Goyal, Arun Kumar, and Seungmin Rho. 2022. Intrusion detection systems in cloud computing paradigm: Analysis and overview. Complexity 2022, 1 (2022), 3999039.","journal-title":"Complexity"},{"key":"e_1_3_1_47_2","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2021.3128837"},{"key":"e_1_3_1_48_2","first-page":"297","volume-title":"Big Data Analytics in Intelligent IoT and Cyber-Physical Systems","author":"Saini Harish Kumar","year":"2023","unstructured":"Harish Kumar Saini, Monika Poriye, and Nitin Goyal. 2023. A survey on security threats and network vulnerabilities in Internet of Things. In Big Data Analytics in Intelligent IoT and Cyber-Physical Systems. Springer, 297\u2013314."},{"key":"e_1_3_1_49_2","first-page":"550","volume-title":"ACM International Conference Proceeding Series","author":"Saxena Arpna","year":"2022","unstructured":"Arpna Saxena and Sangeeta Mittal. 2022. Internet of medical things (IoMT) security and privacy: A survey of recent advances and enabling technologies. In ACM International Conference Proceeding Series, 550\u2013559. DOI: 10.1145\/3549206.3549301"},{"key":"e_1_3_1_50_2","volume-title":"2nd International Conference on IT Innovations and Knowledge Discovery (ITIKD \u201924)","author":"Sengupta Nandita","year":"2025","unstructured":"Nandita Sengupta, Ramya Chinnasamy, and Malliga Subramanian. 2025. Enhanced intrusion detection system for IoMT devices using improved human evolutionary optimization algorithm and tabular transformers. In 2nd International Conference on IT Innovations and Knowledge Discovery (ITIKD \u201924). Institute of Electrical and Electronics Engineers Inc. DOI: 10.1109\/ITIKD63574.2025.11004763"},{"key":"e_1_3_1_51_2","doi-asserted-by":"publisher","DOI":"10.1007\/s10115-024-02149-9"},{"key":"e_1_3_1_52_2","doi-asserted-by":"publisher","DOI":"10.1016\/j.asoc.2023.110227"},{"key":"e_1_3_1_53_2","doi-asserted-by":"publisher","DOI":"10.1109\/JBHI.2022.3186250"},{"key":"e_1_3_1_54_2","volume-title":"4th International Conference on Digital Futures and Transformative Technologies (ICoDT2 \u201924)","author":"Sohail Fatima","year":"2024","unstructured":"Fatima Sohail, Muhammad Asim Mukhtar Bhatti, Muhammad Awais, and Aamna Iqtidar. 2024. Explainable boosting ensemble methods for intrusion detection in internet of medical things (IoMT) applications. In 4th International Conference on Digital Futures and Transformative Technologies (ICoDT2 \u201924). Institute of Electrical and Electronics Engineers Inc. DOI: 10.1109\/ICoDT262145.2024.10740251"},{"key":"e_1_3_1_55_2","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2020.3026260"},{"key":"e_1_3_1_56_2","doi-asserted-by":"publisher","DOI":"10.1007\/s42452-025-07419-x"},{"key":"e_1_3_1_57_2","doi-asserted-by":"publisher","DOI":"10.1007\/s10586-025-05660-y"},{"key":"e_1_3_1_58_2","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2025.3547572"},{"key":"e_1_3_1_59_2","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2024.3387294"}],"container-title":["Digital Threats: Research and Practice"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3816026","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,6,6]],"date-time":"2026-06-06T08:38:13Z","timestamp":1780735093000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3816026"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,6,6]]},"references-count":58,"journal-issue":{"issue":"2","published-print":{"date-parts":[[2026,6,30]]}},"alternative-id":["10.1145\/3816026"],"URL":"https:\/\/doi.org\/10.1145\/3816026","relation":{},"ISSN":["2692-1626","2576-5337"],"issn-type":[{"value":"2692-1626","type":"print"},{"value":"2576-5337","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026,6,6]]},"assertion":[{"value":"2026-01-13","order":0,"name":"received","label":"Received","group":{"name":"publication_history","label":"Publication History"}},{"value":"2026-05-04","order":2,"name":"accepted","label":"Accepted","group":{"name":"publication_history","label":"Publication History"}},{"value":"2026-06-06","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}