Survey: Cybersecurity Vulnerabilities, Attacks and Solutions in the Medical Domain <s> I. INTRODUCTION <s> AbstractIn this paper the authors examine the various models in the medical domain and the communities that proliferate around these web models. Given that several of these business models have failed, while others continue to exist, it is argued that the key is to understand the individual consumer motivators and inhibitors for such knowledge. In this paper the authors systematically develop a theoretical model to understand such motivators and inhibitors of individuals' obtaining health related information online. The focus of this study is the manner in which individual consumers' use online sources to obtain health and other related medical information. <s> BIB001 </s> Survey: Cybersecurity Vulnerabilities, Attacks and Solutions in the Medical Domain <s> I. INTRODUCTION <s> Purpose – The purpose of this paper is to review stakeholder perspectives and provide a framework for improving governance in health data stewardship. Patients may wish to view their own lab results or clinical records, but others (notably academics, journalists and lawyers) tend to want scores of patient records in their search for patterns or trends. Public Health informatics capabilities are growing in scope and speed as clinical information systems, health information exchange networks and other potential database linkages enable more access to healthcare data. This change facilitates novel service improvements, but also raises new personal privacy protection issues. Design/methodology/approach – This paper summarizes a panel session discussion from the 2015 Information Technology and Communication in Health biennial international conference. The perspectives of health service research, journalism, Public Health informatics and privacy protection were represented. Findings – In North America, an expec... <s> BIB002 </s> Survey: Cybersecurity Vulnerabilities, Attacks and Solutions in the Medical Domain <s> I. INTRODUCTION <s> In many medical applications, system design encompasses the development of capital equipment along with a variety of single-use items necessary to deliver therapy and treat medical conditions. Typically, the capital equipment has a long anticipated service life and must be designed to accommodate a wide-range of single-use products, both legacy as well as future products which will bring new features to market. As the life cycle expectation for capital equipment grows, this can lead to a growing misalignment between capital equipment capabilities and future single-use products that will need to be supported. In this decoupled product life cycle environment, medical regulatory concerns must also be considered as it is time-consuming and challenging to make changes to capital equipment after it is installed. System needs and architectural trade-offs are described regarding decoupled product life cycle medical system design. This includes the need for capital equipment to provide a long service life, and also to anticipate the needs of future technologies and capabilities which may not yet have been envisioned. <s> BIB003 </s> Survey: Cybersecurity Vulnerabilities, Attacks and Solutions in the Medical Domain <s> I. INTRODUCTION <s> Research Purpose: Design a mobile intelligent medical information system based on the Internet of things technology. Proposed Methods: First, sort out the basic theory and research status through the literature research, including the Internet of things technology, mobile medical systems and smart hospitals. Then conduct on-site research through field visits, questionnaires, opinion evaluation and other methods, including hospital diagnosis and treatment process, charging process, hospital process and the function of hospital information system. Finally, according to the survey results, use the method of software engineering to complete system requirement analysis and system design. Results: Based on the mobile phone near field wireless communication technology and indoor navigation technology, complete the various business processes carding, functional design, interface design and software and hardware environment support analysis. Conclusion: The mobile intelligent medical information system based on the Internet of things technology can greatly reduce the patient's treatment time, improve the patient's treatment efficiency and hospital management efficiency, and can further regulate and promote the development of intelligent medical treatment. <s> BIB004 </s> Survey: Cybersecurity Vulnerabilities, Attacks and Solutions in the Medical Domain <s> I. INTRODUCTION <s> Traditional medical model is more emphasis on sitting, with the popularity of mobile Internet, mobile smart medical system is got the attention by more and more people. In this paper, the use of pre-safety assessment and testing, the overall consideration of the Internet area within the business area security needs, after the security incident analysis and response to the security platform for continuous improvement. Mobile smart medical systems from the management and technical aspects to protect information security, which can effectively prevent the Internet virus attacks, protect the security of internal business area, and patient privacy. <s> BIB005 </s> Survey: Cybersecurity Vulnerabilities, Attacks and Solutions in the Medical Domain <s> I. INTRODUCTION <s> A new medical system platform utilizing a see-saw commander/follower architecture will be presented. This architecture provides for a high level of therapy control and safety via a supervisory exchange mechanism (see-saw) at various operational phases. During the performance of various functions, one system element obtains supervisory control and acts as the commander while other modules continue to perform their essential functions and follow the lead of the commander module. During non-safety critical phases, command may be driven primarily by the user interface (computing) module which can facilitate the display of configuration and setup information or provide for the management of case and system files. When medical therapies are required, command shifts to a dedicated safety and therapy control module which then provides overall supervisory control with appropriate focus on the safe and effective delivery of therapies. During this time, the user interface (computing) module provides therapy information and documents the case and system performance. Non-essential functions, e.g. configuration or external communication, are locked out during these phases and are only permitted once therapy is ended and supervisory control is handed back to the user interface module. This exchange and determination of command control will be illustrated. The modular design architecture of this medical system maintains legacy compatibility with various accessories and external systems while providing a pathway for extending capabilities as therapy improvements and clinical practice change over time. Capital medical equipment is expected to provide a long service-life, and the ability to provide meaningful updates as well as manage the obsolescence of components and materials are key design considerations that are satisfied by the architecture. The interface structure and functional allocation to various modules will be illustrated showing how upgrades can be integrated to minimize hardware changes to deployed systems. <s> BIB006
Currently, there are increased concerns regarding personal data breaches in the medical field. Boan News [1] reported in 2015 that the top two data breach concerns are in the finance and healthcare sectors, accounting for 49.45% and 28.41% of breaches, respectively. Finance is commonly a target for hackers because the records are filled with pecuniary exchanges. Security measures in the healthcare sector are receiving less attention than those in finance; however, medical data are much more important and sensitive. Ambrose and Basu BIB001 express that cyber-attacks are the most frequent causes of medical data breaches. Medical institutions collect and preserve patient data on their systems in databases such as those on their websites, electronic medical recording (EMR) systems, order communication systems (OCS), and picture archiving and communication systems (PACS); thus, data security is closely linked to cybersecurity BIB002 -  . Also, if medical data are in danger, there are The associate editor coordinating the review of this manuscript and approving it for publication was Junaid Arshad . detrimental consequences such as patient information leakage, patient misdiagnosis, and mistreatment. These consequences tend to seriously endanger the physical and mental health of patients. With the progress of living standards, demand for better medical systems increases. Yang et al. BIB005 proposed a design for a mobile smart medical system. The system focused on the applicability of mobile smart medical systems and analyzed potential attacks on the system. Hareland BIB003 designed a medical system considering the multi-lifecycle environment. It focused on medical equipment instead of web applications. By analyzing and expanding the lifetime of medical equipment, patients can receive improved medical healthcare. By following the trend of combining network techniques and medical systems, our paper focuses on cybersecurity and its impact on the medical domain. Recently, this topic has come under heated discussion. Sun et al. BIB004 fully researched the medical process using emerging Internet-of-Things (IoT) technology and concluded that IoTs technology can reduce treatment time and improve treatment efficiency. However, the paper did not address the influence of medical equipment. Hareland et al. BIB006 proposed a supervisory exchange mechanism to keep the medical system stable and improve the safety level of the system. There are still many issues to discuss regarding cybersecurity in the medical domain. To study cybersecurity and the medical domain, our paper focuses on the cybersecurity vulnerabilities and relevant protection techniques against these vulnerabilities. We also discuss several cybersecurity systems for the medical domain and classify them based on their type. The rest of the paper is structured as follows. Section II presents contributions of the related reviews and surveys. Section III presents the research methodology. Section IV demonstrates an information flow in the medical domain. Section V defines four different kinds of cybersecurity vulnerabilities in the medical domain and gives a detailed explanation of these vulnerabilities, which can be easily attacked, negatively affecting the medical domain. Section VI presents the different types of attacks due to these vulnerabilities. Section VII presents medical architectures of cybersecurity. Section VIII provides a discussion of the above solutions, and the paper is concluded in section IX.