Survey: Cybersecurity Vulnerabilities, Attacks and Solutions in the Medical Domain <s> V. VULNERABILITIES OF CYBERSECURITY IN MEDICAL DOMAIN <s> Personal Medical Devices (PMDs) are attached to the patient's body to assist his physiological processes and to monitor his medical condition. These PMDs communicate with programming devices for various reasons like monitoring, firmware update, and operational parameter updates. With wider proliferation of PMDs, their communication and connectivity features will improve enabling greater mobility for the patient. The PMDs will essentially become part of the Internet of Things (IoTs) for medical devices providing almost seem less communication capabilities. This will expose the PMDs to new cyber threats. In this paper, we present the cyber threats to these devices and limitations of the PMD IoTs that make addressing these cyber threats challenging. We then present some initial solution approaches to address the identified cyber threats. <s> BIB001 </s> Survey: Cybersecurity Vulnerabilities, Attacks and Solutions in the Medical Domain <s> V. VULNERABILITIES OF CYBERSECURITY IN MEDICAL DOMAIN <s> In the field of health, networked medical devices are closely intertwined in the structure of the Internet of things. A healthcare IoT infrastructure with a brief description of each component is presented. These components are a device with a reader, Cloud, healthcare provider and communication channel. As the title implies the paper presents simple cases with a few models of healthcare IoT system based on the queueing theory. The models describe streams of the requests and attacks on vulnerabilities and procedure of recovery by restart and eliminating of ones. <s> BIB002 </s> Survey: Cybersecurity Vulnerabilities, Attacks and Solutions in the Medical Domain <s> V. VULNERABILITIES OF CYBERSECURITY IN MEDICAL DOMAIN <s> A Telecare Medical Information System (TMIS) enables doctors and physicians at a medical center to provide remote care via Internet to the registered patients at any place. Considering the privacy of the patients, medical data, secure and authenticated access to the medical data located at the medical severs are required. Recently, numerous states of the art authentication schemes are proposed in the literature to increase security of the Telecare Medical Information System (TMIS). This paper presents a comprehensive survey and taxonomy of these authentication schemes and classifies them based on the authentication methods applied in each scheme. In addition, a complete list of security attacks which can be conducted against the authentication schemes in the TMIS is provided, and the security capabilities of each scheme and their vulnerability to these attacks are discussed. Furthermore, the proposed authentication schemes are compared, and their advantages, properties and limitations are highlighted. Finally, the concluding remarks and open research issues in TMIS authentication schemes are provided. <s> BIB003 </s> Survey: Cybersecurity Vulnerabilities, Attacks and Solutions in the Medical Domain <s> V. VULNERABILITIES OF CYBERSECURITY IN MEDICAL DOMAIN <s> Abstract Despite prevalent privacy and security threats on the cloud, users have put tremendous amounts of their personal information on cloud storage. This present study proposes a comprehensive research framework to investigate cloud storage users' willingness to put personal information on personal cloud-based storage applications. Our research framework is theoretically derived from the Communication Privacy Management Theory and Privacy-Trust-Behavioral Intention Model. To empirically test our research framework, we conducted an online survey of 786 active cloud storage users both in Indonesia and Taiwan. The findings suggest that cloud storage users' willingness to put personal information is highly influenced by trust, perceived costs, perceived benefits, and also the degree of sensitivity of the personal information. Some findings with regard to cultural differences between the two countries are also showed out. The key findings, implications, and limitations are discussed in this paper. <s> BIB004 </s> Survey: Cybersecurity Vulnerabilities, Attacks and Solutions in the Medical Domain <s> V. VULNERABILITIES OF CYBERSECURITY IN MEDICAL DOMAIN <s> Abstract Due to the emergence of the Internet of Things (IoT) era and the rapid technological advancements of wireless communications, Wireless body area network (WBAN) has been introduced as a pioneering key technology for the next generation ubiquitous healthcare systems. However, the open and dynamic nature of wireless sensor technologies makes both inter-sensor and sensor-controller communications vulnerable to several potential attacks, which significantly undermine the WBAN's efficiency and impede its further flourish. Specifically, the patient's sensitive data may be eavesdropped and linked to the identities of the sensors in transmission and thus revealing the patient's medical conditions. Therefore, in such resource-impoverished environment, anonymous authentication for sensor nodes while considering their stringent resource constraints is a paramount security concern. In this paper, we propose a context-aware and lightweight anonymous authentication and key agreement scheme for WBAN applications in emergency and normal situations. The proposed scheme provides selective anonymous authentication between nodes in WBAN while taking into account the dynamic context changes. Formal security analysis using the widely accepted Real-Or-Random (ROR) model, the Burrows-Abadi-Needham (BAN) logic, and the automated security protocol verification (Scyther) tool shows that the proposed scheme is secure against known attacks. From a performance perspective, we prove that the proposed key agreement protocols outperform benchmark schemes in terms of communication and computation overhead. <s> BIB005 </s> Survey: Cybersecurity Vulnerabilities, Attacks and Solutions in the Medical Domain <s> V. VULNERABILITIES OF CYBERSECURITY IN MEDICAL DOMAIN <s> Abstract Internet of Things (IoT) has gained extensive attention from industry and academia alike in past decade. The connectivity of each and every piece of technology in the environment with Internet, has opened many avenues of research and development. Applications, algorithms, trust models, devices, all have evolved to accommodate the demands of user needs in the most optimal way possible. However, one thing still remains constant: host-centric communication. It is the most predominant way of communication in Internet today. With evolution of everything else, host based communication has been stretched to limits, and exploration of new models have been underway for sometime. Information Centric Networking (ICN) is a major contender for the future Internet architecture, where content is the basic element regardless of its location (host). It intends to offer in-network caching, inherent mobility, multicast support, and content based security as part of design and not add-on functionality. In recent years, numerous efforts have been made to integrate IoT with ICN as the communication model. In this paper, we provide a detailed and systematic review of IoT-ICN research. We investigate ICN as communication enabler for IoT domain specific use cases, and the use of ICN features for the benefit of IoT networks. These include IoT device & content naming, discovery, and caching. We also survey synchronization, interoperability, publish/subscribe communication, quality of service, security, and mobility of IoT devices with ICN perspectives. The paper also presents challenges and possible research directions for the benefit of community. <s> BIB006 </s> Survey: Cybersecurity Vulnerabilities, Attacks and Solutions in the Medical Domain <s> V. VULNERABILITIES OF CYBERSECURITY IN MEDICAL DOMAIN <s> Abstract It is well known that available approaches to IoT networks eschew certain security issues that may expose sensitive data to unauthorized entities. This paper proposes a security protocol for the IoT based communication. This protocol comprises of three levels of security checks namely authentication, confidentiality and integrity. Such algorithms do require large storage capacity and processing powers. However, nodes in IoT network have limited storage capacity and processing power. Proposed algorithm overcome this problem by reducing the number computations performed without losing the accuracy of data. Trust, Security and Privacy is established over a 6LoWPAN network running on RPL by keeping the CPU power consumption and storage requirements under check. The implementation of the proposed security scheme has been demonstrated for IoT based hospital networks in simulation with Cooja Network Simulator on Contiki OS <s> BIB007 </s> Survey: Cybersecurity Vulnerabilities, Attacks and Solutions in the Medical Domain <s> V. VULNERABILITIES OF CYBERSECURITY IN MEDICAL DOMAIN <s> Abstract The results of IoT failures can be severe, therefore, the study and research in security issues in the IoT is of extreme significance. The main objective of IoT security is to preserve privacy, confidentiality, ensure the security of the users, infrastructures, data, and devices of the IoT, and guarantee the availability of the services offered by an IoT ecosystem. Thus, research in IoT security has recently been gaining much momentum with the help of the available simulation tools, modellers, and computational and analysis platforms. This paper presents an analysis of recent research in IoT security from 2016 to 2018, its trends and open issues. The main contribution of this paper is to provide an overview of the current state of IoT security research, the relevant tools,IoT modellers and simulators. <s> BIB008
According to Figure 1 , the medical data flow through four steps, flowing from patient to practical usage, and each step requires cybersecurity  - BIB001 . The analysis of this article is divided into two parts: information storage and IoT connection. From the first step in the collection of data, the potential risk of being attacked exists in consumer products for external medical devices, wearable devices, and internally IoTenabled medical devices  . Such devices can sense the electrical, chemical, and thermal signals from the patient's body. As a result, these devices can directly sense and gather patient information through biomedical signals BIB002 . The process of signal transmission makes it relatively simple for data to be disrupted and stolen. Once the attacker hacks into the terminal device, the accuracy and reliability of data cannot be guaranteed. After data acquisition, the security of Internet access also needs to be emphasized. To realize the rapid transmission and sharing of different types of sensor signal information, the IoT has adopted a variety of network access technologies, such as mobile Internet and Wi-Fi. The heterogeneity of the network access layer provides location management for terminals, which causes security problems, such as security authentication and access control, when communicating between networks. Due to the lack of a unified standard for cross-platform network security systems, the network is vulnerable to cross-heterogeneous network attacks  . Besides, the restrictions on access passwords for the database are not strictly for securing data. The existing medical database system generally adopts user connection information and simple encryption to prevent illegal users from accessing database passwords. However, in C/S mode, the client still has a username and password to access the database, and these identifiers can be simply cracked or maliciously changed  . Hospital networks can be visited by individuals. Although the circulation and sharing of information are unimpeded for the user's convenience, a lack of authentication will lead to data risks. The classification of cybersecurity vulnerabilities in the medical domain is shown in Figure 2 . A. Information Storage: It causes the vulnerability in the medical domain when storing the data into database. As, information storage is principal component of fundamental distributed computation BIB004 . The information storage is quantified that can directly be used in the exploring the patient's information. However, information storage process is not fully safe due to storage of information on the cloud. As a result, patient's privacy and security are borderline. The hacker's easy access to IoT provides ample opportunity to crack the password and get access to medical information BIB005 . On the other hand, the weaker authentication methods for medical devices particularly sensor nodes are paramount security concerns BIB003 . B. IoT Connection:IoT connection brings several troublesome for nature and humans, but this troublesome can be worse if the medical commotion is involved especially when medical staff is carrying out routine activities and tasks for the patients' operations and other recovery processes BIB006 . IoT connections could be affected due to carriers such as Wi-Fi, Bluetooth, cellular technology and the Internet BIB007 . Most hospitals have been moved from local data storage to cloud storage. Besides, these hospitals believe that doing experiments with IoT devices not only helps to diagnose the patients efficiently, but also gather the information through those connected devices accurately. However, these connections are barely secure and extremely vulnerable to several forms of attacks BIB008 . These attacks find the vulnerabilities in the embedded devices, health-monitoring consumption products, wearable external and internal medical devices. As such vulnerabilities lead to desecration of doctorpatient confidentiality and privacy  . Exchange of delicate and sensitive information is pretty common in the IoT networks, as information exchange should be based on stable connections, but practically it is not possible. As a result, data leakage and loss of such significant information occur.