A Survey on Security and Privacy Issues in Modern Healthcare Systems: Attacks and Defenses

TL;DR

This survey reviews security and privacy challenges in modern healthcare systems, analyzing threats, attacks, and defenses, and highlights the need for improved security measures to protect patient data and treatment integrity.

Contribution

It provides a comprehensive overview of security threats, attacks, and existing defenses in healthcare systems, and discusses future research directions for enhancing security.

Findings

Healthcare systems face numerous security threats and attacks.

Existing security measures have limitations in addressing vulnerabilities.

Future research is needed to develop more robust security solutions.

Abstract

The recent advancements in computing systems and wireless communications have made healthcare systems more efficient than before. Modern healthcare devices can monitor and manage different health conditions of the patients automatically without any manual intervention from medical professionals. Additionally, the use of implantable medical devices (IMDs), body area networks (BANs), and Internet of Things (IoT) technologies in healthcare systems improve the overall patient monitoring and treatment process. However, these systems are complex in software and hardware, and optimizing between security, privacy, and treatment is crucial for healthcare systems as any security or privacy violation can lead to severe effects on patients' treatments and overall health conditions. Indeed, the healthcare domain is increasingly facing security challenges and threats due to numerous design flaws and the lack of proper security measures in healthcare devices and applications. In this paper, we explore various security and privacy threats to healthcare systems and discuss the consequences of these threats. We present a detailed survey of different potential attacks and discuss their impacts. Furthermore, we review the existing security measures proposed for healthcare systems and discuss their limitations. Finally, we conclude the paper with future research directions toward securing healthcare systems against common vulnerabilities.