Privacy Threats on the Internet of Medical Things

TL;DR

This paper discusses the unique privacy threats in the Internet of Medical Things (IoMT), emphasizing the need to understand specific threat models and identify privacy policy gaps to enhance security and privacy protections.

Contribution

It highlights the underexplored privacy threats in IoMT and advocates for studying threat models and policy gaps specific to this domain.

Findings

Identifies specific privacy threats and threat actors in IoMT.

Argues that existing PETS are insufficient without threat model identification.

Calls for research on privacy policy gaps in IoMT.

Abstract

The Internet of Medical Things (IoMT) is a frequent target of attacks -- compromising both patient data and healthcare infra-structure. While privacy-enhanced technologies and services (PETS) are developed to mitigate traditional privacy concerns, they cannot be applied without identifying specific threat models. Therefore, our position is that the new threat land-scape created by the relatively new and underexplored IoMT domain must be studied. We briefly discuss specific privacy threats and threat actors in IoMT. Furthermore, we argue that the privacy policy gap needs to be identified for the IoMT threat landscape.