Internet of things security in healthcare : A test-suite and standard review

• Main Author: Johansson, Michael
• Format: Others
• Language: English
• Published: Linnéuniversitetet, Institutionen för datavetenskap och medieteknik (DM) 2018
• Subjects: Internet of Things; Healthcare; Security; Privacy; Penetration testing; Sjukvård; Säkerhet; Integritet; Penetrationstest; Computer Sciences; Datavetenskap (datalogi)
• Online Access: http://urn.kb.se/resolve?urn=urn:nbn:se:lnu:diva-77138

Internet of things is getting more and more popular in healthcare as it comes with benefits that help with efficiency in saving lives and reduce its cost, but it also presents a new attack vector for an attacker to steal or manipulate information sent between them. This report will focus on three properties in the definition of security, confidentiality, integrity and access control. The report will look into what challenges there is in healthcare IoT today through a literature review and from those challenges look into what could minimise these challenges before a device gets into production. The report found that the lack of standardisation has lead to errors that could be easily prevented by following a guideline of tests as those from the European Union Agency for Network and Information Security, or by running a penetration test with the tools brought up in the report on the device to see what vulnerabilities are present.