Identification of threats to medical internet of things devices using machine learning methods
D. D. Savelyeva, Tatiana M. Tatarnikova · T-Comm - Телекоммуникации и Транспорт · 2024
The article discusses the current problem of identifying threats in the medical Internet of Things. In modern medicine, medical Internet of Things devices play an important role in improving the quality and availability of medical services. They help in diagnostics, monitoring the condition of patients and performing medical procedures. On the other hand, the growing use of the medical Internet of Things leads to an increase in the risk of cyberattacks, which can have serious consequences for the health of patients and the operation of medical institutions. Network attacks on the medical Internet of Things can lead to the leakage of confidential information, disruption of vital monitoring systems and even a threat to the lives of patients. Therefore, ensuring the security of the medical Internet of Things is an important task for researchers, developers and medical organizations. One of the promising approaches to ensuring the security of the medical Internet of Things is the use of machine learning methods to detect and identify network attacks in traffic transmitted between patients and a medical institution. Machine learning allows you to create models that can automatically learn based on the analysis of large amounts of data and identify anomalies in traffic that may indicate a network attack. The article provides the infrastructure of the medical Internet of Things and discusses traffic transmission protocols that allow you to see areas of data transmission vulnerable to attacks. Software implementation of several popular machine learning algorithms has been completed, which can be used to detect network attacks in medical Internet of Things traffic. The most effective machine learning algorithm in terms of classification metrics is recommended for implementation as an intrusion detection system at each traffic receiving node - the coordinator, base stations, routers and firewalls.