Characterizing Privacy Risks in Healthcare IoT Systems
摘要
The advancement in Internet of Things (IoT) technology has been having a huge societal and economic impact, effectively changing the paradigms in doing business including the healthcare industry. While citizens now can enjoy the convenience brought up by healthcare IoT systems, such as wearable healthcare IoT devices, the privacy risks incurred by these systems and devices are not well understood, let alone adequately addressed. In this paper we systematically characterize the privacy risks in healthcare IoT systems, by considering a range of privacy attack vectors such as those that can be imposed by healthcare IoT device fingerprinting and semi-honest Internet Service Providers. Then, we leverage these characteristics to guide us in exploring countermeasures for mitigating privacy risks in healthcare IoT systems. We hope the present study will serve as a baseline for designing a systematic solution to protect citizen’s privacy in healthcare IoT systems.