Medical Design Briefs - February 2024 - 15

The IoT Is Vulnerable. Healthcare organizations must also
recognize that the IoT is inherently vulnerable. Any endpoint,
Internet-connected or not, is a potential risk because it's one
more thing to secure. However, IoT devices present more danger
than most devices.
IoT devices often feature minimal built-in protections. A
hacker could break into an easy-to-access gadget and move
effortlessly from that endpoint to one with more sensitive information.
This threat - called lateral movement - means the
IoT's weaknesses jeopardize the entire network without additional
security measures.
Making matters worse is the fact that many of these devices
don't hold mission-critical data themselves, so they're easy to
overlook. The IoMT's novelty also means hospitals may be unaware
of these risks.
These threats are more than theoretical, too. Studies have
found that companies with more connected IoMT devices are
likelier to experience multiple cyberattacks in a year.2
Healthcare Faces Unique Risks. The IoT's security shortcomings
affect any industry relying on this technology, but
healthcare faces more risks than most. This unique challenge
stems largely from its status as a favorite target for
cybercriminals.
Healthcare is the third most-attacked industry and saw the
biggest increase in cyberattacks in 2022.3 This sector is a prime
target because of its large amounts of highly sensitive information.
Growing attack surfaces through the IoMT make it even
more of a target. The threat of regulatory fines for breached
data may also make medical organizations more likely to pay
ransoms, enticing more ransomware attacks.
Healthcare hasn't always been such a target, unlike other
high-profile industries like government or finance. Consequently,
many medical workers lack security experience, making
user error more likely. The industry hasn't done much to
correct that trend, with 42 percent of healthcare organizations
not training their employees in security best practices.4
It's also worth noting that attacks in this industry are more
impactful. Tighter regulations aside, loss of service in medical
devices could affect patient health.
How Blockchain Can Help. Given these substantial risks,
IoMT security must improve. Comprehensive security is a
multifaceted endeavor, but blockchain technology deserves
special attention.
A blockchain is a distributed digital ledger where the records
- called blocks - are visible to any authorized user but nearly
impossible to change. These networks' distributed nature
means an attacker would have to take control of over half of its
devices simultaneously to affect the blockchain.
This security and transparency provide an ideal structure
for transmitting EHRs and other medical data between IoMT
devices. Block's cryptographic protections make transfers
more secure than conventional encryption, and their immutability
prevents tampering and fraud from outside actors.
Blockchains distribution removes single points of failure for
added reliability.
Patients could also see exactly who and what can access their
records, thanks to blockchain's visibility. This insight lets them
make more informed decisions about their privacy. They could
revoke access where desired, as in line with HIPAA, and approach
telehealth systems with confidence. Similarly, medical
Medical Design Briefs, February 2024
www.medicaldesignbriefs.com
15
http://www.medicaldesignbriefs.com
Medical Design Briefs - February 2024

Table of Contents for the Digital Edition of Medical Design Briefs - February 2024
