A Review on the Security Vulnerabilities of the IoMT against Malware Attacks and DDoS
Lily Dzamesi, Nelly Elsayed
TL;DR
This systematic review assesses security vulnerabilities in the Internet of Medical Things (IoMT), focusing on malware and DDoS threats within IoMT deployments. By surveying 2019–2024 literature from ACM, IEEE Xplore, and Elsevier, it identifies weak encryption, weak authentication, and irregular firmware updates as core vulnerabilities, compounded by device resource limits. The review evaluates mitigation strategies—cryptography, blockchain, machine‑learning–driven anomaly detection, and edge computing—highlighting trade‑offs in effectiveness, complexity, and scalability, with blockchain achieving high apparent success but imposing substantial overhead. It concludes that advancing lightweight security measures and standardized protocols is critical for protecting patient data and ensuring reliable healthcare delivery, calling for collaboration among researchers and device manufacturers to translate these findings into practice.
Abstract
The Internet of Medical Things (IoMT) has transformed the healthcare industry by connecting medical devices in monitoring treatment outcomes of patients. This increased connectivity has resulted to significant security vulnerabilities in the case of malware and Distributed Denial of Service (DDoS) attacks. This literature review examines the vulnerabilities of IoMT devices, focusing on critical threats and exploring mitigation strategies. We conducted a comprehensive search across leading databases such as ACM Digital Library, IEEE Xplore, and Elsevier to analyze peer-reviewed studies published within the last five years (from 2019 to 2024). The review shows that inadequate encryption protocols, weak authentication methods, and irregular firmware updates are the main causes of risks associated with IoMT devices. We have identified emerging solutions like machine learning algorithms, blockchain technology, and edge computing as promising approaches to enhance IoMT security. This review emphasizes the pressing need to develop lightweight security measures and standardized protocols to protect patient data and ensure the integrity of healthcare services.
