Security threats against the transmission chain of a medical health monitoring system

2013 IEEE 15th International Conference on e-Health Networking, Applications and Services, Healthcom 2013

Volumn , Issue , 2013, Pages 243-248

  Partala, Juha ^a   Keraneny, Niina ^a   Sarestoniemi, Mariella ^b   Hamalainen, Matti ^b   Iinatti, Jari ^b   Jamsa, Timo ^a   Reponen, Jarmo ^a   Seppanen, Tapio ^a  

^a UNIVERSITY OF OULU   (Finland)

^b UNIVERSITY OF OULU   (Finland)

Author keywords

Body sensor networks; Communication system security; Health information management; Information security

Indexed keywords

EID: 84894160528     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/HealthCom.2013.6720675     Document Type: Conference Paper

References (48)

1. J. C. Matthews, D. Betley, F. Morady, and F. Pelosi, "Adverse interaction between a left ventricular assist device and an implantable cardioverter defibrillator," J. Cardiovasc. Electrophysiol., vol. 18, no. 10, pp. 1107-1108, Sep 2007.
2. D. Halperin, T. Heydt-Benjamin, B. Ransford, S. Clark, B. Defend, W. Morgan, K. Fu, T. Kohno, and W. Maisel, "Pacemakers and implantable cardiac defibrillators: Software radio attacks and zero-power defenses," in Security and Privacy, 2008 IEEE Symposium on, 2008, pp. 129-142.
3. J. Radcliffe, "Hacking medical devices for fun and insulin: Breaking the human scada system," Black Hat Conference presentation slides 2011, 2011.
4. European Parliament, "Directive 95/46/EC of the European Parliament and of the Council of 24 october 1995 on the protection of individuals with regard to the processing of personal data and on the free movement of such data," http://eur-lex.europa.eu/(retrieved 21.9.2012), 1995.
5. K. Lorincz, D. J. Malan, T. R. F. Fulford-Jones, A. Nawoj, A. Clavel, V. Shnayder, G. Mainland, M. Welsh, and S. Moulton, "Sensor networks for emergency response: Challenges and opportunities," IEEE Pervasive Computing, vol. 3, no. 4, pp. 16-23, Oct. 2004. [Online]. Available: http://dx.doi.org/10.1109/MPRV.2004.18
6. A. Wood, G. Virone, T. Doan, Q. Cao, L. Selavo, Y. Wu, L. Fang, Z. He, S. Lin, and J. Stankovic, "ALARM-NET: Wireless sensor networks for assisted-living and residential monitoring," Department of Computer Science, University of Virginia, USA, Tech. Rep., 2006.
7. T. Nijsen, P. J. M. Cluitmans, J. Arends, and P. Griep, "Detection of subtle nocturnal motor activity from 3-d accelerometry recordings in epilepsy patients," Biomedical Engineering, IEEE Transactions on, vol. 54, no. 11, pp. 2073-2081, 2007.
8. A. Dalton, S. Patel, A. Chowdhury, M. Welsh, T. Pang, S. Schachter, G. OLaighin, and P. Bonato, "Development of a body sensor network to detect motor patterns of epileptic seizures," Biomedical Engineering, IEEE Transactions on, vol. 59, no. 11, pp. 3204-3211, 2012.
9. K. Cuppens, L. Lagae, B. Ceulemans, S. Van Huffel, and B. Vanrumste, "Detection of nocturnal frontal lobe seizures in pediatric patients by means of accelerometers: A first study," in Engineering in Medicine and Biology Society, 2009. EMBC 2009. Annual International Conference of the IEEE, 2009, pp. 6608-6611.
10. A. Salarian, H. Russmann, C. Wider, P. Burkhard, F. J. G. Vingerhoets, and K. Aminian, "Quantification of tremor and bradykinesia in parkinson's disease using a novel ambulatory monitoring system," Biomedical Engineering, IEEE Transactions on, vol. 54, no. 2, pp. 313-322, 2007.
11. S. Patel, K. Lorincz, R. Hughes, N. Huggins, J. Growdon, D. Standaert, J. Dy, M. Welsh, and P. Bonato, "A body sensor network to monitor parkinsonian symptoms: extracting features on the nodes," in 5th International Workshop on Wearable Micro and Nanosystems for Personalised Health, pHealth2008, 2008, pp. 21-23.
12. L. Palmerini, L. Rocchi, S. Mellone, F. Valzania, and L. Chiari, "Feature selection for accelerometer-based posture analysis in Parkinson's disease," Information Technology in Biomedicine, IEEE Transactions on, vol. 15, no. 3, pp. 481-490, 2011.
13. N. L. Keijsers, M. W. Horstink, and S. C. Gielen, "Ambulatory motor assessment in parkinson's disease," Movement Disorders, vol. 21, no. 1, pp. 34-44, 2006. [Online]. Available: http://dx.doi.org/10.1002/mds.20633
14. C. Otto, A. Milenkovic, C. Sanders, and E. Jovanov, "System architecture of a wireless body area sensor network for ubiquitous health monitoring," Journal of Mobile Multimedia, vol. 1, no. 4, pp. 307-326, 2006.
15. A. Pantelopoulos and N. Bourbakis, "A survey on wearable sensorbased systems for health monitoring and prognosis," Systems, Man, and Cybernetics, Part C: Applications and Reviews, IEEE Transactions on, vol. 40, no. 1, pp. 1-12, 2010.
16. P. Kumar and H.-J. Lee, "Security issues in healthcare applications using wireless medical sensor networks: A survey," Sensors, vol. 12, no. 1, pp. 55-91, 2011. [Online]. Available: http://www.mdpi.com/1424-8220/12/1/55
17. T. Zia and A. Zomaya, "Security issues in wireless sensor networks," in Systems and Networks Communications, 2006. ICSNC '06. International Conference on, 2006, pp. 40-40.
18. T. Dimitriou and K. Ioannis, "Security issues in biomedical wireless sensor networks," in Applied Sciences on Biomedical and Communication Technologies, 2008. ISABEL '08. First International Symposium on, oct. 2008, pp. 1-5.
19. M. Li, W. Lou, and K. Ren, "Data security and privacy in wireless body area networks," Wireless Communications, IEEE, vol. 17, no. 1, pp. 51-58, 2010.
20. E. Shi and A. Perrig, "Designing secure sensor networks," Wireless Communications, IEEE, vol. 11, no. 6, pp. 38-43, 2004.
21. M. Chen, S. Gonzalez, A. Vasilakos, H. Cao, and V. C. Leung, "Body area networks: A survey," Mobile Networks and Applications, vol. 16, no. 2, pp. 171-193, Apr. 2011. [Online]. Available: http://dx.doi.org/10.1007/s11036- 010-0260-8
22. "IEEE standard for local and metropolitan area networks-part 15.6: Wireless body area networks," IEEE Std 802.15.6-2012, pp. 1-271, 2012.
23. Office for Civil Rights, United State Department of Health and Human Services, "Medical privacy. national standards of protect the privacy of personal-health-information," http://www.hhs.gov/ocr/privacy/hipaa/ administrative/privacyrule/index.html (retrieved 29 April 2013).
24. B. Parno, A. Perrig, and V. Gligor, "Distributed detection of node replication attacks in sensor networks," in Security and Privacy, 2005 IEEE Symposium on, may 2005, pp. 49-63.
25. Y.-C. Hu, A. Perrig, and D. Johnson, "Wormhole attacks in wireless networks," Selected Areas in Communications, IEEE Journal on, vol. 24, no. 2, pp. 370-380, 2006.
26. C. Karlof and D. Wagner, "Secure routing in wireless sensor networks: attacks and countermeasures," Ad Hoc Networks, vol. 1, no. 2-3, pp. 293-315, 2003. [Online]. Available: http://www.sciencedirect.com/science/ article/pii/S1570870503000088
27. J. R. Douceur, "The sybil attack," in Revised Papers from the First International Workshop on Peer-to-Peer Systems, ser. IPTPS '01. London, UK, UK: Springer-Verlag, 2002, pp. 251-260. [Online]. Available: http://dl.acm.org/citation.cfm?id=646334.687813
28. F. Stajano and R. J. Anderson, "The resurrecting duckling: Security issues for ad-hoc wireless networks," in Proceedings of the 7th International Workshop on Security Protocols. London, UK, UK: Springer-Verlag, 2000, pp. 172-194. [Online]. Available: http://dl.acm.org/citation.cfm?id= 647217.760118
29. M. Pirretti, S. Zhu, N. Vijaykrishnan, P. McDaniel, M. T. Kandemir, and R. R. Brooks, "The sleep deprivation attack in sensor networks: Analysis and methods of defense," International Journal of Distributed Sensor Networks, vol. 2, no. 3, pp. 267-287, 2006.
30. N. Doraswamy and D. Harkins, IPSec: The New Security Standard for the Internet, Intranets, and Virtual Private Networks. Upper Saddle River, NJ, USA: Prentice Hall PTR, 1999.
31. S. Khanvilkar and A. Khokhar, "Virtual private networks: an overview with performance evaluation," Communications Magazine, IEEE, vol. 42, no. 10, pp. 146-154, 2004.
32. J. Oresko, Z. Jin, J. Cheng, S. Huang, Y. Sun, H. Duschl, and A. Cheng, "A wearable smartphone-based platform for real-time cardiovascular disease detection via electrocardiogram processing," Information Technology in Biomedicine, IEEE Transactions on, vol. 14, no. 3, pp. 734-740, 2010.
33. M. Estudillo-Valderrama, L. Roa, J. Reina-Tosina, and D. Naranjo-Hernandez, "Design and implementation of a distributed fall detection system-personal server," Information Technology in Biomedicine, IEEE Transactions on, vol. 13, no. 6, pp. 874-881, 2009.
34. C. Bellos, A. Papadopoulos, R. Rosso, and D. Fotiadis, "CHRONIOUS: A wearable platform for monitoring and management of patients with chronic disease," in Engineering in Medicine and Biology Society, EMBC, 2011 Annual International Conference of the IEEE, 2011, pp. 864-867.
35. C. Aguilar-Melchor, S. Fau, C. Fontaine, G. Gogniat, and R. Sirdey, "Recent advances in homomorphic encryption: A possible future for signal processing in the encrypted domain," Signal Processing Magazine, IEEE, vol. 30, no. 2, pp. 108-117, 2013.
36. National Electrical Manufacturers Association, "Digital Imaging and Communications in Medicine (DICOM) Part 1: Introduction and Overview," http://medical.nema.org/standard.html (retrieved 12.10.2012), 2011.
37. P. Schloeffel, T. Beale, G. Hayworth, S. Heard, and H. Leslie, "The relationship between CEN 13606, HL7, and openEHR," in Health Informatics Conference, 2006.
38. "ISO/IEC/IEEE Health informatics-Personal health device communication-Part 20601: Application profile-Optimized exchange protocol," ISO/IEEE 11073-20601:2010(E), pp. 1-208, 2010.
39. Continua Health Alliance, "Continua Design Guidelines Version 2011," 2011.
40. Y. Wang, G. Attebury, and B. Ramamurthy, "A survey of security issues in wireless sensor networks," Communications Surveys Tutorials, IEEE, vol. 8, no. 2, pp. 2-23, 2006.
41. W. Xu, K. Ma, W. Trappe, and Y. Zhang, "Jamming sensor networks: attack and defense strategies," Network, IEEE, vol. 20, no. 3, pp. 41-47, 2006.
42. P. McFedries, "Bluetooth cavities," IEEE Spectrum, vol. 42, no. 6, p. 88, 2005.
43. Y. Zhou and X. Jiang, "Dissecting android malware: Characterization and evolution," in Security and Privacy, 2012 IEEE Symposium on, 2012, pp. 95-109.
44. "IEEE standard for local and metropolitan area networks-part 15.4: Low-rate wireless personal area networks (LR-WPANs)," IEEE Std 802.15.4-2011 (Revision of IEEE Std 802.15.4-2006), pp. 1-314, 2011.
45. N. Sastry and D. Wagner, "Security considerations for IEEE 802.15.4 networks," in Proceedings of the 3rd ACM workshop on Wireless security, ser. WiSe '04. New York, NY, USA: ACM, 2004, pp. 32-42. [Online]. Available: http://doi.acm.org/10.1145/1023646.1023654
46. M. Jakobsson and S. Wetzel, "Security weaknesses in Bluetooth," in Proceedings of the 2001 Conference on Topics in Cryptology: The Cryptographer's Track at RSA, ser. CT-RSA 2001. London, UK, UK: Springer-Verlag, 2001, pp. 176-191. [Online]. Available: http://dl.acm.org/citation.cfm?id= 646139.680779
47. D. Singeĺee and B. Preneel, "Review of the Bluetooth security architecture," Information Security Bulletin, vol. 11, pp. 45-53, 2006.
48. V. Ramasubramanian and E. G. Sirer, "Perils of transitive trust in the domain name system," in Proceedings of the 5th ACM SIGCOMM conference on Internet Measurement, ser. IMC '05. Berkeley, CA, USA: USENIX Association, 2005, pp. 35-35. [Online]. Available: http://dl.acm.org/citation.cfm?id=1251086. 1251121