SIMULAÇÃO DE ATAQUES CIBERNÉTICOS NOS DISPOSITIVOS IOT EM AMBIENTES DE SAÚDE.18

Abstract

The general objective was to conduct a literature review to identify attacks and vulnerabilities in IoT devices in healthcare environments, as well as to simulate a cyberattack to illustrate these weaknesses and suggest strategies that ensure the privacy and security of patient information. During the study, it was observed that the main gaps identified in the Internet of Things include weak passwords, unstable network services, insecure interfaces, lack of update mechanisms, use of outdated components, insufficient privacy protection, poor data transfer and storage, lack of device management control, vulnerable default configuration, and insufficient physical security. Cloning and interference attacks on RFID, message injection, DoS, DDoS, and spoofing are real and frequent threats in this context. These risks, combined with the increase in the collection and analysis of personal data, make the challenge of protection even greater. This is even more critical when it comes to connected healthcare devices, as the data involved is highly sensitive. The cyberattack simulation showed how these vulnerabilities can be exploited and what their impacts are in a connected healthcare environment. This understanding is fundamental for developing effective protection strategies. Based on the studies, it is concluded that ensuring patient privacy and security requires: using firewalls to block unauthorized access and monitor any suspicious network entries. This helps create a solid barrier against potential attacks. Keeping all devices updated with the latest security patches to prevent known vulnerabilities from being exploited by malicious users. Having strong authentication and access control systems to ensure that only authorized people can access the devices and data. Monitoring the network in real-time and encrypting communications helps protect the information circulating, keeping it secure and private. Conducting educational campaigns for employees and patients to help everyone understand the risks and adopt better security practices.