Systematically Assessing the Security Risks of AI/ML-enabled Connected Healthcare Systems
Fuente:
arXiv
Salvato in:
| Autori principali: | , , , , |
|---|---|
| Natura: | Preprint |
| Pubblicazione: |
2024
|
| Soggetti: | |
| Accesso online: | |
| Tags: |
Aggiungi Tag
Nessun Tag, puoi essere il primo ad aggiungerne!!
|
| _version_ | 1866917637935595520 |
|---|---|
| author | Elnawawy, Mohammed Hallajiyan, Mohammadreza Mitra, Gargi Iqbal, Shahrear Pattabiraman, Karthik |
| author_facet | Elnawawy, Mohammed Hallajiyan, Mohammadreza Mitra, Gargi Iqbal, Shahrear Pattabiraman, Karthik |
| contents | The adoption of machine-learning-enabled systems in the healthcare domain is on the rise. While the use of ML in healthcare has several benefits, it also expands the threat surface of medical systems. We show that the use of ML in medical systems, particularly connected systems that involve interfacing the ML engine with multiple peripheral devices, has security risks that might cause life-threatening damage to a patient's health in case of adversarial interventions. These new risks arise due to security vulnerabilities in the peripheral devices and communication channels. We present a case study where we demonstrate an attack on an ML-enabled blood glucose monitoring system by introducing adversarial data points during inference. We show that an adversary can achieve this by exploiting a known vulnerability in the Bluetooth communication channel connecting the glucose meter with the ML-enabled app. We further show that state-of-the-art risk assessment techniques are not adequate for identifying and assessing these new risks. Our study highlights the need for novel risk analysis methods for analyzing the security of AI-enabled connected health devices. |
| format | Preprint |
| id |
arxiv_https___arxiv_org_abs_2401_17136 |
| institution | arXiv |
| publishDate | 2024 |
| record_format | arxiv |
| spellingShingle | Systematically Assessing the Security Risks of AI/ML-enabled Connected Healthcare Systems Elnawawy, Mohammed Hallajiyan, Mohammadreza Mitra, Gargi Iqbal, Shahrear Pattabiraman, Karthik Cryptography and Security Computers and Society Machine Learning The adoption of machine-learning-enabled systems in the healthcare domain is on the rise. While the use of ML in healthcare has several benefits, it also expands the threat surface of medical systems. We show that the use of ML in medical systems, particularly connected systems that involve interfacing the ML engine with multiple peripheral devices, has security risks that might cause life-threatening damage to a patient's health in case of adversarial interventions. These new risks arise due to security vulnerabilities in the peripheral devices and communication channels. We present a case study where we demonstrate an attack on an ML-enabled blood glucose monitoring system by introducing adversarial data points during inference. We show that an adversary can achieve this by exploiting a known vulnerability in the Bluetooth communication channel connecting the glucose meter with the ML-enabled app. We further show that state-of-the-art risk assessment techniques are not adequate for identifying and assessing these new risks. Our study highlights the need for novel risk analysis methods for analyzing the security of AI-enabled connected health devices. |
| title | Systematically Assessing the Security Risks of AI/ML-enabled Connected Healthcare Systems |
| topic | Cryptography and Security Computers and Society Machine Learning |
| url | https://arxiv.org/abs/2401.17136 |