Penetration Testing for Securing IoT-Enabled Healthcare Systems: A Focus on Wearable Devices and Remote Surgery

Healthcare systems are increasingly adopting IoT-enabled solutions, from wearables to remote surgery platforms; thus, we can expect enormous cybersecurity and data protection risks. In this paper, we propose a penetration testing framework for healthcare IoT environments to assess a wide range of vulnerabilities from communication, device control, and data integrity perspectives. Abstract State Machine (ASM) modelling is used by the framework to evaluate real-world attack scenarios, and this helps improve security and compliance against HIPAA and GDPR. Gives tangible methods to improve patient safety while protecting confidential health information.