IoT Security in Healthcare: A Recent Trend and Predictive Study of SQL Injection Attacks

ABSTRACT The Internet of Things (IoT) technology is everywhere; they are making things more intelligent and connected, from smart cities to transport systems to homes, especially in the healthcare industry. This paper focuses on IoT in the healthcare domain. One of the major threats is structured query language (SQL) injections. An SQL injection attack is well known as a significant web application vulnerability. Given the potential future attacks from a prediction perspective in the healthcare domain, the other consequences of SQL injection attacks have yet to be well known. This study investigates the most common trend of SQL injection attacks. A systematic review method was carried out in this study. Reviewers selected, analysed and outlined 38 eligible studies. The reviewed literature reveals that IoT technologies are the most common and recent target of SQL injection attacks. The findings are necessary to shape the future of robust IoT security, especially in the healthcare domain, to ensure patients' safety and privacy. This paper suggests some strategies and standards that could help reduce and eliminate the risk of SQL injection in healthcare systems. As a result, it can help engineers develop robust security mechanisms to protect medical IoT devices from SQL attacks.