Remote medical system driven by medical big models: Dynamic defense model for network security threats

As telemedicine systems become increasingly interconnected and medical big models are more widely deployed, remote medical infrastructures face growing cybersecurity risks. Traditional static defense mechanisms rely on predefined rule libraries and delayed patching cycles, which makes them inadequate for fast-evolving attacks in medical environments. This creates persistent risks such as model parameter leakage, insufficient privacy protection, and single-point failures in network architecture. We hypothesize that a dynamic defense framework integrating intelligent decision-making, trusted coordination, and hardware acceleration can better balance security, privacy, and real-time performance in medical scenarios. To test this hypothesis, we develop a reinforcement learning (RL)-driven adaptive dynamic defense strategy as the core decision-making module and integrate it with three supporting components: a security-enhanced model protection architecture based on an improved Shamir threshold scheme, adversarial training, and differential privacy; a blockchain-based verification mechanism using improved PBFT; and FPGA-based hardware acceleration using the Xilinx XC7K325T platform. The framework is implemented and evaluated using NS-3, Python 3.8 with PyTorch 1.12, Hyperledger Fabric 2.4, and the publicly available Synthetic IoMT Security Dataset. Across the evaluated regional medical alliance and emergency ambulance scenarios, the proposed system increases the zero-day attack blocking rate from 68.5% to 99.3%, improves medical image encryption throughput from 120 Mbps to 450 Mbps, reduces CPU peak utilization by 47.8%, eliminates privacy leakage incidents during cross-institutional data sharing, and stabilizes core clinical service latency within 35 ms. These results indicate that the proposed framework can enhance the security and operational resilience of remote medical systems under the evaluated conditions. Simulated results and deployment-based observations are distinguished in the corresponding sections.