Mitigating Phishing Attack in IoT based Healthcare System using a Threat Modeling Approach

Abstract

The healthcare sector is a very sensitive area given the information that circulates within it, which makes hackers more inclined to target this architecture. Various techniques are available to ensure illegal intrusion, including phishing, an attack that is widely used by attackers as they take advantage of users' negligence or non-technical background to get them to provide initial access to the target architecture. This paper will discuss the threats that can affect an Internet of Things (IoT) architecture for healthcare domain, more specifically the phishing attack, using the STRIDE approach with the Microsoft Threat Modeling (MTM) tool, and then proposing countermeasures and recommendations for mitigating and correcting these threats, to guarantee correct and secure communication as far as possible.