MEDSTRIDE: Um framework baseado em STRIDE para análise de risco em sistemas médicos conectados (IoMT)

Abstract

The growing adoption of Internet of Medical Things (IoMT) devices brings significant advances to healthcare, but also expands the surface area of exposure to cyberattacks. This work addresses cybersecurity in IoMT with a focus on risk modeling. To this end, an adaptation of the STRIDE framework was proposed, called MedSTRIDE, aimed at the particularities of medical systems. The research includes a classification of the main types of IoMT attacks identified in the literature and a generic model for decomposing architectural components, which serves as a basis for risk modeling in different scenarios. Furthermore, a comparative modeling experiment was carried out between MedSTRIDE and classic STRIDE, demonstrating the advantages of the proposed approach in capturing specific risks of IoMT systems. The results confirm that MedSTRIDE offers a more suitable framework for analyzing and identifying vulnerabilities in this context.