Cleartext Data Transmissions in Consumer IoT Medical Devices

Abstract

This paper introduces a method to capture network traffic from medical IoT devices and automatically detect cleartext information that may reveal sensitive medical conditions and behaviors. The research follows a three-step approach involving traffic collection, cleartext detection, and metadata analysis. We analyze four popular consumer medical IoT devices, including one smart medical device that leaks sensitive health information in cleartext. We also present a traffic capture and analysis system that seamlessly integrates with a home network and offers a user-friendly interface for consumers to monitor and visualize data transmissions of IoT devices in their homes.

arXiv comment6 pages, 5 figures

References in corpus (1)

• A Smart Home is No Castle: Privacy Vulnerabilities of Encrypted IoT Traffic

Cited by in corpus (7)

• IoT Inspector: Crowdsourcing Labeled Network Traffic from Smart Home Devices at Scale
• HEDGE: Efficient Traffic Classification of Encrypted and Compressed Packets
• A Survey on Security and Privacy Issues in Modern Healthcare Systems: Attacks and Defenses
• Detecting Compressed Cleartext Traffic from Consumer Internet of Things Devices
• An Empirical Evaluation of GDPR Compliance Violations in Android mHealth Apps
• IoT Behavioral Monitoring via Network Traffic Analysis
• E-Health Sensitive Data Dissemination Exploiting Trust and Mobility of Users