{"id":"https://openalex.org/W7162809603","doi":"https://doi.org/10.48550/arxiv.2605.29210","title":"SAMD: A Tool for Identifying False Data Injection Scenarios in AI/ML-enabled Medical Devices","display_name":"SAMD: A Tool for Identifying False Data Injection Scenarios in AI/ML-enabled Medical Devices","publication_year":2026,"publication_date":"2026-05-28","ids":{"openalex":"https://openalex.org/W7162809603","doi":"https://doi.org/10.48550/arxiv.2605.29210"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2605.29210","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.29210","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2605.29210","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5029192078","display_name":"Mohammadreza Hallajiyan","orcid":"https://orcid.org/0000-0003-1570-7351"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Hallajiyan, Mohammadreza","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5087016403","display_name":"Xueren Ge","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Ge, Xueren","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5114753389","display_name":"Athish Pranav Dharmalingam","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Dharmalingam, Athish Pranav","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5088488038","display_name":"Gargi Mitra","orcid":"https://orcid.org/0000-0001-8011-4590"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Mitra, Gargi","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5075654187","display_name":"Shahrear Iqbal","orcid":"https://orcid.org/0000-0001-7819-5715"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Iqbal, Shahrear","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5055237181","display_name":"Homa Alemzadeh","orcid":"https://orcid.org/0000-0001-5279-842X"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Alemzadeh, Homa","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5073641368","display_name":"Karthik Pattabiraman","orcid":"https://orcid.org/0000-0003-2380-3415"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Pattabiraman, Karthik","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.7795000076293945,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.7795000076293945,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11636","display_name":"Artificial Intelligence in Healthcare and Education","score":0.041200000792741776,"subfield":{"id":"https://openalex.org/subfields/2718","display_name":"Health Informatics"},"field":{"id":"https://openalex.org/fields/27","display_name":"Medicine"},"domain":{"id":"https://openalex.org/domains/4","display_name":"Health Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.02280000038444996,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.7416999936103821},{"id":"https://openalex.org/keywords/process","display_name":"Process (computing)","score":0.633400022983551},{"id":"https://openalex.org/keywords/adversary","display_name":"Adversary","score":0.5608999729156494},{"id":"https://openalex.org/keywords/vulnerability-assessment","display_name":"Vulnerability assessment","score":0.41200000047683716},{"id":"https://openalex.org/keywords/control","display_name":"Control (management)","score":0.3610999882221222},{"id":"https://openalex.org/keywords/security-controls","display_name":"Security controls","score":0.34540000557899475}],"concepts":[{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.7416999936103821},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6843000054359436},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.633400022983551},{"id":"https://openalex.org/C41065033","wikidata":"https://www.wikidata.org/wiki/Q2825412","display_name":"Adversary","level":2,"score":0.5608999729156494},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.44830000400543213},{"id":"https://openalex.org/C167063184","wikidata":"https://www.wikidata.org/wiki/Q1400839","display_name":"Vulnerability assessment","level":3,"score":0.41200000047683716},{"id":"https://openalex.org/C2775924081","wikidata":"https://www.wikidata.org/wiki/Q55608371","display_name":"Control (management)","level":2,"score":0.3610999882221222},{"id":"https://openalex.org/C178148461","wikidata":"https://www.wikidata.org/wiki/Q1632136","display_name":"Security controls","level":3,"score":0.34540000557899475},{"id":"https://openalex.org/C172776598","wikidata":"https://www.wikidata.org/wiki/Q7943570","display_name":"Vulnerability management","level":4,"score":0.3391000032424927},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.33399999141693115},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.31850001215934753},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.31459999084472656},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.2973000109195709},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.28040000796318054},{"id":"https://openalex.org/C116834253","wikidata":"https://www.wikidata.org/wiki/Q2039217","display_name":"Identification (biology)","level":2,"score":0.27869999408721924}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2605.29210","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.29210","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2605.29210","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.29210","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"The":[0],"growing":[1],"integration":[2],"of":[3,27,136],"artificial":[4],"intelligence":[5],"(AI)":[6],"and":[7,40,49,123,132,159,190,211],"machine":[8],"learning":[9],"(ML)":[10],"in":[11,51,170,175],"medical":[12,88,97,150],"systems":[13],"requires":[14],"effective":[15],"measures":[16],"to":[17,47,128,155,185],"address":[18,50,68],"emerging":[19],"security":[20],"risks.":[21],"One":[22],"such":[23],"risk":[24],"is":[25],"that":[26,165,203],"adversaries":[28],"introducing":[29],"false":[30,112],"data":[31,113],"through":[32,144],"vulnerable":[33,157],"system":[34,57,98,105],"components":[35,106],"during":[36,61,90],"inference,":[37],"causing":[38],"misdiagnosis":[39],"wrong":[41],"treatments.":[42],"These":[43],"risks":[44],"are":[45],"challenging":[46],"anticipate":[48],"the":[52,56,91,96,115,176,181,197,212],"design":[53,92],"phase,":[54],"as":[55,99,107],"assembly":[58],"partially":[59],"occurs":[60],"actual":[62],"use":[63],"by":[64],"end":[65],"users.":[66],"To":[67],"this":[69],"concern,":[70],"we":[71],"introduce":[72],"SAMD,":[73],"an":[74,204],"automated":[75],"tool":[76],"for":[77,83,110],"performing":[78],"System":[79],"Theoretic":[80],"Process":[81],"Analysis":[82],"Security":[84],"(STPA-Sec)":[85],"on":[86,147,196],"AI/ML-enabled":[87],"devices":[89],"phase.":[93],"SAMD":[94,166],"models":[95],"a":[100,134],"control":[101],"structure,":[102],"treating":[103],"all":[104],"potential":[108,137,160],"points":[109,158],"injecting":[111],"into":[114],"ML":[116,198],"engine.":[117],"It":[118],"leverages":[119],"state-of-the-art":[120],"vulnerability":[121,130],"databases":[122],"Large":[124],"Language":[125],"Models":[126],"(LLMs)":[127],"automate":[129],"discovery":[131],"generate":[133],"list":[135],"attack":[138,161,194],"scenarios.":[139],"We":[140,163],"demonstrate":[141],"SAMD's":[142],"effectiveness":[143],"case":[145,177],"studies":[146],"five":[148],"FDA-cleared":[149],"devices,":[151],"showcasing":[152],"its":[153],"ability":[154],"identify":[156],"paths.":[162],"find":[164],"has":[167],"100%":[168],"precision":[169],"identifying":[171],"target":[172],"device":[173],"technologies":[174],"studies'":[178],"documents,":[179],"retrieves":[180],"known":[182],"vulnerabilities":[183],"linked":[184],"them":[186],"(with":[187,208],"63.2%":[188],"precision),":[189],"generates":[191],"highly":[192],"relevant":[193],"scenarios":[195],"model,":[199],"including":[200],"detailed":[201],"steps":[202],"adversary":[205],"might":[206],"take":[207],"95.3%":[209],"accuracy,":[210],"highest":[213],"time":[214],"taken":[215],"being":[216],"191.64s).":[217]},"counts_by_year":[],"updated_date":"2026-07-28T07:46:37.118299","created_date":"2026-05-30T00:00:00"}