**4. Conclusions**

In this work, attack graph generation for PARMS is presented using a JKind model checker and DOT language within Graphviz. The idea for modeling is the application of an architectural descriptive language to capture the security-related details of PARMS that an attacker may exploit to impose life-threatening risks to patients. The main goal of this research is to increase the awareness about the security of IoT medical devices. This is done by identifying some of the cyberattacks and estimating their impacts against PARMS. Cyberattacks and vulnerabilities need to be taken into consideration when designing medical IoT devices. Even though some healthcare companies aim to consider within their product development life-cycle safety and security concerns, ye<sup>t</sup> more testing and verification methods are required to produce a systematic method to test the detection or mitigations determined or provided during the safety and security analyses phase against some sophisticated hacking tools. It is important that attacks and defenses be carefully and independently investigated in order to accurately assess risk of the attack and e ffectiveness of the defense. Determining appropriate detection and mitigation techniques are future directions to pursue.

**Author Contributions:** Conceptualization, M.I.; methodology, M.I.; software, A.A., and A.M.; validation, M.I., A.A.; formal analysis, M.I.; investigation, M.I., A.A., and A.M; resources, M.I.; data curation, M.I., A.A.; writing—original draft preparation, M.I., A.A., and A.M.; Writing—review and editing, M.I.; visualization, M.I., and A.A.; supervision, M.I.; project administration, M.I.; funding acquisition, M.I. All authors have read and agreed to the published version of the manuscript.

**Funding:** This research was funded by the Deanship of Graduation Studies and Scientific Research at the German Jordanian University for the seed fund SATS 02/2018.

**Acknowledgments:** The authors would like to acknowledge Abdulrahman Mhawesh for his valuable discussion on PARMS.

**Conflicts of Interest:** The authors declare no conflict of interest.
