The Medical Science DMZ.

Area of Science:

• Biomedical Informatics
• Network Architecture
• Data Security

Background:

• Biomedical research generates massive datasets ('big data') from genomics, imaging, and clinical sources.
• Existing infrastructure at academic health centers struggles to manage the storage, analysis, and network demands of this data.
• Increasing reliance on shared data repositories necessitates secure, high-volume data exchange between institutions.

Purpose of the Study:

• To present a reference architecture for maintaining high-capacity network flows in a medical context.
• To address the challenge of transferring large, sensitive datasets securely and efficiently.
• To ensure compliance with privacy laws and regulations during data transfer.

Main Methods:

• Utilized high-end networking, packet filter firewalls, and network intrusion detection systems.
• Proposed a "Medical Science DMZ" concept, adapting the "Science DMZ" framework.
• Defined an institutional reference architecture for data-intensive network flows.

Main Results:

• The "Medical Science DMZ" facilitates secure, high-volume transport of large, sensitive datasets.
• This architecture supports data exchange between research institutions over national research networks.
• Demonstrated a strategy that integrates performance and security for biomedical data flows.

Conclusions:

• Implementing a Medical Science DMZ allows researchers to utilize high-performance computing and cloud storage.
• Enables leveraging national high-speed research networks while maintaining data privacy.
• Ensures compliance with regulatory requirements for sensitive biomedical data.