Research on Medical Security System Based on Zero Trust.

Area of Science:

• Cybersecurity in Healthcare
• Information Technology in Medicine
• Zero Trust Architecture

Background:

• The integration of Internet of Things, cloud computing, and big data with medical systems increases network vulnerabilities.
• Intelligent medical systems face security threats like data leakage and remote attacks, endangering patient lives.
• Existing security measures are insufficient to address the unique challenges of interconnected medical environments.

Purpose of the Study:

• To propose a novel zero-trust medical security system to enhance the security of medical information systems.
• To address the growing network security threats in the rapidly evolving field of intelligent healthcare.
• To expand the application of zero trust principles within the medical domain.

Main Methods:

• Development of a zero-trust medical security system by integrating medical systems with zero-trust security principles.
• Design of an access control model based on subject behavior evaluation under zero-trust conditions (ABEAC).
• Incorporation of the Role-Based Access Control (RBAC) model with user behavior risk assessment and trust calculation within the ABEAC module.

Main Results:

• The proposed zero-trust medical security system effectively addresses network security threats in intelligent medical environments.
• The ABEAC model enhances the security of medical equipment and data through dynamic access control.
• Simulation experiments validated the feasibility and effectiveness of the developed system.

Conclusions:

• The zero-trust medical security system offers a robust solution for protecting sensitive patient data and medical infrastructure.
• Implementing behavior-based access control is crucial for securing modern healthcare IT systems.
• The study demonstrates a viable approach to fortifying medical information systems against emerging cyber risks.