基于联邦身份管理框架的数字医疗保健系统的网络风险评估方法
Shamsul Huda1, Md Rezaul Islam2, Jemal Abawajy1
1School of IT, Deakin University, Melbourne, VIC 3125, Australia.
Sensors (Basel, Switzerland)
|August 29, 2024
概括
本研究引入了使用联邦身份管理的连接医疗设备和系统的新网络风险评估. 它通过识别和减轻数字医疗环境中的网络威胁来提高患者安全.
科学领域:
- 医疗保健中的网络安全
- 医疗设备安全 医疗设备安全
- 数字卫生系统 数字卫生系统
背景情况:
- 使用医疗网络物理系统 (MCPS) 和医疗设备互联网 (IoMT) 的协作数字医疗系统提供了好处,但也带来了重大安全挑战.
- 联邦身份管理 (FIM) 的漏洞和IoMT设备的固有弱点对敏感的医疗保健数据和患者安全造成了关键风险.
- 这些系统的相互连接性要求对网络风险评估采取强有力的方法,以防止可能危及生命的网络攻击.
研究的目的:
- 提出一种新的,全面的,基于证据的网络风险评估方法,适用于支持FIM的MCPS和IoMT医疗保健系统.
- 解决IT基础设施,医疗设备和FIM协议在数字医疗保健中的融合所带来的独特安全挑战.
- 为优先考虑和减轻网络风险提供框架,以提高数字医疗保健系统的整体弹性.
主要方法:
- 采用了三维攻击景观分析,检查了IT基础设施,医疗设备和FIM协议.
- 该方法整合了既有标准,如资产管理的网络弹性审查 (CRR) 和风险评估的NIST SP 800-30.
- 通过使用威胁建模技术进行验证,包括攻击树和详细的攻击序列图在各种IoMT和MCPS设备上.
主要成果:
- 开发的方法通过分析医疗IT,医疗设备和FIM之间的相互连接漏洞,提供基于证据的网络风险评估.
- 建议进行量身定制的安全控制,以有效地优先考虑和减轻已识别的关键风险,从而提高系统的弹性.
- 威胁建模和攻击序列图展示了评估方法在各种供应商设备上的实际应用和验证.
结论:
- 拟议的网络风险评估方法提供了一种结构化的方法,用于保护数字医疗保健系统免受复杂的网络威胁.
- 实施推的安全控制措施有助于医疗保健提供者改善患者安全和医疗器械安全管理.
- 这项研究有助于建立更具弹性和安全的FIM支持的医疗保健生态系统,这对现代数字化医疗保健提供至关重要.
相关概念视频
01:29Issues And Trends In Healthcare Delivery System
5.6K
The issues and trends in healthcare delivery are constantly changing. The COVID-19 pandemic is one recent issue that wreaked havoc on healthcare systems, causing a shortage of healthcare workers, high demand for medicines and supplies, and increased medical expenditure due to a lack of insurance. Other issues include rising healthcare costs and care fragmentation.
Cost Containment
Payment for healthcare services has historically promoted adoption of costly and often unnecessary or inefficient...
Cost Containment
Payment for healthcare services has historically promoted adoption of costly and often unnecessary or inefficient...
5.6K
01:25Ethical Standards I
784
The American Nurses Association (ANA) created and implemented the first nationally accepted Code of Ethics for Nurses with Interpretive Statements. The Code of Ethics is a living document regularly updated by the ANA and establishes an ethical standard that is non-negotiable for nurses in all roles and settings.
The Code of Ethics provisions outline the nurse's duty to the patient, the healthcare team, the profession, and society. The Code's fundamental principles include advocacy,...
The Code of Ethics provisions outline the nurse's duty to the patient, the healthcare team, the profession, and society. The Code's fundamental principles include advocacy,...
784
01:30Health Information Technology and Healthcare Information System
811
Health Information Technology (HIT)
Health Information Technology, commonly called HIT, integrates advanced information systems and technology in healthcare settings. Its primary functions include:
Health Information Technology, commonly called HIT, integrates advanced information systems and technology in healthcare settings. Its primary functions include:
811
01:20Integrated Healthcare System
1.5K
An integrated healthcare system (IHS) is a set of organizations that provides for or arranges to provide coordinated and continuous service to a defined population. The IHS takes responsibility for that particular population's health status and outcome, both clinically and fiscally. An integrated healthcare system is a well-organized, well-coordinated, and collaborative network. The integrated delivery system is a network that connects different healthcare providers to deliver organized,...
1.5K
01:06Legal Guidelines for Documentation
1.3K
The legal guidelines for nursing documentation are essential for ensuring accurate, professional, and ethical recording of patient care. The guidelines are discussed here:
1.3K
01:18Introduction To Health Care Delivery System
2.7K
The healthcare system is constantly changing and complex. Various services are available from different healthcare providers, but gaining access to these services has become challenging for people with limited healthcare insurance. Uninsured people present a challenge to healthcare because they frequently postpone or forego treatment.
The Institute of Medicine (IOM) advocates for a patient-centered, effective, safe, timely, equitable, and effective healthcare system. The National Priorities...
The Institute of Medicine (IOM) advocates for a patient-centered, effective, safe, timely, equitable, and effective healthcare system. The National Priorities...
2.7K