基于可重复使用软件安全要求规范的电子健康应用程序审计的方法和验证
Carlos M Mejía-Granda1, José L Fernández-Alemán1, Juan M Carrillo de Gea1
1Department of Informatics and Systems, Faculty of Computer Science, University of Murcia, Murcia 30100, Spain.
International journal of medical informatics
|November 24, 2024
概括
本研究介绍了电子卫生应用程序的安全目录和审计方法,识别了OpenEMR的漏洞,并加强了针对网络威胁的健康软件安全性.
科学领域:
- 电子医疗安全电子医疗安全
- 软件工程 软件工程 软件工程
- 医疗保健中的网络安全
背景情况:
- 获得电子卫生应用程序的安全要求是复杂的.
- 现有的方法可能无法充分解决电子医疗的独特安全需求.
研究的目的:
- 为电子卫生应用程序引入量身定制的审计和验证方法.
- 为电子卫生应用程序提供全面的安全目录.
- 提高医疗软件的安全性和可靠性.
主要方法:
- 系统的文献审查和收集主要来源 (法律,指南,标准,最佳实践).
- 组织一个基于ISO/IEC/IEEE 29148:2018的安全目录.
- 建议并验证使用OpenEMR的SEC-AM审计方法.
主要成果:
- 为开发或评估电子健康应用程序提供了一个全面的框架.
- 在OpenEMR中发现了安全漏洞 (例如,DDoS,XSS,JSONi,CMDi).
- 开放EMR获得了"安全"分类,合规率为66.97%.
结论:
- 拟议的目录和审计方法对于提高医疗软件安全性是可行的和有效的.
- 建议不断改进目录,以解决新的法规和漏洞.
- 这种方法对于在面对网络威胁时确保安全和高质量的医疗保健至关重要.
相关概念视频
Data Validation
4.9K
Data validation is an essential part of a comprehensive assessment. Validation is confirming or verifying and opening the door to gathering more assessment data as it clarifies vague or unclear data. The process of checking and verifying the collected information is called data validation. The primary purpose of data validation is to ensure data is as free from error, bias, and misinterpretation as possible.
Nursing assessment guides are generally based on holistic models rather than medical...
Nursing assessment guides are generally based on holistic models rather than medical...
4.9K
Legal Guidelines for Documentation
1.3K
The legal guidelines for nursing documentation are essential for ensuring accurate, professional, and ethical recording of patient care. The guidelines are discussed here:
1.3K
Ethical Standards I
774
The American Nurses Association (ANA) created and implemented the first nationally accepted Code of Ethics for Nurses with Interpretive Statements. The Code of Ethics is a living document regularly updated by the ANA and establishes an ethical standard that is non-negotiable for nurses in all roles and settings.
The Code of Ethics provisions outline the nurse's duty to the patient, the healthcare team, the profession, and society. The Code's fundamental principles include advocacy,...
The Code of Ethics provisions outline the nurse's duty to the patient, the healthcare team, the profession, and society. The Code's fundamental principles include advocacy,...
774
Health Information Technology and Healthcare Information System
801
Health Information Technology (HIT)
Health Information Technology, commonly called HIT, integrates advanced information systems and technology in healthcare settings. Its primary functions include:
Health Information Technology, commonly called HIT, integrates advanced information systems and technology in healthcare settings. Its primary functions include:
801
Methods of Documentation VII: EMR
824
Electronic Medical Records (EMRs) primarily center around electronically documenting patients' health information within a single healthcare organization or practice. They contain essential clinical data related to a patient's medical history, diagnoses, medications, treatment plans, lab results, and other pertinent information relevant to the specific encounter or episode of care. EMRs are designed to streamline documentation and workflow processes within individual healthcare...
824
Guidelines and Strategies for Safe Computer Charting
797
The guidelines and strategies provided by the American Nurses Association (ANA) and the Canadian Nurses Association (CNA) offer essential principles for ensuring safe and secure computer charting systems in healthcare settings. Let's break down each recommendation:
Maintain Confidentiality and Security:
Maintain Confidentiality and Security:
797


