数字健康中的Web应用程序安全:双重分析和基于OWASP的基于背景的工具提案.
Ylenia Murgia1, Jaime Delgado2, Mauro Giacomini1
1Department of Informatics, Bioengineering, Robotics and System Engineering (DIBRIS), University of Genoa, Genoa, Italy.
Studies in health technology and informatics
|October 3, 2025
概括
数字健康 (DH) 网络安全风险正在上升. 这项研究发现,在医疗保健中应用开放网络应用安全项目 (OWASP) 准则方面存在差距,并提出了一种工具来弥合这一差距,以提高安全性.
科学领域:
- 医疗保健中的网络安全
- 数字健康 (DH) 技术
- 应用安全标准 应用安全标准
背景情况:
- 在医疗保健中快速采用数字技术增加了网络安全风险.
- 医疗保健中的Web应用程序处理敏感数据,需要强有力的安全措施.
- 监管合规和数据泄露预防是关键问题.
研究的目的:
- 调查开放网络应用安全项目 (OWASP) 准则在医疗保健领域的适用性.
- 确定数字健康 (DH) 技术的共同安全要求,并将其与OWASP应用安全验证标准 (ASVS) 保持一致.
- 解决安全标准的可用性和其在医疗保健IT中的实际实施之间的差距.
主要方法:
- 文献审查以确定DH安全要求,并评估与OWASP ASVS的协调性.
- 问卷调查分发给意大利医疗机构和IT公司.
- 分析调查答复,以确定安全标准的知识和使用差距.
主要成果:
- 在DH技术中确定了共同的安全要求,并与OWASP ASVS进行了映射.
- 在安全标准的可用性和它们在医疗保健领域的实际应用之间观察到一个显著的差距.
- 医疗保健IT专业人员和开发人员对现有安全指南的认识和使用有限.
结论:
- OWASP的指导方针是相关的,但在医疗保健领域未得到充分利用.
- 提出了一个背景意识的工具来指导开发人员和测试人员有效地应用OWASP标准.
- 该工具旨在通过量身定制的建议和检查清单,促进在临床环境中实践采用安全最佳实践.
相关概念视频
01:22Healthcare Associated Infections II: Preventive Measures
3.6K
Essential infection prevention measures are based on the knowledge of the infection chain, the modes of transmission in healthcare settings, and the use of the best practices in all healthcare settings. Compulsory public reporting of healthcare-associated infection rates is needed to allow individuals and the community to make informed choices regarding selecting a healthcare facility.
The best practices for preventing healthcare-associated infections include hand hygiene, patient risk...
The best practices for preventing healthcare-associated infections include hand hygiene, patient risk...
3.6K
01:18Guidelines and Strategies for Safe Computer Charting
2.7K
The guidelines and strategies provided by the American Nurses Association (ANA) and the Canadian Nurses Association (CNA) offer essential principles for ensuring safe and secure computer charting systems in healthcare settings. Let's break down each recommendation:
Maintain Confidentiality and Security:
Maintain Confidentiality and Security:
2.7K
01:30Health Information Technology and Healthcare Information System
3.3K
Health Information Technology (HIT)
Health Information Technology, commonly called HIT, integrates advanced information systems and technology in healthcare settings. Its primary functions include:
Health Information Technology, commonly called HIT, integrates advanced information systems and technology in healthcare settings. Its primary functions include:
3.3K
01:26Defense Mechanism Against Infection
9.2K
Natural flora, body system defenses, and inflammation are natural barriers of the body against infectious agents regardless of previous exposure. Normal floras of the human body refer to the microbial population that colonizes the skin and mucous membranes.
In addition, many body organ systems have unique defenses against infection. The skin is an intact, multilayered surface preventing invasion by microorganisms unless impaired. Mucous membranes lining the mouth, nose, and eyelids are barriers...
In addition, many body organ systems have unique defenses against infection. The skin is an intact, multilayered surface preventing invasion by microorganisms unless impaired. Mucous membranes lining the mouth, nose, and eyelids are barriers...
9.2K
01:29Issues And Trends In Healthcare Delivery System
6.1K
The issues and trends in healthcare delivery are constantly changing. The COVID-19 pandemic is one recent issue that wreaked havoc on healthcare systems, causing a shortage of healthcare workers, high demand for medicines and supplies, and increased medical expenditure due to a lack of insurance. Other issues include rising healthcare costs and care fragmentation.
Cost Containment
Payment for healthcare services has historically promoted adoption of costly and often unnecessary or inefficient...
Cost Containment
Payment for healthcare services has historically promoted adoption of costly and often unnecessary or inefficient...
6.1K
01:25Ethical Standards I
1.5K
The American Nurses Association (ANA) created and implemented the first nationally accepted Code of Ethics for Nurses with Interpretive Statements. The Code of Ethics is a living document regularly updated by the ANA and establishes an ethical standard that is non-negotiable for nurses in all roles and settings.
The Code of Ethics provisions outline the nurse's duty to the patient, the healthcare team, the profession, and society. The Code's fundamental principles include advocacy,...
The Code of Ethics provisions outline the nurse's duty to the patient, the healthcare team, the profession, and society. The Code's fundamental principles include advocacy,...
1.5K