MedDevRisk: Risk Analysis Methodology for Networked Medical Devices

dc.contributor.authorSeale, Katherine
dc.contributor.authorMcDonald, Jeffrey
dc.contributor.authorGlisson, William
dc.contributor.authorPardue, Harold
dc.contributor.authorJacobs, Michael
dc.date.accessioned2017-12-28T01:49:55Z
dc.date.available2017-12-28T01:49:55Z
dc.date.issued2018-01-03
dc.description.abstractThe prolific integration of technology into medical environments is continuously generating new attack vectors. This continuous amalgamation of technology into the medical field prompted the idea that risk assessment models can be utilized to identify cyber security vulnerabilities in medical settings. This research presents an initial investigation into the application of risk assessment frame works, i.e., STRIDE, Common Vulnerabilities and Exposures, and a Common Vulnerability Scoring System to identified networked medical devices that are currently employed in an operational medical simulation lab. The contribution of this research is twofold and culminates in a novel proof-of-concept system known as MedDevRisk. First, it demonstrates an approach to incorporating existing threat models into a relational database schema based on Threat-Vulnerability-Asset (TVA) relationships. Second, it provides an initial empirical analysis of the risk associated with networked medical devices along with providing the foundation for future research.
dc.format.extent10 pages
dc.identifier.doi10.24251/HICSS.2018.414
dc.identifier.isbn978-0-9981331-1-9
dc.identifier.urihttp://hdl.handle.net/10125/50302
dc.language.isoeng
dc.relation.ispartofProceedings of the 51st Hawaii International Conference on System Sciences
dc.rightsAttribution-NonCommercial-NoDerivatives 4.0 International
dc.rights.urihttps://creativecommons.org/licenses/by-nc-nd/4.0/
dc.subjectSecurity and Privacy Challenges for Healthcare
dc.subjectRisk assessment, medical devices, health IT, vulnerabilities, threats
dc.titleMedDevRisk: Risk Analysis Methodology for Networked Medical Devices
dc.typeConference Paper
dc.type.dcmiText

Files

Original bundle
Now showing 1 - 1 of 1
Loading...
Thumbnail Image
Name:
paper0415.pdf
Size:
925.05 KB
Format:
Adobe Portable Document Format