Medical Device Safety Management Using Cybersecurity Risk Analysis
| Autor: | Keun Hee Han, Dong Won Kim, Jin-Young Choi |
|---|---|
| Rok vydání: | 2020 |
| Předmět: |
Risk analysis
General Computer Science Computer science Reliability (computer networking) cybercare 02 engineering and technology Computer security computer.software_genre Risk analysis (business) SAFER 0202 electrical engineering electronic engineering information engineering security management General Materials Science Security management 020208 electrical & electronic engineering General Engineering Medical equipment management 020206 networking & telecommunications Biomedical equipment Risk analysis (engineering) Information and Communications Technology Threat model lcsh:Electrical engineering. Electronics. Nuclear engineering Risk assessment lcsh:TK1-9971 computer |
| Zdroj: | IEEE Access, Vol 8, Pp 115370-115382 (2020) |
| ISSN: | 2169-3536 |
| DOI: | 10.1109/access.2020.3003032 |
| Popis: | Hospital biomedical engineering teams are responsible for establishing and regulating medical equipment management programs (MEMPs); these programs ensure the safety and reliability of medical devices. Concomitant with rapid technological advancements, medical devices have been developed that are now being integrated with information and communication technology. However, with the convergence of such diverse technologies, internal and external security threats are continuously increasing. Thus, to reduce medical device security threats, important devices must be identified and prioritized. In this study, we propose a multicriteria decision-making model that prioritizes medical devices by extending the Fennigkoh and Smith model to include security threats. First, we formulate criteria for evaluating medical device functions based on the classification of the medical devices according to their unique functions, connections, and data types. Then, through threat modeling, we develop a method of identifying and evaluating security threats to these devices. We discuss establishing a safer MEMP by analyzing the attack occurrence probability (AOP) and attack success probability (ASP) of medical devices and the inherent security threats that these devices face, none of which are considered in the existing model. Thus, by using the enhanced Fennigkoh and Smith model, our proposed approach enables the development of improved security-enhanced MEMPs, including cybersecurity risk assessments. |
| Databáze: | OpenAIRE |
| Externí odkaz: |
|