Security assessment of information system in hospital environment

Suratose Tritilanunt; Ruaysungnoen Surapol

doi:10.1145/3033288.3033296

Security assessment of information system in hospital environment

Suratose Tritilanunt
, Ruaysungnoen Surapol

Department of Computer Engineering

Mahidol University

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

4 Citations (Scopus)

Abstract

The purpose of this paper is to propose the risk assessment for an IT security system used in a hospital. The process is developed based on the study of standard and best practices of security risk assessment used in information system. The security assessment includes key processes such as Risk Assessment and Vulnerability Verification along with other factors for supporting the development. Results from the experiment at sample hospitals, our tool was able to assess and rate the security risk which reflects the environment of the hospital's information system. This tool was able to simulate some examples of exploitation in order to test system flaws and generate a report to be used as a reference.

Original language	English
Title of host publication	Proceedings of 2016 5th International Conference on Network, Communication and Computing, ICNCC 2016
Publisher	Association for Computing Machinery
Pages	11-16
Number of pages	6
ISBN (Electronic)	9781450347938
DOIs	https://doi.org/10.1145/3033288.3033296
Publication status	Published - 17 Dec 2016
Event	5th International Conference on Network, Communication and Computing, ICNCC 2016 - Kyoto, Japan Duration: 17 Dec 2016 → 21 Dec 2016

Publication series

Name	ACM International Conference Proceeding Series

Conference

Conference	5th International Conference on Network, Communication and Computing, ICNCC 2016
Country/Territory	Japan
City	Kyoto
Period	17/12/16 → 21/12/16

Keywords

Hospital Information Security
Security risk assessment

Access to Document

10.1145/3033288.3033296

Cite this

@inproceedings{af84e109bf5e407f9d6014220f17045d,

title = "Security assessment of information system in hospital environment",

abstract = "The purpose of this paper is to propose the risk assessment for an IT security system used in a hospital. The process is developed based on the study of standard and best practices of security risk assessment used in information system. The security assessment includes key processes such as Risk Assessment and Vulnerability Verification along with other factors for supporting the development. Results from the experiment at sample hospitals, our tool was able to assess and rate the security risk which reflects the environment of the hospital's information system. This tool was able to simulate some examples of exploitation in order to test system flaws and generate a report to be used as a reference.",

keywords = "Hospital Information Security, Security risk assessment",

author = "Suratose Tritilanunt and Ruaysungnoen Surapol",

note = "Publisher Copyright: {\textcopyright} 2016 ACM.; 5th International Conference on Network, Communication and Computing, ICNCC 2016 ; Conference date: 17-12-2016 Through 21-12-2016",

year = "2016",

month = dec,

day = "17",

doi = "10.1145/3033288.3033296",

language = "English",

series = "ACM International Conference Proceeding Series",

publisher = "Association for Computing Machinery",

pages = "11--16",

booktitle = "Proceedings of 2016 5th International Conference on Network, Communication and Computing, ICNCC 2016",

}

Tritilanunt, S & Surapol, R 2016, Security assessment of information system in hospital environment. in Proceedings of 2016 5th International Conference on Network, Communication and Computing, ICNCC 2016. ACM International Conference Proceeding Series, Association for Computing Machinery, pp. 11-16, 5th International Conference on Network, Communication and Computing, ICNCC 2016, Kyoto, Japan, 17/12/16. https://doi.org/10.1145/3033288.3033296

Security assessment of information system in hospital environment. / Tritilanunt, Suratose; Surapol, Ruaysungnoen.
Proceedings of 2016 5th International Conference on Network, Communication and Computing, ICNCC 2016. Association for Computing Machinery, 2016. p. 11-16 (ACM International Conference Proceeding Series).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

TY - GEN

T1 - Security assessment of information system in hospital environment

AU - Tritilanunt, Suratose

AU - Surapol, Ruaysungnoen

PY - 2016/12/17

Y1 - 2016/12/17

N2 - The purpose of this paper is to propose the risk assessment for an IT security system used in a hospital. The process is developed based on the study of standard and best practices of security risk assessment used in information system. The security assessment includes key processes such as Risk Assessment and Vulnerability Verification along with other factors for supporting the development. Results from the experiment at sample hospitals, our tool was able to assess and rate the security risk which reflects the environment of the hospital's information system. This tool was able to simulate some examples of exploitation in order to test system flaws and generate a report to be used as a reference.

AB - The purpose of this paper is to propose the risk assessment for an IT security system used in a hospital. The process is developed based on the study of standard and best practices of security risk assessment used in information system. The security assessment includes key processes such as Risk Assessment and Vulnerability Verification along with other factors for supporting the development. Results from the experiment at sample hospitals, our tool was able to assess and rate the security risk which reflects the environment of the hospital's information system. This tool was able to simulate some examples of exploitation in order to test system flaws and generate a report to be used as a reference.

KW - Hospital Information Security

KW - Security risk assessment

UR - https://www.scopus.com/pages/publications/85018302962

U2 - 10.1145/3033288.3033296

DO - 10.1145/3033288.3033296

M3 - Conference contribution

AN - SCOPUS:85018302962

T3 - ACM International Conference Proceeding Series

SP - 11

EP - 16

BT - Proceedings of 2016 5th International Conference on Network, Communication and Computing, ICNCC 2016

PB - Association for Computing Machinery

T2 - 5th International Conference on Network, Communication and Computing, ICNCC 2016

Y2 - 17 December 2016 through 21 December 2016

ER -

Security assessment of information system in hospital environment

Abstract

Publication series

Conference

Keywords

Access to Document

Other files and links

Fingerprint

Cite this