Continuous Security through Integration Testing in an Electronic Health Records System

Purkayastha, Saptarshi; Goyal, Siddharth; Phillips, Tyler; Wu, Huanmei; Haakenson, Brandon; Zou, Xukai

doi:10.1109/icssa51305.2020.00012

Cited by 6 publications

(2 citation statements)

References 22 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Hence the SUT for the current study should also come from the medical domain. Although Open-MRS was not examined by Austin et al, OpenMRS has also been used in other research on software testing and security analysis [97,82]. The security of medical records systems is, if anything, a more important issue in 2021 than in 2011, with healthcare systems being an increasingly popular target for hackers [83,98,16,9].…”

Section: Why Openmrs?mentioning

confidence: 99%

Do I really need all this work to find vulnerabilities? An empirical case study comparing vulnerability detection techniques on a Java application

Elder¹,

Zahan²,

Shu³

et al. 2022

Preprint

View full text Add to dashboard Cite

Context: Applying vulnerability detection techniques is one of many tasks using the limited resources of a software project. Objective: The goal of this research is to assist managers and other decisionmakers in making informed choices about the use of software vulnerability detection techniques through an empirical study of the efficiency and effectiveness of four techniques on a Java-based web application. Method: We apply four different categories of vulnerability detection techniques -systematic manual penetration testing (SMPT), exploratory manual penetration testing (EMPT), dynamic application security testing (DAST), and static application security testing (SAST) -to an open-source medical records system. Results:We found the most vulnerabilities using SAST. However, EMPT found more severe vulnerabilities. With each technique, we found unique vulnerabilities not found using the other techniques. The efficiency of manual techniques (EMPT, SMPT) was comparable to or better than the efficiency of automated techniques (DAST, SAST) in terms of Vulnerabilities per Hour (VpH). Conclusions: The vulnerability detection technique practitioners should select may vary based on the goals and available resources of the project. If the goal of an organization is to find "all" vulnerabilities in a project, they need to use as many techniques as their resources allow.

show abstract

Section: Why Openmrs?mentioning

confidence: 99%

Do I really need all this work to find vulnerabilities? An empirical case study comparing vulnerability detection techniques on a Java application

Elder¹,

Zahan²,

Shu³

et al. 2022

Preprint

View full text Add to dashboard Cite

show abstract

“…and Park (2013), access to electronic records captured on computer systems can be reliably and securely controlled through file encryption, identifying pin and username, and security audit log. Furthermore, access control mechanisms such as fingerprint scanners, voice recognition and identification, and eye scanners restrict user access to electronic records(Mir & Banday 2012;Hathaliya, Tanwar & Evans 2020;Purkayastha, Goyal, Oluwalade, Phillips, Wu & Zou 2021).…”

mentioning

confidence: 99%

Management of electronic records to support judicial systems at Temba Magistrates’ Court in the North West Province of South Africa

Teffo,

Chuma

2023

J. South Afr. Soc. Archiv.

View full text Add to dashboard Cite

The management of electronic records has been a burning issue in many sectors, particularly the justice sector. Criminal justice institutions, such as courts and ministries of justice, suffer from inadequate management of court records, which undermines the legal and judicial systems. South African courts are overburdened with backlogs, delays, and corruption due to poor electronic record management. The dysfunctional management of electronic records has led to poor service delivery and justice for citizens. These concerns provided the impetus for research to assess the management of electronic records at Temba Magistrates’ Court in the North West Province of South Africa. To achieve the stated aim, the study adopted a qualitative approach through a case study design. Data were collected by conducting interviews with purposely selected records officers, a records manager, registry clerks and document controllers. The findings of the study indicated that Temba Magistrates’ Court has put in place relevant legislation and policies for managing electronic records. The study findings showed that staff are not complying with records management policy. The major findings of the study revealed that the Temba Magistrates’ Court has experienced unforeseen consequences, including a backlog of cases, challenges of data storage, loss, and misplacement of electronic court records resulting from poor records management practices. The study concluded with recommendations for the need to motivate and encourage staff members to adhere to the records management policy. The study also revealed the need to adopt multifactor authentication mechanisms such as biometrics, passwords, and fingerprints to reduce or prevent unauthorised access to electronic court records. A comprehensive records management programme should be developed and implemented. It is concluded that staff members working at Temba Magistrates’ Court should be suitably trained in all aspects of electronic court management.

show abstract

A Method Based on Behavior Driven Development (BDD) and System-Theoretic Process Analysis (STPA) for Verifying Security Requirements in Critical Software Systems

Rubatino,

Nogueira,

de Souza

et al. 2024

Advances in Intelligent Systems and Computing

View full text Add to dashboard Cite

Continuous Security through Integration Testing in an Electronic Health Records System

Cited by 6 publications

References 22 publications

Do I really need all this work to find vulnerabilities? An empirical case study comparing vulnerability detection techniques on a Java application

Do I really need all this work to find vulnerabilities? An empirical case study comparing vulnerability detection techniques on a Java application

Management of electronic records to support judicial systems at Temba Magistrates’ Court in the North West Province of South Africa

A Method Based on Behavior Driven Development (BDD) and System-Theoretic Process Analysis (STPA) for Verifying Security Requirements in Critical Software Systems

Contact Info

Product

Resources

About