Formal reliability analysis of Device Interoperability Middleware (DIM) based E-health system using PRISM

Pervez, Usman; Mahmood, Asiah; Hasan, Osman; Latif, Khalid; Gawanmeh, Amjad

doi:10.1109/healthcom.2015.7454482

Cited by 12 publications

(9 citation statements)

References 26 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…The proposed approach provides more accurate results than traditional counterparts due to the exhaustive exploration of a state-based model of the DIM based medical system and allow the designers to find the failures and weaknesses in the underlying system and to make appropriate measures on the basis of these results, in order to make the system more reliable. In addition, this works extend our previous work in [39] by providing reliability improvement strategies based on probabilistic analysis method conducted in this work. The presented strategies are expected to enhance the probability of success for several workfow operations.…”

supporting

confidence: 52%

Improvement Strategies for Device Interoperability Middleware using Formal Reliability Analysis

Pervez¹,

Mahmood²,

Hasan³

et al. 2016

SCPE

Self Cite

View full text Add to dashboard Cite

Ensuring the correctness of middleware that ensures interoperability of various medical devices is one of the biggest challenges in the e-health domain. Traditionally, these Device Interoperability Middleware (DIM) are analyzed using software testing. However, given the inherent incompleteness of testing and the randomness of the user behaviours, the analysis results are not guaranteed to be accurate. Some of these inaccuracies in analysis results could even put human life at risk. In order to overcome these limitations, we propose to use a probabilistic model checker PRISM for analyzing DIM. The proposed approach allows us to rigorously verify reliability properties of the given DIM and thus allows the designers to make appropriate measures to design more reliable systems. For illustration, we formally analyze a middleware that uses the HL7 FHIR and ontology-based description of the devices and a communication protocol to bridge the gap in heterogeneity for dealing with different vendors and incompatible data formats.

show abstract

supporting

confidence: 52%

Improvement Strategies for Device Interoperability Middleware using Formal Reliability Analysis

Pervez¹,

Mahmood²,

Hasan³

et al. 2016

SCPE

Self Cite

View full text Add to dashboard Cite

show abstract

“…Ten Teije et al and Groot et al propose a model of medical protocol and verify whether the overall process is correct or not. Pulse oximeter is modeled in Carneiro et al and verified in Carneiro et al and Cordeiro et al models() of medical device connections are verified () and validated. () Modelling and verification techniques are applied to imatinib dose in Simalatsar et al() Model validation, model verification, and modeling activities are performed for left ventricular assist device .…”

Section: Classification and Analysismentioning

confidence: 99%

A systematic literature review of the use of formal methods in medical software systems

Bonfanti

Gargantini

Mashkoor

2018

J Software Evolu Process

View full text Add to dashboard Cite

The use of formal methods is often recommended to guarantee the provision of necessary services and to assess the correctness of critical properties, such as functional safety, cybersecurity, and reliability, in medical and health care devices. In the past, several formal and rigorous methods have been proposed and consequently applied for trustworthy development of medical software and systems. In this paper, we perform a systematic literature review on the available state of the art in this domain. We collect the relevant literature on the use of formal methods for modeling, design, development, verification, and validation of software-intensive medical systems. We apply standard systematic literature review techniques and run several queries in well-known repositories to obtain information that can be useful for people who are either already working in this field or planning to start. Our study covers both quantitative and qualitative aspects of the subject. KEYWORDSformal methods, systematic literature review, medical device software INTRODUCTIONIn modern medical devices, human safety depends upon the correct operation of software controlling the device: Software malfunctioning can cause injuries to, or even the death of, patients. A crucial issue is how to guarantee that medical software has all the qualities (eg, safety, security, and dependability) expected for critical components. One way to improve and assess software quality, as suggested by literature, 1-3 is to use formal methods or in general rigorous methods for design, validation, and verification of medical software. Some processes for improvement of medical standards, based on formal approaches, have already been proposed, 4-6 although their adoption in industrial applications is rather limited.The overall aim of this paper is twofold: (1) to provide guidance to researchers starting to work on this topic and (2) to assess the state of the art that is more useful for researchers already working on this subject. We have applied a systematic literature review (SLR) process to the topic of rigorous methods for designing and validation of medical software and systems by following the guidelines presented in literature 7-9 with slight improvements such as a wider range of repositories is queried for information retrieval and the subject is covered from both quantitative and qualitative aspects. Through this analysis, we give an overview of the research literature about formal methods applications to model, to verify, and to validate medical systems. Moreover, we include processes and tools that translate models written using formal languages in machine code. We would like to underline that the SLR carried out in this work considers only formal methods applied to medical device/software. Other processes applied to medical device/software are outside of our goal (eg, code implementation, testing, 8 and hardware configuration).The goals of our SLR are (1) to gather a sufficient number of relevant articles, (2) to perform a series of analyses, and (3) to p...

show abstract

“…For instance, Marzini et al[23] make use of the cloud elasticity to manage basic activities in healthcare scenarios. On the other hand, the usage of cloud computing for medical environments raises several issues such as reliability and security.Regarding the reliability issue, Gawanmeh et al [14] present a state of the art review on the verification of reliability in healthcare systems using either simulation-based verification, formal methods such as automata and prism [28,29], or semi-formal methods. In the work presented in this paper, we focus on the formal verification of the security aspect, especially access control.Access control protects the system's resources against unauthorized access via a set of policies.…”

mentioning

confidence: 99%

“…Regarding the reliability issue, Gawanmeh et al [14] present a state of the art review on the verification of reliability in healthcare systems using either simulation-based verification, formal methods such as automata and prism [28,29], or semi-formal methods. In the work presented in this paper, we focus on the formal verification of the security aspect, especially access control.…”

mentioning

confidence: 99%

Analysis and Verification of XACML Policies in a Medical Cloud Environment

Ayache¹,

Erradi²,

Khoumsi³

et al. 2016

SCPE

View full text Add to dashboard Cite

The connectivity of devices, machines and people via Cloud infrastructure can support collaborations among doctors and specialists from different medical organisations. Such collaborations may lead to data sharing and joint tasks and activities. Hence, the collaborating organisations are responsible for managing and protecting data they share. Therefore, they should define a set of access control policies regulating the exchange of data they own. However, existing Cloud services do not offer tools to analyse these policies. In this paper, we propose a Cloud Policy Verification Service (CPVS ) for the analysis and the verification of access control policies specified using XACML. The analysis process detects anomalies at two policy levels: a) intra-policy: detects discrepancies between rules within a single security policy (conflicting rules and redundancies), and b) interpolicies: detects anomalies between several security policies such as inconsistency and similarity. The verification process consists in verifying the completeness property which guarantees that each access request is either accepted or denied by the access control policy. In order to demonstrate the efficiency of our method, we also provide the time and space complexities. Finally, we present the implementation of our method and demonstrate how efficiently our approach can detect policy anomalies. . Related Work. In a collaborative healthcare process, doctors and specialists from different medical organisations share patient's data in order to make a better diagnosis. Due to the current Big data exponential data growth, solutions that store, process [10] and manage medical data are of a great interest. In this direction, cloud computing represents a cost-effective solution for such needs [1,2]. For instance, Marzini et al.[23] make use of the cloud elasticity to manage basic activities in healthcare scenarios. On the other hand, the usage of cloud computing for medical environments raises several issues such as reliability and security.Regarding the reliability issue, Gawanmeh et al. [14] present a state of the art review on the verification of reliability in healthcare systems using either simulation-based verification, formal methods such as automata and prism [28,29], or semi-formal methods. In the work presented in this paper, we focus on the formal verification of the security aspect, especially access control.Access control protects the system's resources against unauthorized access via a set of policies. Jansen [18] proposed XACML as a policy specification language for cloud applications. Yet, XACML policies may contain conflicting and redundant rules, since XACML policies are sometimes managed by more than one administrator [16]. Moreover, in collaborative applications, the XACML policies are aggregated from collaborative parties which may raise conflicts between rules in different policies.Several works make use of verification techniques such as model checking in order to detect XACML policy anomalies. For instance, to detect conflicts...

show abstract

Formal reliability analysis of Device Interoperability Middleware (DIM) based E-health system using PRISM

Cited by 12 publications

References 26 publications

Improvement Strategies for Device Interoperability Middleware using Formal Reliability Analysis

Improvement Strategies for Device Interoperability Middleware using Formal Reliability Analysis

A systematic literature review of the use of formal methods in medical software systems

Analysis and Verification of XACML Policies in a Medical Cloud Environment

Contact Info

Product

Resources

About