Information security and privacy in healthcare: current state of research

Appari, Ajit; Johnson, M. Eric

doi:10.1504/ijiem.2010.035624

Cited by 304 publications

(173 citation statements)

References 136 publications

Supporting

Mentioning

151

Contrasting

Unclassified

Order By: Relevance

“…Finally, health-care providers and insurers must enact better monitoring and information controls to detect and stop leaks (Appari and Johnson 2009). Information access within many health-care systems is lax.…”

Section: Resultsmentioning

confidence: 99%

Data Hemorrhages in the Health-Care Sector

Johnson

2009

Financial Cryptography and Data Security

Self Cite

View full text Add to dashboard Cite

Abstract. Confidential data hemorrhaging from health-care providers pose financial risks to firms and medical risks to patients. We examine the consequences of data hemorrhages including privacy violations, medical fraud, financial identity theft, and medical identity theft. We also examine the types and sources of data hemorrhages, focusing on inadvertent disclosures. Through an analysis of leaked files, we examine data hemorrhages stemming from inadvertent disclosures on internet-based file sharing networks. We characterize the security risk for a group of health-care organizations using a direct analysis of leaked files. These files contained highly sensitive medical and personal information that could be maliciously exploited by criminals seeking to commit medical and financial identity theft. We also present evidence of the threat by examining user-issued searches. Our analysis demonstrates both the substantial threat and vulnerability for the health-care sector and the unique complexity exhibited by the US health-care system.

show abstract

Section: Resultsmentioning

confidence: 99%

Data Hemorrhages in the Health-Care Sector

Johnson

2009

Financial Cryptography and Data Security

Self Cite

View full text Add to dashboard Cite

show abstract

“…This contention is supported by the results of several studies [2], [7], [8], including an empirical study of record access logs of eight Norwegian hospitals by Røstad et al, [9], [3] which suggests that classical RBAC is unduly restrictive for healthcare. Røstad et al report that clinicians' use of an exception handling mechanism that can override access requests denied by the static RBAC policy (i.e., if staff decide such information is necessary) is widespread.…”

Section: Introductionmentioning

confidence: 88%

An Approach to Access Control under Uncertainty

Salim

Reid

Dawson

et al. 2011

2011 Sixth International Conference on Availability, Reliability and Security

View full text Add to dashboard Cite

Abstract-In dynamic and uncertain environments such as healthcare, where the needs of security and information availability are difficult to balance, an access control approach based on a static policy will be suboptimal regardless of how comprehensive it is. The uncertainty stems from the unpredictability of users' operational needs as well as their private incentives to misuse permissions. In Role Based Access Control (RBAC), a user's legitimate access request may be denied because its need has not been anticipated by the security administrator. Alternatively, even when the policy is correctly specified an authorised user may accidentally or intentionally misuse the granted permission. This paper introduces a novel approach to access control under uncertainty and presents it in the context of RBAC. By taking insights from the field of economics, in particular the insurance literature, we propose a formal model where the value of resources are explicitly defined and an RBAC policy (entailing those predictable access needs) is only used as a reference point to determine the price each user has to pay for access, as opposed to representing hard and fast rules that are always rigidly applied.

show abstract

“…Similarly, Coye et al (2009) explore sensor-driven business model innovation in the healthcare sector, where remote patient management processes have shifted roles and responsibilities between traditional providers (i.e., hospitals), non-clinician providers, and patients themselves. Appari and Johnson (2010) suggest that sensors might lead to reduce investments for emergency departments and skilled nurses facilities, while investments in business continuity and information security are becoming key assets.…”

Section: Novel Business Models and Their Impact To Societymentioning

confidence: 99%

The Light and Dark Side of The Black Box: Sensor-Based Technology in the Automotive Industry

Marabelli¹,

Hansen²,

Newell³

et al. 2017

CAIS

View full text Add to dashboard Cite

Abstract:Diverse aspects of our everyday lives increasingly feature sensor-based technologies. Despite the importance of understanding how business and consumers exploit and adopt these technologies, the information systems (IS) community has thus far devoted relatively little attention to the topic. Accordingly, in this paper, we foster an exploration of the issue among IS scholars by focusing on the emergent use of sensor-based technologies in the automotive insurance industry. Insurance providers have increasingly begun to turn to such technologies to gain competitive advantage around risk assessment and behavior-based pricing. To investigate this phenomenon, we consider the experiences of two organizations operating distinct national contexts: Progressive Insurance (US) and Generali (Italy). These two insurance providers have been first movers in adopting sensor-based technologies for risk assessment and policy pricing. First, we highlight the key similarities and differences between the cases with regard to the technologies adopted, business models pursued, and anticipated benefits and pitfalls for the companies and their consumers. Second, in a more holistic way, we discuss the implications and unintended consequences of sensorbased technologies in the automotive insurance industry. We formulate several research questions that provide opportunities and encourage more research in this emerging area of study.

show abstract

Information security and privacy in healthcare: current state of research

Cited by 304 publications

References 136 publications

Data Hemorrhages in the Health-Care Sector

Data Hemorrhages in the Health-Care Sector

An Approach to Access Control under Uncertainty

The Light and Dark Side of The Black Box: Sensor-Based Technology in the Automotive Industry

Contact Info

Product

Resources

About