Security aspects of e-Health systems migration to the cloud

Abstract

Abstract-As adoption of e-health solutions advances, new computing paradigms -such as cloud computing -bring the potential to improve efficiency in managing medical health records and help reduce costs. However, these opportunities introduce new security risks which can not be ignored. Based on our experience with deploying part of the Swedish electronic health records management system in an infrastructure cloud, we make an overview of major requirements that must be considered when migrating e-health systems to the cloud. Furthermore, we describe in-depth a new attack vector inherent to cloud deployments and present a novel data confidentiality and integrity protection mechanism for infrastructure clouds. This contribution aims to encourage exchange of best practices and lessons learned in migrating public e-health systems to the cloud.

A survey on design and implementation of protected searchable data in the cloud

“…While cloud computing has exploded in popularity in recent years thanks to the potential efficiency and cost savings of outsourcing the management of data and applications, a number of vulnerabilities that led to various attacks have left many potential users worried [15]. As a result, experts in the field argued that 120 new technologies are needed in order to create trusted cloud services [16,17] services that will eventually eradicate the suspicion of users for cloud computing by providing the necessary security guarantees.…”

PaaSword: A Holistic Data Privacy and Security by Design Framework for Cloud Services

“…First, we present a list of core security requirements and challenges that must be considered when migrating to a cloud environment. These security requirements were derived based on our experience with migrating existing applications to a private Infrastructure-as-aService (IaaS) cloud [30]. We extend this guide by discussing important attack vector characteristics for cloud environments that will pave the way for providing tighter security when building cloud services.…”

A New Conceptual Framework Modelling for Cloud Computing Risk Management in Banking Organizations

“…However, organizations that work with sensitive data, such as health records, require complete control over the physical storage location and data access. As a result, storing sensitive data in the cloud complicates adherence to regulatory compliance laws, since such data may fall under different regulations depending on where it is physically stored [80]. Governance is a set of activities that are conducted to execute strategy, proper implementation of policies and procedures, relation between policies, assessing policies in practice, assessing and updating policies and providing frameworks to observe regulations in an organization [48].…”