Matches in SemOpenAlex for { <https://semopenalex.org/work/W2901842696> ?p ?o ?g. }
Showing items 1 to 76 of
76
with 100 items per page.
- W2901842696 abstract "The National Cybersecurity Center of Excellence (NCCoE), a part of the National Institute of Standards and Technology (NIST), is a collaborative hub where industry organizations, government agencies, and academic institutions work together to address businesses' most pressing cybersecurity challenges. Through this collaboration, the NCCoE applied standards, best practices, and commercially available technologies to develop an example cybersecurity solution for securing wireless infusion pumps in healthcare delivery organizations (HDOs). pumps are the most network-connected medical devices in HDOs [1]. While connecting infusion pumps to clinical systems can improve healthcare delivery processes, this expands the threat landscape, leading to operational or safety risks. Cybersecurity researchers have identified system vulnerabilities in wireless infusion pumps, highlighting ways an attacker may compromise the infusion pump ecosystem (i.e. the ecosystem consisting of the pump, inclusive of drug libraries and other data, as well as the network). Tampering with the wireless infusion pump ecosystem may expose a healthcare provider's enterprise to serious risks, such as (1) a breach of protected health records, (2) changes to prescribed drug dosage, and (3) disruption of healthcare services by malicious actors. For this project, the NCCoE worked with several infusion pump manufacturers and technology and service providers in a collaborative setting. The project included a risk assessment, mapped to industry standard controls, constructed a lab, and applied concepts discussed within a community of interest consisting of the project participants. The NCCoE analyzed ecosystem risk factors by leveraging the NIST Cybersecurity Framework [2]. With assessment results, the project team constructed a laboratory environment that modeled an HDO and developed and implemented a reference architecture that exemplifies how HDOs can use standards-based, commercially available cybersecurity technologies to better protect the ecosystem. As a result of this project, the NCCoE produced a publicly available practical guide, NIST Special Publication (SP) 1800-8, Securing Wireless Pumps [3], to inform HDOs on risks associated with deploying and operating wireless infusion pumps, and how to improve cybersecurity. This NIST SP provides detailed guidance on asset management, threat protection, and vulnerability mitigation. It maps the ecosystem's characteristics to the Health Insurance Portability and Accountability Act Security Rule and established standards, such as the NIST Risk Management Framework and industry-established standards such as IEC 80000-1 (International Electrotechnical Commission documentation on risk mapping and controls application for networked medical devices) [4]. The NCCoE applied a risk-based approach, creating a defense in depth solution, noting identified risks. NIST SP 1800-8 shows how biomedical, network, and cybersecurity engineers and information technology (IT) professionals may configure and deploy wireless infusion pumps, servers, workstations, and network components to reduce cybersecurity risk. NIST SP 1800-8 helps healthcare providers: (1) better understand cybersecurity risk; (2) develop and execute a defense-in-depth strategy; avoiding single points of failure; and (3) implement current cybersecurity standards and reasonable practices by using current, publicly available cybersecurity tools and practices. REFERENCES [1] D. Relgado, Infusion Pump Attacks: Now the unauthorized access is to the circulatory system. 2017. [Online]. Available: https://www.zingbox.com/blog/exposing-vulnerabilities-to-infusion-pumps/ [2] NIST Cybersecurity Framework. 2018. [Online]. Available: https://www.nist.gov/cyberframework [3] NIST Special Publication 1800-8, Securing Wireless Pumps in Healthcare Delivery Organizations. 2018. [Online]. Available: https://www.nccoe.nist.gov/publication/1800-8/ [4] International Electrotechnical Commission ISO/IEC 80000-1. [Online]. Available: https://www.iso.org/obp/ui/#iso:std:iso:80000:-1:ed-1:v1:en" @default.
- W2901842696 created "2018-11-29" @default.
- W2901842696 creator A5022507362 @default.
- W2901842696 creator A5059415041 @default.
- W2901842696 creator A5062356387 @default.
- W2901842696 creator A5064161528 @default.
- W2901842696 creator A5088696311 @default.
- W2901842696 date "2018-09-01" @default.
- W2901842696 modified "2023-09-23" @default.
- W2901842696 title "Securing Wireless Infusion Pumps" @default.
- W2901842696 doi "https://doi.org/10.1109/secdev.2018.00037" @default.
- W2901842696 hasPublicationYear "2018" @default.
- W2901842696 type Work @default.
- W2901842696 sameAs 2901842696 @default.
- W2901842696 citedByCount "2" @default.
- W2901842696 countsByYear W29018426962019 @default.
- W2901842696 countsByYear W29018426962020 @default.
- W2901842696 crossrefType "proceedings-article" @default.
- W2901842696 hasAuthorship W2901842696A5022507362 @default.
- W2901842696 hasAuthorship W2901842696A5059415041 @default.
- W2901842696 hasAuthorship W2901842696A5062356387 @default.
- W2901842696 hasAuthorship W2901842696A5064161528 @default.
- W2901842696 hasAuthorship W2901842696A5088696311 @default.
- W2901842696 hasConcept C112930515 @default.
- W2901842696 hasConcept C126838900 @default.
- W2901842696 hasConcept C138885662 @default.
- W2901842696 hasConcept C144133560 @default.
- W2901842696 hasConcept C160735492 @default.
- W2901842696 hasConcept C162324750 @default.
- W2901842696 hasConcept C2776187130 @default.
- W2901842696 hasConcept C2778137410 @default.
- W2901842696 hasConcept C38652104 @default.
- W2901842696 hasConcept C41008148 @default.
- W2901842696 hasConcept C41895202 @default.
- W2901842696 hasConcept C50522688 @default.
- W2901842696 hasConcept C71924100 @default.
- W2901842696 hasConceptScore W2901842696C112930515 @default.
- W2901842696 hasConceptScore W2901842696C126838900 @default.
- W2901842696 hasConceptScore W2901842696C138885662 @default.
- W2901842696 hasConceptScore W2901842696C144133560 @default.
- W2901842696 hasConceptScore W2901842696C160735492 @default.
- W2901842696 hasConceptScore W2901842696C162324750 @default.
- W2901842696 hasConceptScore W2901842696C2776187130 @default.
- W2901842696 hasConceptScore W2901842696C2778137410 @default.
- W2901842696 hasConceptScore W2901842696C38652104 @default.
- W2901842696 hasConceptScore W2901842696C41008148 @default.
- W2901842696 hasConceptScore W2901842696C41895202 @default.
- W2901842696 hasConceptScore W2901842696C50522688 @default.
- W2901842696 hasConceptScore W2901842696C71924100 @default.
- W2901842696 hasLocation W29018426961 @default.
- W2901842696 hasOpenAccess W2901842696 @default.
- W2901842696 hasPrimaryLocation W29018426961 @default.
- W2901842696 hasRelatedWork W1480956821 @default.
- W2901842696 hasRelatedWork W1782676325 @default.
- W2901842696 hasRelatedWork W1870159328 @default.
- W2901842696 hasRelatedWork W1888195953 @default.
- W2901842696 hasRelatedWork W1975322045 @default.
- W2901842696 hasRelatedWork W2060664321 @default.
- W2901842696 hasRelatedWork W2188077321 @default.
- W2901842696 hasRelatedWork W2531382146 @default.
- W2901842696 hasRelatedWork W2620979699 @default.
- W2901842696 hasRelatedWork W2624218126 @default.
- W2901842696 hasRelatedWork W2624755556 @default.
- W2901842696 hasRelatedWork W2731036771 @default.
- W2901842696 hasRelatedWork W2764065048 @default.
- W2901842696 hasRelatedWork W3005786557 @default.
- W2901842696 hasRelatedWork W3026444438 @default.
- W2901842696 hasRelatedWork W3149802966 @default.
- W2901842696 hasRelatedWork W3196526108 @default.
- W2901842696 hasRelatedWork W383508 @default.
- W2901842696 hasRelatedWork W629265920 @default.
- W2901842696 hasRelatedWork W338589715 @default.
- W2901842696 isParatext "false" @default.
- W2901842696 isRetracted "false" @default.
- W2901842696 magId "2901842696" @default.
- W2901842696 workType "article" @default.