The Medical Science DMZ.
The Medical Science DMZ.
复制标题
DOI：
10.1093/jamia/ocw032
复制
发表时间：
2016-11
期刊：
影响因子：
--
通讯作者：
Tierney B
中科院分区：
文献类型：
--
作者：
Peisert S;Barnett W;Dart E;Cuff J;Grossman RL;Balas E;Berman A;Shankar A;Tierney B
我们描述了在科学、医疗环境中维护高容量、数据密集型网络流（例如，10,40,100 Gbps+）同时仍遵守安全和隐私法律法规的用例和制度参考架构。材料与方法高端网络，包过滤防火墙，网络入侵检测系统。我们将“医学科学DMZ”概念描述为通过国家研究网络在研究机构之间安全、大量传输大型敏感数据集的一种选择。“组学”数据的指数级增长，高质量影像的快速增长，以及其他快速增长的临床数据集，导致了生物医学研究“大数据”的兴起。处理这些数据并将其集成到患者诊断和治疗中所需的存储、分析和网络资源的规模已经扩大到使学术医疗中心的能力不堪重负。一些数据不是在本地生成的，也不能在本地维持，共享的数据存储库（如由国家医学图书馆、国家癌症研究所和欧洲生物信息学研究所等国际合作伙伴提供的数据存储库）正在迅速增长。因此，使用这些数据存储和计算的能力必须通过交换大型数据集的本地、国家和行业资源的组合来解决。维护符合HIPAA和其他法规的数据密集型流对生物医学研究提出了新的挑战。认识到这一点，我们通过借鉴和重新定义“科学DMZ”的概念来描述一种结合性能和安全性的策略，“科学DMZ”是物理科学和工程研究中用于管理高容量数据流的框架。通过实施Medical Science DMZ架构，生物医学研究人员可以利用高性能计算机和云存储设施以及国家高速研究网络提供的规模，同时保护隐私并满足监管要求。
Objective We describe use cases and an institutional reference architecture for maintaining high-capacity, data-intensive network flows (e.g., 10, 40, 100 Gbps+) in a scientific, medical context while still adhering to security and privacy laws and regulations. Materials and Methods High-end networking, packet filter firewalls, network intrusion detection systems. Results We describe a “Medical Science DMZ” concept as an option for secure, high-volume transport of large, sensitive data sets between research institutions over national research networks. Discussion The exponentially increasing amounts of “omics” data, the rapid increase of high-quality imaging, and other rapidly growing clinical data sets have resulted in the rise of biomedical research “big data.” The storage, analysis, and network resources required to process these data and integrate them into patient diagnoses and treatments have grown to scales that strain the capabilities of academic health centers. Some data are not generated locally and cannot be sustained locally, and shared data repositories such as those provided by the National Library of Medicine, the National Cancer Institute, and international partners such as the European Bioinformatics Institute are rapidly growing. The ability to store and compute using these data must therefore be addressed by a combination of local, national, and industry resources that exchange large data sets. Maintaining data-intensive flows that comply with HIPAA and other regulations presents a new challenge for biomedical research. Recognizing this, we describe a strategy that marries performance and security by borrowing from and redefining the concept of a “Science DMZ”—a framework that is used in physical sciences and engineering research to manage high-capacity data flows. Conclusion By implementing a Medical Science DMZ architecture, biomedical researchers can leverage the scale provided by high-performance computer and cloud storage facilities and national high-speed research networks while preserving privacy and meeting regulatory requirements.
DOI：
10.1016/s1389-1286(99)00112-7
发表时间：
1999-12-14
期刊：
COMPUTER NETWORKS-THE INTERNATIONAL JOURNAL OF COMPUTER AND TELECOMMUNICATIONS NETWORKING
影响因子：
--
作者：
Paxson, V
通讯作者：
Paxson, V