Data Loss Prevention Management and Control: Inside Activity Incident Monitoring, Identification, and Tracking in Healthcare Enterprise Environments
Data Loss Prevention Management and Control: Inside Activity Incident Monitoring, Identification, and Tracking in Healthcare Enterprise Environments
复制标题
数据丢失预防管理和控制：医疗保健企业环境中的内部活动事件监控、识别和跟踪
DOI：
--
复制
发表时间：
2015
期刊：
影响因子：
--
通讯作者：
Manghui Tu
中科院分区：
文献类型：
--
作者：
Manghui Tu
随着医疗保健数据被推到网上，消费者对个人信息泄露提出了极大的担忧。法律和法规要求企业和公共组织有义务采取行动防止数据泄露。在各种威胁中，内部威胁已被确定为数据丢失的主要威胁。因此，迫切需要有效的机制来控制数据丢失的内部威胁。本研究的目的是解决医疗保健企业环境中的数据丢失预防挑战。首先，提供了一种新的方法来建模内部威胁，特别是内部活动。通过内部活动建模，正式描述和识别数据丢失路径和威胁向量。然后，在医疗保健企业环境中调查了威胁向量和潜在的数据丢失路径。已列举了威胁向量，并收集了一些威胁向量的数据丢失统计数据。在此之后，数据丢失的预防和内部活动事件的识别，跟踪和重建的问题进行了讨论。最后，内部活动的证据被建模为证据树，为内部活动的识别和重构提供指导。
As healthcare data are pushed online, consumers have raised big concerns on the breach of their personal information. Law and regulations have placed businesses and public organizations under obligations to take actions to prevent data breach. Among various threats, insider threats have been identified to be a major threat on data loss. Thus , effective mechanisms to control insider threats on data loss are urgently needed. The objective of this research is to address data loss prevention challenges in healthcare enterprise environment. First, a novel approach is provided to model internal threat, specifically inside activities. With inside activities modeling, data loss paths and threat vectors are formally described and identified. Then, threat vectors and potential data loss paths have been investigated in a healthcare enterprise environment. Threat vectors have been enumerated and data loss statistics data for some threat vectors have been collected. After that, issues on data loss prevention and inside activity incident identification, tracking, and reconstruction are discussed. Finally, evidences of inside activities are modeled as evidence trees to provide guidance for inside activity identification and reconstruction.