TWC: Small: Physiological Information Leakage: A New Front on Health Information Security

随着植入式和可穿戴式医疗设备的使用越来越多，这些设备的信息安全已经成为一个主要问题。这一领域的先前工作主要集中在对这些设备之间的无线通信信道和存储在在线数据库中的健康数据的攻击上。拟议的工作是从这条线的研究出发，是出于声学和电磁生理信息泄漏的医疗设备。 这种类型的信息泄露也可能直接发生在人体上，从而引发隐私问题。该提案将调查来自医疗设备和身体本身的生理信息，并找到针对这种形式的信息泄漏的对策。这项研究将伴随着结果的快速传播，在网络上放置软件工具供其他研究人员利用，并将新发现的材料纳入PI教授的课程中。除研究生外，本科生和高中生也将参与这项研究，重点是来自代表性不足群体的学生的参与。该提案通过针对人体因器官正常运作而不断发出的生理信号，调查对人体健康的隐私攻击。以及从可植入和可穿戴医疗设备发出的信号。它还将调查元数据（通信频率、连续传输之间的时间、通信协议、数据包大小、检测范围、调制协议等）。从这些设备中收集数据，看看它们是如何泄露重要的健康信息的。最后，将制定防止这些设备泄露健康信息的对策。随后将对人类心脏、肺、皮肤、胰岛素泵和血压监测仪等设备的数据泄漏进行全面评估。

With the growing use of implantable and wearable medical devices, information security for such devices has become a major concern. Prior work in this area mostly focuses on attacks on the wireless communication channel among these devices and health data stored in online databases. The proposed work is a departure from this line of research and is motivated by acoustic and electromagnetic physiological information leakage from the medical devices. This type of information leakage can also directly occur from the human body, thus raising privacy concerns. This proposal will investigate physiological information from both the medical devices and the body itself and find countermeasures against this form of information leakage. This research will be accompanied with rapid dissemination of results, placement of software tools on the web for other researchers to take advantage of, and inclusion of the newly discovered material in a course that the PI teaches. In addition to graduate students, undergraduates and high school students will also take part in this research, with emphasis on participation by students from underrepresented groups.This proposal investigates privacy attacks on human health by targeting physiological signals that continuously emanate from the human body due to the normal functioning of its organs., as well as the signals that emanate from implantable and wearable medical devices. It will also investigate metadata (frequency of communication, time between consecutive transmissions, communication protocol, packet size, detection range, modulation protocol, etc.) collected from such devices to see how they leak vital health information. Finally, it will develop countermeasures against health information leakage from these devices. A comprehensive evaluation of data leakage from the human heart, lungs, skin, devices like insulin pumps and blood pressure monitors would follow.