SaTC: EDU: Enhancing Cybersecurity Training for Next Generation Healthcare Professionals

数字医疗改变了卫生专业人员的运作方式，使他们能够通过提供更高效和有效的护理来改善患者体验。收集和利用卫生数据已成为提供护理和进行研究以加强循证医学的常规部分。然而，卫生专业人员必须适应并接受适当的培训，以确保有效和合乎道德地使用数字卫生技术和工具。目前的培训计划还没有跟上由智能手表、移动应用程序和人工智能健康数据应用等智能技术推动的医疗保健领域的快速发展。这些发展带来了新的威胁和漏洞，可能会影响健康数据的隐私、安全和道德使用。在开发技术方面受过培训的卫生专业人员在保障国家范围内卫生数据的保密性和隐私方面发挥着至关重要的作用。该项目旨在弥合网络安全进步与缺乏对卫生专业实际应用的实际理解之间的差距。具体而言，它侧重于为健康信息学、社会工作和公共卫生硕士课程的学生开发综合培训材料。该项目将为卫生专业人员量身定制三个网络安全培训模块。培训的重点是关键领域，即(1)为健康数据定制的应用网络安全基础，(2)应用于健康数据的分析和机器学习中的道德，偏见和公平性，以及(3)智能设备（如智能手表和移动健康应用程序）的安全和隐私。此外，该项目将开发跨专业网络安全项目（用例）样本，这些项目可以无缝集成到与健康相关的硕士课程的顶点项目或实地考察课程中。这些用例将作为网络安全原则及其在现实场景中的应用的实际演示。培训模块和用例将通过一个专门的网站与卫生信息学、社会工作、公共卫生和其他与卫生相关学位课程的外部合作者以及更广泛的研究界共享。研究成果和发现将在应用人工智能/机器学习、网络安全和健康科学领域的相关会议和期刊上发表。该项目还将通过提供量身定制的培训、榜样指导和“像我一样”的导师，以及有意义的参与机会，增加代表性不足的群体在网络安全和健康相关学科的参与。该项目由安全与可信网络空间（SaTC）计划支持，该计划资助解决网络安全和隐私问题的提案，在这种情况下，特别是网络安全教育。SaTC项目与《联邦网络安全研究与发展战略计划》和《国家隐私研究战略》保持一致，旨在保护和维护网络系统日益增长的社会和经济效益，同时确保安全和隐私。该奖项反映了美国国家科学基金会的法定使命，并通过使用基金会的知识价值和更广泛的影响审查标准进行评估，被认为值得支持。

Digital health has transformed the way health professionals operate, enabling them to improve patient experiences by delivering more efficient and effective care. Collecting and utilizing health data has become a routine part of providing care and conducting research to enhance evidence-based medicine. However, it is essential for health professionals to adapt and receive proper training to ensure the effective and ethical use of digital health technologies and tools. Current training programs have not kept pace with the rapid advancements in the healthcare landscape driven by smart technologies like smartwatches, mobile apps, and application of artificial intelligence to health data. These developments introduce new threats and vulnerabilities that can impact the privacy, security, and ethical use of health data. Health professionals who are trained in developing technologies play a crucial role in safeguarding the confidentiality and privacy of health data on a national scale. This project aims to bridge the gaps between cybersecurity advancements and the lack of practical understanding of real-world applications in the health professions. Specifically, it focuses on developing comprehensive training materials for students in master's level programs in health informatics, social work, and public health. The project will develop three cybersecurity training modules tailored to health professionals. The training focuses on crucial areas, namely (1) foundations of applied cybersecurity customized for health data, (2) ethics, bias, and fairness in analysis and machine learning applied to health data, and (3) security and privacy on smart devices such as smartwatches and mobile health apps. Additionally, this project will develop sample interprofessional cybersecurity projects (use cases) that can be seamlessly integrated into capstone projects or fieldwork courses in health-related master’s level programs. These use cases will serve as practical demonstrations of cybersecurity principles and their application in real-world scenarios. The training modules and use cases will be shared with outside collaborators in health informatics, social work, public health, and other health-related degree programs, as well as with the broader research community via a dedicated website. The research outcomes and findings will be disseminated in relevant conferences and journals within the fields of applied AI/ML, cybersecurity, and health sciences. This project will also increase participation of underrepresented groups in cybersecurity and health-related disciplines by providing tailored training, mentorship with role models and mentors “who look like me,” and opportunities for meaningful engagement.This project is supported by the Secure and Trustworthy Cyberspace (SaTC) program, which funds proposals that address cybersecurity and privacy, and in this case specifically cybersecurity education. The SaTC program aligns with the Federal Cybersecurity Research and Development Strategic Plan and the National Privacy Research Strategy to protect and preserve the growing social and economic benefits of cyber systems while ensuring security and privacy.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.