SaTC: EDU: Enhancing Cybersecurity Training for Next Generation Healthcare Professionals

数字健康改变了卫生专业人员的工作方式，使他们能够通过提供更高效和更有效的护理来改善患者体验。 收集和利用健康数据已成为提供护理和开展研究以加强循证医学的常规部分。 然而，卫生专业人员必须适应并接受适当的培训，以确保有效和道德地使用数字卫生技术和工具。目前的培训计划没有跟上智能手表、移动的应用程序以及人工智能在健康数据中的应用等智能技术推动的医疗保健领域的快速发展。这些发展带来了新的威胁和漏洞，可能会影响健康数据的隐私、安全和道德使用。受过技术开发培训的卫生专业人员在全国范围内保护卫生数据的保密性和隐私方面发挥着至关重要的作用。该项目旨在弥合网络安全进步与缺乏对卫生专业实际应用的实际了解之间的差距。具体而言，它侧重于为健康信息学，社会工作和公共卫生硕士课程的学生开发综合培训材料。该项目将开发三个专门针对卫生专业人员的网络安全培训模块。培训的重点是关键领域，即（1）为健康数据定制的应用网络安全基础，（2）应用于健康数据的分析和机器学习中的道德，偏见和公平性，以及（3）智能手表和移动的健康应用程序等智能设备的安全和隐私。此外，该项目还将开发跨专业网络安全项目（用例）样本，这些项目可以无缝集成到与健康相关的硕士课程的顶点项目或实地考察课程中。这些用例将作为网络安全原则及其在现实世界场景中应用的实际演示。培训模块和用例将与健康信息学，社会工作，公共卫生和其他健康相关学位课程的外部合作者共享，以及通过专用网站与更广泛的研究社区共享。研究成果和发现将在应用AI/ML、网络安全和健康科学领域的相关会议和期刊上传播。该项目还将通过提供量身定制的培训、与“像我一样”的榜样和导师的指导以及有意义的参与机会，增加代表性不足的群体在网络安全和健康相关学科的参与。该项目得到了安全和值得信赖的网络空间（SaTC）计划的支持，该计划为解决网络安全和隐私问题的提案提供资金，在这种情况下，特别是网络安全教育。SATC计划与联邦网络安全研究和发展战略计划和国家隐私研究战略保持一致，以保护和维护网络系统日益增长的社会和经济效益，同时确保安全和隐私。该奖项反映了NSF的法定使命，并通过使用基金会的知识价值和更广泛的影响审查标准进行评估，被认为值得支持。

Digital health has transformed the way health professionals operate, enabling them to improve patient experiences by delivering more efficient and effective care. Collecting and utilizing health data has become a routine part of providing care and conducting research to enhance evidence-based medicine. However, it is essential for health professionals to adapt and receive proper training to ensure the effective and ethical use of digital health technologies and tools. Current training programs have not kept pace with the rapid advancements in the healthcare landscape driven by smart technologies like smartwatches, mobile apps, and application of artificial intelligence to health data. These developments introduce new threats and vulnerabilities that can impact the privacy, security, and ethical use of health data. Health professionals who are trained in developing technologies play a crucial role in safeguarding the confidentiality and privacy of health data on a national scale. This project aims to bridge the gaps between cybersecurity advancements and the lack of practical understanding of real-world applications in the health professions. Specifically, it focuses on developing comprehensive training materials for students in master's level programs in health informatics, social work, and public health. The project will develop three cybersecurity training modules tailored to health professionals. The training focuses on crucial areas, namely (1) foundations of applied cybersecurity customized for health data, (2) ethics, bias, and fairness in analysis and machine learning applied to health data, and (3) security and privacy on smart devices such as smartwatches and mobile health apps. Additionally, this project will develop sample interprofessional cybersecurity projects (use cases) that can be seamlessly integrated into capstone projects or fieldwork courses in health-related master’s level programs. These use cases will serve as practical demonstrations of cybersecurity principles and their application in real-world scenarios. The training modules and use cases will be shared with outside collaborators in health informatics, social work, public health, and other health-related degree programs, as well as with the broader research community via a dedicated website. The research outcomes and findings will be disseminated in relevant conferences and journals within the fields of applied AI/ML, cybersecurity, and health sciences. This project will also increase participation of underrepresented groups in cybersecurity and health-related disciplines by providing tailored training, mentorship with role models and mentors “who look like me,” and opportunities for meaningful engagement.This project is supported by the Secure and Trustworthy Cyberspace (SaTC) program, which funds proposals that address cybersecurity and privacy, and in this case specifically cybersecurity education. The SaTC program aligns with the Federal Cybersecurity Research and Development Strategic Plan and the National Privacy Research Strategy to protect and preserve the growing social and economic benefits of cyber systems while ensuring security and privacy.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.