I-Corps: Advanced Security for Healthcare Systems

这个I-Corps项目的更广泛的影响/商业潜力是开发旨在提高医疗保健信息安全和透明度的解决方案。在关注数据安全和价格透明度的同时，项目范围还考察了患者、供应商和付款人面临的多方面挑战。通过解决这些复杂性，该倡议旨在确保透明和负担得起的医疗保健，同时促进知情和授权的患者-提供者关系。该项目简化了医疗保健流程，提高了可访问性，并在利益相关者之间建立了信任。这个I-Corps项目基于机器学习网络安全风险分析框架的开发，该框架针对第五代（5G）连接系统中不断变化的漏洞，特别是部署在医疗网络中的5G连接网络（5GCN）。该项目旨在识别和缓解网络功能虚拟化（NFV）、软件定义网络（SDN）和恶意输入/输出（IO）外围设备的集成所带来的网络安全威胁的复杂性。通过全面分析和模式识别，已经确定了119个潜在的漏洞，突出了危及5GCN安全的漏洞交互。此外，这项研究还展示了受损的5GCN如何在5G身份验证和密钥协商协议中触发不同的攻击，从而暴露出应用层的漏洞。调查结果强调了医疗保健系统中增强安全措施的必要性，符合行业对强大数据保护框架的需求，以促进所有关键利益相关者透明和安全的信息访问。该奖项反映了NSF的法定使命，并通过使用基金会的知识价值和更广泛的影响审查标准进行评估，被认为值得支持。

The broader impact/commercial potential of this I-Corps project is the development of solutions aimed at enhancing healthcare information security and transparency. While focused on data security and price transparency, the project scope examines the multifaceted challenges faced by patients, providers, and payers. By addressing these complexities, the initiative seeks to ensure transparent and affordable healthcare while fostering informed and empowered patient-provider relationships. The project streamlines healthcare processes, improves accessibility, and builds trust among stakeholders. This I-Corps project is based on the development of a machine learning cybersecurity risk analysis framework tailored to the evolving vulnerabilities in fifth-generation (5G) connected systems, notably the 5G Connected Network (5GCN) deployed within healthcare networks. This project seeks to identify and mitigate the complexities of cybersecurity threats posed by the integration of Network Function Virtualization (NFV), Software Defined Networking (SDN), and malicious Input/Output (IO) peripherals. Through comprehensive analysis and pattern recognition, 119 potential exploits have been identified, highlighting the vulnerability interactions that compromise 5GCN security. Furthermore, this research demonstrates how compromised 5GCNs trigger distinct attacks within the 5G Authentication and Key Agreement protocol, exposing vulnerabilities at the application layer. The findings underscore the need for enhanced security measures within healthcare systems, aligning with industry demands for robust data protection frameworks to facilitate transparent and secure information accessibility for all key stakeholders.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.