I-Corps: Advanced Security for Healthcare Systems

这个i-Corps项目的更广泛的影响/商业潜力是开发旨在增强医疗保健信息安全和透明度的解决方案。虽然专注于数据安全和价格透明度，但项目范围审查了患者、提供者和支付者面临的多方面挑战。通过解决这些复杂性，该倡议寻求确保透明和负担得起的医疗保健，同时促进知情和授权的患者与提供者的关系。该项目简化了医疗保健流程，提高了可及性，并在利益相关者之间建立了信任。该i-Corps项目基于机器学习网络安全风险分析框架的开发，该框架专为第五代(5G)互联系统中不断演变的漏洞量身定做，特别是在医疗保健网络中部署的5G互联网络(5GCN)。该项目旨在识别和缓解集成网络功能虚拟化(NFV)、软件定义网络(SDN)和恶意输入/输出(IO)外围设备带来的网络安全威胁的复杂性。通过综合分析和模式识别，已经确定了119个潜在的利用漏洞，突出了危及5GCN安全的漏洞相互作用。此外，本研究还展示了受攻击的5GCN如何在5G身份验证和密钥协商协议内触发不同的攻击，从而暴露出应用层的漏洞。这些发现强调了在医疗保健系统中加强安全措施的必要性，与行业对强大的数据保护框架的需求保持一致，以促进所有关键利益相关者透明和安全的信息访问。该奖项反映了NSF的法定使命，并通过使用基金会的智力优势和更广泛的影响审查标准进行评估，被认为值得支持。

The broader impact/commercial potential of this I-Corps project is the development of solutions aimed at enhancing healthcare information security and transparency. While focused on data security and price transparency, the project scope examines the multifaceted challenges faced by patients, providers, and payers. By addressing these complexities, the initiative seeks to ensure transparent and affordable healthcare while fostering informed and empowered patient-provider relationships. The project streamlines healthcare processes, improves accessibility, and builds trust among stakeholders. This I-Corps project is based on the development of a machine learning cybersecurity risk analysis framework tailored to the evolving vulnerabilities in fifth-generation (5G) connected systems, notably the 5G Connected Network (5GCN) deployed within healthcare networks. This project seeks to identify and mitigate the complexities of cybersecurity threats posed by the integration of Network Function Virtualization (NFV), Software Defined Networking (SDN), and malicious Input/Output (IO) peripherals. Through comprehensive analysis and pattern recognition, 119 potential exploits have been identified, highlighting the vulnerability interactions that compromise 5GCN security. Furthermore, this research demonstrates how compromised 5GCNs trigger distinct attacks within the 5G Authentication and Key Agreement protocol, exposing vulnerabilities at the application layer. The findings underscore the need for enhanced security measures within healthcare systems, aligning with industry demands for robust data protection frameworks to facilitate transparent and secure information accessibility for all key stakeholders.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.