NEw MEdical CYbersecurity assessment and design Solutions

欧洲的医疗保健系统正朝着个性化、分布式和以家庭为基础的服务方向发展。这可以通过新的和改进的联网医疗设备（MDs）和连接到互联网的体外诊断设备（统称为cmd）来实现，并将在降低成本（减少医院床位）和改善服务方面使医疗保健提供者受益。通过在家里或他们想去的地方接受治疗，患者的生活质量将得到改善，因为他们减少了旅行时间，减轻了压力。然而，为了充分实现这些好处，需要确保cd的网络安全。NEMECYS将使网络安全社区、MD制造商、CMD场景系统集成商和CMD场景运营商（例如医疗保健提供商）等从业人员受益，并通过有效和精简的网络安全实现更具成本效益和效率的护理，为患者和更广泛的公众带来下游利益。NEMECYS帮助从业者(1)遵守MD法规；(2)能够应用适当的医学博士网络安全（安全风险暴露过少，暴露过多成本高昂，并可能阻碍临床护理）；(3)通过设计为医学博士及其操作的相关场景构建网络安全。这是通过以下方式实现的：(1)通过设计为MD网络安全提供最佳实践和指南建议，以及合规性保证工具；(2)提供风险-收益方案，以解决网络安全风险与临床收益相平衡的问题；(3)提供一套特定工具，通过设计和在互联场景中的部署来解决MD网络安全问题。NEMECYS团队有网络安全风险专家、两家已经实施物联网和远程护理方案的医院、三家医疗设备制造商、主要的计算机科学研究参与者和经验丰富的系统集成商。该团队的理想位置是确保NEMECYS能够使从业者以低成本在正确的位置应用正确的安全性。

The European health care system is moving toward personalised, distributed, and home-based services. This is made possible via new and improved connected medical devices (MDs) and in vitro diagnostic devices connected to the internet (together, CMDs), and will benefit health care providers in terms of reduced cost (fewer hospital beds) and improved service. Patients will see improved quality of life in terms of reduced travel time and reduced stress via treatment at home or where they want it. However, for these benefits to be fully realised, the cybersecurity of CMDs needs to be ensured. NEMECYS will benefit practitioners such as cybersecurity communities, MD manufacturers, CMD scenario system integrators and CMD scenario operators (e.g. health care providers), with downstream benefits to patients and the wider public, through more cost-effective and efficient care enabled via effective and streamlined cybersecurity. NEMECYS helps practitioners to (1) comply with MD regulations; (2) to be able to apply proportionate MD cybersecurity (too little security risks exposure, too much is costly and can obstruct clinical care) and (3) build in cybersecurity by design for both MDs and the connected scenarios they operate in. This is achieved by (1) providing recommendations for best practice and guidelines for MD cybersecurity by design, along with compliance assurance tooling; (2) providing a risk-benefit scheme to address cybersecurity risk balanced with clinical benefit; and (3) providing a set of specific tools to address MD cybersecurity by design and their deployment in connected scenarios. The NEMECYS team has cybersecurity risk experts, two hospitals who are already implementing IoT and remote care-based scenarios, three medical device manufacturers, major computer science research players and experienced systems integrators. This team is ideally placed to ensure that NEMECYS can enable practitioners to apply the right security at the right place, at low cost.