MEDSECURANCE - Advanced Security-for-safety Assurance for Medical Device IoT

医疗保健IT系统的进步导致了复杂的社会技术架构，这些架构提供以患者为中心的集成服务。所有这些转变，除了临床上的好处外，还带来了风险，包括需要了解和管理的安全风险，并将其降低到可接受的水平。有大量关于这类体系结构的新型安全漏洞的报告，这对当前安全工具的有效性提出了挑战。MEDSECURANCE将构思新的方法、基础设施和技术，使医疗物联网(IoMT)中的安全系统工程管理活动能够有效、协调和持续地发展和演变。我们的目标是提高对基于不同系统和组件级别交互的不同IoMT威胁环境中决策的知识和基本理解。这是通过开发一种新的整体战略来实现的，该战略考虑了几个IoMT子系统、信息交换、风险阈值和监管后果之间的相互依赖。我们提供可扩展和可验证的安全系统工程管理解决方案(S)，该解决方案可捕获、沟通和应对这些复杂性，以提高网络防御的决策能力，同时实现网络安全保障的自动化。我们的解决方案(S)将与我们的医疗行业用户合作伙伴共同开发和验证，并通过医疗行业利益相关者的参与来补充，以支持对项目中也将制定的现有指南的建议。

Advances in healthcare IT systems have resulted in complex socio-technical architectures, which deliver integrated and patient centered services. All these transformations, in addition to clinical benefits, they also introduce risks including security risks that need to be understood and managed, reduced to acceptable levels. There are numerous reports of new types of security vulnerabilities for this kind of architectures, which challenge the effectiveness of the current security tools. MEDSECURANCE will conceive novel methodologies, infrastructures, and technologies that enable an effective, harmonious and continuous development and evolution of secure system engineering management activities in Internet of Medical Things (IoMT). Our objective is to advance knowledge and basic understanding of decision making in diverse IoMT threat landscapes based on different system and component level interactions. This is accomplished via the development of a novel holistic strategy that considers the interdependence of several IoMT subsystems, information exchange, risk thresholds, and regulatory ramifications. We provide scalable and verifiable secure system engineering management solution(s) that capture, communicate, and act on these complexities in order to improve decision-making in cyber defence while automating cybersecurity assurance. Our solution(s) will be co-developed and validated with our medical industry user partners, and complementedby engagement of healthcare industry stakeholders in support of the recommendations to existing guidelines that will also be developed in the project.