Model-based security assessment on the design of a patient-centric data sharing platform

M. Banton; T. Webber; A. Silvina; Juliana Bowles

doi:10.1007/978-3-031-16011-0_5

Model-based security assessment on the design of a patient-centric data sharing platform

M. Banton, T. Webber, A. Silvina, Juliana Bowles^*

^*Corresponding author for this work

School of Computer Science

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

1 Citation (Scopus)

Abstract

The architectural design of a healthcare data sharing system must cope with security requirements especially when the system integrates different data sources and patient-centric features. The design choices come with different risks, where vulnerabilities and threats highly depend on how the system components interact and depend on each other to operate as well as how it handles the external connections. This paper focuses on security aspects arising early in the design phase of a patient-centric system. The system presents a blend of emergent technologies such as novel authentication methods, blockchain for access control, and a data lake for patient metadata storage and retrieval based on access rules. We exploit a model-based approach to tackle security assessment using attack-defense trees (ADtrees) formalism and other support diagrams altogether as a way to model and analyse potential attack paths to the system and its countermeasures. The modelling approach helps creating a framework to support the attack vectors analysis and the proposal of appropriate defense mechanisms within the system architecture.

Original language	English
Title of host publication	From data to models and back
Subtitle of host publication	10th international symposium, DataMod 2021 virtual event, December 6–7, 2021 revised selected papers
Editors	Juliana Bowles, Giovanna Broccia, Roberto Pellungrini
Place of Publication	Cham
Publisher	Springer Science and Business Media
Pages	61–77
Number of pages	17
ISBN (Electronic)	9783031160110
ISBN (Print)	9783031160103
DOIs	https://doi.org/10.1007/978-3-031-16011-0_5
Publication status	Published - 7 Dec 2022
Event	International Symposium: From Data to Models and Back - Virtual Duration: 6 Dec 2021 → 7 Dec 2021 Conference number: 10

Publication series

Name	Lecture notes in computer science
Volume	13268
ISSN (Print)	0302-9743
ISSN (Electronic)	1611-3349

Conference

Conference	International Symposium: From Data to Models and Back
Abbreviated title	DataMod 2021
Period	6/12/21 → 7/12/21

Keywords

Attack-defense trees
Data sharing
Healthcare systems
Patient-centric system
Security assessment

Access to Document

10.1007/978-3-031-16011-0_5

Cite this

Banton, M., Webber, T., Silvina, A., & Bowles, J. (2022). Model-based security assessment on the design of a patient-centric data sharing platform. In J. Bowles, G. Broccia, & R. Pellungrini (Eds.), From data to models and back: 10th international symposium, DataMod 2021 virtual event, December 6–7, 2021 revised selected papers (pp. 61–77). (Lecture notes in computer science; Vol. 13268). Springer Science and Business Media. https://doi.org/10.1007/978-3-031-16011-0_5

Banton, M. ; Webber, T. ; Silvina, A. et al. / Model-based security assessment on the design of a patient-centric data sharing platform. From data to models and back: 10th international symposium, DataMod 2021 virtual event, December 6–7, 2021 revised selected papers. editor / Juliana Bowles ; Giovanna Broccia ; Roberto Pellungrini. Cham : Springer Science and Business Media, 2022. pp. 61–77 (Lecture notes in computer science).

@inproceedings{e78ef46c1b0d4a45aec873d1781c40aa,

title = "Model-based security assessment on the design of a patient-centric data sharing platform",

abstract = "The architectural design of a healthcare data sharing system must cope with security requirements especially when the system integrates different data sources and patient-centric features. The design choices come with different risks, where vulnerabilities and threats highly depend on how the system components interact and depend on each other to operate as well as how it handles the external connections. This paper focuses on security aspects arising early in the design phase of a patient-centric system. The system presents a blend of emergent technologies such as novel authentication methods, blockchain for access control, and a data lake for patient metadata storage and retrieval based on access rules. We exploit a model-based approach to tackle security assessment using attack-defense trees (ADtrees) formalism and other support diagrams altogether as a way to model and analyse potential attack paths to the system and its countermeasures. The modelling approach helps creating a framework to support the attack vectors analysis and the proposal of appropriate defense mechanisms within the system architecture.",

keywords = "Attack-defense trees, Data sharing, Healthcare systems, Patient-centric system, Security assessment",

author = "M. Banton and T. Webber and A. Silvina and Juliana Bowles",

note = "Funding: The research in this paper was supported by the EU H2020 project SERUMS: Securing Medical Data in Smart Patient-Centric Healthcare Systems (grant code 826278).; International Symposium: From Data to Models and Back, DataMod 2021 ; Conference date: 06-12-2021 Through 07-12-2021",

year = "2022",

month = dec,

day = "7",

doi = "10.1007/978-3-031-16011-0_5",

language = "English",

isbn = "9783031160103",

series = "Lecture notes in computer science",

publisher = "Springer Science and Business Media",

pages = "61–77",

editor = "Juliana Bowles and Giovanna Broccia and Roberto Pellungrini",

booktitle = "From data to models and back",

address = "United States",

}

Banton, M, Webber, T, Silvina, A & Bowles, J 2022, Model-based security assessment on the design of a patient-centric data sharing platform. in J Bowles, G Broccia & R Pellungrini (eds), From data to models and back: 10th international symposium, DataMod 2021 virtual event, December 6–7, 2021 revised selected papers. Lecture notes in computer science, vol. 13268, Springer Science and Business Media, Cham, pp. 61–77, International Symposium: From Data to Models and Back, 6/12/21. https://doi.org/10.1007/978-3-031-16011-0_5

Model-based security assessment on the design of a patient-centric data sharing platform. / Banton, M.; Webber, T.; Silvina, A. et al.
From data to models and back: 10th international symposium, DataMod 2021 virtual event, December 6–7, 2021 revised selected papers. ed. / Juliana Bowles; Giovanna Broccia; Roberto Pellungrini. Cham: Springer Science and Business Media, 2022. p. 61–77 (Lecture notes in computer science; Vol. 13268).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

TY - GEN

T1 - Model-based security assessment on the design of a patient-centric data sharing platform

AU - Banton, M.

AU - Webber, T.

AU - Silvina, A.

AU - Bowles, Juliana

N1 - Conference code: 10

PY - 2022/12/7

Y1 - 2022/12/7

N2 - The architectural design of a healthcare data sharing system must cope with security requirements especially when the system integrates different data sources and patient-centric features. The design choices come with different risks, where vulnerabilities and threats highly depend on how the system components interact and depend on each other to operate as well as how it handles the external connections. This paper focuses on security aspects arising early in the design phase of a patient-centric system. The system presents a blend of emergent technologies such as novel authentication methods, blockchain for access control, and a data lake for patient metadata storage and retrieval based on access rules. We exploit a model-based approach to tackle security assessment using attack-defense trees (ADtrees) formalism and other support diagrams altogether as a way to model and analyse potential attack paths to the system and its countermeasures. The modelling approach helps creating a framework to support the attack vectors analysis and the proposal of appropriate defense mechanisms within the system architecture.

AB - The architectural design of a healthcare data sharing system must cope with security requirements especially when the system integrates different data sources and patient-centric features. The design choices come with different risks, where vulnerabilities and threats highly depend on how the system components interact and depend on each other to operate as well as how it handles the external connections. This paper focuses on security aspects arising early in the design phase of a patient-centric system. The system presents a blend of emergent technologies such as novel authentication methods, blockchain for access control, and a data lake for patient metadata storage and retrieval based on access rules. We exploit a model-based approach to tackle security assessment using attack-defense trees (ADtrees) formalism and other support diagrams altogether as a way to model and analyse potential attack paths to the system and its countermeasures. The modelling approach helps creating a framework to support the attack vectors analysis and the proposal of appropriate defense mechanisms within the system architecture.

KW - Attack-defense trees

KW - Data sharing

KW - Healthcare systems

KW - Patient-centric system

KW - Security assessment

UR - https://doi.org/10.1007/978-3-031-16011-0

U2 - 10.1007/978-3-031-16011-0_5

DO - 10.1007/978-3-031-16011-0_5

M3 - Conference contribution

SN - 9783031160103

T3 - Lecture notes in computer science

SP - 61

EP - 77

BT - From data to models and back

A2 - Bowles, Juliana

A2 - Broccia, Giovanna

A2 - Pellungrini, Roberto

PB - Springer Science and Business Media

CY - Cham

T2 - International Symposium: From Data to Models and Back

Y2 - 6 December 2021 through 7 December 2021

ER -

Banton M, Webber T, Silvina A, Bowles J. Model-based security assessment on the design of a patient-centric data sharing platform. In Bowles J, Broccia G, Pellungrini R, editors, From data to models and back: 10th international symposium, DataMod 2021 virtual event, December 6–7, 2021 revised selected papers. Cham: Springer Science and Business Media. 2022. p. 61–77. (Lecture notes in computer science). Epub 2022 Oct 15. doi: 10.1007/978-3-031-16011-0_5

Model-based security assessment on the design of a patient-centric data sharing platform

Abstract

Publication series

Conference

Keywords

Access to Document

Other files and links

Fingerprint

SERUMS: SERUMS

Cite this

Model-based security assessment on the design of a patient-centric data sharing platform

Abstract

Publication series

Conference

Keywords

Access to Document

Other files and links

Fingerprint

Projects

SERUMS: SERUMS

Cite this