Data-Driven Healthcare and Cybercrime: A Threat We Are Not Aware Of?
0
조회
0
다운로드
0
인용
0
참고문헌
키워드
초록
This paper deals with the problem of cybercrime as a rising threat to the healthcare sector. Security incidents involving different forms of cyberattacks are on the rise and are becoming one of the top security threats nowadays. The healthcare system is not an exception: moreover, it seems that it is one of the most vulnerable sectors for cyberattacks. Hackers prefer targeting healthcare organizations (especially hospitals) because they are more willing to pay the ransom to gain their crucial data back. Cyberattacks on hospitals paralyze their entire operational process and cause damage to both institutions and patients. A typical example is the recent attack on several U.S. hospitals, when one of the targeted hospitals paid around $17,000 USD in ransom for the decryption of their digital information. The purpose of this paper is to draw attention to scientific debates on this important aspect of Big Data in the healthcare system. The author describes the phenomenology of cyberattacks in healthcare and points to certain legal issues—such as conflict of jurisdictions, inadequate defining of criminal offences and the general lack of consensus on the catalog of incriminations—that can adequately respond to the needs of contemporary cybercrimes.
Abstract
This paper deals with the problem of cybercrime as a rising threat to the healthcare sector. Security incidents involving different forms of cyberattacks are on the rise and are becoming one of the top security threats nowadays. The healthcare system is not an exception: moreover, it seems that it is one of the most vulnerable sectors for cyberattacks. Hackers prefer targeting healthcare organizations (especially hospitals) because they are more willing to pay the ransom to gain their crucial data back. Cyberattacks on hospitals paralyze their entire operational process and cause damage to both institutions and patients. A typical example is the recent attack on several U.S. hospitals, when one of the targeted hospitals paid around $17,000 USD in ransom for the decryption of their digital information. The purpose of this paper is to draw attention to scientific debates on this important aspect of Big Data in the healthcare system. The author describes the phenomenology of cyberattacks in healthcare and points to certain legal issues—such as conflict of jurisdictions, inadequate defining of criminal offences and the general lack of consensus on the catalog of incriminations—that can adequately respond to the needs of contemporary cybercrimes.
참고문헌 (34)
- Nitesh V. Chawla, "Bringing Big Data to Personalized Healthcare: A Patient-Centered Framework", J. Gen. Intern. Med, 28, pp.660~ (2013)
- "Security Trends in the Healthcare Industry: Data Theft and Ransomware Plague Healthcare Organizations"[URL]
- "European Cybercrime Center"[URL]
- "Federal Bureau of Investigation"[URL]
- "Attackers Shift Sights from Retail to Health Care in 2015"[URL]
- "Major Cyberattacks on Healthcare Grew 63% in 2016" (2016)[URL]
- "The Year of the Health Care Industry Security Breach"[URL]
- Sanggeun Song, "The Effective Ransomware Prevention Technique Using Process Monitoring on Android Platform", Mobile Information System, 1 (2016)
- "Ransomware Report: Top Security Threat Expected to Continue Rising in 2017"[URL]
- "Ransomware Case Studies: Hollywood Presbyterian and The Ottawa Hospital" (2017)[URL]
- Alexander A. Grebenkov, "The State of Modern Malicious Software: Foundations of Study on Cyber-Armaments", Intern. Journ. of Applied Eng. Research, 11, pp.6832~6834 (2016)
- Adam Wright, "The Big Phish: Cyberattacks Against U.S. Healthcare Systems", J. Gen. Intern. Med, 31 (2016)
- "Data Security Breach Notification Laws, Cong. Res. Serv. Report for Congress (April 10, 2012)" (2012)[URL]
- "“Assume Breach” Is Not a Defeatist Point of View"[URL]
- "Verizon’s Data Breach Investigations Report"[URL]
- John G. Browning, "If Your Heart Skips a Beat, It May Have Been Hacked: Cybersecurity Concerns with Implanted Medical Devices", South Carol. Law Rev, 67, pp.657~ (2016)
- "Understanding Cyber Threat Motivations to Improve Defense"[URL]
- "Why I Knocked Boston Children’s Hospital off The Internet: A Statement from Martin Gottesfeld, Huffington Post (September 18, 2016)" (2016)[URL]
- "Info of 200,000 Babies Leaked, Causes Panic among Parents, Global Times (April 8, 2016)" (2016)[URL]
- "Leader of Hacker Gang Sentenced to 9 Years for Hospital Malware, Wired (March 18, 2011)" (2011)[URL]
- "Ponemon Institute The Billion Dollar Lost Laptop Problem"[URL]
- "Beyond the Phish 2016"[URL]
- Miha Šepec, "Slovenian Criminal Code and Modern Criminal Law Approach to Computer-Related Fraud", Int. Journal of Cyber Criminology, 6, pp.986~ (2012)
- Elina I. Hartikainen, "The Nigerian Scam: Easy Money on the Internet, but from Whom?", pp.2006
- "FBI"[URL]
- Johnny Milliken, "Detection and Analysis of the Chameleon WiFi Access Point Virus", EURASIP Journal on Information Security, pp.1~14 (2013)
- Urlich Sieber, "Europäisches Strafrecht" (2011)
- Francesco Calderoni, "The European Framework on Cybercrime: Striving for an Effective Implementation", Crime Law Soc. Change, 54, pp.340~341 (2010)
- Catherine D. Marcum, "Doing Time for CyberCrime: An Examination of the Correlates of Sentence Length in the United States", Int. Journ. of Cyber Criminology, 5, pp.825~835 (2011)
- Thomas Weigend, "Information Society and Penal Law: General Report", XIXth International Congress of Penal Law Preparatory Colloquium, pp.51~66 (2012)
- Leo Cvitanović, "Regarding the Issue of the Security Measure of Prohibition to Access the Internet", Croat. Annual for Crim. Law and Practice, 19(2), pp.891~916 (2012)
- Gabriel Gillett, "A World Without Internet: A New Framework for Analyzing a Supervised Release Condition That Restricts Computer and Internet Access", Fordham L. Rev, 79(217), pp.254~ (2011)
- Sarah Summers, "EU Criminal Law and the Regulation of Information and Communication Technology", Bergen Journal of Criminal Law and Criminal Justice, 3(1), pp.49~ (2015)
- Susan W. Brenner, "U.S. Cybercrime Law: Defining Offenses", Information System Frontiers, 6(2) (2004)