TUTCRIS

TY - JOUR

T1 - A Proxy-Based Solution for Asynchronous Telemedical Systems

AU - Rauti, Sampsa

AU - Lahtiranta, Janne

AU - Parisod, Heidi

AU - Hyrynsalmi, Sami

AU - Salanterä, Sanna

AU - Aromaa, Minna Elisabeth

AU - Smed, Jouni

AU - Leppänen, Ville

PY - 2017/7/1

Y1 - 2017/7/1

N2 - Asynchronous telemedicine systems face many challenges related to information security as the patient's sensitive information and data on medicine dosage is transmitted over a network when monitoring patients and controlling asynchronous telemedical IoT devices. This information may be modified or spied on by a malicious adversary. To make asynchronous telemedicine systems more secure, the authors present a proxy-based solution against data modification and spying attacks in web-based telemedical applications. By obfuscating the executable code of a web application and by continuously dynamically changing obfuscation, the authors' solution makes it more difficult for a piece of malware to attack its target. They use a constructive research approach. They characterize the threat and present an outline of a proposed solution. The benefits and limitations of the proposed solution are discussed. Cyber-Attacks targeted at the information related to patient's care are a serious threat in today's telemedicine. If disregarded, these attacks have negative implications on patient safety and quality of care.

AB - Asynchronous telemedicine systems face many challenges related to information security as the patient's sensitive information and data on medicine dosage is transmitted over a network when monitoring patients and controlling asynchronous telemedical IoT devices. This information may be modified or spied on by a malicious adversary. To make asynchronous telemedicine systems more secure, the authors present a proxy-based solution against data modification and spying attacks in web-based telemedical applications. By obfuscating the executable code of a web application and by continuously dynamically changing obfuscation, the authors' solution makes it more difficult for a piece of malware to attack its target. They use a constructive research approach. They characterize the threat and present an outline of a proposed solution. The benefits and limitations of the proposed solution are discussed. Cyber-Attacks targeted at the information related to patient's care are a serious threat in today's telemedicine. If disregarded, these attacks have negative implications on patient safety and quality of care.

KW - Asynchronous Telemedicine

KW - Man-in-The-Middle Attacks

KW - Obfuscation

KW - Telemedical IoT Devices

KW - Web Application Security

U2 - 10.4018/IJEHMC.2017070105

DO - 10.4018/IJEHMC.2017070105

M3 - Article

VL - 8

SP - 70

EP - 83

JO - International Journal of E-health and Medical Communication

JF - International Journal of E-health and Medical Communication

SN - 1947-315X

IS - 3

M1 - 5

ER -