Addressing cybersecurity challenges in the healthcare sector
The healthcare sector is a critical and increasingly data-driven ecosystem with interconnected devices and shared medical networks. While the sector’s shift to ICT-based infrastructures has made it more efficient, it has also made it a prime target for cyberattacks. Unfortunately, traditional countermeasures are no longer sufficient. What we need are solutions capable of addressing both platform- and attack-specific threats. Helping to answer that need is the EU-funded SECANT project. Through a combination of assessment, technology, intelligence and training, the project aims to improve cybersecurity readiness, increase privacy and data protection, and reduce the costs associated with risk management and security training. “We want to empower users to make informed and context-aware decisions regarding cybersecurity, privacy and data protection risks,” says project coordinator Anaël Le Bihan, based at NTT DATA.
Testing cybersecurity solutions in real healthcare settings
Achieving this goal required the project to navigate several unique challenges. For example, testing cybersecurity solutions in real healthcare settings posed numerous ethical, privacy and technical obstacles. To overcome this challenge, the project opted to replicate operational environments using realistic, simulated patient data. This included creating simulated hospital information systems within virtual machines – a move that allowed for robust testing without compromising patient data or privacy. Other challenges included distinguishing between simulated and operational environments and working with limited API capabilities.
Protecting healthcare organisations against cybersecurity risks
While these challenges were unexpected, the project was able to overcome them thanks to the close collaboration of its partners. As a result, SECANT successfully delivered innovative analysis methodologies that organisations can use to identify those risks that could impact the security and privacy of their data. One of the project’s key achievements was the development of a digital identity management module. By enabling secure identification of healthcare professionals, patients and tools, the module ensures efficient and reliable access control within healthcare organisations. Along with offering real-time information sharing capabilities, the SECANT suite of solutions also builds trust, ensures accountability and enables the end-to-end integrity and protection of sensitive operational data. “Each of these innovations is designed to not only protect connected organisations, but also build awareness about best practices in cybersecurity,” explains Le Bihan.
Addressing cybersecurity challenges through innovation
All the project’s solutions were developed and tested within specific use cases. For instance, the Protecting the connected ambulance of the future use case highlighted SECANT’s ability to protect patient safety during medical transport and facilitate accurate and secure patient transfers. Another use case validated the project’s capacity to manage cascading threats and vulnerabilities in healthcare infrastructure and remote care settings, while others looked at health data protection in the healthcare supply chain and providing the necessary cybersecurity training. “Our work has proven that addressing current cybersecurity challenges in the healthcare sector with innovative technological solutions is possible,” concludes Le Bihan. “This commitment to innovation remains a priority for continuing to offer cutting-edge solutions that ensure the security and privacy of sensitive health data.” The SECANT platform is now ready for operational deployment in healthcare and similar critical ICT environments to increase cybersecurity in internet of things devices for all.
Keywords
SECANT, cybersecurity, data protection, healthcare, cyberattacks, privacy, security, innovation
