Assessing resilience of hospitals to cyberattack

Abstract

Objective This paper investigates the impact on emergency hospital services from initiation through recovery of a ransomware attack affecting the emergency department, intensive care unit and supporting laboratory services. Recovery strategies of paying ransom to the attackers with follow-on restoration and in-house full system restoration from backup are compared. Methods A multi-unit, patient-based and resource-constrained discrete-event simulation model of a typical U.S. urban tertiary hospital is adapted to model the attack, its impacts, and tested recovery strategies. The model is used to quantify the hospital's resilience to cyberattack. Insights were gleaned from systematically designed numerical experiments. Results While paying the ransom was found to result in some short-term gains assuming the perpetrators actually provide the decryption key as promised, in the longer term, the results of this study suggest that paying the ransom does not pay off. Rather, paying the ransom, when considered at the end of the event when services are fully restored, precluded significantly more patients from receiving critically needed care. Also noted was a lag in recovery for the intensive care unit as compared with the emergency department. Such a lag must be considered in preparedness plans. Conclusion Vulnerability to cyberattacks is a major challenge to the healthcare system. This paper provides a methodology for assessing the resilience of a hospital to cyberattacks and analyzing the effects of different response strategies. The model showed that paying the ransom resulted in short-term gains but did not pay off in the longer term.

The impacts of multiple privacy regulations and national security infrastructure on health information exchange: a study of hospitals across Europe

“…The cyberattacks on health-care organizations have considerably increased over the years, and with the adoption of the latest technologies, they are expected to become more prevalent (Ghayoomi et al , 2021). The organization’s internal security vulnerabilities, including employee negligence or improper security training, can lead to stolen passwords, malware or spyware attacks (Health IT Security, 2015).…”

Investigating lake drought prevention using a DRL-based method

“…Another group of researchers have used simulation to analyze drought [11][12][13]. The simulation of this phenomenon is a suitable tool to investigate the complex and interdependent nature of this problem and is used in different other complex interdependent systems for example in resilience assessment [14], disaster management [15], resource management [16] and regional disaster planning [17].…”

How hospitals response to disasters; a conceptual deep reinforcement learning approach

“…Sample of these situation is hospital responses to Covid-19 surge of the patients where hospital allocation needs a special allocation [2]. Another example is hospitals facing with cyberattacks where the patients should be transferred to another healthcare until full recovery of the hospital [3]. These planning totally can improve regional capacity of the hospitals in response to disaster situation [4].…”