Data Loss Prevention Management and Control: Inside Activity Incident Monitoring, Identification, and Tracking in Healthcare Enterprise Environments

Abstract

As healthcare data are pushed online, consumers have raised big concerns on the breach of their personal information. Law and regulations have placed businesses and organizations under obligations to take actions to prevent data breach. Among various threats, insider threats have been identified as a major threat on data loss. Thus, effective mechanisms to control insider threats on data loss are urgently needed. The objective of this research is to address data loss prevention challenges in healthcare enterprise environment. First, a novel approach is provided to model internal threat, specifically inside activities. With inside activities modeling, data loss paths and threat vectors are formally described and identified. Then, threat vectors and potential data loss paths have been investigated in a healthcare enterprise environment. Threat vectors have been enumerated and data loss statistics data for some threat vectors have been collected. After that, issues on data loss prevention and inside activity incident identification, tracking, and reconstruction are discussed. Finally, evidences of inside activities are modeled as evidence trees to provide guidance for inside activity identification, tracking, and reconstruction.

Evaluation of Game-Based Learning in Cybersecurity Education for High School Students

“…National infrastructure, corporations, and agencies have fallen victims to cyber-attacks, and millions of sensitive data records have been compromised, especially in financial and healthcare sectors [1], [2]. Such security breaches not only result in substantial financial losses, but also greatly hurt the confidence of customers, business partners and stakeholders [3].…”

A Deep Learning Model for Information Loss Prevention From Multi-Page Digital Documents

“…Internal incidents again are due to intentional and unintentional loss [45]. It is a challenging task for any system to detect and prevent an internal and intentional leak of information [47]. The popular channels through which data leak incidents occurred in different organizations in the past are removable storage, Web Applications, Email, Instant Messaging applications, printed and scanned physical, and digitally stored documents [2], [37].…”

“…In both domains, individual's private data are shared with institutions. An exploration to identify leak channels and internal threat paths and finally, a model to guide the leak detection has been proposed in the study by Tu et al [47].…”

Game based learning for safety and security education

“…Security has become one of the major topics for various organizations, because of the increase in the number of incident in the past several years. Over the past few years, a large number of fraud incidents have been committed, especially in the financial and healthcare sectors [10,11]. Such security breaches not only result in substantial financial losses, but also greatly hurt the confidence of customers, business partners and stakeholders [12].…”