A cyber event that: a) jeopardizes the cyber security of an information system or the information the system processes, stores or transmits; or b) violates the security policies, security procedures or acceptable use policies, whether resulting from malicious activity or not.
Published in Chapter:
Cyber-Physical Security in Healthcare
Vasiliki Mantzana (Center for Security Studies (KEMEA), Greece), Eleni Darra (Center for Security Studies (KEMEA), Greece), and Ilias Gkotsis (Center for Security Studies (KEMEA), Greece)
Copyright: © 2020
|Pages: 25
DOI: 10.4018/978-1-7998-3059-7.ch003
Abstract
The healthcare sector has been considered a part of critical infrastructure (CI) of society and has faced numerous physical-cyber threats that affect citizens' lives and habits, increase their fears, and influence hospital services provisions. The two most recent ransomware campaigns, WannaCry and Petya, have both managed to infect victims' systems by exploiting existing unpatched vulnerabilities. It is critical to develop an integrated approach in order to fight against combination of physical and cyber threats. In this chapter, key results of the SAFECARE project (H2020-GA787005), which aims is to provide solutions that will improve physical and cyber security, to prevent and detect complex attacks, to promote incident responses and mitigate impacts, will be presented. More specifically, healthcare critical asset vulnerabilities; cyber-physical threats that can affect them; architecture solutions, as well as, some indicative scenarios that will be validated during the project will be presented.