Abstract:Portable genome sequencing technology is revolutionizing genomic research by providing a faster, more flexible method of sequencing DNA and RNA [1, 2]. The unprecedented shift from bulky stand-alone benchtop equipment confined in a laboratory setting to small portable devices which can be easily carried anywhere outside the laboratory network and connected to untrusted external computers to perform sequencing raises new security and privacy threats not considered before. Current research primarily addresses the privacy of DNA/RNA data in online databases [3] and the security of stand-alone sequencing devices such as Illumina [4]. However, it overlooks the security risks arising from compromises of computer devices directly connected to portable sequencers as illustrated in Fig. 1. While highly sensitive data, such as the human genome, has become easier to sequence, the networks connecting to these smaller devices and the hardware running basecalling can no longer implicitly be trusted, and doing so can deteriorate the confidentiality and integrity of the genomic data being processed. Here, we present new security and privacy threats of portable sequencing technology and recommendations to aid in ensuring sequencing data is kept private and secure. First, to prevent unauthorized access to sequencing devices, IP addresses should not be considered a sufficient authentication mechanism. Second, integrity checks are necessary for all data passed from the sequencer to external computers to avoid data manipulation. Finally, encryption should be considered as data is passed from the sequencer to such external computers to prevent eavesdropping on data as it is sent and stored. As devices and technology rapidly change, it becomes paramount to reevaluate security requirements alongside them or risk leaving some of our most sensitive data exposed.

A novel, privacy-preserving cryptographic approach for sharing sequencing data

Privacy-Preserving Microbiome Analysis Using Secure Computation

Genomic Encryption of Biometric Information for Privacy-Preserving Forensics

Countering Gattaca: Efficient and Secure Testing of Fully-Sequenced Human Genomes (Full Version)

The Elephant in the Room: Software and Hardware Security Vulnerabilities of Portable Sequencing Devices

Citizen-centered, auditable and privacy-preserving population genomics

Data Security and Privacy in Genomics Research: A Comparative Analysis to Protect Confidentiality

Cloud-Assisted Privacy-Preserving Genetic Paternity Test

Private detection of relatives in forensic genomics using homomorphic encryption

SIG-DB: leveraging homomorphic encryption to Securely Interrogate privately held Genomic DataBases

Digital DNA lifecycle security and privacy: an overview

Mechanisms for Hiding Sensitive Genotypes with Information-Theoretic Privacy

"Multi-layer" encryption of medical data in DNA for highly-secure storage

Key dependent information confidentiality scheme based on deoxyribonucleic acid (DNA) and circular shifting

Private DNA Sequencing: Hiding Information in Discrete Noise

Immutable DNA Sequence Data Transmission for Next Generation Bioinformatics Using Blockchain Technology

DNA Screening Technical Note Cryptographic Aspects of DNA Screening

SCOTCH: Secure Counting Of encrypTed genomiC data using a Hybrid approach

PRESAGE: PRivacy-preserving gEnetic testing via SoftwAre Guard Extension

Protecting Genomic Privacy by a Sequence-Similarity Based Obfuscation Method

A new way to protect privacy in large-scale genome-wide association studies