Tracking Sensitive Information and Operations in Integrated Clinical Environment

Zhangtan Li,Liang Cheng,Yang Zhang
DOI: https://doi.org/10.1109/TrustCom/BigDataSE.2019.00034
2019-01-01
Abstract:Integrated Clinical Environment (ICE) is a standardized framework for achieving device interoperability in medical cyber-physical systems. The ICE utilizes high-level supervisory apps and a low-level communication middleware to coordinate medical devices. The need to design complex ICE systems that are both safe and effective has presented numerous challenges, including interoperability, context-aware intelligence, security and privacy. In this paper, we present a data flow analysis framework for the ICE systems. The framework performs the combination of static and dynamic analysis for the sensitive data and operations in the ICE systems. Our experiments demonstrate that the data flow analysis framework can record how the medical devices transmit sensitive data and perform misuse detection by tracing the runtime context of the sensitive operations.
What problem does this paper attempt to address?