Abstract:With the introduction of data protection regulations, the need for innovative privacy-preserving approaches to process and analyse sensitive data has become apparent. One approach is the Personal Health Train (PHT) that brings analysis code to the data and conducts the data processing at the data premises. However, despite its demonstrated success in various studies, the execution of external code in sensitive environments, such as hospitals, introduces new research challenges because the interactions of the code with sensitive data are often incomprehensible and lack transparency. These interactions raise concerns about potential effects on the data and increases the risk of data breaches. To address this issue, this work discusses a PHT-aligned security and audit pipeline inspired by DevSecOps principles. The automated pipeline incorporates multiple phases that detect vulnerabilities. To thoroughly study its versatility, we evaluate this pipeline in two ways. First, we deliberately introduce vulnerabilities into a PHT. Second, we apply our pipeline to five real-world PHTs, which have been utilised in real-world studies, to audit them for potential vulnerabilities. Our evaluation demonstrates that our designed pipeline successfully identifies potential vulnerabilities and can be applied to real-world studies. In compliance with the requirements of the GDPR for data management, documentation, and protection, our automated approach supports researchers using in their data-intensive work and reduces manual overhead. It can be used as a decision-making tool to assess and document potential vulnerabilities in code for data processing. Ultimately, our work contributes to an increased security and overall transparency of data processing activities within the PHT framework.

PipeVal: light-weight extensible tool for file validation

Testbed Hardware Design to Collect Data for Underground PVC Water Pipe Crack Detection: Challenges and Solutions

Biopipe: A Lightweight System Enabling Comparison of Bioinformatics Tools and Workflows

Panpipes: a Pipeline for Multiomic Single-Cell and Spatial Transcriptomic Data Analysis

NFTest: automated testing of Nextflow pipelines

Biopipe: A Flexible Framework for Protocol-Based Bioinformatics Analysis

PhiPipe: a Multi-Modal MRI Data Processing Pipeline with Test-Retest Reliability and Predicative Validity Assessments

A Data Pipeline for Enhancing Quality of MAUDE-Based Studies

SciDataFlow: a tool for improving the flow of data through science

DIVIS: Integrated and Customizable Pipeline for Cancer Genome Sequencing Analysis and Interpretation

Pipeline Provenance for Analysis, Evaluation, Trust or Reproducibility

Analysis and visualization of quantitative proteomics data using FragPipe-Analyst

A Comprehensive Dataset and Automated Pipeline for Nailfold Capillary Analysis

Toward Long-Term and Archivable Reproducibility

PASTA-4-PHT: A Pipeline for Automated Security and Technical Audits for the Personal Health Train

V-pipe 3.0: a sustainable pipeline for within-sample viral genetic diversity estimation

Assessing and assuring interoperability of a genomics file format

BigDataScript: a scripting language for data pipelines

AI-Driven Refactoring: A Pipeline for Identifying and Correcting Data Clumps in Git Repositories

FAIR Data Pipeline: provenance-driven data management for traceable scientific workflows