Independent Security Evaluators, Baltimore, MD, has compiled a report available online that details its research in investigating a variety of hospital and healthcare-related infrastructures and systems, identifying industry-specific pitfalls and shortcomings, and creating a blueprint for how entities in the space can improve their security posture by the most effective means.
The research presents results from its assessment of 12 healthcare facilities, 2 healthcare data facilities, 2 active medical devices from one manufacturer, and 2 web applications that remote adversaries can easily deploy attacks that target and compromise patient health.
Four attack scenarios are presented in the report, which follows a two-year study performed through January 2016 of critical elements within these facilities as they relate to securing patient health.
