IDEAS home Printed from https://ideas.repec.org/a/eee/ijocip/v19y2017icp32-46.html
   My bibliography  Save this article

A cyber risk scoring system for medical devices

Author

Listed:
  • Stine, Ian
  • Rice, Mason
  • Dunlap, Stephen
  • Pecarina, John

Abstract

The increased connectivity of medical devices expedites patient treatment and provides lifesaving capabilities, but the lack of emphasis on device security has led to several cyber security breaches. Most medical professionals do not have adequate expertise in information technology or cyber security, yet they are responsible for assessing which medical devices provide the best balance of risk and probability of success. This paper proposes a cyber risk scoring system that considers a physician’s worst-case assessment of the potential of a medical device to impact a patient. The scoring system also relies on a security questionnaire based on the STRIDE model that helps generate a risk score for the medical device. Three test scenarios involving medical devices are used to demonstrate the application and utility of the risk scoring system.

Suggested Citation

  • Stine, Ian & Rice, Mason & Dunlap, Stephen & Pecarina, John, 2017. "A cyber risk scoring system for medical devices," International Journal of Critical Infrastructure Protection, Elsevier, vol. 19(C), pages 32-46.
  • Handle: RePEc:eee:ijocip:v:19:y:2017:i:c:p:32-46
    DOI: 10.1016/j.ijcip.2017.04.001
    as

    Download full text from publisher

    File URL: http://www.sciencedirect.com/science/article/pii/S187454821730063X
    Download Restriction: Full text for ScienceDirect subscribers only

    File URL: https://libkey.io/10.1016/j.ijcip.2017.04.001?utm_source=ideas
    LibKey link: if access is restricted and if your library uses this service, LibKey will redirect you to where you can use your library subscription to access this item
    ---><---

    As the access to this document is restricted, you may want to search for a different version of it.

    References listed on IDEAS

    as
    1. Rainer Alt & Hans-Dieter Zimmermann, 2016. "Electronic Markets on electronic markets in education," Electronic Markets, Springer;IIM University of St. Gallen, vol. 26(4), pages 311-314, November.
    2. ., 2016. "Electric energy utilities," Chapters, in: Public Utilities, Second Edition, chapter 4, pages 69-88, Edward Elgar Publishing.
    3. Rainer Alt & Carsta Militzer-Horstmann & Hans-Dieter Zimmermann, 2016. "Electronic Markets on the impact factor," Electronic Markets, Springer;IIM University of St. Gallen, vol. 26(2), pages 95-101, May.
    4. Mihai Burcea & Wing-Kai Hon & Hsiang-Hsuan Liu & Prudence W. H. Wong & David K. Y. Yau, 2016. "Scheduling for electricity cost in a smart grid," Journal of Scheduling, Springer, vol. 19(6), pages 687-699, December.
    5. Rainer Alt, 2016. "Electronic Markets on customer-orientation," Electronic Markets, Springer;IIM University of St. Gallen, vol. 26(3), pages 195-198, August.
    6. Rainer Alt & Carsta Militzer-Horstmann & Hans-Dieter Zimmermann, 2016. "Electronic Markets on self-archiving," Electronic Markets, Springer;IIM University of St. Gallen, vol. 26(1), pages 1-5, February.
    Full references (including those not matched with items on IDEAS)

    Most related items

    These are the items that most often cite the same works as this one and are cited by the same works as this one.
    1. Loeb, Benjamin & Kockelman, Kara M., 2019. "Fleet performance and cost evaluation of a shared autonomous electric vehicle (SAEV) fleet: A case study for Austin, Texas," Transportation Research Part A: Policy and Practice, Elsevier, vol. 121(C), pages 374-385.
    2. Tran, Thomas T.D. & Smith, Amanda D., 2017. "fEvaluation of renewable energy technologies and their potential for technical integration and cost-effective use within the U.S. energy sector," Renewable and Sustainable Energy Reviews, Elsevier, vol. 80(C), pages 1372-1388.
    3. Narayana, Mahinsasa & Sunderland, Keith M. & Putrus, Ghanim & Conlon, Michael F., 2017. "Adaptive linear prediction for optimal control of wind turbines," Renewable Energy, Elsevier, vol. 113(C), pages 895-906.
    4. Wild, Phillip, 2017. "Determining commercially viable two-way and one-way ‘Contract-for-Difference’ strike prices and revenue receipts," Energy Policy, Elsevier, vol. 110(C), pages 191-201.
    5. Stutzman, Sarah & Weiland, Brandon & Preckel, Paul & Wetzstein, Michael, 2017. "Optimal replacement policies for an uncertain rejuvenated asset," International Journal of Production Economics, Elsevier, vol. 185(C), pages 21-33.
    6. Ondeck, Abigail & Edgar, Thomas F. & Baldea, Michael, 2017. "A multi-scale framework for simultaneous optimization of the design and operating strategy of residential CHP systems," Applied Energy, Elsevier, vol. 205(C), pages 1495-1511.
    7. Beheshtian, Arash & Donaghy, Kieran P. & Richard Geddes, R. & Oliver Gao, H., 2018. "Climate-adaptive planning for the long-term resilience of transportation energy infrastructure," Transportation Research Part E: Logistics and Transportation Review, Elsevier, vol. 113(C), pages 99-122.
    8. Aithal, Avinash & Li, Gen & Wu, Jianzhong & Yu, James, 2018. "Performance of an electrical distribution network with Soft Open Point during a grid side AC fault," Applied Energy, Elsevier, vol. 227(C), pages 262-272.
    9. Safari, M., 2018. "Battery electric vehicles: Looking behind to move forward," Energy Policy, Elsevier, vol. 115(C), pages 54-65.
    10. Bell, Keith & Gill, Simon, 2018. "Delivering a highly distributed electricity system: Technical, regulatory and policy challenges," Energy Policy, Elsevier, vol. 113(C), pages 765-777.
    11. Di Lullo, Giovanni & Zhang, Hao & Kumar, Amit, 2016. "Evaluation of uncertainty in the well-to-tank and combustion greenhouse gas emissions of various transportation fuels," Applied Energy, Elsevier, vol. 184(C), pages 413-426.
    12. Rosenow, Jan & Bayer, Edith, 2017. "Costs and benefits of Energy Efficiency Obligations: A review of European programmes," Energy Policy, Elsevier, vol. 107(C), pages 53-62.
    13. Hilden, Mikael & Huuki, Hannu & Kivisaari, Visa & Kopsakangas-Savolainen, Maria, 2018. "The importance of transnational impacts of climate change in a power market," Energy Policy, Elsevier, vol. 115(C), pages 418-425.
    14. Sakti, Apurba & Azevedo, Inês M.L. & Fuchs, Erica R.H. & Michalek, Jeremy J. & Gallagher, Kevin G. & Whitacre, Jay F., 2017. "Consistency and robustness of forecasting for emerging technologies: The case of Li-ion batteries for electric vehicles," Energy Policy, Elsevier, vol. 106(C), pages 415-426.
    15. Mahbub, Md Shahriar & Viesi, Diego & Crema, Luigi, 2016. "Designing optimized energy scenarios for an Italian Alpine valley: the case of Giudicarie Esteriori," Energy, Elsevier, vol. 116(P1), pages 236-249.
    16. Celik, Berk & Roche, Robin & Suryanarayanan, Siddharth & Bouquain, David & Miraoui, Abdellatif, 2017. "Electric energy management in residential areas through coordination of multiple smart homes," Renewable and Sustainable Energy Reviews, Elsevier, vol. 80(C), pages 260-275.
    17. Figueiredo, Raquel & Nunes, Pedro & Brito, Miguel C., 2017. "The feasibility of solar parking lots for electric vehicles," Energy, Elsevier, vol. 140(P1), pages 1182-1197.
    18. Mordue, Greig, 2017. "Electricity prices and industrial competitiveness: A case study of final assembly automobile manufacturing in the United States and Canada," Energy Policy, Elsevier, vol. 111(C), pages 32-40.
    19. Keay, Malcolm, 2018. "Cost of Energy Review: Dieter Helm, October 2017," Energy Policy, Elsevier, vol. 115(C), pages 216-220.
    20. Wang, Meng & Infante Ferreira, Carlos A., 2017. "Absorption heat pump cycles with NH3 – ionic liquid working pairs," Applied Energy, Elsevier, vol. 204(C), pages 819-830.

    Corrections

    All material on this site has been provided by the respective publishers and authors. You can help correct errors and omissions. When requesting a correction, please mention this item's handle: RePEc:eee:ijocip:v:19:y:2017:i:c:p:32-46. See general information about how to correct material in RePEc.

    If you have authored this item and are not yet registered with RePEc, we encourage you to do it here. This allows to link your profile to this item. It also allows you to accept potential citations to this item that we are uncertain about.

    If CitEc recognized a bibliographic reference but did not link an item in RePEc to it, you can help with this form .

    If you know of missing items citing this one, you can help us creating those links by adding the relevant references in the same way as above, for each refering item. If you are a registered author of this item, you may also want to check the "citations" tab in your RePEc Author Service profile, as there may be some citations waiting for confirmation.

    For technical questions regarding this item, or to correct its authors, title, abstract, bibliographic or download information, contact: Catherine Liu (email available below). General contact details of provider: https://www.journals.elsevier.com/international-journal-of-critical-infrastructure-protection .

    Please note that corrections may take a couple of weeks to filter through the various RePEc services.

    IDEAS is a RePEc service. RePEc uses bibliographic data supplied by the respective publishers.