title: An integrated secure design of a medical database system.
abstract: An integrated secure design methodology for the enhancement of database security in a hospital environment is presented in this paper. The proposed design methodology is based on both the discretionary and the mandatory database security policies. In this way, the advantages of both approaches are combined to enhance medical database security. The experimental implementation of the methodology in a major Greek hospital is also presented. The implementation has shown that the combined discretionary and mandatory security enforcement effectively limits unauthorized access to the medical database, without severely restricting the capabilities of the system.
authors.affiliation: Computers Division, Faculty of Technology, Aristotelian University, Thessaloniki 540 06, Greece.
authors.forename: G
authors.initials: G
authors.lastname: Pangalos
authors.forename: M
authors.initials: M
authors.lastname: Khair
authors.forename: L
authors.initials: L
authors.lastname: Bozios
mesh_terms: D016494:Computer Security; D003258:Consumer Behavior; D006115:Greece; D006751:Hospital Information Systems / Q000458:organization & administration*; D006769:Hospitals, General / Q000458:organization & administration; D006785:Hospitals, University / Q000458:organization & administration; D016347:Medical Records Systems, Computerized / Q000458:organization & administration*; D017146:Models, Organizational; D010564:Personnel, Hospital / Q000145:classification; D011050:Policy Making; D012926:Social Control, Formal; D018511:Systems Integration; D014584:User-Computer Interface