title: Security aspects of Grid-based digital mammography.
abstract: OBJECTIVE
  The principal aim of the eDiaMoND project is to develop a prototype Grid infrastructure to support the needs of the breast care community. The prototype system is but one major deliverable of the project; the other is a blueprint document that describes how a system such as eDiaMoND might be deployed throughout the United Kingdom to support the NHS Breast Screening Programme. A key consideration of both the prototype and the blueprint is security. In this paper we address some of the generic security issues faced by projects such as eDiaMoND. We also indicate how these problems are being overcome within our project.
  
  
  METHODS
  In order to fully understand the security issues faced by the project a review of current initiatives within the NHS was performed. The work of the NHS Information Authority was found to be particularly significant. Also reviewed was BS7799, the British Standard for the deployment of security systems and processes. Finally, modelling of the proposed prototype was performed using methods proposed by the e-Science Security Task Force, in particular the method proposed by Flechais and Sasse.
  
  
  CONCLUSIONS
  It is felt that the issues of security surrounding the eDiaMoND project are sufficiently generic that the eHealth community can consider and criticise the work described. It is hoped that this will enable the eHealth community to move forwards with a common agenda.
authors.affiliation: Oxford University Computing Laboratory, Wolfson Building, Parks Road, Oxford, OX1 3QD United Kingdom.
authors.forename: M A
authors.initials: MA
authors.lastname: Slaymaker
authors.forename: E
authors.initials: E
authors.lastname: Politou
authors.forename: D J
authors.initials: DJ
authors.lastname: Power
authors.forename: S
authors.initials: S
authors.lastname: Lloyd
authors.forename: A C
authors.initials: AC
authors.lastname: Simpson
mesh_terms: D022126:Access to Information; D016494:Computer Security; D003219:Confidentiality; D003628:Database Management Systems; D016208:Databases, Factual; D005260:Female; D006801:Humans; D020407:Internet; D008327:Mammography; D016347:Medical Records Systems, Computerized / Q000592:standards*; D016730:Program Development; D011873:Radiology Information Systems; D018511:Systems Integration; D019112:Teleradiology; D006113:United Kingdom