title: Threat modeling for electronic health record systems.
abstract: The security of electronic health record (EHR) systems is crucial for their growing acceptance. There is a need for assurance that these records are securely protected from attacks. For a system as complex as an EHR system, the number of possible attacks is potentially very large. In this paper, a threat modeling methodology, known as attack tree, is employed to analyze attacks affecting EHR systems. The analysis is based on a proposed generic client-server model of EHR systems. The developed attack tree is discussed along with some system properties that enable quantitative and qualitative analysis. A list of suggested countermeasures are also highlighted.
authors.affiliation: Computer Engineering Department, King Fahd University of Petroleum and Minerals, Dhahran, Saudi Arabia. ahmadsm@kfupm.edu.sa
authors.forename: Ahmad
authors.initials: A
authors.lastname: Almulhem
mesh_terms: D000465:Algorithms; D003195:Computer Communication Networks; D016494:Computer Security; D003199:Computer Systems; D057286:Electronic Health Records / Q000458:organization & administration*; D006801:Humans; D008962:Models, Theoretical; D018570:Risk Assessment