title: Security Attacks and Solutions in Electronic Health (E-health) Systems.
abstract: For centuries, healthcare has been a basic service provided by many governments to their citizens. Over the past few decades, we have witnessed a significant transformation in the quality of healthcare services provided by healthcare organizations and professionals. Recent advances have led to the emergence of Electronic Health (E-health), largely made possible by the massive deployment and adoption of information and communication technologies (ICTs). However, cybercriminals and attackers are exploiting vulnerabilities associated primarily with ICTs, causing data breaches of patients' confidential digital health information records. Here, we review recent security attacks reported for E-healthcare and discuss the solutions proposed to mitigate them. We also identify security challenges that must be addressed by E-health system designers and implementers in the future, to respond to threats that could arise as E-health systems become integrated with technologies such as cloud computing, the Internet of Things, and smart cities.
authors.affiliation: College of Communication and Information, University of Kentucky, Lexington, KY, 40506-2299, USA. szeadally@uky.edu.
authors.forename: Sherali
authors.initials: S
authors.lastname: Zeadally
authors.affiliation: Computer Science Department (Facyt), Universidad de Carabobo, Sector Bárbula, Valencia, Venezuela.
authors.forename: Jesús Téllez
authors.initials: JT
authors.lastname: Isaac
authors.affiliation: School of Science and Security Research Institute, Edith Cowan University, Perth, 6027, Australia.
authors.forename: Zubair
authors.initials: Z
authors.lastname: Baig
mesh_terms: D016494:Computer Security / Q000592:standards*; D003219:Confidentiality; D057286:Electronic Health Records / Q000458:organization & administration; D066275:Health Information Exchange / Q000592:standards; D006801:Humans; D020407:Internet; D058998:Remote Sensing Technology / Q000379:methods / Q000592:standards; D017216:Telemedicine / Q000458:organization & administration* / Q000592:standards; D059015:Wireless Technology / Q000458:organization & administration* / Q000592:standards
keywords: Attack; E-healthcare; Medical record; Security; Threat