u-헬스케어시스템의 정보보안 체계 확보를 위한 5단계 보안위험도 평가모델 설계

A Study on Five Levels of Security Risk Assessment Model Design for Ensuring the u-Healthcare Information System

  • 노시춘 (남서울대학교 컴퓨터학과)
  • 투고 : 2013.08.31
  • 심사 : 2013.09.12
  • 발행 : 2013.09.30

초록

모든 u-헬스케어 시스템은 보안 취약점을 가지고 있다. 이 취약점은 로컬(local) 또는 네트워크(network) 상에서 잠재적인 위험이 된다. 의료정보 기술의 Smart 환경, Ad-hoc networking, 무선통신 환경은, u-헬스케어 보안 취약성을 증가시키는 주요 요인이다. u-헬스케어 의료정보시스템 도메인은 사용자단말 구간, 공중통신망 인프라구간, 네트워킹구간, 인트라넷구간으로 구분된다. 의료정보시스템 도메인별을 구분하여 취약점을 평가하는 이유는 도메인별로 취약점에 대한 대처방법이 다르기 때문이다. u-헬스케어시스템 5단계의 보안위험도 평가체계는 도메인별 보안취약성 진단체계를 설계하여 보안대책을 강구하기 위해 필요하다. 제안하는 모델을 사용할 경우 현재까지 막연하게 진행 되어온 USN 기반 의료정보네트워크 보안취약성 진단대책을 좀 더 체계적으로 수행할 수 있는 모형을 제공한다.

All u-Health system has security vulnerabilities. This vulnerability locally(local) or network(network) is on the potential risk. Smart environment of health information technology, Ad-hoc networking, wireless communication environments, u-health are major factor to increase the security vulnerability. u-health care information systems user terminal domain interval, interval public network infrastructure, networking section, the intranet are divided into sections. Health information systems by separating domain specific reason to assess vulnerability vulnerability countermeasure for each domain are different. u-Healthcare System 5 layers of security risk assessment system for domain-specific security vulnerability diagnosis system designed to take the security measures are needed. If you use this proposed model that has been conducted so far vaguely USN-based health information network security vulnerabilities diagnostic measures can be done more systematically provide a model.

키워드

참고문헌

  1. Sichoon, Noh, Dong Chun Lee, "Assurance Method of HGigh Availability in Information Security Infrastructure System", SCIE LNCS 3794, 2005.12
  2. Sichoon,Noh, "Building of an Integrated Multilevel Virus Protection Infrastructure", IEEE Computeer Society, 2005.12.
  3. Sichoon,Noh, "A Securing Method of Multispectral Protection Infrastructure for Malicious Trafficin Intrne System", DCS, 2006.02
  4. Sensor Networks for Medical Care, Victor Shnayder, Bor-rong Chen, Konrad Lorincz, Thaddeus R. F. Fulford-Jones, and Matt Welsh. Harvard University Technical Report TR-08-05, April 2005.
  5. Sensor Networks for Emergency Response: Challenges and Opportunities, Konrad Lorincz, David Malan, Thaddeus R. F. Fulford-Jones, Alan Nawoj, Antony Clavel, Victor Shnayder, Geoff Mainland, Steve Moulton, and Matt Welsh. In IEEE Pervasive Computing, Special Issueon Pervasive Computing for First Response, Oct-Dec. 2004.
  6. A Portable, Low-Power, Wireless Two-Lead EKG System, Thaddeus R. F. Fulford-Jones, Gu-Yeon Wei, and Matt Welsh. In Proceedings of The 26th IEEE EMBS Annual International Conference, San Francisco, September 2004.
  7. Biomedical telemedicine - CSCI E-170 January 11, 2005
  8. Healthwear: Medical Technology Becomes Wearable - 2004 IEEE
  9. Perrig, A., Stankovic, J., and Wagner, D. 2004. Security in wireless sensor networks. Commun, ACM 47, 6 (Jun. 2004), 53-57