Theory and practice of intellectual property
№ 3 / 2019
ISSN (Print) 2308-0361
ISSN (Online) 2519-2744
PDF (Ukrainian)DOI: https://doi.org/10.33731/32019.173819
Published 2019-07-19
Cybercrime in health care: demand for protection
Inna Volynets
Ukraine
Abstract
The study aimed to analyze problems of countering cybercrime as a potential threat for healthcare. The scope of the term «cybercrime» is provided. The causes and consequences of the influence of cyberattack are identified. Legislation of Ukraine on information threat protection was analyzed. Examples of cyberattack in health care are provided in accordance with types characteristics of cybercrime (ransomware, denial-of-service attack (DoS attack), Insider Threats etc.). Since the beginning of the realization of electronic healthcare system in Ukraine, there is a certain possibility of a threat for information security. The importance of theoretical and practical improvement of counteraction against cyberattacks is argued in compliance with modern foreign practices in combating cybercrime and personal data protection. The relevance of implementation of data protection guidelines at the legislative level is noted. Recommendation CM/Rec (2019) 2 of the Committee of Ministers to member States on the protection of health-related data was studied in relation to its implementation to national legislation.
Keywords: cybercrime, computer hacker, cyberattacks, healthcare, personal data protection, cybersecurity, register
References
Morgan S.Top 5 IndustriesAtRiskOfCyber-Attacks.
https://www.forbes.com/sites/stevemorgan/2016/05/13/list-of-the-5-mostcyber-attacked-industries/#22d4c536715e
Perakslis Eric D.Cybersecurity in Health Care.
https://www.nejm.org/doi/full/10.1056/NEJMp1404358?url_ver=Z39.88-2003&rfr_id=ori%3Arid%3Acrossref.org&rfr_dat=cr_pub%3Dpubmed
Kruse C. S., Frederick B., Jacobson T.,MonticoneK. Cybersecurity in healthcare: A systematic review of modern threats and trends. TechnologyandHealthCare. 2017. vol. 25. P. 1–10.
https://content.iospress.com/download/technology-andhealth-care/thc1263?id=technology-and-health-care%2Fthc1263
Raul L. Rhine E., Myhra M., Sullivan R., Kruse C.S. Cyberthreatstohealthinformationsystems: A systematicreview. Technology and Health Care. 2016. vol. 24. 1. P. 1–9.
https://content.iospress.com/articles/technology-and-healthcare/thc1102
CoventryL., BranleyD.Cybersecurity in healthcare: A narrative review of trends, threats and ways forward. Maturitas. 2018. vol. 113. P. 48–52.
https://www.sciencedirect.com/science/article/pii/S0378512218301658?via%3Dihub#
Про основні засади забезпечення кібербезпеки України : Закон України від 08.07.2018 р. № 2163-VIII. Відомості Верховної Ради України. 2017. № 45. Ст. 403.
Про рішення Ради національної безпеки і оборони України : Указ Президента України від 27.01.2016 р. «Про Стратегію кібербезпеки України». Офіційний вісник Президента України. 2016. № 10. Ст. 39. стаття 198.
Кримінальний кодекс України від 26.02.2019 р. №2341-III. Відомості Верховної Ради України. 2001. № 25−26. Ст.131.
Конвенція про кіберзлочинність. Ратифікація від 07.09.2005 р. № 994_575. Офіційний вісник України. 2007. № 65. Ст. 107.
Про ратифікацію Конвенції про кіберзлочинність: Закон України від 14.10.2010 р. № 2824-IV. Відомості Верховної Ради України. 2006. № 5. Ст. 128.
Forms of cybercrime. Cyber crime takes many forms, and it is therefore difficult to fight.
https://www.government.nl/topics/cybercrime/forms-of-cybercrime
Types of Cybercrime.
https://www.pandasecurity.com/mediacenter/panda-security/types-of-cybercrime
Кибер-пандемия: компьютерные атаки в сфере здравоохранения.
https://habr.com/company/panda/blog/304382
Ransomware: In the Health care Sector.
https://www.cisecurity.org/ransomware-in-the-healthcare-sector
Jones S.NHS seeks to recover from global cyber-attack as security concerns resurface.
https://www.theguardian.com/society/2017/may/12/hospitalsacross-england-hit-by-large-scale-cyber-attack
Эксперты оценили ущерб от вируса WANNACRY в $ 1 млрд. Специалисты подсчитали ущерб, нанесенный вирусом WannaCrypt0r за первые четыре дня масштабной кибератаки.
http://runews24.ru/internet/25/05/2017/3deb290a821bd12cc946653ea418e439
Security Tip (ST04-015). Understanding Denial-of-Service Attacks.
https://www.us-cert.gov/ncas/tips/ST04-015
DDoS Attacks: In the Healthcare Sector.
https://www.cisecurity.org/ddosattacks-in-the-healthcare-sector
Anyoneis a Target: DoS Attack Case Analysis on Boston Children’s Hospital.
https://security.radware.com/…/DownloadAsset.aspx?id=873
Henry J.These 5 Types of Insider Threats Could Lead to Costly Data Breaches.
https://securityintelligence.com/these-5-types-of-insider-threats-couldlead-to-costly-data-breaches
Insider Threats: In the Healthcare Sector.
https://www.cisecurity.org/blog/insider-threats-in-the-healthcare-sector
PoulsenK.Leader of hacker gang sentenced to 9 years for hospital malware.
https://www.wired.com/2011/03/ghostexodus-2
Former security guard, who hacked into hospital’s computer system, is sentenced to 110 months in federal prison. Defendant Posted Video of Himself Compromising a Hospital’s Computer System on YouTube.
https://www.justice.gov/sites/default/files/criminalccips/legacy/2012/03/15/mcgrawSent.pdf
Morgan S.Why healthcare cybersecurity spending will exceed $65B over the next 5 years. Hospitals and healthcare providers remain under cyber attack, causing organizations to spend more to protect their systems and patient data.
https://www.csoonline.com/article/3252343/cyber-attacks-espionage/whyhealthcare-cybersecurity-spending-will-exceed-65b-over-the-next-5-years.html
About Panda Security.
https://www.pandasecurity.com/ukraine/company-profile
Ілик Р. Фармполітика 2019. Цілі та нові виклики. Стратегiя лiкарських засобiв до 2025. Аптечний саміт України – 2018 : матеріали презентації. Київ. 06.12.2018.
Про державні фінансові гарантії медичного обслуговування населення : Закон України від 19.10.2017 р. № 2168-VIII. Відомості Верховної Ради України. 2018. № 5. Ст. 5.
Деякі питання електронної системи охорони здоров’я : постанова Кабінету Міністрів України від 25.04.2018 р. № 411. Офіційний вісник України. 2018. № 46. Ст. 14.
Recommendation CM/Rec(2019)2 of the Committee of Ministers to member States on the protection of health-related data.
https://search.coe.int/cm/pages/result_details.aspx?objectid=090000168093b26e
Protection of health-related data: Council of Europe issues new guidelines.
https://search.coe.int/directorate_of_communications/Pages/result_details.aspx?ObjectId=090000168093b57d