Data Loss Prevention Management in Healthcare Enterprise Environments
Manghui Tu, Kimberly Spoa-Harty · 2020
Abstract As healthcare data are pushed online, consumers have raised great concerns on databreach of their personal information. Also, law and regulations have placed businessesand public organizations under obligations to take actions to prevent data breach. Amongvarious threats, insider threats have been identified to be a major threat on data loss.Thus, effective mechanisms to control insider threats to prevent data loss are urgentlyneeded. The objective of this research is to address data loss prevention challenges in thehealthcare enterprise environment. First, a novel approach is provided to model internalthreat, specifically inside activities, to provide a genuine method that can formallydescribe inside activities. With inside activities modeling, data loss paths and threatvectors are formally described and identified. Then, threat vectors and potential data losspaths have been investigated in a healthcare enterprise environment. Threat vectors havebeen enumerated and data loss statistics for some threat vectors have been collected.Finally, evidences of inside activities are modeled and the models are expected to provideguidance for internal activity incident identification, detection and reconstruction