Estimating Security Risk of Healthcare Web Applications: A Design Perspective
Source abstract
Abstract
In the recent years, the booming web-based applications have attracted the hackers’ community. The security risk of the web-based hospital management system (WBHMS) has been increasing rapidly. In the given context, the main goal of all security professionals and website developers is to maintain security divisions and improve on the user’s confidence and satisfaction. At this point, the different WBHMS tackle different types of security risks. In WBHMS, the security of the patients’ medical information is of utmost importance. All in all, there is an inherent security risk of data and assets in the field of the medical industry as a whole. The objective of this study is to estimate the security risk assessment of WBHMS. The risks assessment pertains to securing the integrity of the information in alignment with the Health Insurance Portability and Accountability Act. This includes protecting the relevant financial records, as well as the identification, evaluation, and prevention of a data breach. In the past few years, according to the US-based cyber-security firm Fire-eye, 6.8 million data thefts have been recorded in the healthcare sector in India. The breach barometer report mentions that in the year 2019, the data breaches found were up to 48.6% as compared to the year 2018. Therefore, it is very important to assess the security risk in WBHMS. In this research, we have followed the hybrid technique fuzzy analytic hierarchy process-technique for order of preference by similarity to ideal solution (F-AHPTOPSIS) approach to assess the security risk in WBHMS. The place of this empirical database is at the local hospital of Varanasi, U.P., India. Given the affectability of WBHMS for its board framework, this work has used diverse types of web applications. The outcomes obtained and the procedure used in this assessment would support future researchers and specialists in organizing web applications through advanced support of safety and security.
Source: openalex_inverted_index · Quality: candidate unverified · Source record ↗
Research context
OpenAlex topics: Web Application Security Vulnerabilities · Information and Cyber Security · Spam and Phishing Detection
SciVX discovery tags are terminology-based. OpenAlex topics are source-provided classifications.
References (65)
Show source-provided references
1. Ransomware threat and its impact on SCADA
2. Documenting attacks on health workers and facilities in armed conflicts10.2471/BLT.15.168328 ↗
3. Cybersecurity of hospitals: Discussing the challenges and working towards mitigating the risks10.1186/s12911-020-01161-7 ↗
4. U.S. cyber threat intelligence sharing frameworks10.1080/08850607.2016.1230701 ↗
5. Cyber security vulnerabilities in medical devices: A complex environment and multifaceted problem
6. Current threats to medical data security in family doctors’ practices10.5114/fmpcr.2017.69297 ↗
7. Towards risk driven security testing of service centric systems
8. Automated detection system for SQL injection attack
9. An adaptive supply chain cyber risk management methodology
10. Cybersecurity in healthcare: A systematic review of modern threats and trends10.3233/THC-161263 ↗
11. Argumentation-based security requirements elicitation: The next round
12. Future developments in cyber risk assessment for the internet of things10.1016/j.compind.2018.08.002 ↗
13. CSCCRA: A novel quantitative risk assessment model for SaaS cloud service providers10.3390/computers8030066 ↗
14. Sustainable supplier selection: A multi-criteria intuitionistic fuzzy TOPSIS method10.1016/j.jmsy.2018.11.002 ↗
15. Multi-criteria decision making with imprecise scores and BF-TOPSIS
16. Combination of AHP-PROMETHEE and TOPSIS for selecting the best demand side management (DSM) options
17. Empirical study on evaluating value creation strategy performance based on GRA and Fuzzy TOPSIS
18. A hybrid approach using fuzzy AHP-TOPSIS assessing environmental conflicts in the titan mining industry along central coast Vietnam
19. Solanki · 2016 · 2106
20. Health care and cybersecurity: Bibliometric analysis of the literature10.2196/12644 ↗
21. Design and implementation of project time management risk assessment tool for SME projects using oracle application express
22. Sharif · ICSECS 2011, Communications in Computer and Information Science · 2011 · 180 · 54
23. Access control management for Cloud
24. Pujolle · 2009 · 1
25. Websites’ input validation and input misuse based attacks
26. A comparative analysis of cross site scripting (XSS) detecting and defensive techniques
27. Revisiting exception handling practices with exception flow analysis
28. A survey on data breach challenges in cloud computing security: Issues and threats
29. A complex method based on TOPSIS and choquet integral to solve multi attribute group decision making problems with interval type-2 fuzzy numbers
30. A new multicriteria decision making method based on the topsis method and similarity measures between intuitionistic fuzzy sets
31. The method of risk evaluation for equipment development based on triangular fuzzy number and TOPSIS
32. The impact of criterion weights techniques in TOPSIS method of multi-criteria decision making in crisp and intuitionistic fuzzy domains
33. Fuzzy multiple attributes group decision-making based on the extension of TOPSIS method and interval type-2 fuzzy sets
34. A mixed method using AHP-TOPSIS for dryland agriculture crops selection problem
35. Fuzzy multi criteria decision analysis method for assessing security design tactics for web applications10.22266/ijies2020.1031.17 ↗
36. A decision support model for prioritization of regulated safety inspections using integrated delphi, AHP and double hierarchical TOPSIS approach10.1109/ACCESS.2020.2991179 ↗
37. Stability: Abstract roadmap of security
38. Measuring security-durability of software through fuzzy-based decision-making process10.2991/ijcis.d.190513.001 ↗
39. Measuring the sustainable-security of web applications through a fuzzy-based integrated approach of AHP and TOPSIS10.1109/ACCESS.2019.2946776 ↗
40. Risk management perspective in SDLC
41. Analytical network process for software security: A design perspective10.1007/s40012-016-0123-y ↗
42. An integrated approach of fuzzy logic, AHP and TOPSIS for estimating usable-security of web applications10.1109/ACCESS.2020.2970245 ↗
43. Soft computing approach for prediction of software reliability
44. Needs and importance of reliability prediction: An industrial perspective10.18576/isl/090105 ↗
45. Security durability assessment through fuzzy analytic hierarchy process10.7717/peerj-cs.215 ↗
46. Sahu · Data Management, Analytics and Innovation (Advances in Intelligent Systems and Computing) · 2019 · 802 · 221
47. Durable security in software development: Needs and importance
48. Software security: A risk taxonomy
49. Helpful and defending actions in software risk management: A security viewpoint
50. Durability challenges in software engineering
51. Evaluating performance of software durability through an integrated fuzzy-based symmetrical method of ANP and TOPSIS10.3390/sym12040493 ↗
52. Multi-level fuzzy system for usable-security assessment
53. Measuring the security attributes through fuzzy analytic hierarchy process: Durability perspective
54. Usable-security assessment through a decision making procedure
55. Usable-security attribute evaluation using fuzzy analytic hierarchy process
56. Fuzzy analytic hierarchy process for software durability: Security risks perspective10.1007/978-981-10-2750-5_49 ↗
57. A unified fuzzy-based symmetrical multi-criteria decision-making method for evaluating sustainable-security of web applications10.3390/sym12030448 ↗
58. A knowledge based integrated system of hesitant fuzzy set, AHP and TOPSIS for evaluating security-durability of web applications10.1109/ACCESS.2020.2978038 ↗
59. Evaluating performance of web application security through a fuzzy based hybrid multi-criteria decision-making approach: Design tactics perspective10.1109/ACCESS.2020.2970784 ↗
60. Security assessment through fuzzy Delphi analytic hierarchy process
61. An Improved fuzzy AHP approach to evaluating conductor joint alternatives
62. Hesitant fuzzy analytic hierarchy process
63. Evaluating the security impact of healthcare web applications through fuzzy based hybrid approach of multi criteria decision making analysis10.1109/ACCESS.2020.3010729 ↗
64. A knowledge based integrated system of hesitant fuzzy set, AHP and TOPSIS for evaluating security durability of web applications10.1109/ACCESS.2020.2978038 ↗
65. Measuring the sustainable security of web applications through a fuzzy based integrated approach of AHP and TOPSIS10.1109/ACCESS.2019.2946776 ↗