Firewall Best Practices for Securing Smart Healthcare Environment: A Review
Source abstract
Abstract
Smart healthcare environments are growing at a rapid pace due to the services and benefits offered to healthcare practitioners and to patients. At the same time, smart healthcare environments are becoming increasingly complex environments where a plethora of devices are linked with each other, to deliver services to patients, and they require special security measures to protect the privacy and integrity of user data. Moreover, these environments are exposed to various kinds of security risks, threats, and attacks. Firewalls are considered as the first line of defense for securing smart healthcare networks and addressing the challenges mentioned above. Firewalls are applied at different levels in networks, and range from conventional server-based to cloud-based firewalls. However, the selection and implementation of a proper firewall to get the maximum benefit is a challenging task. Therefore, understanding firewall types, the services offered, and analyzing underlying vulnerabilities are important design considerations that need addressing before implementing a firewall in a smart healthcare environment. The paper provides a comprehensive review and best practices of firewall types, with offered benefits and drawbacks, which may help to define a comprehensive set of policies for smart healthcare devices and environments.
Source: crossref · Quality: baseline
Research context
OpenAlex topics: Network Security and Intrusion Detection · Internet Traffic Analysis and Secure E-voting · Cloud Data Security Solutions
SciVX discovery tags are terminology-based. OpenAlex topics are source-provided classifications.
Affiliations
Faculty of Computer Studies, Arab Open University, P.O. Box 1596, Muscat 130, Sultanate of Oman
College of Science & Engineering, University of Derby, Derby DE22 1GB, UK
References (74)
Show source-provided references
1. Somasundaram, R., and Thirugnanam, M. (2020). Review of security challenges in healthcare internet of things. Wirel. Netw.10.1007/s11276-020-02340-0 ↗
2. Samaila, M.G., Neto, M., Fernandes, D.A., Freire, M.M., and Inácio, P.R. (2018). Challenges of securing Internet of Things devices: A survey. Secur. Priv., 1.10.1002/spy2.20 ↗
3. Kaur, H., Atif, M., and Chauhan, R. (2020). An Internet of Healthcare Things (IoHT)-Based Healthcare Monitoring System. Advances in Intelligent Computing and Communication, Springer.10.1007/978-981-15-2774-6_56 ↗
4. Jardon, Z., Hinderdael, M., Regert, T., Van Beeck, J., and Guillaume, P. (2019). On the Nature of Pressure Wave Propagation through Ducts for Structural Health Monitoring Application. Appl. Sci., 9.10.3390/app9050837 ↗
5. Cybersecurity in health care10.1056/NEJMp1404358 ↗
6. Wannacry, cybersecurity and health information technology: A time to act10.1007/s10916-017-0752-1 ↗
7. BTEM: Belief based trust evaluation mechanism for Wireless Sensor Networks10.1016/j.future.2019.02.004 ↗
8. Cybersecurity in healthcare: A systematic review of modern threats and trends10.3233/THC-161263 ↗
9. Security and privacy for implantable medical devices10.1109/MPRV.2008.16 ↗
10. Consumer IoT: Security vulnerability case studies and solutions10.1109/MCE.2019.2953740 ↗
11. EARS to cyber incidents in health care10.1093/jamia/ocy148 ↗
12. Agrawal, V. (2015). Security and Privacy Issues in Wireless Sensor Networks for Healthcare, Spinger.10.1007/978-3-319-19656-5_32 ↗
13. On security challenges and open issues in Internet of Things10.1016/j.future.2018.01.059 ↗
14. Ondiege, B., Clarke, M., and Mapp, G. (2017). Exploring a new security framework for remote patient monitoring devices. Computers, 6.10.3390/computers6010011 ↗
15. Stronger rules needed for medical device cybersecurity10.1016/S0140-6736(16)30120-9 ↗
16. Gia, T.N., Thanigaivelan, N.K., Rahmani, A.-M., Westerlund, T., Liljeberg, P., and Tenhunen, H. (2014, January 27–28). Customizing 6LoWPAN networks towards Internet-of-Things based ubiquitous healthcare systems. Proceedings of the 2014 NORCHIP, Tampere, Finland.10.1109/NORCHIP.2014.7004716 ↗
17. Butt, S.A., Diaz-Martinez, J.L., Jamal, T., Ali, A., De-La-Hoz-Franco, E., and Shoaib, M. (2019, January 1–4). IoT Smart Health Security Threats. Proceedings of the 2019 19th International Conference on Computational Science and Its Applications (ICCSA), Saint Petersburg, Russia.10.1109/ICCSA.2019.000-8 ↗
18. Ali, B., and Awad, A.I. (2018). Cyber and physical security vulnerability assessment for IoT-based smart homes. Sensors, 18.10.3390/s18030817 ↗
19. Counter measuring conceivable security threats on smart healthcare devices10.1109/ACCESS.2018.2826225 ↗
20. Privacy in the Internet of Things for smart healthcare10.1109/MCOM.2018.1700809 ↗
21. Design of a secure three-factor authentication scheme for smart healthcare10.1007/s10916-019-1251-3 ↗
22. Haque, M., Asikuzzaman, M., Khan, I.U., Ra, I.-H., Hossain, M., and Shah, S.B.H. (2020). Comparative Study of IoT-Based Topology Maintenance Protocol in a Wireless Sensor Network for Structural Health Monitoring. Remote Sens., 12.10.3390/rs12152358 ↗
23. Case studies of scada firewall configurations and the implications for best practices10.1109/TNSM.2016.2597245 ↗
24. Endpoint firewall for local security hardening in academic research environment10.3233/JIFS-169143 ↗
25. Virtual Firewall Security on Virtual Machines in Cloud Environment
26. Chomsiri, T., He, X., Nanda, P., and Tan, Z. (2014, January 24–26). A stateful mechanism for the tree-rule firewall. Proceedings of the 2014 IEEE 13th International Conference on Trust, Security and Privacy in Computing and Communications, Beijjing, China.10.1109/TrustCom.2014.20 ↗
27. Ajijola, A., Zavarsky, P., and Ruhl, R. (2014, January 8–10). A review and comparative evaluation of forensics guidelines of NIST SP 800-101 Rev. 1: 2014 and ISO/IEC 27037: 2012. Proceedings of the World Congress on Internet Security (WorldCIS-2014), London, UK.10.1109/WorldCIS.2014.7028169 ↗
28. Fernandez, E.B., Yoshioka, N., and Washizaki, H. (2014, January 5–8). Patterns for cloud firewalls. Proceedings of the 3rd Asian Conference on Pattern Language of Programs, Tokyo, Japan.
29. Dilley, J., Laghate, P., Summers, J., and Devanneaux, T. (2013). Cloud Based Firewall System and Service. (US 8458769B2), U.S. Patent.
30. Learning-based dynamic scalable load-balanced firewall as a service in network function-virtualized cloud computing environments10.1007/s11227-018-2387-5 ↗
31. Takahashi, H., Ahmad, H.F., and Mori, K. (2011, January 23–27). Application for autonomous Decentralized multi Layer Cache System to Web application Firewall. Proceedings of the 2011 Tenth International Symposium on Autonomous Decentralized Systems, Tokyo, Japan.10.1109/ISADS.2011.20 ↗
32. Zeineddine, A., and El-Hajj, W. (2018, January 25–29). Stateful distributed firewall as a service in SDN. Proceedings of the 2018 4th IEEE Conference on Network Softwarization and Workshops (NetSoft), Montreal, QC, Canada.10.1109/NETSOFT.2018.8460126 ↗
33. The enhancement of security in healthcare information systems10.1007/s10916-010-9628-3 ↗
34. Web Application Fi rewall (W AF)
35. Krueger, T., Gehl, C., Rieck, K., and Laskov, P. (2010, January 22–26). TokDoc: A self-healing web application firewall. Proceedings of the 2010 ACM Symposium on Applied Computing, Sierre, Switzerland.10.1145/1774088.1774480 ↗
36. Torrano-Gimenez, C., Perez-Villegas, A., and Alvarez, G. (2009). A self-learning anomaly-based web application firewall. Computational Intelligence in Security for Information Systems, Springer.10.1007/978-3-642-04091-7_11 ↗
37. Neupane, K., Haddad, R., and Chen, L. (2018, January 19–22). Next generation firewall for network security: A survey. Proceedings of SoutheastCon, St. Petersburg, FL, USA.10.1109/SECON.2018.8478973 ↗
38. Denis, M., Zena, C., and Hayajneh, T. (2016, January 29). Penetration testing: Concepts, attack methods, and defense strategies. Proceedings of the 2016 IEEE Long Island Systems, Applications and Technology Conference (LISAT), Farmingdale, NY, USA.10.1109/LISAT.2016.7494156 ↗
39. Weidman, G. (2014). Penetration Testing: A Hands-On Introduction to Hacking, No Starch Press.
40. Hamid, H.R.H., and Abdullah, N.Y. (2015, January 29–31). Portable Toolkit for Penetration Testing and Firewall Configuration. Proceedings of the 2015 Fourth International Conference on Cyber Security, Cyber Warfare, and Digital Forensic (CyberSec), Berlin, Germany.10.1109/CyberSec.2015.26 ↗
41. Brucker, A.D., Brügger, L., Kearney, P., and Wolff, B. (2010, January 6–10). Verified firewall policy transformations for test case generation. Proceedings of the 2010 Third International Conference on Software Testing, Verification and Validation, Paris, France.10.1109/ICST.2010.50 ↗
42. Diekmann, C., Michaelis, J., Haslbeck, M., and Carle, G. (2016, January 17–19). Verified iptables firewall analysis. Proceedings of the 2016 IFIP Networking Conference (IFIP Networking) and Workshops, Vienna, Austria.10.1109/IFIPNetworking.2016.7497196 ↗
43. Aaron, J. (2011). Methods, Network Services, and Computer Program Products for Dynamically Assigning Users to Firewall Policy Groups. (US 7954143B2), U.S. Patent.
44. Fulp, E.W., and Tarsa, S.J. (2004). Network firewall policy tries. Tech. Rep., 20049, Available online: http://fulp.cs.wfu.edu/ewfPub.html.
45. Kim, H., and Ju, H. (2011, January 21–23). Efficient method for inferring a firewall policy. Proceedings of the 2011 13th Asia-Pacific Network Operations and Management Symposium, Taipei, Taiwan.10.1109/APNOMS.2011.6077015 ↗
46. Matsumoto, S., and Bouhoula, A. (2009, January 20–22). Automatic verification of firewall configuration with respect to security policy requirements. Proceedings of the International Workshop on Computational Intelligence in Security for Information Systems CISIS’08, Sousse, Tunisa.
47. Koved, L., and Luo, L. (2016). Interactive Management of Web Application Firewall Rules. (947,345,7B2), U.S. Patents.
48. Brownell, D. (2004). Authenticated Firewall Tunneling Framework. (675,483,1B2), U.S. Patents.
49. Providing Security in VPN by using Tunneling and Firewall
50. Secure web tunneling10.1016/S0169-7552(98)00048-8 ↗
51. Firewall technologies10.1109/45.985324 ↗
52. Firewalls: A Study and Its Classification
53. Network Security—Firewall
54. Ling-Fang, H. (2012, January 6–8). The firewall technology study of network perimeter security. Proceedings of the 2012 IEEE Asia-Pacific Services Computing Conference, Guilin, China.10.1109/APSCC.2012.23 ↗
55. Greco, L., Percannella, G., Ritrovato, P., Tortorella, F., and Vento, M. (2020). Trends in IoT based solutions for health care: Moving AI to the Edge. Pattern Recog. Let.10.1016/j.patrec.2020.05.016 ↗
56. Lyu, M.R., and Lau, L.K. (2000, January 25–27). Firewall security: Policies, testing and performance evaluation. Proceedings of the 24th Annual International Computer Software and Applications Conference, COMPSAC2000, Taipei, Taiwan.
57. Network attacks: Taxonomy, tools and systems10.1016/j.jnca.2013.08.001 ↗
58. Discovery and resolution of anomalies in web access control policies10.1109/TDSC.2013.18 ↗
59. Elrayyes, E.K. (2015). A Model for Strengthening Accuracy in Detecting the Anomalous Firewall Rules in Small Network (SADAR). Comput. Sci., Available online: https://iugspace.iugaza.edu.ps/handle/20.500.12358/20068?locale-attribute=en.
60. Saâdaoui, A., Souayeh, N.B.Y.B., and Bouhoula, A. (2015, January 28–30). Automated and optimized fdd-based method to fix firewall misconfigurations. Proceedings of the 2015 IEEE 14th International Symposium on Network Computing and Applications, Cambridge, MA, USA.10.1109/NCA.2015.31 ↗
61. Deployment and management with next-generation firewalls10.1016/S1353-4858(13)70113-2 ↗
62. Improving cloud network security using the Tree-Rule firewall10.1016/j.future.2013.06.024 ↗
63. Charles, P.P. (2006). Security in Computing, Prentice Hall.
64. A review of trust aspects in cloud computing security
65. Buhov, D., Thron, R., and Schrittwieser, S. (2016, January 24–25). Catch Me if You Can! Transparent Detection of Shellcode. Proceedings of the 2016 International Conference on Software Security and Assurance (ICSSA), St. Polten, Austra.10.1109/ICSSA.2016.18 ↗
66. Wack, J., Cutler, K., and Pole, J. (2002). Guidelines on Firewalls and Firewall Policy, Booz-allen and Hamilton Inc.10.6028/NIST.SP.800-41 ↗
67. Cordova, R.F., Marcovich, A.L., and Santivanez, C.A. (2018, January 22–24). An Efficient Method for Ontology-Based Multi-Vendor Firewall Misconfiguration Detection: A Real-Case Study. Proceedings of 2018 IEEE ANDESCON, Santiago de Cali, Colombia.10.1109/ANDESCON.2018.8564655 ↗
68. Czubak, A., and Szymanek, M. (2016, January 24). Algorithmic complexity vulnerability analysis of a stateful firewall. Proceedings of the Information Systems Architecture and Technology: Proceedings of 37th International Conference on Information Systems Architecture and Technology–ISAT 2016–Part II, Karpacz, Poland.10.1007/978-3-319-46586-9_7 ↗
69. Chakra, A., Dawson, C.J., Deng, Y., Hamilton, I.R.A., Li, J.S., and Zeng, L. (2015). Image Vulnerability Repair in a Networked Computing Environment. (909,444,6B2), U.S. Patent.
70. Cherdantseva, Y., and Hilton, J. A reference model of information assurance & security. Proceedings of the 2013 International Conference on Availability, Reliability and Security, Regensburg, Germany.10.1109/ARES.2013.72 ↗
71. Rajib, N. (2017). Cisco Firepower Threat Defense (FTD): Configuration and Troubleshooting Best Practices for the Next-Generation Firewall (NGFW), Next-Generation Intrusion Prevention System (NGIPS), and Advanced Malware Protection (AMP), Cisco Press.
72. Dadhich, P. (2020). Security of Healthcare Systems with Smart Health Records Using Cloud Technology. Machine Learning with Health Care Perspective, Springer.10.1007/978-3-030-40850-3_9 ↗
73. Determining the right level for your IT security investment: A rural medical center facing threats of data breaches discovered that hospital IT security investments go beyond just dollars and cents
74. Abdullah, T., and Jones, A. (2019, January 16–18). eHealth: Challenges far integrating blockchain within healthcare. Proceedings of the 2019 IEEE 12th International Conference on Global Security, Safety and Sustainability (ICGS3), London, UK.10.1109/ICGS3.2019.8688184 ↗