Secure and Resilient Digital Transformation of Healthcare: First Workshop, SUNRISE 2023, Stavanger, Norway, November 30, 2023, Proceedings (Communications in Computer and Information Science, 1884)

This CCIS post conference volume constitutes the proceedings of First Workshop, SUNRISE 2023, in Stavanger, Norway, in November 2023. The 4 full papers together in this volume were carefully reviewed and selected from 9 submissions. The workshop offers a wide range of techniques addressing cybersecurity skills, access control, privacy risks, and resilience in healthcare systems. Preface Organization Contents Cybersecurity Skills and Access Control in Healthcare Training on Social Media Cybersecurity Skills in the Healthcare Context 1 Introduction 2 State of the Art 3 Proposal 3.1 Social Media Training Simulator 3.2 Architecture 4 Implementation 4.1 Template Generation Module 4.2 Social Media Management Module (SMMM) 4.3 Hot Configuration Module 4.4 NPC Simulation Module 5 Demo 6 Conclusions and Future Work References Blockchain-Based Access Control for Electronic Health Records 1 Introduction 2 Proposed Framework 2.1 Components 2.2 Architecture 2.3 Workflow 3 Related Work 4 Conclusion References Privacy Risks, and Resilience in Healthcare Systems Threat Modeling Towards Resilience in Smart ICUs 1 Introduction 2 Background 2.1 Digitization and Resilience of Healthcare 2.2 5G Networks in Healthcare 3 Related Work 3.1 History of Mobile Communication 3.2 Smart Intensive Care Unit 3.3 Intensive Care Unit Resilience 4 Method 5 Results 5.1 Mapping Smart ICU Network Categories to ICU Resilience Factors 5.2 Mapping Cybersecurity Threats to Smart ICU Network Component Categories 5.3 Transitive Relation Between Cybersecurity Threats and ICU Resilience Factors 5.4 Risk Assessment 6 Conclusion References Characterizing Privacy Risks in Healthcare IoT Systems 1 Introduction 2 System Model 3 Privacy Risks in Healthcare IoT Systems 3.1 Privacy Risks Incurred by Communications Between Healthcare IoT Devices and the Gateway (Smartphone) 3.2 Privacy Risks Incurred by Internet Communications Despite Standard Countermeasures 3.3 Privacy Risks in Healthcare IoT Data Collection 3.4 Privacy Risks Incurred by Curious Internet Service Providers 3.5 Privacy Risks Incurred by Attacks Against Healthcare Service Provider Servers 3.6 Privacy Risks Despite the Use of Application-Layer Pseudonyms 4 Exploring Countermeasures for Enhancing Privacy in Healthcare IoT Systems 4.1 Traffic Feature Obfuscation Between IoT Devices and Gateway 4.2 Privacy Enhancement for Healthcare IoT Device Data Collection 4.3 Thwarting a Curious ISP 4.4 Data Privacy Protection for Healthcare Provider Server 5 Limitations 6 Conclusion and Future Research Directions References Invited Papers from Keynotes Data Analytics, Digital Transformation, and Cybersecurity Perspectives in Healthcare 1 Introduction 2 Related Works 3 Hypotheses Development and Conceptual Framework 3.1 Data Collection 3.2 Research Instruments 3.3 Statistical Analysis 4 Results 4.1 Framework Measurements 4.2 Structural Framework 5 Discussion 6 Conclusions References Methodology for Automating Attacking Agents in Cyber Range Training Platforms 1 Introduction 2 State of the Art 3 Methodology 3.1 Matrix 3.2 Logic Phase 4 Architecture 5 Implementation 6 Conclusions References Author Index