부산대학교 도서관

The increased usage of information technology makes the healthcare ecosystem more vulnerable to the activities of hackers and other perpetrators of cyber-related crime. Information sharing is an essential for creating awareness and increasing collaborative response capabilities for overall security improvements. Such sharing capabilities can significantly contribute to the healthcare sector in the aspect of raising awareness towards current threats and risks for, with the purpose of performing informed decision making. This paper proposes a flexible approach to share risk related information among the healthcare entities. Our approach includes a business process model and cyber attack forecasting system in order to present information sharing among different entities of the healthcare system. To achieve this we adopt STIX as a standard protocol to map the business processes and services of the healthcare organisations with risk related information including vulnerability, threat and control information. Finally, a demonstrator is added to present the information sharing and applicability of the work.