Joliet Junior College Countermeasures in US Critical Infrastructure Essay Conduct a literature review in emerging threat and countermeasures in the U.S. cr

Joliet Junior College Countermeasures in US Critical Infrastructure Essay Conduct a literature review in emerging threat and countermeasures in the U.S. critical infrastructure Conduct a literature review on emerging threats and challenges faced by the U.S. critical infrastructure and the application of countermeasures. You will review the literature on emerging threats and countermeasures and discuss the identified problems and gaps in the literature.

You will expand on the findings and discuss how researchers have attempted to examine the findings by collecting their data – you will NOT be collecting data, but rather report on how researchers did their collection. As you read the literature, it will become apparent that there are multiple issues, pick issue(threats on u.s health care through ransomeware) that stands out in the literature. FORMAT Cover: Include the names of those who participated in the project Table of contents: Use a

Microsoft Enabled Table of Contents feature.

Background: Describe the issue, discuss the problem, and elaborate on any previous attempts to examine the research issue. Research Questions: In your identified problem area that you are discussing, what were the research questions that were asked?

Methodology: What approach did the researcher use, qualitative, quantitative, survey, case study? Describe the population that was chosen.

Data Analysis: What were some of the findings, for example, if there were any hypotheses asked, were they supported?

Conclusions: What was the conclusion of any data collections, e.g., were research questions answered, were hypotheses supported?

Discussion: Here you can expand on the research and what the big picture means; how do the results find in your literature review help organizations in the critical infrastructure areas? What do you see as long-term impacts and what further research could be done in the field?

References: Include at least ten scholarly references in APA format.

Cover

• Topic

• Background of the problem

• Research Questions (if any)

• Methodology

• Data Analysis

• Conclusion

• Discussion

• References : **note** . all references should be peer reviewed and sources and should not be older than 5 years Research Assignment – ITS-834
COURSE
DELIVERABLE
ITS-834 – EMERGING THREATS & COUNTERMEASURES
Conduct a literature review in emerging threat and countermeasures in the U.S.
critical infrastructure
Conduct a literature review on emerging threats and challenges faced by the U.S.
critical infrastructure and the application of countermeasures.
You will review the literature on emerging threats and countermeasures and
discuss the identified problems and gaps in the literature. You will expand on the
findings and discuss how researchers have attempted to examine the findings by
collecting their data – you will NOT be collecting data, but rather report on how
researchers did their collection.
As you read the literature, it will become apparent that there are multiple issues,
pick one issue that stands out in the literature.
FORMAT
Cover:
Include the names of those who participated in the project
Table of contents:
Use a Microsoft Enabled Table of Contents feature.
Background:
Describe the issue, discuss the problem, and elaborate on any previous attempts
to examine the research issue.
Research Questions:
In your identified problem area that you are discussing, what were the research
questions that were asked?
Methodology:
What approach did the researcher use, qualitative, quantitative, survey, case
study? Describe the population that was chosen.
Data Analysis:
What were some of the findings, for example, if there were any hypotheses asked,
were they supported?
Conclusions:
What was the conclusion of any data collections, e.g., were research questions
answered, were hypotheses supported?
Discussion:
Here you can expand on the research and what the big picture means; how do the
results find in your literature review help organizations in the critical infrastructure
areas? What do you see as long-term impacts and what further research could be
done in the field?
References:
Include at least ten scholarly references in APA format.
SUNDAY
POWERPOINT
PRESENTATION
Your presentation will have a slide that addresses each
•
•
•
•
•
•
•
•
•
Cover
Topic
Background of the problem
Research Questions (if any)
Methodology
Data Analysis
Conclusion
Discussion
References
Cybersecurity
Marcus Chung
Avoid Getting Hit by
Ransomware: Five Tips
for Employees
When Lives Are on the Line, Your Employees Could
Be Your Best Line of Defense
E
Marcus Chung is Chief Executive
Officer (CEO) at BoldCloud, the
cybersecurity advisor that helps businesses and consumers stop cyberthreats and close security gaps. With
its patent-pending Mirror Shielding
technology, NeuShield provides a
way to revert digital files and devices
to their pre-attack state when other
malware defenses, like antivirus and
anti-ransomware, fail. Marcus has a rich
background in cybersecurity, including
a management role at Sygate, which
was acquired by Symantec, and COO of
Malwarebytes.
very person, from the newest employee to the
chief executive officer, can either strengthen or
weaken an organization’s security posture. For this
reason, you should help your employees take precautions against the latest ransomware scams so that they
don’t fall victim to cybercriminals who are looking to
profit at your organization’s expense.
When it comes to ransomware attacks, health care
remains the most targeted industry—accounting for
37 percent of all ransomware attacks—according to the
latest data1 from specialist insurer Beazley. Ransom
demands have jumped to as high as $2.8 million in
cases when criminals find that they have more leverage to increase the ransom demand once they have
gained network access. Symantec reported2 that 25 percent of ALL SamSam ransomware attacks hit the health
care industry.
One of the main reasons health care has become
such fertile ground for ransomware hacks is the shift
to digitalized personal health care records in a rapid
timeframe. Less than 10 years ago, most physicians
updated patient records manually and stored them in
color-coded file systems. By the end of 2017, industry
data suggest that approximately 90 percent of officebased physicians have moved to electronic systems
(electronic health records—EHR/electronic medical
records—EMR) for the storage, retrieval, and management of electronic health data. Virtually all of these
systems are online and Internet accessible. EHRs/
EMRs really made the health care industry a perfect
target for ransomware attempts.
The cost of a ransomware attack, however, goes
far beyond any extortion payment. When considering the associated costs including downtime, lost revenue, angry patients or customers, attack mitigation
Journal of Health Care Compliance — January–February 2019
43
Cybersecurity
and recovery expenses, brand reputation
damage, and non-compliance fines, in retrospect the cost of the ransom itself may
seem trivial.
When United Kingdom’s National
Health Service (NHS) was impacted by
the global WannaCry outbreak of 2017, it
brought hundreds of NHS facilities to a
standstill for several days, resulting in the
cancellation of thousands of appointments
and operations, as well as the urgent relocation of patients from impacted emergency centers. In April 2017, Erie County
Medical Center lost access to 6,000 computers due to a ransomware attack, which
resulted in six weeks of manual operations
and a recovery process that ultimately
cost the medical center $10M.
Unfortunately, security technologies
can only do so much to protect your organization against an attack. Ransomware
typically spreads through phishing emails
or by visiting an infected website. Even
the most advanced antivirus and antiransomware solutions can’t stop Fully
UnDetectable (FUD) threats that were
conceived by cybercriminals to directly
evade existing security layers and harm
data. In fact, the majority of ransomware
victims have some traditional anti-virus
and anti-malware protection in place and
yet still fall prey to attacks.
Even if your organizations have backups, you may be surprised to find that
you are still vulnerable. Today, many
criminals do reconnaissance on their victim’s network and compromise backups
before deploying the encrypting malware
to increase the odds that the organization
will pay the ransom.
Paying the ransom doesn’t always
work out either, however. A study3 by the
CyberEdge Group shows that of the 39
percent of ransomware victims who have
paid, less than half recover their data. It
also leaves the victimized organization vulnerable to another attack. If the root cause
of the breach is not corrected, another day
can bring another ransom request.
44
Ultimately, it is up to your organizational leaders to decide whether or not to
pay. Health care organizations are a favorite target of cybercriminals because they
are more likely to pay up when computer
downtime can introduce life or death consequences. Regardless of your position on
paying cybercriminals a ransom, the best
strategy is to avoid being placed in a compromised position in the first place. But
how?
Obviously, all health care organizations want to avoid being a ransomware
victim, but cybersecurity is a complex
problem that requires multiple layers of
defenses. Small to medium size health
care organizations are particularly vulnerable since many believe they don’t
have adequate financial or technical
resources to defend themselves against
the onslaught attacks.
Industry experts estimate that a company with 50 employees may have to spend
upward of $50,000 to deploy sophisticated
endpoint technologies such as antivirus,
anti-malware software and firewalls to
keep intruders out and then thousands of
dollars each year to keep everything up to
date. Even when making this investment
in security, it doesn’t guarantee a breach
won’t happen. Just one wrong click by an
employee is all it takes.
Five Ransomware Prevention Tips to
Share with Your Employees
In the face of this rapidly growing threat,
your health care organizations should
take concrete steps to deploy the technologies you need to protect your systems from ransomware attacks. You also
need to educate employees, however, on
how ransomware is distributed and teach
them to be cautious when clicking on
online advertisements or email links, visiting a new website, and opening attachments from unfamiliar or suspicious
senders.
To avoid ransomware threats whether
at home or on the job, all computer
Journal of Health Care Compliance — January–February 2019
Cybersecurity
users should follow these security best
practices:
1. Always have a trusted antivirus or antimalware software installed on every
single computer and mobile device
used at work and home. Eset,4 Avast,5
and Malwarebytes6 all offer highly
rated antivirus and anti-malware products for home users and businesses.
2. Choose strong and unique passwords
for all work and personal accounts
including mobile devices and wireless connections. Then keep them safe
with a password management tool.
LastPass7 and Roboform8 are two very
popular password management tools
that can be used to generate, protect,
and manage both work and personal
passwords.
3. Regularly back up files to an external hard drive that is not connected to
the Internet. Programs like Macrium,9
Novastor,10 and Acronis provide a convenient and safe way to back up frequently used files to the cloud (via
encrypted backups).
4. Never open suspicious email attachments or links. Check out the email
business security tools offered by
Zerospam or Mailwasher, which offer
free versions for home users.
5. Use Mirror Shielding technology as a
failsafe data protection measure, just
in case things go wrong. NeuShield11
offers a free version of its product for
home users and trial versions for businesses. Their Mirror Shielding technology allows an attacker to believe he or
she has taken control of a computer’s
data files, but the malicious code is seeing a mirror image of the system and
does not have actual possession of the
data. If a user does receive a ransom
demand, it only takes a single click to
revert back to the original files.
Other helpful hints: Make sure your
employees know that they should immediately disconnect from the Internet to
avoid any additional infections or data
losses if they receive a ransomware popup
or message alerting them to an infection.
Additionally, targeted individuals and organizations should alert local law enforcement personnel and file a complaint at
www.IC3.gov.
Conclusion
Many malicious attacks can be stopped by
endpoint security products and advanced
threat protection solutions, but creative
scammers keep finding ways to get past
these defenses. If your security program
does not address these new methods of
attack, and you do not empower your
employees to defend themselves, they
will be more likely to fall for a scam or
engage in actions that threaten the security of your data and the integrity of your
network.
A 2017 survey from Wombat Security
Technologies revealed that 30 percent of
employees don’t know what phishing is.12
Worse yet, ransomware is an unknown
concept to nearly two-thirds of health care
workers. If your organization is dependent
on computer systems to serve patients or
simply generate revenue, these statistics
should serve as a wakeup call.
It may seem like an uphill battle, but if
the health care industry is willing to make
the investment in the right tools and training, employees can help defend against
growing ransomware attacks and other
sneaky methods used to scam health care
organizations out of cash and valuable
data.
Endnotes
1. www.beazley.com/news/2018/beazley_breach_
insights_october_2018.html
2. healthitsecurity.com/news/healthcare-makes-upone-quarter-of-samsam-ransomware-attacks
3. cyber-edge.com/cdr/
4. www.eset.com/us/
5. www.avast.com/en-us/lp-ppc-hp?ppc=e2&ms
clkid=05cb833bbcac1e629932d8ec16054488
&utm_source=bing&utm_medium=cpc&utm_
campaign=en-us_atv_sch_brn_exc_bng&utm_
term=avast&utm_content=Top-avast-Exact&gclid=C
Lme1f74rN4CFYHJswodiksOfA&gclsrc=ds
Journal of Health Care Compliance — January–February 2019
45
Cybersecurity
6. www.malwarebytes.com/
7. www.lastpass.com/
8. /www.roboform.com/lp?frm=rfp-006&affid=12e
01&msclkid=b9629e67a7c8100a3e9dc5b00be15
f8f&utm_source=bing&utm_medium=cpc&utm_
campaign=US_RoboForm_Brand%20
-%20General&utm_term=roboform&utm_
content=RoboForm
46
9.
10.
11.
12.
www.macrium.com/
www.novastor.com/
www.neushield.com/products/#prod-table
www.esecurityplanet.com/network-security/anurgent-need-for-security-awareness-training-30-percent-of-employees-dont-know-what-phishing-is.
html
Journal of Health Care Compliance — January–February 2019
Copyright of Journal of Health Care Compliance is the property of Aspen Publishers Inc. and
its content may not be copied or emailed to multiple sites or posted to a listserv without the
copyright holder’s express written permission. However, users may print, download, or email
articles for individual use.
See discussions, stats, and author profiles for this publication at: https://www.researchgate.net/publication/324688193
Cybersecurity in healthcare: A narrative review of trends, threats and ways
forward
Article in Maturitas · April 2018
DOI: 10.1016/j.maturitas.2018.04.008
CITATIONS
READS
17
1,488
2 authors:
Lynne Coventry
Dawn Beverley Branley-Bell
Northumbria University
Northumbria University
80 PUBLICATIONS 971 CITATIONS
13 PUBLICATIONS 42 CITATIONS
SEE PROFILE
Some of the authors of this publication are also working on these related projects:
CHAISE View project
Updates of Impact Factors (SCI, SSCI, EI, F1000, etc) View project
All content following this page was uploaded by Dawn Beverley Branley-Bell on 16 July 2018.
The user has requested enhancement of the downloaded file.
SEE PROFILE
Maturitas 113 (2018) 48–52
Contents lists available at ScienceDirect
Maturitas
journal homepage: www.elsevier.com/locate/maturitas
Cybersecurity in healthcare: A narrative review of trends, threats and ways
forward
T
?
Lynne Coventry , Dawn Branley
Northumbria University, Newcastle upon Tyne, UK
A R T I C LE I N FO
A B S T R A C T
Keywords:
Cybersecurity
Medical devices
Electronic health record
Electronic healthcare technology is prevalent around the world and creates huge potential to improve clinical
outcomes and transform care delivery. However, there are increasing concerns relating to the security of
healthcare data and devices. Increased connectivity to existing computer networks has exposed medical devices
to new cybersecurity vulnerabilities. Healthcare is an attractive target for cybercrime for two fundamental
reasons: it is a rich source of valuable data and its defences are weak. Cybersecurity breaches include stealing
health information and ransomware attacks on hospitals, and could include attacks on implanted medical devices. Breaches can reduce patient trust, cripple health systems and threaten human life. Ultimately, cybersecurity is critical to patient safety, yet has historically been lax. New legislation and regulations are in place to
facilitate change. This requires cybersecurity to become an integral part of patient safety. Changes are required
to human behaviour, technology and processes as part of a holistic solution.
1. Introduction
Healthcare technologies have the potential to extend, save and enhance lives. Technologies range from those providing storage of electronic health records (EHRs); devices that monitor health and deliver
medication (including general purpose devices and wearables, and
technology embedded within the human body); to telemedicine technology delivering care remotely – even across countries. Patients increasingly use their own mobile applications, which can now be integrated with telemedicine/telehealth into the medical Internet of
Things [1] for collaborative disease management and care coordination.
As healthcare devices continue to evolve, so does their interconnectivity. Whilst traditionally standalone, many are now integrated
into the hospital network. There are currently 10–15 connected devices
per bed in US hospitals [2]. Interconnection has many bene?ts—e.g.,
e?ciency, error reduction, automation and remote monitoring. These
bene?ts are transforming the treatment of both acute and chronic longterm conditions. Interconnected technology outside of the clinical environment allow health professionals to monitor and adjust implanted
devices without the need for a hospital visit or invasive procedures.
EHRs can improve patient care by making health information more
broadly available [3]. Unfortunately, interconnection introduces new
cybersecurity vulnerabilities. Cybersecurity is concerned with safeguarding computer networks and the information they contain from
?
penetration and accidental or malicious disruption. There are growing
concerns that cybersecurity within healthcare is not su?cient and this
has already resulted in a lack of medical information con?dentiality [4]
and integrity of data [5,6].
Of course, privacy breaches were a concern prior to the emergence
of digital health records. However, the interconnectivity of today’s records provides multiple potential gateways to access; the ability to
access remotely (whereas historically paper records would have been
safeguarded within hospitals and only accessible via physical breaches);
the ability for data theft to go unnoticed; and access to a more complete
health record providing a more valuable resource for potential attacks
(whereas previously health records may have been split between many
di?erent hospital(s)/departments). Historically, misplaced paper records or a stolen laptop may have exposed hundreds or thousands of
patients to a potential date breach, now that this information is electronic and available on numerous networks, a privacy breach has the
potential to a?ect millions of people [7]. To illustrate further, celebrity
health records have always been a target for breaches [8]. However
prior to the emergence of electronic records, these breaches were limited to hospital sta? who could gain access to the physical paperwork.
Now celebrity health records can be potentially remotely accessed—increasing the potential for breaches. That said, electronic records
also have a key privacy bene?t over paper records—the ability to track
sta? access (a recent report suggests that over half of healthcare breaches come from inside the organisation [8]). Whereas previously it
Corresponding author at: 153 Northumberland Building, Northumbria University, Newcastle upon Tyne, NE1 8ST, UK.
E-mail address: Lynne.coventry@northumbria.ac.uk (L. Coventry).
https://doi.org/10.1016/j.maturitas.2018.04.008
Received 2 March 2018; Received in revised form 16 April 2018; Accepted 18 April 2018
0378-5122/ © 2018 Elsevier B.V. All rights reserved.
Maturitas 113 (2018) 48–52
L. Coventry, D. Branley
could be di?cult to detect who had a ‘sneak peek’ at paper medical
records, it is often easier to track who has accessed electronic records.
Although there are ways around this for more sophisticated/external
attackers.
As illustrated by breaches reported in the media, cybersecurity
vulnerabilities are being exploited. Healthcare is currently one of the
most targeted sectors. Reports highlight the growth of attacks and the
rise in medical identity theft—with millions of medical records stolen
globally [9–12]. Breaches can arise from hacking, malware and insider
threats. Hacking is de?ned as unauthorised access to a computer system
to gain information or cause disruption [13]. Malware (“malicious
software”) refers to programs designed to in?ltrate computers without
users’ consent and includes threats such as viruses and ransomware.
While insider threats are issues created by the mistakes or deliberate
actions of sta? (e.g., responding to phishing emails—a social engineering attack to extract login cred…
Purchase answer to see full
attachment