Vulnerability prediction for secure healthcare supply chain service delivery

Islam, Shareeful ORCID logoORCID: https://orcid.org/0000-0003-0885-1881, Abba, Abdulrazaq, Ismail, Umar, Mouratidis, Haralambos and Papastergiou, Spyridon (2022) Vulnerability prediction for secure healthcare supply chain service delivery. Integrated Computer-Aided Engineering. pp. 1-21. ISSN 1875-8835

[img]
Preview
Text
Accepted Version
Available under the following license: Creative Commons Attribution Non-commercial No Derivatives.

Download (4MB) | Preview
Official URL: https://content.iospress.com/articles/integrated-c...

Abstract

Healthcare organisations are constantly facing sophisticated cyberattacks due to the sensitivity and criticality of patient health care information and wide connectivity of medical devices. Such attacks can pose potential disruptions to critical services delivery. There are number of existing works that focus on using Machine Learning (ML) models for predicting vulnerability and exploitation but most of these works focused on parameterized values to predict severity and exploitability. This paper proposes a novel method that uses ontology axioms to define essential concepts related to the overall healthcare ecosystem and to ensure semantic consistency checking among such concepts. The application of ontology enables the formal specification and description of healthcare ecosystem and the key elements used in vulnerability assessment as a set of concepts. Such specification also strengthens the relationships that exist between healthcare-based and vulnerability assessment concepts, in addition to semantic definition and reasoning of the concepts. Our work also makes use of Machine Learning techniques to predict possible security vulnerabilities in health care supply chain services. The paper demonstrates the applicability of our work by using vulnerability datasets to predict the exploitation. The results show that the conceptualization of healthcare sector cybersecurity using an ontological approach provides mechanisms to better understand the correlation between the healthcare sector and the security domain, while the ML algorithms increase the accuracy of the vulnerability exploitability prediction. Our result shows that using Linear Regression, Decision Tree and Random Forest provided a reasonable result for predicting vulnerability exploitability.

Item Type: Journal Article
Keywords: Healthcare supply chain service, ontology, vulnerability exploitability prediction, machine learning, cyber security
Faculty: Faculty of Science & Engineering
SWORD Depositor: Symplectic User
Depositing User: Symplectic User
Date Deposited: 06 Sep 2022 10:59
Last Modified: 06 Sep 2022 10:59
URI: https://arro.anglia.ac.uk/id/eprint/707877

Actions (login required)

Edit Item Edit Item