Tu, M., & Spoa-Harty, K. L. (2014, June), Data Loss Prevention Management in Healthcare Enterprise Environments  Paper presented at 2014 ASEE Annual Conference & Exposition, Indianapolis, Indiana. 10.18260/1-2--20243

\bibitem{asee_peer_20243}
  Tu, M., \& Spoa-Harty, K. L. (2014, June), \emph{Data Loss Prevention Management in Healthcare Enterprise Environments}
  Paper presented at 2014 ASEE Annual Conference \& Exposition, Indianapolis, Indiana.
  10.18260/1-2--20243

Manghui Tu and Kimberly Lynn Spoa-Harty.  "Data Loss Prevention Management in Healthcare Enterprise Environments".  2014 ASEE Annual Conference & Exposition, Indianapolis, Indiana, 2014, June.  ASEE Conferences, 2014.  https://peer.asee.org/20243 Internet.  22 Dec, 2024

\bibitem{asee_peer_20243}
  Manghui Tu and Kimberly Lynn Spoa-Harty.
  "Data Loss Prevention Management in Healthcare Enterprise Environments".
  \emph{2014 ASEE Annual Conference \& Exposition, Indianapolis, Indiana, 2014, June}.
  ASEE Conferences, 2014.
  https://peer.asee.org/20243 Internet.  22 Dec, 2024

@INPROCEEDINGS{asee_peer_20243
author = "Manghui Tu and Kimberly Lynn Spoa-Harty"
title = "Data Loss Prevention Management in Healthcare Enterprise Environments"
booktitle = "2014 ASEE Annual Conference \& Exposition"
year = "2014"
month = "June"
address = "Indianapolis, Indiana"
publisher = "ASEE Conferences"
note = {https://peer.asee.org/20243}
number = {10.18260/1-2--20243}
}

TY  - CPAPER
AB  -      As healthcare data are pushed online, consumers have raised great concerns on databreach of their personal information. Also, law and regulations have placed businessesand public organizations under obligations to take actions to prevent data breach. Amongvarious threats, insider threats have been identified to be a major threat on data loss.Thus, effective mechanisms to control insider threats to prevent data loss are urgentlyneeded.   The objective of this research is to address data loss prevention challenges in thehealthcare enterprise environment. First, a novel approach is provided to model internalthreat, specifically inside activities, to provide a genuine method that can formallydescribe inside activities. With inside activities modeling, data loss paths and threatvectors are formally described and identified. Then, threat vectors and potential data losspaths have been investigated in a healthcare enterprise environment. Threat vectors havebeen enumerated and data loss statistics for some threat vectors have been collected.Finally, evidences of inside activities are modeled and the models are expected to provideguidance for internal activity incident identification, detection and reconstruction
AU  - Manghui Tu
AU  - Kimberly Lynn Spoa-Harty
CY  - Indianapolis, Indiana
DA  - 2014/06/15
PB  - ASEE Conferences
TI  - Data Loss Prevention Management in Healthcare Enterprise Environments
UR  - https://peer.asee.org/20243
DO  - 10.18260/1-2--20243
ER  -