Hasan, Mahbub and Rahman, Mohammad Masudur and Shokran, Md (2024) CYBERSECURITY RISK ASSESSMENT FRAMEWORK FOR HEALTHCARE INFORMATION SYSTEMS: PROTECTING PATIENT DATA, CONNECTED MEDICAL DEVICES, AND CRITICAL CARE OPERATIONS. Journal of Artificial Intelligence and Digital Economy, 1 (12). ISSN 3032-1077

Text JAIDE_1920_Mahbub+Hasan_Cybersecurity+Risk+Assessment+Framework.pdf Download (1MB)

Abstract

Objective: The objective of this research is to propose a cyber-security risk assessment framework based on machine learning that can identify, assess and predict cyber risks in healthcare information systems, connected medical devices and intensive care unit (ICU) environments. Method: The research uses the IoT Healthcare Security Dataset (IoT-ICU HSD) consisting of normal and malicious network traffic generated from an IoT-enabled ICU setup, which consists of patient monitoring sensors and control units. A thorough data preprocessing pipeline is designed to enhance data quality and the performance of the model, which involves cleaning the data, feature engineering, feature selection and normalization. Various supervised machine learning algorithms such as Decision Tree, Random Forest, Support Vector Machine, Logistic Regression and Extreme Gradient Boosting (XGBoost) are trained and tested for the classification of normal and malicious network traffic. The accuracy, precision, recall, F1-score, receiver operating characteristic area under the curve (ROC-AUC) and confusion matrix analysis are used for model performance assessment. Results: The results will provide actionable insight for healthcare organizations to enhance cybersecurity posture, secure connected medical devices, ensure uninterrupted critical care services and facilitate secure digital healthcare transformation. Novelty: The proposed framework seeks to offer early detection of cyber threats, facilitate proactive risk assessment, and boost health-care information system security and resilience while maintaining confidentiality, integrity, and availability of sensitive patient information.

Item Type:	Article
Uncontrolled Keywords:	Healthcare information systems, Cybersecurity risk assessment, Internet of Medical Things (IoMT), Machine learning, Healthcare cybersecurity and intrusion detection
Subjects:	H Social Sciences
Depositing User:	admin eprints
Date Deposited:	29 Sep 2026 04:12
Last Modified:	29 Sep 2026 04:12
URI:	http://eprints.umsida.ac.id/id/eprint/17121

Actions (login required)

View Item