東華大學圖書館 |

Identification of Data Privacy Challenges and Development of Solutions for the Edge Components of the Telemedicine Datapath /

紀錄類型:	書目-電子資源 : Monograph/item
正題名/作者:	Identification of Data Privacy Challenges and Development of Solutions for the Edge Components of the Telemedicine Datapath // Zoltan Szabo.
作者:	Szabo, Zoltan,
面頁冊數:	1 electronic resource (158 pages)
附註:	Source: Dissertations Abstracts International, Volume: 86-03, Section: B.
Contained By:	Dissertations Abstracts International86-03B.
標題:	Load. -
電子資源:	https://pqdd.sinica.edu.tw/twdaoapp/servlet/advanced?query=31357240
ISBN:	9798384214823

Identification of Data Privacy Challenges and Development of Solutions for the Edge Components of the Telemedicine Datapath /
Szabo, Zoltan,

Identification of Data Privacy Challenges and Development of Solutions for the Edge Components of the Telemedicine Datapath /Zoltan Szabo. - 1 electronic resource (158 pages)

Source: Dissertations Abstracts International, Volume: 86-03, Section: B.

This dissertation explores the challenges and problems generated by the complex access control requirements of modern telemedicine applications and demonstrates different solutions that meet or facilitate the resolution of these challenges.The scientific results are presented in two groups, which are detailed in the third and fourth chapters of the thesis.The first group of theses focuses on the complex data path of heterogeneous elements in the infrastructure of e-health applications. In it, I have presented the requirements that an access control solution must meet in order to properly and efficiently enforce the defined rules without impeding the care process, and I have defined a taxonomy for the policy categories. I have defined two types of edge outside the cloud that are special cases for privilege management, the processing and caching edge, and examined smartphone-based peer-to-peer networks as an alternative, fully distributed edge type from a stability and efficiency perspective. I have presented a proposed framework that builds on the concept of a Policy Enforcement Point (PEP) to implement an entitlement management point that can be placed at multiple points in the data path, capable of partial analysis of the retrieved data and also partial modification or encryption of the data as necessary before granting access. I implemented the proposed framework using the Open Policy Agent (OPA) and evaluated its operation and efficiency in test environments simulating two specific edge types.In the second group of theses, I investigated the challenges posed by static analysis of applications at the end of the data path. I defined two taxonomies: one for detecting and ranking sensitive data and the other for determining the level of protection of application components. I validated the usability of the categories first by classifying a 200-word collection of variant names and then on a test set of 292 components extracted from an open-source Angular project. The resulting sensitive data was used to investigate the effectiveness of the static source code in identifying the sensitive parts of the software. Similarly, I validated the taxonomy of vulnerability levels, also with the component set of 292 components, and then analyzed the effectiveness of detecting vulnerabilities defined as inadequate isolation of critical parts identified as vulnerabilities in CWE-653, which risk leaking sensitive data, by combining the results of the two tests. In addition to presenting the results, I have also identified the flaws that cause the problems and, based on these, the improvements that can be achieved by tightening the detection principles.

English

ISBN: 9798384214823Subjects--Topical Terms:

3562902
Load.

Identification of Data Privacy Challenges and Development of Solutions for the Edge Components of the Telemedicine Datapath /
LDR:07262nmm a22004453i 4500 001 2432094
005 20250626110603.5
006 m o d
007 cr|nu||||||||
008 261011s2024 miu||||||m |||||||eng d
020 $a 9798384214823
035 $a (MiAaPQD)AAI31357240
035 $a (MiAaPQD)Szegeduszegedhu11883
035 $a AAI31357240
040 $a MiAaPQD $b eng $c MiAaPQD $e rda
100 1 $a Szabo, Zoltan, $e author. $3 3821201
245 1 0 $a Identification of Data Privacy Challenges and Development of Solutions for the Edge Components of the Telemedicine Datapath / $c Zoltan Szabo.
264 1 $a Ann Arbor : $b ProQuest Dissertations & Theses, $c 2024
300 $a 1 electronic resource (158 pages)
336 $a text $b txt $2 rdacontent
337 $a computer $b c $2 rdamedia
338 $a online resource $b cr $2 rdacarrier
500 $a Source: Dissertations Abstracts International, Volume: 86-03, Section: B.
500 $a Advisors: Bilicki, Vilmos.
502 $b Ph.D. $c University of Szeged (Hungary) $d 2024.
520 $a This dissertation explores the challenges and problems generated by the complex access control requirements of modern telemedicine applications and demonstrates different solutions that meet or facilitate the resolution of these challenges.The scientific results are presented in two groups, which are detailed in the third and fourth chapters of the thesis.The first group of theses focuses on the complex data path of heterogeneous elements in the infrastructure of e-health applications. In it, I have presented the requirements that an access control solution must meet in order to properly and efficiently enforce the defined rules without impeding the care process, and I have defined a taxonomy for the policy categories. I have defined two types of edge outside the cloud that are special cases for privilege management, the processing and caching edge, and examined smartphone-based peer-to-peer networks as an alternative, fully distributed edge type from a stability and efficiency perspective. I have presented a proposed framework that builds on the concept of a Policy Enforcement Point (PEP) to implement an entitlement management point that can be placed at multiple points in the data path, capable of partial analysis of the retrieved data and also partial modification or encryption of the data as necessary before granting access. I implemented the proposed framework using the Open Policy Agent (OPA) and evaluated its operation and efficiency in test environments simulating two specific edge types.In the second group of theses, I investigated the challenges posed by static analysis of applications at the end of the data path. I defined two taxonomies: one for detecting and ranking sensitive data and the other for determining the level of protection of application components. I validated the usability of the categories first by classifying a 200-word collection of variant names and then on a test set of 292 components extracted from an open-source Angular project. The resulting sensitive data was used to investigate the effectiveness of the static source code in identifying the sensitive parts of the software. Similarly, I validated the taxonomy of vulnerability levels, also with the component set of 292 components, and then analyzed the effectiveness of detecting vulnerabilities defined as inadequate isolation of critical parts identified as vulnerabilities in CWE-653, which risk leaking sensitive data, by combining the results of the two tests. In addition to presenting the results, I have also identified the flaws that cause the problems and, based on these, the improvements that can be achieved by tightening the detection principles.
520 $a Az egeszsegugy es az informatika integracioja folyamatosan erosodik, am ez a gyorsulo folyamat ujabb es ujabb kihivasokat es akadalyokat tamaszt, amelyek jelentos mertekben megnehezitik az olyan technologiai megoldasok kidolgozasat, melyek javithatjak a paciensellatas minoseget es megkonnyithetik az egeszsegugyi dolgozok munkajat. Disszertaciomban bemutatom kutatasi eredmenyeimet, melyeket a telemedicina alkalmazasok biztonsaga es jogosultsagkezelese teren vegzett munkam soran ertem el. Munkamat ket reszre osztottam, melyek kozul az elso a felho es edge computing elemeit kombinalo heterogen telemedicina adatutra fokuszal; kulonosen az edge szegmens ket, specialis esetere, a feldolgozo es tarolo edge-re, melyek jogosultsagkezeles szempontjabol kimagasloan komplex kihivast jelentenek, mivel a felhotol fuggetlenul kell ervenyesiteniuk a hozzaferesi szabalyokat, hasonlo hatekonysaggal es minimalis kesleltetessel. Formalisan definialtam egy taxonomiat, melynek reven negy jogosultsagkezelesi tipust hataroztam meg az adatut igenyeinek lefedesere; hasonloan tettem a kulonbozo edge tipusokkal, illetve egy kutatocsoport tagjakent megvizsgaltam az okostelefon alapu peer-to-peer halozatok stabilitasat es potencialjat, melyek az edge egy specialis esetet kepviselik; kidolgoztam egy keretrendszert a Policy Enforcement Point (PEP) koncepciojabol kiindulva, mely kepes mind a feldolgozo, mind a tarolo edge-en megvalositani a definialt jogosultsagkezelesi kategoriakat; ehhez a keretrendszer kiserleti implementaciokat hoztam letre, melyeken teszteltem a modszertan hatekonysagat; vegul kidolgoztam egy nyilt forraskodu szimulacios eszkozt, mely kepes a betegfolyam modellezesere, es ezaltal validacios parameterek generalasara, melyekkel ellenorizheto a jogosultsagkezelesi modszertanom hatekonysaga es alkalmazhatosaga. Munkam masodik feleben az adatut vegen elhelyezkedo frontend alkalmazasokat vizsgaltam. Analitikai szempontbol ezek kulonosen komplex teruletet kepviselnek, ugyanis a frontend keretrendszerek felepitese, illetve az ilyen webalkalmazasok dinamikus, nehezen kovetheto navigacioi jelentos mertekben megnehezitettek a forraskod statikus elemzesere tett probalkozasokat. Emiatt kidolgoztam egy sajat modszertant, mely a nagy nyelvi modellek (LLM) kepessegeire epitkezve elemzi es azonositja az alkalmazasok forraskodjat, azon belul is azokat a szegmenseket, melyek erzekeny, biztonsagkritikus adatokkal dolgoznak, es ahol fennall a veszely ezek kiszivargasara. Ehhez letrehoztam egy formalis kategorizalast az adat erzekenysegi szintjeinek megkulonboztetesere, mely harom szintbol all az alapjan, hogy egy potencialis adatszivargas mekkora karokat okozna, illetve egy masik kategorizalasat, mely az alkalmazasok komponenseinek vedettsegi szintjet kvantifikalja. Az erzekenysegi taxonomiam validitasat a GPT-4 es GPT-3.5 API-k segitsegevel vegeztem, elobb egy valtozonevekbol osszeallitott szotar, majd veletlenszeruen kivalogatott, nyilt forraskodu webalkalmazasok forraskodjai segitsegevel. Ezt koveti a vedettsegi taxonomia validalasa, majd a ket kiertekeles eredmenyeinek osszevonasaval a potencial erzekeny adat-szivargasi pontok detektalasa.
546 $a English
590 $a School code: 1494
650 4 $a Load. $3 3562902
650 4 $a Medical records. $3 927772
650 4 $a Patients. $3 1961957
650 4 $a Software. $2 gtt. $3 619355
650 4 $a Electronic health records. $3 3433800
650 4 $a Data integrity. $3 2142314
650 4 $a Software development. $3 3768860
650 4 $a Internet access. $3 3410690
650 4 $a Telemedicine. $3 841772
650 4 $a Health care. $3 2213177
650 4 $a Medical research. $2 bicssc $3 1556686
650 4 $a Privacy. $3 528582
650 4 $a Large language models. $3 3775019
650 4 $a Access control. $3 1458437
650 4 $a Health sciences. $3 3168359
650 4 $a Information science. $3 554358
650 4 $a Information technology. $3 532993
650 4 $a Web studies. $3 2122754
650 4 $a Medicine. $3 641104
690 $a 0501
690 $a 0769
690 $a 0566
690 $a 0723
690 $a 0489
690 $a 0646
690 $a 0564
710 2 $a University of Szeged (Hungary). $e degree granting institution. $3 3759136
720 1 $a Bilicki, Vilmos $e degree supervisor.
773 0 $t Dissertations Abstracts International $g 86-03B.
790 $a 1494
791 $a Ph.D.
792 $a 2024
856 4 0 $u https://pqdd.sinica.edu.tw/twdaoapp/servlet/advanced?query=31357240