Cybersecurity for Hospitals and Healthcare Facilities: A Guide to Detection and Prevention

This book is a wake-up call explaining how to detect and prevent the hacking of medical equipment at hospitals and healthcare facilities. The vulnerability of the medical equipment inside the hospital to cyber-attacks far eclipses the actual building equipment. A cyber-physical attack on building equipment pales in comparison to the damage a determined hacker can do if he/she gains access to a medical grade network. A medical grade network controls the diagnostic, treatment and life support equipment on which lives depend.

Recent news reports how hackers struck hospitals with ransomware that prevented staff from accessing patient records or scheduling appointments. Unfortunately, medical equipment can also be hacked and shut down remotely as a form of extortion. Criminal hackers will not ask for a $500 payment to unlock an MRI, PET, CT Scan, or X-Ray machine―they will ask for much more.

Litigation is bound to follow and the resulting punitive awards will drive up hospital insurance costs and healthcare costs in general. This will undoubtedly result in increased regulations for hospitals and higher costs for compliance. Unless hospitals and other healthcare facilities take the steps necessary now to secure their medical grade networks, they will be targeted for cyber-physical attack, possibly with life-threatening consequences.

Cybersecurity for Hospitals and Healthcare Facilities shows what hackers can do, why hackers would target a hospital, the way they research a target, ways they can gain access to a medical grade network (cyber-attack vectors), and ways they hope to monetize their cyber-attack. By understanding and detecting the threats, hospital administrators can take action now – before their hospital becomes the next victim.

What you’ll learn

• How to determine how vulnerable hospital and healthcare building equipment is to cyber-physical attack.
• How to identify possible ways hackers can hack hospital and healthcare facility equipment.
• How to recognize the cyber-attack vectors―or paths by which a hacker or cracker can gain access to a computer, a medical grade network server or expensive medical equipment in order to deliver a payload or malicious outcome.
• How to detect and prevent man-in-the-middle or denial of service cyber-attacks.
• How to detect and prevent hacking of the hospital database and hospital web application.

Who This Book Is For

Hospital Administrators, Healthcare professionals, Hospital & Healthcare Facility Engineers and Building Managers, Hospital & Healthcare Facility IT professionals, and HIPAA professionals.

About the Author

Luis Ayala is a Senior Technical Expert in the Department of Defense responsible for design, construction, and operation of Intelligence Community facilities worldwide. He is a licensed architect and holds a classified Master of Science in Technology Intelligence Degree from the National Intelligence University.