Project description
'Shielding' healthcare organisations against cyberattacks
Cybersecurity is a challenge for healthcare, an essential service that uses a vast amount of sensitive personal data. The average healthcare organisation spends more than EUR 1 million to recover from an attack. A rise in cybersecurity breaches in healthcare organisations is compromising patient privacy and posing a danger to patient safety. For instance, the use of wireless medical devices may be hacked by cybercriminals to harm a patient. The EU-funded ProTego project will develop a toolkit for healthcare organisations to better assess and reduce cybersecurity risks related to remote devices’ access to electronic health record data. It will introduce three main advances over current approaches: extensive use of machine intelligence, advanced data protection measures and innovation protocols for stakeholder education.
Objective
Health care is an essential service that uses a great deal of sensitive personal data which has a high black market value being a lucrative target for data theft and ransomware attacks.The EU NIS Directive (EU 2016/1148) and GDPR (EU 2016/679) will harmonize and improve information security in Europe. Both require relevant ICT infrastructure operators to perform risk assessments, introduce appropriate security measures to manage identified risks, and report security breaches. Unfortunately, risk-based approaches are notoriously difficult to implement in a consistent and comprehensive fashion. They depend on a high level of understanding of both cybersecurity and of the system or network to be protected, are labour intensive and costly and typically done by small teams. This is increasingly inappropriate as health care providers introduce IoT systems, cloud services and (in the near future) 5G networks to provide services in which patients are more engaged, may own some of the devices used, and want access in hospitals, on the move or at home. The ProTego project will develop a toolkit and guidelines to help health care systems users address cybersecurity risks in this new environment by introducing 3 main advances over current approaches: Extensive use of machine intelligence: a combination of machine inference exploiting a priory knowledge for security-by-design, and machine learning from data for run-time threat detection and diagnosis; Advanced data protection measures: advanced encryption techniques and hardware based full memory encryption, and multi-stakeholder IAM to control access to and by user devices, to protect data at rest and provide ultra-secure data exchange portals; Innovative protocols for stakeholder education: using security-by-design analysis to target training and support stakeholders to contribute to networok overall security.The toolkit will be integrated and validated in IoT and BYOD-based case studies at two hospitals.
Fields of science (EuroSciVoc)
CORDIS classifies projects with EuroSciVoc, a multilingual taxonomy of fields of science, through a semi-automatic process based on NLP techniques. See: https://op.europa.eu/en/web/eu-vocabularies/euroscivoc.
CORDIS classifies projects with EuroSciVoc, a multilingual taxonomy of fields of science, through a semi-automatic process based on NLP techniques. See: https://op.europa.eu/en/web/eu-vocabularies/euroscivoc.
- engineering and technology electrical engineering, electronic engineering, information engineering information engineering telecommunications telecommunications networks mobile network 5G
- natural sciences computer and information sciences internet internet of things
- natural sciences computer and information sciences computer security data protection
- natural sciences computer and information sciences artificial intelligence machine learning deep learning
- natural sciences computer and information sciences data science data exchange
You need to log in or register to use this function
We are sorry... an unexpected error occurred during execution.
You need to be authenticated. Your session might have expired.
Thank you for your feedback. You will soon receive an email to confirm the submission. If you have selected to be notified about the reporting status, you will also be contacted when the reporting status will change.
Programme(s)
Multi-annual funding programmes that define the EU’s priorities for research and innovation.
Multi-annual funding programmes that define the EU’s priorities for research and innovation.
-
H2020-EU.3.1. - SOCIETAL CHALLENGES - Health, demographic change and well-being
MAIN PROGRAMME
See all projects funded under this programme -
H2020-EU.3.1.5.1. - Improving halth information and better use of health data
See all projects funded under this programme
Topic(s)
Calls for proposals are divided into topics. A topic defines a specific subject or area for which applicants can submit proposals. The description of a topic comprises its specific scope and the expected impact of the funded project.
Calls for proposals are divided into topics. A topic defines a specific subject or area for which applicants can submit proposals. The description of a topic comprises its specific scope and the expected impact of the funded project.
Funding Scheme
Funding scheme (or “Type of Action”) inside a programme with common features. It specifies: the scope of what is funded; the reimbursement rate; specific evaluation criteria to qualify for funding; and the use of simplified forms of costs like lump sums.
Funding scheme (or “Type of Action”) inside a programme with common features. It specifies: the scope of what is funded; the reimbursement rate; specific evaluation criteria to qualify for funding; and the use of simplified forms of costs like lump sums.
RIA - Research and Innovation action
See all projects funded under this funding scheme
Call for proposal
Procedure for inviting applicants to submit project proposals, with the aim of receiving EU funding.
Procedure for inviting applicants to submit project proposals, with the aim of receiving EU funding.
(opens in new window) H2020-SC1-FA-DTS-2018-2020
See all projects funded under this callCoordinator
Net EU financial contribution. The sum of money that the participant receives, deducted by the EU contribution to its linked third party. It considers the distribution of the EU financial contribution between direct beneficiaries of the project and other types of participants, like third-party participants.
28050 MADRID
Spain
The total costs incurred by this organisation to participate in the project, including direct and indirect costs. This amount is a subset of the overall project budget.