The integration of mobile communication and medical information access has significantly enhanced patient care but has also introduced substantial cybersecurity risks. Mobile health (mHealth) applications store and process highly sensitive data, making them prime targets for ransomware attacks and data breaches. These threats can compromise data confidentiality, integrity, and availability, potentially endangering patients’ well-being. This paper presents an encryption and integrity-based security framework designed to mitigate ransomware and unauthorized access in mHealth applications. Our approach leverages AES-256 encryption for data confidentiality, SQLCipher for secure database storage, and checksum-based integrity verification to detect unauthorized modifications. A comparative security analysis was conducted across multiple iterations of our implementation, evaluating the effectiveness of these measures in preventing and mitigating attacks. The results demonstrate that combining strong encryption with integrity checks and secure backup mechanisms significantly enhances data protection in mobile health applications.

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

Mitigating Ransomware and Data Breaches in Mobile Health Applications: An Encryption and Integrity-Based Approach

  • Sarah Dziobak,
  • Valerie Nielson,
  • Brendon Wolfe,
  • Rui Zhu,
  • Huirong Fu

摘要

The integration of mobile communication and medical information access has significantly enhanced patient care but has also introduced substantial cybersecurity risks. Mobile health (mHealth) applications store and process highly sensitive data, making them prime targets for ransomware attacks and data breaches. These threats can compromise data confidentiality, integrity, and availability, potentially endangering patients’ well-being. This paper presents an encryption and integrity-based security framework designed to mitigate ransomware and unauthorized access in mHealth applications. Our approach leverages AES-256 encryption for data confidentiality, SQLCipher for secure database storage, and checksum-based integrity verification to detect unauthorized modifications. A comparative security analysis was conducted across multiple iterations of our implementation, evaluating the effectiveness of these measures in preventing and mitigating attacks. The results demonstrate that combining strong encryption with integrity checks and secure backup mechanisms significantly enhances data protection in mobile health applications.