國立虎尾科技大學 |

HIPAAttack : = Threat Emulation Tool for Ubuntu in Healthcare Environments.

Record Type:	Language materials, manuscript : Monograph/item
Title/Author:	HIPAAttack :/
Reminder of title:	Threat Emulation Tool for Ubuntu in Healthcare Environments.
Author:	Stepanov, Artem.
Description:	1 online resource (119 pages)
Notes:	Source: Dissertations Abstracts International, Volume: 85-06, Section: B.
Contained By:	Dissertations Abstracts International85-06B.
Subject:	Information technology. -
Online resource:	click for full text (PQDT)
ISBN:	9798381111217

HIPAAttack : = Threat Emulation Tool for Ubuntu in Healthcare Environments.
Stepanov, Artem.

HIPAAttack :Threat Emulation Tool for Ubuntu in Healthcare Environments. - 1 online resource (119 pages)

Source: Dissertations Abstracts International, Volume: 85-06, Section: B.

Thesis (D.Engr.)--The George Washington University, 2024.

Includes bibliographical references

An average cost of healthcare data breach is over $10 million, which is higher than any other industry (IBM, 2023). Protected Health Information (PHI) is deemed a highly valuable asset by malicious actors. Given that many healthcare organizations may not have a robust security program in place, they become appealing targets for hackers.The primary objective of this praxis is to develop an open-source threat emulation tool that simulates attacks against Ubuntu Linux servers in healthcare environments. This tool, named HIPAAttack, adheres to the MITRE ATT&CK framework. It focuses on exploiting threat vectors that are associated with healthcare data breach attacks, such as exfiltration and compromise of sensitive data.HIPAAttack offers a notably broader attack coverage for Ubuntu Linux compared to other threat emulation tools, such as Atomic Red Team and Uber Metta. Furthermore, it performs across current and older versions of Ubuntu Linux. With these features, HIPAAttack provides a more robust and healthcare-specific alternative to existing toolsets, and it is released as open-sourced tool on GitHub.Security teams of healthcare organizations can leverage HIPAAttack to identify threat vectors and examine typical adversarial behavior. Threat intelligence provided by HIPAAttack should be used to remediate vulnerabilities and misconfigurations to minimize the risks of healthcare data breaches.In summary, this praxis provides an instrument to reduce data breaches for organizations in the healthcare industry.

Electronic reproduction.
Ann Arbor, Mich. :
ProQuest,
2024

Mode of access: World Wide Web

ISBN: 9798381111217Subjects--Topical Terms:

559429
Information technology.
Subjects--Index Terms:

Adversarial emulationIndex Terms--Genre/Form:

554714
Electronic books.

HIPAAttack : = Threat Emulation Tool for Ubuntu in Healthcare Environments.
LDR:02904ntm a22003857 4500 001 1147483
005 20240918072823.5
006 m o d
007 cr bn ---uuuuu
008 250605s2024 xx obm 000 0 eng d
020 $a 9798381111217
035 $a (MiAaPQ)AAI30815323
035 $a AAI30815323
040 $a MiAaPQ $b eng $c MiAaPQ $d NTU
100 1 $a Stepanov, Artem. $3 1473234
245 1 0 $a HIPAAttack : $b Threat Emulation Tool for Ubuntu in Healthcare Environments.
264 0 $c 2024
300 $a 1 online resource (119 pages)
336 $a text $b txt $2 rdacontent
337 $a computer $b c $2 rdamedia
338 $a online resource $b cr $2 rdacarrier
500 $a Source: Dissertations Abstracts International, Volume: 85-06, Section: B.
500 $a Advisor: Hassan, Walid.
502 $a Thesis (D.Engr.)--The George Washington University, 2024.
504 $a Includes bibliographical references
520 $a An average cost of healthcare data breach is over $10 million, which is higher than any other industry (IBM, 2023). Protected Health Information (PHI) is deemed a highly valuable asset by malicious actors. Given that many healthcare organizations may not have a robust security program in place, they become appealing targets for hackers.The primary objective of this praxis is to develop an open-source threat emulation tool that simulates attacks against Ubuntu Linux servers in healthcare environments. This tool, named HIPAAttack, adheres to the MITRE ATT&CK framework. It focuses on exploiting threat vectors that are associated with healthcare data breach attacks, such as exfiltration and compromise of sensitive data.HIPAAttack offers a notably broader attack coverage for Ubuntu Linux compared to other threat emulation tools, such as Atomic Red Team and Uber Metta. Furthermore, it performs across current and older versions of Ubuntu Linux. With these features, HIPAAttack provides a more robust and healthcare-specific alternative to existing toolsets, and it is released as open-sourced tool on GitHub.Security teams of healthcare organizations can leverage HIPAAttack to identify threat vectors and examine typical adversarial behavior. Threat intelligence provided by HIPAAttack should be used to remediate vulnerabilities and misconfigurations to minimize the risks of healthcare data breaches.In summary, this praxis provides an instrument to reduce data breaches for organizations in the healthcare industry.
533 $a Electronic reproduction. $b Ann Arbor, Mich. : $c ProQuest, $d 2024
538 $a Mode of access: World Wide Web
650 4 $a Information technology. $3 559429
653 $a Adversarial emulation
653 $a Healthcare data
653 $a Threat emulation
653 $a Malicious actors
653 $a Protected Health Information
655 7 $a Electronic books. $2 local $3 554714
690 $a 0489
690 $a 0769
710 2 $a ProQuest Information and Learning Co. $3 1178819
710 2 $a The George Washington University. $b Cybersecurity Analytics. $3 1467608
773 0 $t Dissertations Abstracts International $g 85-06B.
856 4 0 $u http://pqdd.sinica.edu.tw/twdaoapp/servlet/advanced?query=30815323 $z click for full text (PQDT)