utilizing selinux to mandate ultra-secure access control of medical records精选.pdfVIP

QUT Digital Repository: .au/ Croll, Peter R. and Henricksen, Matthew P. and Caelli, William J. and Liu, Vicky (2007) Utilizing SELinux to Mandate Ultra-secure Access Control of Medical Records. In Kuhn, Klaus A. and Warren, James R. and Leong, Tze-Yun, Eds. Proceedings MEDINFO 2007: the 12th World Congress on Health (Medical) Informatics – Building Sustainable Health Systems Studies in Health Technology and Informatics 129, pages pp. 498-502, Brisbane, Australia. © Copyright 2007 IOS Press Utilizing SELinux to Mandate Ultra-secure Access Control of Medical Records Peter R Croll, Matt Henricksen, Bill Caelli and Vicky Liu Information Security Institute, Queensland University of Technology, Brisbane, Australia Abstract ity level computer operating systems that do not - and cannot - provide the required level of assurance needed for scientific Ongoing concerns have been raised over the effectiveness of research to be undertaken on sensitive data. They were never information technology products and systems in maintaining designed for this purpose. privacy protection for sensitive data. The aim is to ensure that Information security mechanisms do exist to ensure sensitive sensitive health information can be adequately protected yet information is protected and only accessible on a “need-to- still be accessible only to those that “need-to-know ”. To