Thats a unique idea.You should consider the following idea to enhance your idea so that it would impact uniquely: There is significant risk in denying access to a healthcare provider who seeks to examine a patient's medical record. For this reason, hospital access control systems are generally based on optimistic security in which providers are given broad permissions; accountability through audit then becomes the primary means to detect and react to policy violations. Hospital audit logs are too large to audit manually so models and automation are needed to support accountability. In this talk I will present results of research on balancing access controls with audit in medical record systems and discuss broader implications for other areas. Key goals involve using audit logs to understand roles and workflows to develop reliable anomaly detection and safe access controls. This work is based on collaboration with Northstern Memorial Hospital, Vanderbilt University Medical Center, the Johns Hopkins hospital system, the Illinois Office of Health Information Technology, and others. Topics include experience-based access management, role prediction, role evolution, topic models from machine learning, graph-based models from operations research, and formal models of policy.
['Carl A. Gunter']
I am writing a research paper on a idea Detecting Roles and Anomalies in Hospital Access Audit Logs
[{"from": "human", "value": "I am writing a research paper on a idea Detecting Roles and Anomalies in Hospital Access Audit Logs"}, {"from": "gpt", "value": "Thats a unique idea.You should consider the following idea to enhance your idea so that it would impact uniquely: There is significant risk in denying access to a healthcare provider who seeks to examine a patient's medical record. For this reason, hospital access control systems are generally based on optimistic security in which providers are given broad permissions; accountability through audit then becomes the primary means to detect and react to policy violations. Hospital audit logs are too large to audit manually so models and automation are needed to support accountability. In this talk I will present results of research on balancing access controls with audit in medical record systems and discuss broader implications for other areas. Key goals involve using audit logs to understand roles and workflows to develop reliable anomaly detection and safe access controls. This work is based on collaboration with Northstern Memorial Hospital, Vanderbilt University Medical Center, the Johns Hopkins hospital system, the Illinois Office of Health Information Technology, and others. Topics include experience-based access management, role prediction, role evolution, topic models from machine learning, graph-based models from operations research, and formal models of policy."}]