Security Recommendations for mHealth Apps: Elaboration of a Developer's Guide.
Identifieur interne : 000007 ( PubMed/Curation ); précédent : 000006; suivant : 000008Security Recommendations for mHealth Apps: Elaboration of a Developer's Guide.
Auteurs : Enrique Pérez Morera [Espagne] ; Isabel De La Torre Díez [Espagne] ; Bego A Garcia-Zapirain [Espagne] ; Miguel L Pez-Coronado [Espagne] ; Jon Arambarri [Espagne]Source :
- Journal of medical systems [ 1573-689X ] ; 2016.
Abstract
Being the third fastest-growing app category behind games and utilities, mHealth apps are changing the healthcare model, as medicine today involves the data they compile and analyse, information known as Big Data. However, the majority of apps are lacking in security when gathering and dealing with the information, which becomes a serious problem. This article presents a guide regarding security solution, intended to be of great use for developers of mHealth apps. In August 2015 current mobile health apps were sought out in virtual stores such as Android Google Play, Apple iTunes App Store etc., in order to classify them in terms of usefulness. After this search, the most widespread weaknesses in the field of security in the development of these mobile apps were examined, based on sources such as the "OWASP Mobile Security Project, the initiative recently launched by the Office of Civil Rights (OCR), and other articles of scientific interest. An informative, elemental guide has been created for the development of mHealth apps. It includes information about elements of security and its implementation on different levels for all types of mobile health apps based on the data that each app manipulates, the associated calculated risk as a result of the likelihood of occurrence and the threat level resulting from its vulnerabilities - high level (apps for monitoring, diagnosis, treatment and care) from 6 ≤ 9, medium level (calculator, localizer and alarm) from 3 ≤ 6 and low level (informative and educational apps) from 0 ≤ 3. The guide aims to guarantee and facilitate security measures in the development of mobile health applications by programmers unconnected to the ITC and professional health areas.
DOI: 10.1007/s10916-016-0513-6
PubMed: 27147515
Links toward previous steps (curation, corpus...)
- to stream PubMed, to step Corpus: Pour aller vers cette notice dans l'étape Curation :000007
Links to Exploration step
pubmed:27147515Le document en format XML
<record><TEI><teiHeader><fileDesc><titleStmt><title xml:lang="en">Security Recommendations for mHealth Apps: Elaboration of a Developer's Guide.</title>
<author><name sortKey="Morera, Enrique Perez" sort="Morera, Enrique Perez" uniqKey="Morera E" first="Enrique Pérez" last="Morera">Enrique Pérez Morera</name>
<affiliation wicri:level="1"><nlm:affiliation>Department of Signal Theory and Communications, and Telematics Engineering, University of Valladolid, Paseo de Belén, 15, 47011, Valladolid, Spain.</nlm:affiliation>
<country xml:lang="fr">Espagne</country>
<wicri:regionArea>Department of Signal Theory and Communications, and Telematics Engineering, University of Valladolid, Paseo de Belén, 15, 47011, Valladolid</wicri:regionArea>
</affiliation>
</author>
<author><name sortKey="De La Torre Diez, Isabel" sort="De La Torre Diez, Isabel" uniqKey="De La Torre Diez I" first="Isabel" last="De La Torre Díez">Isabel De La Torre Díez</name>
<affiliation wicri:level="1"><nlm:affiliation>Department of Signal Theory and Communications, and Telematics Engineering, University of Valladolid, Paseo de Belén, 15, 47011, Valladolid, Spain. isator@tel.uva.es.</nlm:affiliation>
<country xml:lang="fr">Espagne</country>
<wicri:regionArea>Department of Signal Theory and Communications, and Telematics Engineering, University of Valladolid, Paseo de Belén, 15, 47011, Valladolid</wicri:regionArea>
</affiliation>
</author>
<author><name sortKey="Garcia Zapirain, Bego A" sort="Garcia Zapirain, Bego A" uniqKey="Garcia Zapirain B" first="Bego A" last="Garcia-Zapirain">Bego A Garcia-Zapirain</name>
<affiliation wicri:level="1"><nlm:affiliation>University of Deusto, Avenida de las Universidades 24, 48007, Bilbao, Spain.</nlm:affiliation>
<country xml:lang="fr">Espagne</country>
<wicri:regionArea>University of Deusto, Avenida de las Universidades 24, 48007, Bilbao</wicri:regionArea>
</affiliation>
</author>
<author><name sortKey="L Pez Coronado, Miguel" sort="L Pez Coronado, Miguel" uniqKey="L Pez Coronado M" first="Miguel" last="L Pez-Coronado">Miguel L Pez-Coronado</name>
<affiliation wicri:level="1"><nlm:affiliation>Department of Signal Theory and Communications, and Telematics Engineering, University of Valladolid, Paseo de Belén, 15, 47011, Valladolid, Spain.</nlm:affiliation>
<country xml:lang="fr">Espagne</country>
<wicri:regionArea>Department of Signal Theory and Communications, and Telematics Engineering, University of Valladolid, Paseo de Belén, 15, 47011, Valladolid</wicri:regionArea>
</affiliation>
</author>
<author><name sortKey="Arambarri, Jon" sort="Arambarri, Jon" uniqKey="Arambarri J" first="Jon" last="Arambarri">Jon Arambarri</name>
<affiliation wicri:level="1"><nlm:affiliation>VirtualWare Labs Foundation, C/ Usausuaga, 7, 48970, Basauri, Vizcaya, Spain.</nlm:affiliation>
<country xml:lang="fr">Espagne</country>
<wicri:regionArea>VirtualWare Labs Foundation, C/ Usausuaga, 7, 48970, Basauri, Vizcaya</wicri:regionArea>
</affiliation>
</author>
</titleStmt>
<publicationStmt><idno type="wicri:source">PubMed</idno>
<date when="2016">2016</date>
<idno type="doi">10.1007/s10916-016-0513-6</idno>
<idno type="RBID">pubmed:27147515</idno>
<idno type="pmid">27147515</idno>
<idno type="wicri:Area/PubMed/Corpus">000007</idno>
<idno type="wicri:explorRef" wicri:stream="PubMed" wicri:step="Corpus" wicri:corpus="PubMed">000007</idno>
<idno type="wicri:Area/PubMed/Curation">000007</idno>
<idno type="wicri:explorRef" wicri:stream="PubMed" wicri:step="Curation">000007</idno>
</publicationStmt>
<sourceDesc><biblStruct><analytic><title xml:lang="en">Security Recommendations for mHealth Apps: Elaboration of a Developer's Guide.</title>
<author><name sortKey="Morera, Enrique Perez" sort="Morera, Enrique Perez" uniqKey="Morera E" first="Enrique Pérez" last="Morera">Enrique Pérez Morera</name>
<affiliation wicri:level="1"><nlm:affiliation>Department of Signal Theory and Communications, and Telematics Engineering, University of Valladolid, Paseo de Belén, 15, 47011, Valladolid, Spain.</nlm:affiliation>
<country xml:lang="fr">Espagne</country>
<wicri:regionArea>Department of Signal Theory and Communications, and Telematics Engineering, University of Valladolid, Paseo de Belén, 15, 47011, Valladolid</wicri:regionArea>
</affiliation>
</author>
<author><name sortKey="De La Torre Diez, Isabel" sort="De La Torre Diez, Isabel" uniqKey="De La Torre Diez I" first="Isabel" last="De La Torre Díez">Isabel De La Torre Díez</name>
<affiliation wicri:level="1"><nlm:affiliation>Department of Signal Theory and Communications, and Telematics Engineering, University of Valladolid, Paseo de Belén, 15, 47011, Valladolid, Spain. isator@tel.uva.es.</nlm:affiliation>
<country xml:lang="fr">Espagne</country>
<wicri:regionArea>Department of Signal Theory and Communications, and Telematics Engineering, University of Valladolid, Paseo de Belén, 15, 47011, Valladolid</wicri:regionArea>
</affiliation>
</author>
<author><name sortKey="Garcia Zapirain, Bego A" sort="Garcia Zapirain, Bego A" uniqKey="Garcia Zapirain B" first="Bego A" last="Garcia-Zapirain">Bego A Garcia-Zapirain</name>
<affiliation wicri:level="1"><nlm:affiliation>University of Deusto, Avenida de las Universidades 24, 48007, Bilbao, Spain.</nlm:affiliation>
<country xml:lang="fr">Espagne</country>
<wicri:regionArea>University of Deusto, Avenida de las Universidades 24, 48007, Bilbao</wicri:regionArea>
</affiliation>
</author>
<author><name sortKey="L Pez Coronado, Miguel" sort="L Pez Coronado, Miguel" uniqKey="L Pez Coronado M" first="Miguel" last="L Pez-Coronado">Miguel L Pez-Coronado</name>
<affiliation wicri:level="1"><nlm:affiliation>Department of Signal Theory and Communications, and Telematics Engineering, University of Valladolid, Paseo de Belén, 15, 47011, Valladolid, Spain.</nlm:affiliation>
<country xml:lang="fr">Espagne</country>
<wicri:regionArea>Department of Signal Theory and Communications, and Telematics Engineering, University of Valladolid, Paseo de Belén, 15, 47011, Valladolid</wicri:regionArea>
</affiliation>
</author>
<author><name sortKey="Arambarri, Jon" sort="Arambarri, Jon" uniqKey="Arambarri J" first="Jon" last="Arambarri">Jon Arambarri</name>
<affiliation wicri:level="1"><nlm:affiliation>VirtualWare Labs Foundation, C/ Usausuaga, 7, 48970, Basauri, Vizcaya, Spain.</nlm:affiliation>
<country xml:lang="fr">Espagne</country>
<wicri:regionArea>VirtualWare Labs Foundation, C/ Usausuaga, 7, 48970, Basauri, Vizcaya</wicri:regionArea>
</affiliation>
</author>
</analytic>
<series><title level="j">Journal of medical systems</title>
<idno type="eISSN">1573-689X</idno>
<imprint><date when="2016" type="published">2016</date>
</imprint>
</series>
</biblStruct>
</sourceDesc>
</fileDesc>
<profileDesc><textClass></textClass>
</profileDesc>
</teiHeader>
<front><div type="abstract" xml:lang="en">Being the third fastest-growing app category behind games and utilities, mHealth apps are changing the healthcare model, as medicine today involves the data they compile and analyse, information known as Big Data. However, the majority of apps are lacking in security when gathering and dealing with the information, which becomes a serious problem. This article presents a guide regarding security solution, intended to be of great use for developers of mHealth apps. In August 2015 current mobile health apps were sought out in virtual stores such as Android Google Play, Apple iTunes App Store etc., in order to classify them in terms of usefulness. After this search, the most widespread weaknesses in the field of security in the development of these mobile apps were examined, based on sources such as the "OWASP Mobile Security Project, the initiative recently launched by the Office of Civil Rights (OCR), and other articles of scientific interest. An informative, elemental guide has been created for the development of mHealth apps. It includes information about elements of security and its implementation on different levels for all types of mobile health apps based on the data that each app manipulates, the associated calculated risk as a result of the likelihood of occurrence and the threat level resulting from its vulnerabilities - high level (apps for monitoring, diagnosis, treatment and care) from 6 ≤ 9, medium level (calculator, localizer and alarm) from 3 ≤ 6 and low level (informative and educational apps) from 0 ≤ 3. The guide aims to guarantee and facilitate security measures in the development of mobile health applications by programmers unconnected to the ITC and professional health areas.</div>
</front>
</TEI>
<pubmed><MedlineCitation Owner="NLM" Status="In-Data-Review"><PMID Version="1">27147515</PMID>
<DateCreated><Year>2016</Year>
<Month>05</Month>
<Day>05</Day>
</DateCreated>
<Article PubModel="Print-Electronic"><Journal><ISSN IssnType="Electronic">1573-689X</ISSN>
<JournalIssue CitedMedium="Internet"><Volume>40</Volume>
<Issue>6</Issue>
<PubDate><Year>2016</Year>
<Month>Jun</Month>
</PubDate>
</JournalIssue>
<Title>Journal of medical systems</Title>
<ISOAbbreviation>J Med Syst</ISOAbbreviation>
</Journal>
<ArticleTitle>Security Recommendations for mHealth Apps: Elaboration of a Developer's Guide.</ArticleTitle>
<Pagination><MedlinePgn>152</MedlinePgn>
</Pagination>
<ELocationID EIdType="doi" ValidYN="Y">10.1007/s10916-016-0513-6</ELocationID>
<Abstract><AbstractText>Being the third fastest-growing app category behind games and utilities, mHealth apps are changing the healthcare model, as medicine today involves the data they compile and analyse, information known as Big Data. However, the majority of apps are lacking in security when gathering and dealing with the information, which becomes a serious problem. This article presents a guide regarding security solution, intended to be of great use for developers of mHealth apps. In August 2015 current mobile health apps were sought out in virtual stores such as Android Google Play, Apple iTunes App Store etc., in order to classify them in terms of usefulness. After this search, the most widespread weaknesses in the field of security in the development of these mobile apps were examined, based on sources such as the "OWASP Mobile Security Project, the initiative recently launched by the Office of Civil Rights (OCR), and other articles of scientific interest. An informative, elemental guide has been created for the development of mHealth apps. It includes information about elements of security and its implementation on different levels for all types of mobile health apps based on the data that each app manipulates, the associated calculated risk as a result of the likelihood of occurrence and the threat level resulting from its vulnerabilities - high level (apps for monitoring, diagnosis, treatment and care) from 6 ≤ 9, medium level (calculator, localizer and alarm) from 3 ≤ 6 and low level (informative and educational apps) from 0 ≤ 3. The guide aims to guarantee and facilitate security measures in the development of mobile health applications by programmers unconnected to the ITC and professional health areas.</AbstractText>
</Abstract>
<AuthorList CompleteYN="Y"><Author ValidYN="Y"><LastName>Morera</LastName>
<ForeName>Enrique Pérez</ForeName>
<Initials>EP</Initials>
<AffiliationInfo><Affiliation>Department of Signal Theory and Communications, and Telematics Engineering, University of Valladolid, Paseo de Belén, 15, 47011, Valladolid, Spain.</Affiliation>
</AffiliationInfo>
</Author>
<Author ValidYN="Y"><LastName>de la Torre Díez</LastName>
<ForeName>Isabel</ForeName>
<Initials>I</Initials>
<AffiliationInfo><Affiliation>Department of Signal Theory and Communications, and Telematics Engineering, University of Valladolid, Paseo de Belén, 15, 47011, Valladolid, Spain. isator@tel.uva.es.</Affiliation>
</AffiliationInfo>
</Author>
<Author ValidYN="Y"><LastName>Garcia-Zapirain</LastName>
<ForeName>Begoña</ForeName>
<Initials>B</Initials>
<AffiliationInfo><Affiliation>University of Deusto, Avenida de las Universidades 24, 48007, Bilbao, Spain.</Affiliation>
</AffiliationInfo>
</Author>
<Author ValidYN="Y"><LastName>López-Coronado</LastName>
<ForeName>Miguel</ForeName>
<Initials>M</Initials>
<AffiliationInfo><Affiliation>Department of Signal Theory and Communications, and Telematics Engineering, University of Valladolid, Paseo de Belén, 15, 47011, Valladolid, Spain.</Affiliation>
</AffiliationInfo>
</Author>
<Author ValidYN="Y"><LastName>Arambarri</LastName>
<ForeName>Jon</ForeName>
<Initials>J</Initials>
<AffiliationInfo><Affiliation>VirtualWare Labs Foundation, C/ Usausuaga, 7, 48970, Basauri, Vizcaya, Spain.</Affiliation>
</AffiliationInfo>
</Author>
</AuthorList>
<Language>eng</Language>
<PublicationTypeList><PublicationType UI="D016428">Journal Article</PublicationType>
</PublicationTypeList>
<ArticleDate DateType="Electronic"><Year>2016</Year>
<Month>05</Month>
<Day>04</Day>
</ArticleDate>
</Article>
<MedlineJournalInfo><Country>United States</Country>
<MedlineTA>J Med Syst</MedlineTA>
<NlmUniqueID>7806056</NlmUniqueID>
<ISSNLinking>0148-5598</ISSNLinking>
</MedlineJournalInfo>
<CitationSubset>IM</CitationSubset>
<KeywordList Owner="NOTNLM"><Keyword MajorTopicYN="N">Apps</Keyword>
<Keyword MajorTopicYN="N">Developers’ guide</Keyword>
<Keyword MajorTopicYN="N">Security</Keyword>
<Keyword MajorTopicYN="N">mHealth</Keyword>
</KeywordList>
</MedlineCitation>
<PubmedData><History><PubMedPubDate PubStatus="received"><Year>2016</Year>
<Month>4</Month>
<Day>22</Day>
</PubMedPubDate>
<PubMedPubDate PubStatus="accepted"><Year>2016</Year>
<Month>4</Month>
<Day>28</Day>
</PubMedPubDate>
<PubMedPubDate PubStatus="aheadofprint"><Year>2016</Year>
<Month>5</Month>
<Day>4</Day>
</PubMedPubDate>
<PubMedPubDate PubStatus="entrez"><Year>2016</Year>
<Month>5</Month>
<Day>6</Day>
<Hour>6</Hour>
<Minute>0</Minute>
</PubMedPubDate>
<PubMedPubDate PubStatus="pubmed"><Year>2016</Year>
<Month>5</Month>
<Day>6</Day>
<Hour>6</Hour>
<Minute>0</Minute>
</PubMedPubDate>
<PubMedPubDate PubStatus="medline"><Year>2016</Year>
<Month>5</Month>
<Day>6</Day>
<Hour>6</Hour>
<Minute>0</Minute>
</PubMedPubDate>
</History>
<PublicationStatus>ppublish</PublicationStatus>
<ArticleIdList><ArticleId IdType="doi">10.1007/s10916-016-0513-6</ArticleId>
<ArticleId IdType="pii">10.1007/s10916-016-0513-6</ArticleId>
<ArticleId IdType="pubmed">27147515</ArticleId>
</ArticleIdList>
</PubmedData>
</pubmed>
</record>
Pour manipuler ce document sous Unix (Dilib)
EXPLOR_STEP=$WICRI_ROOT/Ticri/CIDE/explor/TelematiV1/Data/PubMed/Curation
HfdSelect -h $EXPLOR_STEP/biblio.hfd -nk 000007 | SxmlIndent | more
Ou
HfdSelect -h $EXPLOR_AREA/Data/PubMed/Curation/biblio.hfd -nk 000007 | SxmlIndent | more
Pour mettre un lien sur cette page dans le réseau Wicri
{{Explor lien |wiki= Ticri/CIDE |area= TelematiV1 |flux= PubMed |étape= Curation |type= RBID |clé= pubmed:27147515 |texte= Security Recommendations for mHealth Apps: Elaboration of a Developer's Guide. }}
Pour générer des pages wiki
HfdIndexSelect -h $EXPLOR_AREA/Data/PubMed/Curation/RBID.i -Sk "pubmed:27147515" \ | HfdSelect -Kh $EXPLOR_AREA/Data/PubMed/Curation/biblio.hfd \ | NlmPubMed2Wicri -a TelematiV1
![]() | This area was generated with Dilib version V0.6.31. | ![]() |