Social Engineering: A Psychological Hacking to Temper Medical Security - Proceedings of All India Seminar on Biomedical Engineering 2012 (AISOBE-2012) - page 233

Interception: An attack on confidentiality. An unauthorized party gains access to
information.
Modification: An attack on integrity. An unauthorized party not only gains access
to, but also tampers with information.
Fabrication: An attack on authenticity. An unauthorized party inserts counterfeit
objects into the system.
These attacks can be divided further into two categories, according to the nature
of the attacks:
Active Attacks
These attacks involve modification of the data stream or the creation of a false
stream and can be subdivided into four categories:
Masquerade: One entity pretends to be a different entity.
Replay: The passive capture of a data unit and its subsequent retransmission to
produce an unauthorised effect.
Modification of messages: Some portion of a legitimate message is altered, or
messages are delayed or recorded to produce an unauthorised effect.
Denial of service: One prevents or inhibits the normal use or management of
communications facilities.
Passive Attacks
These attacks involve eavesdropping on, or monitoring of, transmission and can be
subdivided into two categories:
Release of message contents: An unauthorised party obtains information that is
being transmitted.
Traffic analysis: An unauthorised party obtains information useful in guessing the
nature of communication by observing the pattern of masked message transmis-
sions. The modification and fabrication attacks on medical images can be secured
by Watermarking, Reversible watermarking.
For most people, going to the doctor means thinking about co-pays and when
they will feel better. For me though, it means thinking about those plus the cyber
security of the computer systems being used by the medical professionals. Data
security is becoming a real concern. Your medical records, now being converted to
electronic media, can easily be stolen, lost and compromised. Digital data, all
adheres to the same rules. It can be erased, modified, and easily stole—no matter
what laws are in place.