Security monitoring method and system based on medical network

Abstract

The invention discloses a security monitoring method and system based on a medical network. The method comprises: identifying all devices connected to a current medical network and device types automatically and providing a real-time operating state; tracking data exchange of each device in the medical network and analyzing and determining a normal behavior pattern of each connected device; and analyzing and determining an abnormal control instruction in real time, isolating a threat in real time based on a need and sending warning information to a network management platform. In addition, security monitoring devices process network flows and extract useful information; remote monitoring servers analyze the data from the security monitoring devices, discover and identify devices in the medical network by using a machine learning algorithm, classify the devices based on the collected information, determine a correct behavior pattern of each device, detect abnormal behaviors, and complete post treatment of the abnormal behavior.

Description

technical field [0001] The invention relates to the technical field of medical network safety protection, in particular to a method and system for safety monitoring of a medical network. Background technique [0002] Cyber ​​attacks against the medical system are becoming more and more serious. Cyber ​​hackers are constantly paying attention to the medical industry and they believe that the medical industry is an easy target to break through after comparing industries such as banking, industry, and retail. More and more hospitals have become the target of cybercrime in the past few years, a considerable part of which is the attack on networked medical devices, and these networked medical devices have a large number of security risks. [0003] Most Internet-connected medical devices like infusion pumps, MRI machines, X-ray machines, glucose meters, heart monitors, blood gas analyzers, etc., security researchers have found that medical devices are full of a variety of threats ...

AI Technical Summary

Problems solved by technology

[0004] Traditional security solutions are based on the characteristics and behaviors of known malware, protecting the same IT network. For today's growing network composed of complex types of special-purpose medical facilities that lack standardization, Traditional approaches to passive network defense are not working

Images