
Research Article
Investigating Protected Health Information Leakage from Android Medical Applications
@INPROCEEDINGS{10.1007/978-3-030-78459-1_23, author={George Grispos and Talon Flynn and William Bradley Glisson and Kim-Kwang Raymond Choo}, title={Investigating Protected Health Information Leakage from Android Medical Applications}, proceedings={Future Access Enablers for Ubiquitous and Intelligent Infrastructures. 5th EAI International Conference, FABULOUS 2021, Virtual Event, May 6--7, 2021, Proceedings}, proceedings_a={FABULOUS}, year={2021}, month={6}, keywords={Information leakage Protected Health Information Privacy Security Medical device Mobile phone}, doi={10.1007/978-3-030-78459-1_23} }
- George Grispos
Talon Flynn
William Bradley Glisson
Kim-Kwang Raymond Choo
Year: 2021
Investigating Protected Health Information Leakage from Android Medical Applications
FABULOUS
Springer
DOI: 10.1007/978-3-030-78459-1_23
Abstract
As smartphones and smartphone applications are widely used in a healthcare context (e.g., remote healthcare), these devices and applications may need to comply with the Health Insurance Portability and Accountability Act (HIPAA) of 1996. In other words, adequate safeguards to protect the user’s sensitive information (e.g., personally identifiable information and/or medical history) are required to be enforced on such devices and applications. In this study, we forensically focus on the potential of recovering residual data from Android medical applications, with the objective of providing an initial risk assessment of such applications. Our findings (e.g., documentation of the artifacts) also contribute to a better understanding of the types and location of evidential artifacts that can, potentially, be recovered from these applications in a digital forensic investigation.