arXivDaily arXiv每日学术速递 周一至周五更新
arXiv 2007.10876cs.SE
收藏

开发安全移动健康应用程序的挑战,系统评价

Challenges in Developing Secure Mobile Health Applications, A Systematic Review

Bakheet Aljedaani, M. Ali Babar

摘要:

移动健康(mHealth)应用程序(app)在过去几年中获得了极大的普及,因为它具有巨大的好处,例如降低医疗成本和提高患者意识。然而,医疗数据的敏感性使得移动健康应用程序的安全性成为一个严重的问题。在这次审查中,我们的目标是确定和分析报告的挑战,移动健康应用程序的开发人员面临的安全性。此外,我们的研究旨在开发一个概念框架,以应对移动健康应用程序开发组织在开发安全应用程序时所面临的挑战。了解这些挑战有助于降低开发不安全的移动健康应用程序的风险。本综述采用系统文献综述方法。我们选择了2008年1月至2020年10月期间发表的研究。我们选择了32个主要研究,使用预定义的标准和主题分析方法分析提取的数据。我们确定了可能影响安全移动健康应用程序开发的九个挑战。例如1)缺乏开发安全mHealth应用程序的安全指南和法规,2)开发人员缺乏安全mHealth应用程序开发的知识和专业知识,3)在mHealth应用程序开发期间缺乏利益相关者的参与等。根据我们的分析,我们提出了一个概念框架,突出了所确定的挑战之间的相互关系。我们的结论是,我们的研究结果可以帮助他们找出自己的弱点,并改善他们的安全实践。同样,移动健康应用程序开发人员可以确定他们在开发不会给用户带来安全风险的移动健康应用程序时所面临的挑战。我们的审查是朝着提供安全的mHealth应用程序的发展见解迈出的一步。我们提出的概念框架可以作为从业人员的实践指南,以加强安全的移动健康应用程序的开发。

英文摘要:

Mobile health (mHealth) applications (apps) have gained significant popularity over the last few years due to its tremendous benefits, such as lowering healthcare cost and increasing patient awareness. However, the sensitivity of healthcare data makes the security of mHealth apps a serious concern. In this review, we aim to identify and analyse the reported challenges that the developers of mHealth apps face concerning security. Additionally, our study aimed to develop a conceptual framework with the challenges faced by mHealth apps development organization for developing secure apps. The knowledge of such challenges can help to reduce the risk of developing insecure mHealth apps. We followed the Systematic Literature Review method for this review. We selected studies that have been published between January 2008 and October 2020. We selected 32 primary studies using predefined criteria and used thematic analysis method for analysing the extracted data. We identified nine challenges that can affect the development of secure mHealth apps. Such as 1) lack of security guidelines and regulations for developing secure mHealth apps, 2) developers lack of knowledge and expertise for secure mHealth app development, 3) lack of stakeholders involvement during mHealth app development, etc . Based on our analysis, we have presented a conceptual framework which highlights the correlation between the identified challenges. We conclude that our findings can help them identify their weaknesses and improve their security practices. Similarly, mHealth apps developers can identify the challenges they face to develop mHealth apps that do not pose security risks for users. Our review is a step towards providing insights into the development of secure mHealth apps. Our proposed conceptual framework can act as a practice guideline for practitioners to enhance secure mHealth apps development.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑