{"id":"https://openalex.org/W2060003048","doi":"https://doi.org/10.1145/2110363.2110399","title":"Modifying without a trace","display_name":"Modifying without a trace","publication_year":2012,"publication_date":"2012-01-28","ids":{"openalex":"https://openalex.org/W2060003048","doi":"https://doi.org/10.1145/2110363.2110399","mag":"2060003048"},"language":"en","primary_location":{"id":"doi:10.1145/2110363.2110399","is_oa":false,"landing_page_url":"https://doi.org/10.1145/2110363.2110399","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2nd ACM SIGHIT International Health Informatics Symposium","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5019402724","display_name":"Jason King","orcid":null},"institutions":[{"id":"https://openalex.org/I137902535","display_name":"North Carolina State University","ror":"https://ror.org/04tj63d06","country_code":"US","type":"education","lineage":["https://openalex.org/I137902535"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Jason Tyler King","raw_affiliation_strings":["North Carolina State University, Raleigh, NC, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"North Carolina State University, Raleigh, NC, USA","institution_ids":["https://openalex.org/I137902535"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5102452504","display_name":"Ben Smith","orcid":"https://orcid.org/0000-0002-9233-1389"},"institutions":[{"id":"https://openalex.org/I137902535","display_name":"North Carolina State University","ror":"https://ror.org/04tj63d06","country_code":"US","type":"education","lineage":["https://openalex.org/I137902535"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Ben Smith","raw_affiliation_strings":["North Carolina State University, Raleigh, NC, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"North Carolina State University, Raleigh, NC, USA","institution_ids":["https://openalex.org/I137902535"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5028171895","display_name":"Laurie Williams","orcid":"https://orcid.org/0000-0003-3300-6540"},"institutions":[{"id":"https://openalex.org/I137902535","display_name":"North Carolina State University","ror":"https://ror.org/04tj63d06","country_code":"US","type":"education","lineage":["https://openalex.org/I137902535"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Laurie Williams","raw_affiliation_strings":["North Carolina State University, Raleigh, NC, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"North Carolina State University, Raleigh, NC, USA","institution_ids":["https://openalex.org/I137902535"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I137902535"],"apc_list":null,"apc_paid":null,"fwci":18.8829,"has_fulltext":false,"cited_by_count":32,"citation_normalized_percentile":{"value":0.99142339,"is_in_top_1_percent":true,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":89,"max":98},"biblio":{"volume":null,"issue":null,"first_page":"305","last_page":"314"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11045","display_name":"Privacy, Security, and Data Protection","score":0.9975000023841858,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},"topics":[{"id":"https://openalex.org/T11045","display_name":"Privacy, Security, and Data Protection","score":0.9975000023841858,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T10350","display_name":"Electronic Health Records Systems","score":0.9939000010490417,"subfield":{"id":"https://openalex.org/subfields/3605","display_name":"Health Information Management"},"field":{"id":"https://openalex.org/fields/36","display_name":"Health Professions"},"domain":{"id":"https://openalex.org/domains/4","display_name":"Health Sciences"}},{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.9786999821662903,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/audit","display_name":"Audit","score":0.7612637281417847},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.613465428352356},{"id":"https://openalex.org/keywords/certification","display_name":"Certification","score":0.5943933129310608},{"id":"https://openalex.org/keywords/event","display_name":"Event (particle physics)","score":0.5576942563056946},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5448085069656372},{"id":"https://openalex.org/keywords/electronic-health-record","display_name":"Electronic health record","score":0.5133416056632996},{"id":"https://openalex.org/keywords/non-repudiation","display_name":"Non-repudiation","score":0.4902203679084778},{"id":"https://openalex.org/keywords/health-records","display_name":"Health records","score":0.4127430319786072},{"id":"https://openalex.org/keywords/internet-privacy","display_name":"Internet privacy","score":0.3557475805282593},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.24105554819107056},{"id":"https://openalex.org/keywords/health-care","display_name":"Health care","score":0.19651508331298828},{"id":"https://openalex.org/keywords/accounting","display_name":"Accounting","score":0.15536656975746155}],"concepts":[{"id":"https://openalex.org/C199521495","wikidata":"https://www.wikidata.org/wiki/Q181487","display_name":"Audit","level":2,"score":0.7612637281417847},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.613465428352356},{"id":"https://openalex.org/C46304622","wikidata":"https://www.wikidata.org/wiki/Q374814","display_name":"Certification","level":2,"score":0.5943933129310608},{"id":"https://openalex.org/C2779662365","wikidata":"https://www.wikidata.org/wiki/Q5416694","display_name":"Event (particle physics)","level":2,"score":0.5576942563056946},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5448085069656372},{"id":"https://openalex.org/C3020144179","wikidata":"https://www.wikidata.org/wiki/Q10871684","display_name":"Electronic health record","level":3,"score":0.5133416056632996},{"id":"https://openalex.org/C44209976","wikidata":"https://www.wikidata.org/wiki/Q1327773","display_name":"Non-repudiation","level":3,"score":0.4902203679084778},{"id":"https://openalex.org/C3019952477","wikidata":"https://www.wikidata.org/wiki/Q1324077","display_name":"Health records","level":3,"score":0.4127430319786072},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.3557475805282593},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.24105554819107056},{"id":"https://openalex.org/C160735492","wikidata":"https://www.wikidata.org/wiki/Q31207","display_name":"Health care","level":2,"score":0.19651508331298828},{"id":"https://openalex.org/C121955636","wikidata":"https://www.wikidata.org/wiki/Q4116214","display_name":"Accounting","level":1,"score":0.15536656975746155},{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.0},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0},{"id":"https://openalex.org/C162324750","wikidata":"https://www.wikidata.org/wiki/Q8134","display_name":"Economics","level":0,"score":0.0},{"id":"https://openalex.org/C50522688","wikidata":"https://www.wikidata.org/wiki/Q189833","display_name":"Economic growth","level":1,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0},{"id":"https://openalex.org/C62520636","wikidata":"https://www.wikidata.org/wiki/Q944","display_name":"Quantum mechanics","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/2110363.2110399","is_oa":false,"landing_page_url":"https://doi.org/10.1145/2110363.2110399","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2nd ACM SIGHIT International Health Informatics Symposium","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"},{"id":"https://openalex.org/F4320306110","display_name":"U.S. Department of Homeland Security","ror":"https://ror.org/00jyr0d86"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":11,"referenced_works":["https://openalex.org/W2001532304","https://openalex.org/W2033257025","https://openalex.org/W2072735129","https://openalex.org/W2073922410","https://openalex.org/W2094124237","https://openalex.org/W2126536038","https://openalex.org/W2129538654","https://openalex.org/W2164868210","https://openalex.org/W2620229640","https://openalex.org/W4252934814","https://openalex.org/W6738768185"],"related_works":["https://openalex.org/W2102563652","https://openalex.org/W2300019294","https://openalex.org/W2975587360","https://openalex.org/W2416586052","https://openalex.org/W3204940614","https://openalex.org/W1732746296","https://openalex.org/W1536982304","https://openalex.org/W2117000614","https://openalex.org/W2244289792","https://openalex.org/W2149326522"],"abstract_inverted_index":{"Without":[0],"adequate":[1],"audit":[2,38,54],"mechanisms,":[3],"electronic":[4,35],"health":[5,20,36,198],"record":[6,37],"(EHR)":[7],"systems":[8,79,84,94],"remain":[9],"vulnerable":[10],"to":[11,33,40,50,80],"undetected":[12],"misuse.":[13],"Users":[14],"could":[15],"modify":[16],"or":[17],"delete":[18],"protected":[19,197],"information":[21,199],"without":[22,162],"these":[23,86,101,131],"actions":[24,147],"being":[25],"traceable.":[26],"The":[27,171],"objective":[28],"of":[29,45,98,100,130,136,151,156,165,174,182,201],"this":[30],"paper":[31],"is":[32],"assess":[34,51,75],"mechanisms":[39],"determine":[41,81],"the":[42,83,93,149,166,169,180],"current":[43],"degree":[44],"auditing":[46,183],"for":[47,120,184,195],"non-repudiation":[48,68],"and":[49,154],"whether":[52],"general":[53,62,175,202],"guidelines":[55],"adequately":[56],"address":[57],"non-repudiation.":[58,185],"We":[59,73,90,104,125],"derived":[60,116,204],"16":[61,87],"auditable":[63,114,176,193],"event":[64,88,102],"types":[65],"that":[66,92,127],"affect":[67],"based":[69,111],"upon":[70],"four":[71],"publications.":[72],"qualitatively":[74],"three":[76,141],"open-source":[77],"EHR":[78,142,186],"if":[82],"log":[85,95],"types.":[89,103],"find":[91,126],"an":[96],"average":[97],"12.5%":[99],"also":[105],"generated":[106],"58":[107],"black-box":[108],"test":[109],"cases":[110],"on":[112,191],"specific":[113,192],"events":[115,177,194,203],"from":[117,205],"Certification":[118],"Commission":[119],"Health":[121],"Information":[122],"Technology":[123],"criteria.":[124],"only":[128],"4.02%":[129],"tests":[132,137],"pass.":[133],"Additionally,":[134],"20%":[135],"fail":[138],"in":[139],"all":[140],"systems.":[143],"As":[144],"a":[145,163],"result,":[146],"including":[148],"modification":[150],"patient":[152],"demographics":[153],"assignment":[155],"user":[157,167],"privileges":[158],"can":[159],"be":[160],"executed":[161],"trace":[164],"performing":[168],"action.":[170],"ambiguous":[172],"nature":[173],"may":[178],"explain":[179],"inadequacy":[181],"system":[187],"developers":[188],"should":[189],"focus":[190],"managing":[196],"instead":[200],"guidelines.":[206]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2023,"cited_by_count":1},{"year":2021,"cited_by_count":2},{"year":2020,"cited_by_count":1},{"year":2019,"cited_by_count":2},{"year":2017,"cited_by_count":3},{"year":2016,"cited_by_count":4},{"year":2015,"cited_by_count":3},{"year":2014,"cited_by_count":5},{"year":2013,"cited_by_count":5},{"year":2012,"cited_by_count":5}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}
