{"id":"https://openalex.org/W4410447970","doi":"https://doi.org/10.3233/shti250447","title":"Measuring the State of Information Security and Data Protection in Healthcare Web Applications","display_name":"Measuring the State of Information Security and Data Protection in Healthcare Web Applications","publication_year":2025,"publication_date":"2025-05-15","ids":{"openalex":"https://openalex.org/W4410447970","doi":"https://doi.org/10.3233/shti250447","pmid":"https://pubmed.ncbi.nlm.nih.gov/40380556"},"language":"en","primary_location":{"id":"doi:10.3233/shti250447","is_oa":true,"landing_page_url":"https://doi.org/10.3233/shti250447","pdf_url":"https://ebooks.iospress.nl/pdf/doi/10.3233/SHTI250447","source":{"id":"https://openalex.org/S4210179765","display_name":"Studies in health technology and informatics","issn_l":"0926-9630","issn":["0926-9630","1879-8365"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310318577","host_organization_name":"IOS Press","host_organization_lineage":["https://openalex.org/P4310318577"],"host_organization_lineage_names":["IOS Press"],"type":"book series"},"license":"cc-by-nc","license_id":"https://openalex.org/licenses/cc-by-nc","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Studies in Health Technology and Informatics","raw_type":"book-chapter"},"type":"book-chapter","indexed_in":["crossref","pubmed"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://ebooks.iospress.nl/pdf/doi/10.3233/SHTI250447","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5117573328","display_name":"Julian Schallenberg","orcid":null},"institutions":[{"id":"https://openalex.org/I200763008","display_name":"Justus-Liebig-Universit\u00e4t Gie\u00dfen","ror":"https://ror.org/033eqas34","country_code":"DE","type":"education","lineage":["https://openalex.org/I200763008"]},{"id":"https://openalex.org/I45155027","display_name":"Technische Hochschule Mittelhessen","ror":"https://ror.org/02qdc9985","country_code":"DE","type":"education","lineage":["https://openalex.org/I45155027"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Julian Schallenberg","raw_affiliation_strings":["Data Integration Center, Institute of medical informatics, Justus-Liebig-University Giessen, Germany","Faculty of health sciences, University of Applied Sciences Mittelhessen, site Giessen, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Data Integration Center, Institute of medical informatics, Justus-Liebig-University Giessen, Germany","institution_ids":["https://openalex.org/I200763008"]},{"raw_affiliation_string":"Faculty of health sciences, University of Applied Sciences Mittelhessen, site Giessen, Germany","institution_ids":["https://openalex.org/I45155027"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5048106207","display_name":"Romina Blasini","orcid":"https://orcid.org/0000-0003-1049-6102"},"institutions":[{"id":"https://openalex.org/I200763008","display_name":"Justus-Liebig-Universit\u00e4t Gie\u00dfen","ror":"https://ror.org/033eqas34","country_code":"DE","type":"education","lineage":["https://openalex.org/I200763008"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Romina Blasini","raw_affiliation_strings":["Data Integration Center, Institute of medical informatics, Justus-Liebig-University Giessen, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Data Integration Center, Institute of medical informatics, Justus-Liebig-University Giessen, Germany","institution_ids":["https://openalex.org/I200763008"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5103096257","display_name":"Keywan Sohrabi","orcid":"https://orcid.org/0000-0002-6279-6097"},"institutions":[{"id":"https://openalex.org/I45155027","display_name":"Technische Hochschule Mittelhessen","ror":"https://ror.org/02qdc9985","country_code":"DE","type":"education","lineage":["https://openalex.org/I45155027"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Keywan Sohrabi","raw_affiliation_strings":["Faculty of health sciences, University of Applied Sciences Mittelhessen, site Giessen, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Faculty of health sciences, University of Applied Sciences Mittelhessen, site Giessen, Germany","institution_ids":["https://openalex.org/I45155027"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5117573329","display_name":"Florian Eberhardt","orcid":null},"institutions":[{"id":"https://openalex.org/I200763008","display_name":"Justus-Liebig-Universit\u00e4t Gie\u00dfen","ror":"https://ror.org/033eqas34","country_code":"DE","type":"education","lineage":["https://openalex.org/I200763008"]},{"id":"https://openalex.org/I45155027","display_name":"Technische Hochschule Mittelhessen","ror":"https://ror.org/02qdc9985","country_code":"DE","type":"education","lineage":["https://openalex.org/I45155027"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Florian Eberhardt","raw_affiliation_strings":["Data Integration Center, Institute of medical informatics, Justus-Liebig-University Giessen, Germany","Faculty of health sciences, University of Applied Sciences Mittelhessen, site Giessen, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Data Integration Center, Institute of medical informatics, Justus-Liebig-University Giessen, Germany","institution_ids":["https://openalex.org/I200763008"]},{"raw_affiliation_string":"Faculty of health sciences, University of Applied Sciences Mittelhessen, site Giessen, Germany","institution_ids":["https://openalex.org/I45155027"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":{"value":0.28004543,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"327","issue":null,"first_page":"743","last_page":"744"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T13022","display_name":"Health and Medical Studies","score":0.8720999956130981,"subfield":{"id":"https://openalex.org/subfields/3600","display_name":"General Health Professions"},"field":{"id":"https://openalex.org/fields/36","display_name":"Health Professions"},"domain":{"id":"https://openalex.org/domains/4","display_name":"Health Sciences"}},"topics":[{"id":"https://openalex.org/T13022","display_name":"Health and Medical Studies","score":0.8720999956130981,"subfield":{"id":"https://openalex.org/subfields/3600","display_name":"General Health Professions"},"field":{"id":"https://openalex.org/fields/36","display_name":"Health Professions"},"domain":{"id":"https://openalex.org/domains/4","display_name":"Health Sciences"}},{"id":"https://openalex.org/T13423","display_name":"Social Policies and Healthcare Reform","score":0.839900016784668,"subfield":{"id":"https://openalex.org/subfields/3600","display_name":"General Health Professions"},"field":{"id":"https://openalex.org/fields/36","display_name":"Health Professions"},"domain":{"id":"https://openalex.org/domains/4","display_name":"Health Sciences"}},{"id":"https://openalex.org/T13364","display_name":"Digitalization, Law, and Regulation","score":0.8203999996185303,"subfield":{"id":"https://openalex.org/subfields/3308","display_name":"Law"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/information-security","display_name":"Information security","score":0.6606963872909546},{"id":"https://openalex.org/keywords/data-security","display_name":"Data security","score":0.5549750328063965},{"id":"https://openalex.org/keywords/health-care","display_name":"Health care","score":0.5544259548187256},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5486647486686707},{"id":"https://openalex.org/keywords/information-security-management","display_name":"Information security management","score":0.5358238220214844},{"id":"https://openalex.org/keywords/work","display_name":"Work (physics)","score":0.520687460899353},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.5119472742080688},{"id":"https://openalex.org/keywords/standard-of-good-practice","display_name":"Standard of Good Practice","score":0.4744965732097626},{"id":"https://openalex.org/keywords/risk-analysis","display_name":"Risk analysis (engineering)","score":0.45574048161506653},{"id":"https://openalex.org/keywords/guideline","display_name":"Guideline","score":0.4556853771209717},{"id":"https://openalex.org/keywords/data-protection-act-1998","display_name":"Data Protection Act 1998","score":0.45415061712265015},{"id":"https://openalex.org/keywords/security-information-and-event-management","display_name":"Security information and event management","score":0.3777713179588318},{"id":"https://openalex.org/keywords/security-service","display_name":"Security service","score":0.361346960067749},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.3427466154098511},{"id":"https://openalex.org/keywords/cloud-computing-security","display_name":"Cloud computing security","score":0.33979296684265137},{"id":"https://openalex.org/keywords/cloud-computing","display_name":"Cloud computing","score":0.16660451889038086},{"id":"https://openalex.org/keywords/medicine","display_name":"Medicine","score":0.12844204902648926},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.1276467740535736},{"id":"https://openalex.org/keywords/network-security-policy","display_name":"Network security policy","score":0.09022602438926697},{"id":"https://openalex.org/keywords/encryption","display_name":"Encryption","score":0.07994455099105835}],"concepts":[{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.6606963872909546},{"id":"https://openalex.org/C10511746","wikidata":"https://www.wikidata.org/wiki/Q899388","display_name":"Data security","level":3,"score":0.5549750328063965},{"id":"https://openalex.org/C160735492","wikidata":"https://www.wikidata.org/wiki/Q31207","display_name":"Health care","level":2,"score":0.5544259548187256},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5486647486686707},{"id":"https://openalex.org/C148976360","wikidata":"https://www.wikidata.org/wiki/Q1662500","display_name":"Information security management","level":5,"score":0.5358238220214844},{"id":"https://openalex.org/C18762648","wikidata":"https://www.wikidata.org/wiki/Q42213","display_name":"Work (physics)","level":2,"score":0.520687460899353},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5119472742080688},{"id":"https://openalex.org/C47309137","wikidata":"https://www.wikidata.org/wiki/Q7598357","display_name":"Standard of Good Practice","level":5,"score":0.4744965732097626},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.45574048161506653},{"id":"https://openalex.org/C2780182762","wikidata":"https://www.wikidata.org/wiki/Q1630279","display_name":"Guideline","level":2,"score":0.4556853771209717},{"id":"https://openalex.org/C69360830","wikidata":"https://www.wikidata.org/wiki/Q1172237","display_name":"Data Protection Act 1998","level":2,"score":0.45415061712265015},{"id":"https://openalex.org/C103377522","wikidata":"https://www.wikidata.org/wiki/Q3493999","display_name":"Security information and event management","level":4,"score":0.3777713179588318},{"id":"https://openalex.org/C29983905","wikidata":"https://www.wikidata.org/wiki/Q7445066","display_name":"Security service","level":3,"score":0.361346960067749},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.3427466154098511},{"id":"https://openalex.org/C184842701","wikidata":"https://www.wikidata.org/wiki/Q370563","display_name":"Cloud computing security","level":3,"score":0.33979296684265137},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.16660451889038086},{"id":"https://openalex.org/C71924100","wikidata":"https://www.wikidata.org/wiki/Q11190","display_name":"Medicine","level":0,"score":0.12844204902648926},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.1276467740535736},{"id":"https://openalex.org/C117110713","wikidata":"https://www.wikidata.org/wiki/Q3394676","display_name":"Network security policy","level":4,"score":0.09022602438926697},{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.07994455099105835},{"id":"https://openalex.org/C162324750","wikidata":"https://www.wikidata.org/wiki/Q8134","display_name":"Economics","level":0,"score":0.0},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0},{"id":"https://openalex.org/C78519656","wikidata":"https://www.wikidata.org/wiki/Q101333","display_name":"Mechanical engineering","level":1,"score":0.0},{"id":"https://openalex.org/C142724271","wikidata":"https://www.wikidata.org/wiki/Q7208","display_name":"Pathology","level":1,"score":0.0},{"id":"https://openalex.org/C50522688","wikidata":"https://www.wikidata.org/wiki/Q189833","display_name":"Economic growth","level":1,"score":0.0}],"mesh":[{"descriptor_ui":"D003219","descriptor_name":"Confidentiality","qualifier_ui":"Q000592","qualifier_name":"standards","is_major_topic":true},{"descriptor_ui":"D003219","descriptor_name":"Confidentiality","qualifier_ui":"Q000592","qualifier_name":"standards","is_major_topic":true},{"descriptor_ui":"D005858","descriptor_name":"Germany","qualifier_ui":null,"qualifier_name":null,"is_major_topic":false},{"descriptor_ui":"D005858","descriptor_name":"Germany","qualifier_ui":null,"qualifier_name":null,"is_major_topic":false},{"descriptor_ui":"D006801","descriptor_name":"Humans","qualifier_ui":null,"qualifier_name":null,"is_major_topic":false},{"descriptor_ui":"D006801","descriptor_name":"Humans","qualifier_ui":null,"qualifier_name":null,"is_major_topic":false},{"descriptor_ui":"D016494","descriptor_name":"Computer Security","qualifier_ui":"Q000592","qualifier_name":"standards","is_major_topic":true},{"descriptor_ui":"D016494","descriptor_name":"Computer Security","qualifier_ui":"Q000592","qualifier_name":"standards","is_major_topic":true},{"descriptor_ui":"D020407","descriptor_name":"Internet","qualifier_ui":"Q000592","qualifier_name":"standards","is_major_topic":true},{"descriptor_ui":"D020407","descriptor_name":"Internet","qualifier_ui":"Q000592","qualifier_name":"standards","is_major_topic":true}],"locations_count":2,"locations":[{"id":"doi:10.3233/shti250447","is_oa":true,"landing_page_url":"https://doi.org/10.3233/shti250447","pdf_url":"https://ebooks.iospress.nl/pdf/doi/10.3233/SHTI250447","source":{"id":"https://openalex.org/S4210179765","display_name":"Studies in health technology and informatics","issn_l":"0926-9630","issn":["0926-9630","1879-8365"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310318577","host_organization_name":"IOS Press","host_organization_lineage":["https://openalex.org/P4310318577"],"host_organization_lineage_names":["IOS Press"],"type":"book series"},"license":"cc-by-nc","license_id":"https://openalex.org/licenses/cc-by-nc","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Studies in Health Technology and Informatics","raw_type":"book-chapter"},{"id":"pmid:40380556","is_oa":false,"landing_page_url":"https://pubmed.ncbi.nlm.nih.gov/40380556","pdf_url":null,"source":{"id":"https://openalex.org/S4306525036","display_name":"PubMed","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I1299303238","host_organization_name":"National Institutes of Health","host_organization_lineage":["https://openalex.org/I1299303238"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Studies in health technology and informatics","raw_type":"Journal Article"}],"best_oa_location":{"id":"doi:10.3233/shti250447","is_oa":true,"landing_page_url":"https://doi.org/10.3233/shti250447","pdf_url":"https://ebooks.iospress.nl/pdf/doi/10.3233/SHTI250447","source":{"id":"https://openalex.org/S4210179765","display_name":"Studies in health technology and informatics","issn_l":"0926-9630","issn":["0926-9630","1879-8365"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310318577","host_organization_name":"IOS Press","host_organization_lineage":["https://openalex.org/P4310318577"],"host_organization_lineage_names":["IOS Press"],"type":"book series"},"license":"cc-by-nc","license_id":"https://openalex.org/licenses/cc-by-nc","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Studies in Health Technology and Informatics","raw_type":"book-chapter"},"sustainable_development_goals":[{"score":0.5799999833106995,"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4410447970.pdf","grobid_xml":"https://content.openalex.org/works/W4410447970.grobid-xml"},"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W2033357182","https://openalex.org/W2376792395","https://openalex.org/W2362334938","https://openalex.org/W1557523735","https://openalex.org/W2394290376","https://openalex.org/W2370581992","https://openalex.org/W2354737822","https://openalex.org/W2379320583","https://openalex.org/W2800653357","https://openalex.org/W2767454858"],"abstract_inverted_index":{"The":[0,35],"digitalization":[1],"of":[2,47,73,84,88],"healthcare":[3,49],"requires":[4],"robust":[5],"information":[6,41,89],"security":[7,42,63,90],"and":[8,43,55,91],"data":[9,44,92],"protection":[10,45,93],"measures.":[11],"This":[12],"work":[13],"outlines":[14],"a":[15,48,81],"methodology":[16],"for":[17,31],"assessing":[18],"these":[19],"aspects":[20],"using":[21],"the":[22,27,39,74,85],"Technical":[23],"Guideline":[24],"TR-03161-2":[25],"from":[26],"German":[28],"Federal":[29],"Office":[30],"Information":[32],"Security":[33],"(BSI).":[34],"approach":[36],"involves":[37],"comparing":[38],"current":[40],"state":[46],"web":[50],"application":[51],"against":[52],"predefined":[53],"requirements":[54],"identifying":[56],"threats":[57],"based":[58],"on":[59],"unmet":[60],"criteria.":[61],"Identified":[62],"deficits":[64],"are":[65],"quantified":[66],"in":[67],"economic":[68,86],"cost":[69],"terms":[70],"through":[71],"use":[72],"Annualized":[75],"Loss":[76],"Expectancy":[77],"(ALE)":[78],"framework,":[79],"providing":[80],"realistic":[82],"assessment":[83],"impact":[87],"risks.":[94]},"counts_by_year":[],"updated_date":"2026-08-21T09:56:20.448147","created_date":"2025-10-10T00:00:00"}