SciTech High school projects

Altogether THREE projects have been created by PIs that involved participation from high school students in SAHI related areas:

• Projects 1 and 2: Two high school projects created by Co-PIs from HIM program have been accepted by the Pittsburgh Science and Technology Academy (ScieTech). Each project will have two high school students. Project 1 (mentor Dr. Andi Saptono of HIM) is about mobile app security and privacy, and the other project (mentor: Co-PI Leming Zhou) is about genomic data security and privacy.
• Project 3: Palanisamy, Joshi and Pelechrinis are involved in Project 3 that will mentor a team of high school students on a healthcare privacy project as part of the SciTech Executive Experience program - – two students were involved at different times; the second one finished the project. The objective of this project was to test and validate the privacy features of our LEAF anonymous social network. LEAF is an anonymous social network for sensitive health related information among users. Such a need for private communication may arise, for instance, in specialized social network applications that focus guiding and intervening patients of sensitive and critical health diseases. As part of this effort, we extended the methodologies for employing the anonymous social networking features implemented in our prototype social network system for intervening bulling issues in high schools. We also performed a qualitative evaluation of the privacy features based on a comprehensive survey-based feedback.  Overall, we believe that this collaborative project with the high school student has been productive. The student decided to pursue his undergraduate in the STEM field and has received admissions from several top universities including UIUC and Georgia Tech.

Presentations/Disseminations in Conferences and other Venues

The PIs and students supported by the project or the students who took graduate courses were able to publish and present their work related to healthcare security and privacy. The conferences included educational or research conferences. PIs also delivered talks and participated in the panels in conference geared towards healthcare cybersecurity. Please click on the publications link above to see the list of publications and conference venues where the published work have been presented. Some examples include, presentation by Co-PI from HIM in Assemble on Education conference, participation/presentation by the PI in 3rd Integrative Conference on Technology, Social Media, and Behavioral Health “Security and Privacy in Mobile and Web-Based Interventions” (on Nov 3, 2017).

 

Co-PI Palanisamy delivered a lecture on general data security and privacy issues related to healthcare to 107 high school students as part of the seventh year of the University of Pittsburgh Health Career Scholars Academy (formerly the Pennsylvania Governor’s School for Health Care). The lecture introduced basic awareness in data privacy and security to the students. Co-PI Palanisamy presented on the topic of “Implementing Curriculum To Address Cybersecurity In Healthcare” to a group of school administrators and instructors in the 2017 Allied Health Workshop organized by PAPSA (Pennsylvania Association of Private School Administrators) and Pocket Nurse in Pittsburgh and Lancaster.

Data Security Workshop for Health Information Management Students

Co-PI Palanisamy had annually conducted a one day workshop on Data Security issues in healthcare to the undergraduate students in the department of Health Information Management in SHRS. The workshop lectures covered basic data security and privacy issues and had three lab modules covering various aspects of data security. A high number female students attended the workshops (e.g., 70% in 2016).

 

Engagement of students in research and development

Throughout the project duration, the PIs were able to engaged undergraduate (mainly in HIM), and graduate (both MS and PhD) students in research and development. For instance, most of the projects in IS 2620 (Fall, 2018) were focused on security and privacy issues in Healthcare. Several doctoral students were able to write research papers in their Doctoral seminar courses or the advanced cybersecurity courses, and later publish. Several undergraduate students in HIM program worked on secure mobile app development projects – some of which resulted in publications.

 

SAHI Website with Resources/Labs/Modules

This project website is sharing Labs developed and resources related to tools and training materials related healthcare cybersecurity. We expect the use of labs to be used by colleagues. One example is the use of some privacy labs by our colleagues from Penn State for their use in the coursework. Some of the materials developed have been simplified and also shared through tutorials page of our other NSF funded SAC-PA project whose primary goal is to foster awareness and education of cybersecurity issues in general though online shared repository of tutorial modules.

 

• Leila Karimi, and James Joshi (2017). Multi-Owner Multi-Stakeholder Access Control Model for a Healthcare Environment.  IEEE Conference on Collaboration and Internet Computing (CIC2017). 3rd, (From Doctoral Seminar)
• Li, Chao, Balaji Palanisamy, and James Joshi (2017). Differentially Private Trajectory Analysis for Points-of-Interest Recommendation.  IEEE International Congress on Big Data (BigData Congress)
• Nuray B. Akhuseyinoglu, James Joshi (2017). A Risk-Aware Access Control Framework for Cyber-Physical Systems.  3rd IEEE Conference on Collaboration and Internet Computing (CIC2017). 
• Chao Li, Balaji Palanisamy and James Joshi, "SocialMix: Supporting Privacy‐aware Trusted Social Networking Services", Proc. of 23rd IEEE International Conference on Web Services (ICWS), San Francisco, USA, 2016. 
• Runhua Xu and James Joshi. “An Integrated Privacy Preserving Attribute Based Access Control Framework.” In 2016 IEEE 9th International Conference on Cloud Computing (Cloud), San Francisco, USA, 2016. (From Doctoral Seminar)
  
• Runhua Xu, James Joshi and Chao Li, “CryptoNN: Training Neural Networks over Encrypted Data,” The 39th IEEE International Conference on Distributed Computing Systems (ICDCS 2019), Jul, 2019
• Zhou L, Thieret R, Watzlaf V, DeAlmeida D, Parmanto B, (2019), "A Telehealth Privacy and Security Self-Assessment Questionnaire for Telehealth Providers: Development and Validation", International Journal of Telerehabilitation, in press.
• Zhou L, Parmanto B, Bao J, Watzlaf V, (2019), "Barriers to and Facilitators of the Use of Mobile Health Apps from a Security Perspective: Mixed-Methods Study", JMIR mHealth and uHealth, 7(4):e11223. DOI: 10.2196/11223.
• Zhou L, Parmanto B, Alfikri Z, Bao J, (2018), "A Mobile App for Assisting Users to Make Informed Selections in Security Settings for Protecting Personal Health Data: Development and Feasibility Study", JMIR mHealth and uHealth, 6(12):e11210. DOI: 10.2196/11210. PMID: 30538088.
• Zhou L, Parmanto B, Joshi J, (2018), "Development and Evaluation of a New Security and Privacy Track in a Health Informatics Graduate Program: Multidisciplinary Collaboration in Education", JMIR Medical Education, 4(2):e19. DOI: 10.2196/mededu.9081. PMID: 30578227
  Smith K, Zhou L, Watzlaf V, (2017), "User Authentication in Smartphones for Telehealth", International Journal of Telerehabilitation, 9(2): 3-11. DOI: 10.5195/ijt.2017.6226.
• Zhou L, Parmanto B, Saptono A, DeAlmeida D, and Watzlaf V, (2017), "A New Security Assured Healthcare Information Track: Evaluation Methods and Results", 2017 Assembly on Education, Anaheim, CA. (July 29 - August 2, 2017)
• Zhou L, Parmanto B, Saptono A, DeAlmeida D, (2016), "A New Security Assured Healthcare Information Track: One Year Experience", AHIMA Assembly on Education Symposium, Denver, CO. (July 23-27, 2016)
• Zhou L and Parmanto B, (2015), "A New Security Assured Healthcare Information Track", AHIMA Assembly on Education Symposium, Austin, TX. (July 19-22, 2015)

 

[Not published yet]

 

• Runhua Xu, James Joshi, Prashant Krishnamurthy, “An Integrated Privacy Preserving Attribute Based Access Control Framework Supporting Secure Deduplication,” IEEE Transactions on Dependable and Secure Computing (under review)
• Runhua Xu, James Joshi, “Trustworthy and Transparent Third Party Authority,” submitted to ACM Transactions on Internet Technologies.
• Nuray Baltaci  Akhuseyinoglu,  James Joshi, “Access  Control  Approaches  for  SmartCities,” (Book Chapter) Book: “IoT  Technologies  in  Smart-Cities:  From sensors to big data, security and trust.” Editors: Al-Turjman  F,  Imran  M,   The Institution of Engineering and Technology (IET); 2019.
• Leila Karimi, James Joshi, “An Automatic Attribute Based Access Control Policy Extraction from Access Logs,” (to be submitted to Elsevier Computer & Security journal)

 

[NSF not acknowledged]

 

• Maryam Karimi, Prashant Krishnamurthy, James Joshi, and David Tipper, “Mining Historical Data towards Interference Management in Wireless SDNs,” The 20th ACM International Conference on Modeling, Analysis and Simulation of Wireless and Mobile Systems, November 21st-25th, 2017, Miami Beach, USA (From Doctoral Seminar).
• Leila Karimi, James Joshi. “An Unsupervised Learning Based Approach for Mining Attribute Based Access Control Policies,” IEEE BigData 2019.
• Watzlaf V, DeAlmeida D, Zhou L, (2019), "Security, Privacy and Safety in TeleAAC", Chapter 2 in "Tele-AAC: Augmentative and Alternative Communication Through Telepractice", in press.
• Watzlaf V, Zhou L, DeAlmeida D, Hartman L, (2017), "A Systematic Review of Research Studies Examining Telehealth Privacy and Security Practices Used by Healthcare Providers", International Journal of Telerehabilitation, 9(2): 39-58. DOI: 10.5195/ijt.2017.6231.
• Takyi H, Watzlaf V, Matthews JT, Zhou L, DeAlmeida D, (2017), "Privacy and Security in Multi-User Health Kiosks", International Journal of Telerehabilitation, 9(1), 3-14.
• Watzlaf V, Dealmeida D, Zhou L, Hartman L, (2015), "Protocol for a Systematic Review of Telehealth Privacy and Security Research to Identify Best Practices", International Journal of Telerehabilitation, 7(2), 15-22.