healthcare-security

IoT Healthcare Security Code and Dataset

Passive CLI tool for medical device network security assessments. Detects PHI leakage, unencrypted DICOM/HL7/FHIR traffic, and fingerprints medical devices from network traffic. Built for healthcare penetration testers.

Clinical IoT Gateway Attack Simulator — Modbus/MQTT security research tool for medical device environments

Executable synthetic-data reference implementation for consent-gated, auditable FHIR R4 exchange with authorization controls, AuditEvent, Provenance, and negative-path validation. For research and technical evaluation only; not for clinical use.

Documented a ransomware incident response at a healthcare clinic using the 5 W's framework, covering detection, containment, recovery, and post-incident audit.

Hệ thống sao lưu và khôi phục 5 tầng theo Zero Trust, dùng credential ngắn hạn, kiểm chứng SHA-256 và immutable vault để giảm tác động ransomware.

GRC Analyst | Risk Assessment · HIPAA Compliance · Healthcare Security

ML- and agent-driven SOC platform for healthcare — DICOM/HL7/FHIR detection, ML playbooks, and an autonomous AI SOC agent.

HealthOnt presents blockchain as a countermeasure solution for security threats of healthcare applications

Healthcare detection-as-code — Sigma rules for DICOM/HL7/FHIR + endpoint, MITRE ATT&CK-mapped, CI-validated.

Real-world ransomware incident response case study from a healthcare environment — anonymized for portfolio use

ISO 22301 business continuity and disaster recovery plan for an acute hospital - BIA, RTO/RPO, ransomware and insider threat

Security and privacy threat model for a conceptual healthcare SIEM using STRIDE, LINDDUN, DREAD and data-flow diagrams.

HIPAA-aligned GRC program for a healthcare system using OpenMRS.

Simulated healthcare third-party risk assessment covering HIPAA due diligence, findings, corrective actions, and conditional vendor approval.

Developed a training presentation on HIPAA Privacy and Security Rules highlighting how cybersecurity principles protect PHI and PII within healthcare systems.

Incident Response Mini Sprint | Simulated Incident at Maven Clinic using NIST Framework

Hybrid cloud security assessment for a healthcare organization handling PHI. Evaluates shared responsibility models, HIPAA compliance gaps, and cloud security best practices including encryption, access control, monitoring, and disaster recovery. Includes actionable recommendations for securing hybrid cloud environments.

Healthcare cybersecurity coursework — IoMT CVE research, physical security planning, HIPAA/PII/PHI compliance training | UMGC CMIT 320