TICE.Healthy Framework for Developing an Ecosystem of Applications in the Domain of Informal Health

Total Page:16

File Type:pdf, Size:1020Kb

TICE.Healthy Framework for Developing an Ecosystem of Applications in the Domain of Informal Health GLOBAL HEALTH 2013 : The Second International Conference on Global Health Challenges TICE.Healthy Framework for Developing an Ecosystem of Applications in the Domain of Informal Health Pedro Catré, Jorge Dias João Quintas, Alcides Marques Faculty of Sciences and Technology IPN Laboratory of Automatic and Systems and Laboratory University of Coimbra of Informatics and Systems Coimbra, Portugal Instituto Pedro Nunes [email protected], [email protected] Coimbra, Portugal [email protected], [email protected] Abstract— This paper presents a platform being developed in a it provides for developers, the types of applications that are large scale national project that aims to create an ecosystem of supported in the marketplace and a high-level view of its services and applications where patients, relatives and architecture. Section VI provides conclusions for this paper. healthcare professionals can cooperate in day-to-day activities. It will implement functionalities for managing medical, social II. STATE OF THE ART and context information, for integrating mobile devices, This section analyses current market solutions that remote control and sensors, with insurance of information present comparable functionalities to the ones required by security. the eVida platform. Although this analysis includes eHealth Keywords-eHealth; informal healthcare; service-oriented platforms it does not focus exclusively on that use case. architecture; REST. A. Commercial Web Portals Google Health has been permanently discontinued since I. INTRODUCTION it did not reach the initially expected product adoption. TICE.Healthy – Health and Quality of Life Systems – is However, it is still relevant since it was one of the primary a research and development project that represents a commercial platforms available providing personal health collaborative effort to design and deploy innovative products records. This platform allowed users to persist, manage and and applications in the fields of eHealth and Ageing-Well. share the user’s health data with other users. It also provided The main goal of this project is to create a web-based an API allowing the users to share data with external platform, named eVida, designed to ensure a set of applications that could provide several services like services/features to support the creation of new products, scheduling appointments, processing health data, among processes, services and applications [1], [2]. others [6]. From a global perspective, the platform being developed Microsoft HealthVault is an XML-over-HTTP web plays the central role within the project TICE.Healthy. Its service exposing a set of XML-based methods that primary objectives are data acquisition and processing from developers can leverage to build applications that connect to various collaborating entities (data providers – supply side) HealthVault. Also, a number of SDKs are available that so that it can be shared and used by service providers. The deliver platform-specific abstractions for working with eVida website can be consulted at [3], and a promotional HealthVault [7]. It is worth noting that this platform is only video demonstrating some of its features is available at [4]. available in the United States of America and the United It is true that we are now witnessing a proliferation of Kingdom. Although Microsoft Health Vault supports an eHealth platforms [5]; however, they are mainly focused on ecosystem of other platforms and partner services to leverage offering a single service. eVida’s innovation comes precisely the user’s data, assuming the required permissions over the from breaking free of this paradigm by allowing the creation data were granted, it lacks many important features. of an ecosystem of applications that can provide Specifically, this platform does not integrate web complementing capabilities and whose value can potentially applications in a single place and it does not provide the final supersede the sum of the benefits delivered by each user with a transparent and singular experience while using individual application. the platform. In other words, HealthVault does not support This paper presents the architectural approach and a brief embedded applications, meaning each application runs description of the main modules comprising the eVida independently, outside of HealthVault and no mechanisms platform. are provided for inter-app communication. Furthermore, it The paper is organized as follows. Section II presents an does not provide Single-Sign-On [8], which is a facility analysis of related work. Section III gives an overview of the through which a user logs in once and gains access to all platform’s architecture. Section IV presents the main systems without being prompted to log in again at each of modules that make up the platform. Section V describes the them. In fact, in order to start using a new application the Web Portal, more specifically: its purpose, the main features user is taken to the service provider’s website where he Copyright (c) IARIA, 2013. ISBN: 978-1-61208-314-8 49 GLOBAL HEALTH 2013 : The Second International Conference on Global Health Challenges needs to register, sign-in and link the new account to the on - HealthVault account. ons - iGoogle is a service provided by Google that consists of a apps apps apps web portal that supports web feeds and web gadgets. The Cross browser Supports Supports Granular Granular Embedded Embedded Permissi native mobile mobile native Consistent UI Consistent gadgets are defined through an open custom specification web Supports Single Single sign called Google Gadgets [9]. Both the development and use of LinkedIn ✓ ✓ ✓ ✓ ✓ ✓ ✗ the applications is open to the public [10]. It works similarly Apps to other portals such as My Yahoo!, Netvibes and Pageflakes Twitter ✗ ✓ ✓ ✗ ✓ ✓ ✓ [11]. Apps Facebook Apps consist of applications hosted in an Chrome external server that are accessed in Facebook in a page called Web ✗ ✗ ✓ ✗ ✗ ✓ ✗ Canvas. Together, they provide functionality through APIs, Store Podio such as the Social Channels API that includes bookmarks, App ✓ ✓ ✗ ✓ ✓ ✓ ✓ notifications, News Feed stories and search [12]. Facebook Store also offers an authentication system, called Facebook eVida ✓ ✓ ✓ ✓ ✓ ✓ ✓ Connect, as an alternative mechanism to the registration of a user. In other words, Facebook Connect allows external applications to support Facebook accounts [13]. eVida already supports the most common features LinkedIn supports applications that follow the provided by major web portals. However, it is an ongoing OpenSocial specification [14]. These applications can be project with many required functionalities still in added to the user’s homepage and to his personal profile development, such as a payment system for the marketplace [15]. and a fully featured interoperability module. Twitter does not support applications in the same way as III. PLATFORM ARCHITECTURE OVERVIEW the previous examples. It offers a REST API that enables third-party applications to interact with the majority of the The platform’s architecture is based on the design web site’s functionalities [16]. It also provides an principles of service-oriented architectures (SOA), because authorization and authentication mechanism that can be used of its distributed and extensible nature. This approach by external applications (similarly to Facebook Connect). increases the abstraction and encapsulation within the To that end, Twitter employs OAuth. The permissions that a system. The platform exposes a set of Representational State user can grant are granular enough that he can limit the Transfer (REST) services as the communication mechanism access to specific data and communication on his behalf. with the data and service providers. Fig. 1 illustrates the Chrome Web Store allows the specification of high-level architecture of the platform. Three main applications published as a compressed archive composed of components can be easily identified, which implement the a manifest, HTML, CSS, and JavaScript files [17] or as a information and interaction channels for selling products and pointer to an external server [18]. Neither type of application health services: the database stores all the administrative is embedded in the Chrome Web Store. Also, the mechanism data, and configuration data of the platform; the backend for executing the applications is not interoperable; it’s services provide security, interoperability and information restricted to the Chrome browser. services; and the frontend is comprised by the platform’s Podio is a web system that supports collaborative work web portal, which exposes the tools to submit and publish for companies and provides extensibility through external applications within the platform’s ecosystem. web applications. It allows the discovery and purchase of applications similarly to the Chrome Web Store [19]. Table I presents a comparison of the functionalities of the various commercial projects that were presented. TABLE I. COMPARISON OF THE FUNCTIONALITIES OF THE COMMERCIAL PROJECTS THAT WERE ANALYSED Figure 1. The platform’s high-level architecture. on This platform implements functionalities to manage - ons - medical, social and context information, for integrating mobile devices, remote control and sensors, with insurance apps apps apps Cross browser Supports Supports Granular Granular of information security. Embedded Embedded Permissi native mobile mobile native Consistent UI Consistent Supports web Supports Single Single sign Google IV. PLATFORM
Recommended publications
  • Comunicação Entre Médico E Utente
    Comunicação entre Médico e Utente VÍTOR MANUEL FERREIRA AMORIM Outubro de 2016 Comunicação entre Médico e Utente VitalHealthCare Vítor Manuel Ferreira Amorim Dissertação para obtenção do Grau de Mestre em Engenharia Informática, Área de Especialização em Sistemas Computacionais Orientador: Doutor Paulo Baltarejo de Sousa Júri: Presidente: Doutor Nuno Alexandre Pinto da Silva, ISEP Porto, Outubro 2016 ii Resumo Hoje em dia, o papel crucial da relação médico-doente e a comunicação eficaz que lhe está subjacente, bem como os conceitos de autonomia do paciente, a tomada de decisão partilhada, o cuidado centrado no doente e ainda a empatia do médico. A relação médico-doente deve ser considerada como um importante preditor do processo clínico do doente. A tomada de decisão partilhada entre o médico e o doente proporciona a seleção de várias medidas de tratamento e a determinação conjunta de metas a alcançar que se adequam ao doente em causa, o que leva a uma maior satisfação do doente com o tratamento, aumenta a sua adesão e melhora os resultados. As Tecnologias da Informação e Comunicação (TIC) têm tomado um papel de destaque na gestão e prestação de cuidados de saúde e assistência social. Uma das suas aplicações é no acompanhamento dos pacientes no seu dia-a-dia, de modo a, em caso de urgência, permitir uma intervenção mais atempada pelos serviços médicos. No campo das TIC, temos assistido à ascensão dos smartphones, dispositivos com grande mobilidade, conetividade e capacidade de processamento. São dispositivos que acompanham os pacientes, todos os dias, substituindo a necessidade de plataformas específicas para cada tipo de monitorização, facilitando assim o dia-a-dia dos pacientes.
    [Show full text]
  • Microsoft Business Insights
    Microsoft Business Insights Subscribe | Chat with a Representative | View as webpage FEBRUARY 2014 Feature Story Top Stories Events Other News Join us at the Microsoft Health Users Manage Your Profile Group Forum 2014 Help us, help you. Sunday, February 23, 2014 The best way to ensure the 11:30 AM - 4:30 PM ET content in this newsletter is Orange County Convention Center | Room 414 ABC relevant to you and your business is to make sure that Join us for the Microsoft Health Users Group Forum at HIMSS14. Hear your profile is complete. from thought leaders from leading healthcare organizations that are shaping innovation and improving care delivery. Update Your Profile This complimentary, half-day forum features the latest innovations in health delivered jointly by Microsoft in Health executives, provider organizations and industry leaders. From delivering comprehensive data Learn more about approaches for health to achieving outcome-based patient experiences Microsoft in Health across solutions and devices & apps, these sessions will give a kick-start to your HIMSS14 experience. Speakers include: Steve Aylward General Manager, Health and Life Sciences, Microsoft Christine Bessler CIO and VP of Information Technology, ProHealth Care Install these great Scott Helton Windows 8 Apps Director, Imaging Applications, Cedars-Sinai Medical Center Dr. Nick Patel, MD CDC's health info app Medical Director, Midlands International Medicine, Ambulatory Medical Informatics, Palmetto Health ePharmaSolutions PatientLive Jason Pomaski AVP of Technology, Community
    [Show full text]
  • Microsoftin Tietosuojalauseke – Microsoftin Tietosuoja Page 1 of 59
    Microsoftin tietosuojalauseke – Microsoftin tietosuoja Page 1 of 59 Microsoft Microsoftin tietosuojalauseke Päivitetty viimeksi: Huhtikuu 2018 Mikä on uutta? Tietosuojasi on meille tärkeää. Tässä tietosuojalausekkeessa kerrotaan, mitä henkilökohtaisia tietoja Microsoft kerää voit sinulta, kun olet vuorovaikutuksessa kanssamme ja kun käytät tuotteitamme, sekä miten käytämme näitä tietoja. Microsoft tarjoaa useita erilaisia tuotteita alkaen kaikkialla maailmassa yritysten toiminnassa käytettävistä palvelintuotteista ja jatkuen kotona käytettäviin laitteisiin, kouluissa opiskelijoiden käyttämiin ohjelmistoihin ja kehittäjien tulevaisuuden luomiseen ja ylläpitämiseen käyttämiin palveluihin. Tässä lausekkeessa esitetyt viittaukset Microsoft- tuotteisiin sisältävät Microsoftin palveluita, sivustoja, sovelluksia, ohjelmistoja, servereitä ja laitteita. Lue tästä tietosuojalausekkeesta tuotekohtaiset tiedot, jotka antavat lisätietoa joistain Microsoft-tuotteista. Tämä tietosuojalauseke koskee Microsoftin ja sinun välistä kanssakäymistä sekä alla lueteltuja Microsoft-tuotteita ja muita Microsoft-tuotteita, joissa on tämä lauseke. Keräämämme henkilökohtaiset tiedot Microsoft kerää tietoja, jotta se voi toimia tehokkaasti ja tarjota parhaan mahdollisen tuotteiden käyttökokemuksen. Annat osan näistä tiedoista suoraan, kun esimerkiksi luot Microsoft-tilin, hallinnoit organisaatiosi lisenssitiliä, lähetät hakukyselyn Bingissä, rekisteröidyt Microsoftin tapahtumaan, annat äänikomennon Cortanalle, lataat dokumentin OneDriveen, hankit MSDN-paketin, liityt
    [Show full text]
  • THE DIGITAL HEALTH DEBATE Ci C
    THE DIGITAL i C C NOV 2015 HEALTH DEBATE i A REPORT ON HOW DOCTORS ENGAGE WITH DIGITAL TECHNOLOGY IN THE WORKPLACE THE DIGITAL HEALTH DEBATE 2015 | ©CELLO HEALTH INSIGHT FOREWORD i C C i PAUL MANNU Master Practitioner, Behavioural Insights [email protected] Advances in digital technology have The research explores doctors’ perceptions Online interviews with become ubiquitous within healthcare, of how smart technology such as apps bringing about breakthroughs in diagnosis, and wearables can be used by patients to new treatment options and at the same better manage their health. time heralding the expansion of companies usually associated with technology into the The appendix section also includes our market place. findings on doctors’ preferences when 1,040 participating in research via a mobile app. certified doctors Enter Google Health, Apple Health, and Microsoft HealthVault. These major players Throughout this report, consideration has are accompanied by IBM with ‘Watson’, been given as to what the survey findings a new cognitive system that processes mean for pharmaceutical marketing information more like a human than a strategies. If you would like to know computer. IBM claim Watson will be able more about the specific relevance of this to ‘see’ medical images once its advanced research to marketing, sales and business image analytics and cognitive capabilities intelligence please get in touch. are merged with a newly acquired medical imaging management platform. For more information about the full extent of the survey research, please do not 8 The potential for these new and symbiotic hesitate to contact us. Markets relationships is vast and doctors are at the heart of it.
    [Show full text]
  • Author Guidelines for 8
    2008年台灣國際醫學資訊聯合研討會 (JCMIT2008) New Health Era coming: Google Health versus Microsoft HealthVault YC Lia, YH Wua* a Institution of Biomedical Informatics, National Yang-Ming University *Correspondence: YC Li, [email protected] Abstract HealthVault. In this study Google Health and HealthVault are chosen for their high percentage in web This study compares the recent most focused two market share data. personal health online records (PHR): Google Health The test used a virtual case to simulate the user’s and Microsoft HealthVault by their usability and discuss need, to evaluate how user would feel when they are about their application and future development. using the personal health record [8]. This case included The method is using a virtual case from the website chronic disease, using medication, test result followed, visiting to the data maintenance. This case is a common and allergy symptom. Those conditions are the most case: 75 years old lady with diabetes mellitus type 2 common stipulates which happened to a real person in Result this two PHR could be said as designed for every day. different group, Google Health is more like for those people who are used to use computer; Microsoft is more 3. Access like for those who are basic computer users. However When user is trying to access the websites, there the convenience of HealthVault is based on the will be proxy-limited problem using HealthVault. Right application which might cost user quite a lot. And now the developing version HealthVault is only opened Google Health needs users’ motivation of maintaining to US proxy user, if uses go abroad that means they need their own data.
    [Show full text]
  • Harnessing the Power of Technology to Improve Chronic Care Management
    Harnessing the Power of Technology to Improve Chronic Care Management A Whitepaper Harnessing the Power of Technology to Improve Chronic Care Management Contents Executive Summary .............................................................................................................................................................................................. 3 The Cost of Care .................................................................................................................................................................................................... 4 Self-Management Scenario .............................................................................................................................................................................. 6 Care Coordination Scenario.............................................................................................................................................................................. 8 Caregiver/Patient Collaboration Scenario ................................................................................................................................................. 11 Improved Decision Support Scenario ......................................................................................................................................................... 13 Future of Healthcare .........................................................................................................................................................................................
    [Show full text]
  • Sistemas De Usuario En La Gestión Online De Contenidos Biomédicos
    Toni González-Pacanowski y Pablo Medina-Aguerrebere Sistemas de usuario en la gestión online de contenidos biomédicos Por Toni González-Pacanowski y Pablo Medina-Aguerrebere Resumen: Las demandas informativas de los ciudadanos so- bre la salud han llevado a varias organizaciones a elaborar sistemas personalizados de autogestión de la información médica que facilitan la administración de esta información a ciudadanos, profesionales de la salud, instituciones públi- cas, empresas y grupos de pacientes. Gracias a las nuevas tecnologías, el paciente asume un rol activo que se plasma en la consulta en internet de distintos aspectos relacionados con la salud, lo que hace surgir un debate sobre las acreditacio- nes de los sitios web que difunden información sanitaria. En este marco, Google, con las aplicaciones Google Health y Flu Trends; y Microsoft, con la utilidad Microsoft HealthVault, se convierten en los máximos exponentes de los gestores de in- formación médica. Toni González-Pacanowski Pablo Medina-Aguerre- Palabras clave: Autogestión, Información, Salud, Tecnología, es doctor en comunicación bere es licenciado en publi- por la Univ. Pompeu Fabra cidad y relaciones públicas Internet. (UPF) y profesor de Tecno- por la Universidad de Na- Title: User systems in online management of bi- logía de la Información y varra, diploma en Dirección Producción Periodística de la de Cuentas Publicitarias por omedical content Univ. CEU Abat Oliba de Bar- la Escuela Superior de Pu- celona. Experto en comunica- blicidad de París, y diploma Abstract: Public demand for information about health mat- ción interactiva y consultor de de Estudios Avanzados por ters has led several organizations to develop custom systems nuevas tecnologías en el IESE la Universidad de Navarra.
    [Show full text]
  • Usability of Web-Based Personal Health Records: an Analysis of Consumers’ Perspectives
    Usability of Web-based Personal Health Records: An Analysis of Consumers’ Perspectives Usability of Web-based Personal Health Records: An Analysis of Consumers’ Perspectives by Tiankai Wang, PhD, and Diane Dolezel, EdD, MSCS, RHIA Abstract Personal health records (PHRs) have many benefits, including the ability to increase involvement of patients in their care, which provides better healthcare outcomes. Although issues related to usability of PHRs are a significant barrier to adoption, there is a paucity of research in this area. Thus, the researchers explored consumers’ perspective on the usability of two commercially available web-based PHRs. Data from the Usefulness, Satisfaction, and Ease of Use questionnaire were collected from a sample of health information management students (N = 90). A one-way analysis of variance (ANOVA) showed that Microsoft HealthVault had higher scores in most usability categories when compared to Health Companion. Study results indicated that PHR developers should evaluate Microsoft HealthVault as a model for improving PHR usability. Keywords: personal health records, web-based, usability, consumer Background and Significance The concept of a personal health record (PHR) emerged at the turn of the 21st century with consumers’ increasing engagement in activities related to healthcare,1 but to date no consensus has been reached on the definition of a PHR. The widely cited definition by the Markle Foundation is “an electronic application through which individuals can access, manage, and share their health information, and that of others for whom they are authorized, in a private, secure, and confidential environment.”2 However, numerous other organizations, including the National Committee on Vital and Health Statistics (NCVHS), American Health Information Management Association (AHIMA), Department of Health and Human Services (HHS), and Healthcare Information and Management Systems Society (HIMSS), have also proposed definitions of the PHR.
    [Show full text]
  • Download Fulltext (Author)
    1 Role of Nurse Practitioners in Encouraging Use of Personal Health Records 1 2 Abstract. With increased mobility, it is important that individuals keep their own personal health records (PHRs). We encourage nurse practitioners to assume greater responsibility for PHR adoption and recognize the key role they play in recommending PHR use. We also briefly report college students’ perceptions on their exposure to online PHRs. Keywords: personal health records, electronic health records, role of nurse practitioners, Microsoft HealthVault, Google Health 2 3 Introducing Personal Health Records in Practice Settings Personal health records (PHRs) are electronic health records that individuals create and maintain (see Figure 1). PHRs can enhance the flow of health care information by allowing instant access to vital health information when individuals are away from their primary care providers (PCPs), when they relocate and have to find new PCPs, or when they experience health care emergencies. Individuals who suffer from chronic diseases necessitating ongoing monitoring such as diabetes, asthma, attention deficit, cancer, or HIV/AIDS reap particular benefits, as PHRs provide easy online accessibility to health information with patient portals and educational tools tailored to the needs of persons with specific disease states. PHRs have the potential to play a significant role in health care interoperability by enhancing multidisciplinary communication among providers. Since individuals own their PHRs, they have control over what content is posted and can grant permission to others for access to their health information. Typically, PHRs include core health information such as personal and demographic information, current health issues, insurance information, medical history, family history, medications, allergies, and laboratory and radiographic test results.
    [Show full text]
  • Allscripts Featured in Microsoft Healthvault Worldwide Launch
    Allscripts Featured in Microsoft HealthVault Worldwide Launch October 4, 2007 Allscripts teams with Microsoft to enable greater online collaboration between physicians and patients CHICAGO, Oct. 4 /PRNewswire-FirstCall/ -- Allscripts (Nasdaq: MDRX), the leading provider of clinical software, connectivity and information solutions that physicians use to improve healthcare, was featured in today's launch of Microsoft HealthVault at a Washington, DC press conference announcing the new consumer health platform. Allscripts is the first market-leading Electronic Health Record company to offer its products on the HealthVault platform, providing physicians a means of sharing health information over the Internet with their patients. (Logo: http://www.newscom.com/cgi-bin/prnh/20061005/ALLSCRIPTSLOGO-b) During the press conference, Allscripts revealed its first product to connect to HealthVault -- eRx NOW(TM), the web-based electronic prescribing solution offered at no cost to physicians across America as a key part of the National ePrescribing Patient Safety Initiative(TM), (NEPSI(TM)), a coalition of the nation's leading technology and healthcare organizations, including Allscripts and Microsoft. "Allscripts is excited to be the first electronic health record company to connect to HealthVault, and we applaud Microsoft's efforts to enable consumers to create an 'electronic dialogue' with their physicians using our applications and HealthVault," said Glen Tullman, Chief Executive Officer of Allscripts and NEPSI Co-Chair, who spoke at today's news conference as a member of an industry panel. "More and more, patients want to access their healthcare information online, to communicate with their physicians, eliminate the paperwork they have to complete during office visits, and to check their test results immediately when they're available." Microsoft is particularly well-suited to help address these issues, added Tullman.
    [Show full text]
  • TAYLOR H. GILES T [email protected]
    TAYLOR H. GILES [email protected] Experienced Product Leader I am a Product Manager and leader with a knack for translating customer insights into product innovations to get things done. I have lead a team of product managers and support professionals to deliver products that customers love. I combine real world experience in development, support, sales and marketing with a strong desire to deliver efficient solutions that build customer loyalty and increase profitability. Every move that I have made in my career has been to solve a problem that affected me personally. I am looking for a company with significant profit growth potential from products that make the world better. Key Capabilities ● Mind-reader: I have an acutely developed ability to see “behind” what people say, and to surface their underlying needs, motivations, rationales, and assumptions. ● Synthesizer: I can navigate complex technical architectures and ambiguous needs, spot the relevant patterns and issues, and distill crisp, prioritized, and actionable guidance. ● Communicator: I delight in crafting narratives that express complex ideas with clarity, and acting as an enthusiastic evangelist to executives, peers, customers, and the press. ● Influencer: My technical and business expertise, my upbeat attitude, and my sense of humor allow me to establish credibility, drive consensus, and lead without authority. Professional Experience NurseGrid - # 1 Nursing app in the US VP of Product Aug 2019 - Present ● Managed team of Product Managers and Designers on the largest
    [Show full text]
  • A Word Template for Pace CSIS DPS Dissertation
    Mitigating Bring Your Own Device Risks by Static Analysis Empowered by Knowledge Graphs from Open Web Application Security Project by Suzanna Schmeelk Submitted in partial fulfillment of the requirements for the degree of Doctor of Professional Studies in Computing at Seidenberg School of Computer Science and Information Systems Pace University May 2020 We hereby certify that this dissertation, submitted by Suzanna Schmeelk, satisfies the dissertation requirements for the degree of Doctor of Professional Studies in Computing and has been approved. _____________________________________________-__4/27/2020_______ Dr. Lixin Tao Date Chairperson of Dissertation Committee _____________________________________________-__4/27/2020_______ Dr. Charles Tappert Date Dissertation Committee Member _____________________________________________-__4/27/2020_______ Dr. Ron Frank Date Dissertation Committee Member School of Computer Science and Information Systems Pace University 2020 ii iii Abstract Mitigating Bring Your Own Device Risks by Static Analysis Empowered by Knowledge Graphs from Open Web Application Security Project by Suzanna Schmeelk Submitted in partial fulfillment of the requirements for the degree of Doctor of Professional Studies in Computing May 2020 Many organizations, to save costs, are moving to Bring Your Own Mobile Device (BYOD). In these scenarios, organizations have a Mobile Device Management (MDM) system in place. MDM solutions lower cyber security risks by providing remote wipe procedures, geo-location fencing, among others. However, MDM systems are not yet focused on application-level security with a fine-level of granularity. MDM systems currently may not monitor for data loss prevention (DLP), or even standard web- application vulnerabilities that a penetration tester would examine. In addition, organizations around the world are adopting applications built by third-parties at an unprecedented rate.
    [Show full text]