Risk
1/24/2012
03:49 PM
50%
50%

7 Tools To Tighten Healthcare Data Security

Most of the largest healthcare data security and privacy breaches have involved lost or stolen mobile computing devices. Consider these tools and tips for protecting patient data and managing breaches.
Previous
5 of 7
Next


While healthcare providers need to protect patient data to comply with HIPAA and HITECH requirements as well as state and local data breach laws, healthcare payers require efficient and reliable security for complex billing and transaction information. Vormetric Data Security for HealthCare helps both healthcare providers and insurers establish and enforce security policies to control and protect sensitive data.

Vormetric Data Security enables providers and insurance carriers to encrypt sensitive data in any file, database, or application--including those in physical, virtual, and cloud infrastructures. Vormetric enforces access controls, reports on who is accessing protected data, and supports all major database platforms and Linux, Unix, and Windows environments.

The Vormetric product provides key management for Transparent Data Encryption available within Oracle and Microsoft SQL Server databases, and includes a secure vault for storing any encryption key. The Vormetric tools allow healthcare organizations to secure sensitive data across business lines and heterogeneous systems.

The product is available as a single appliance, or a double appliance, as shown here.

Recommended Reading

Patient Data Losses Jump 32%

How Secure Are Your Clinicians' Mobile Devices?

80% Of Doctors Use Mobile Devices At Work

Healthcare CIOs Juggle More Mobile Challenges

Docs Warm Up to EHRs, Patients Want Paper

Stanford Hospital Breach Exposes 20,000 ER Records

App Allows Radiology Diagnosis Via Tablet, Smartphone

Why Can't Patients See Their EHR Data?

Docs Have iPad Fever: Is There A Cure?

9 Mobile Health Apps Worth A Closer Look

Previous
5 of 7
Next
Comment  | 
Print  | 
More Insights
Register for Dark Reading Newsletters
White Papers
Cartoon
Current Issue
Dark Reading Tech Digest, Dec. 19, 2014
Software-defined networking can be a net plus for security. The key: Work with the network team to implement gradually, test as you go, and take the opportunity to overhaul your security strategy.
Flash Poll
Video
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2014-8142
Published: 2014-12-20
Use-after-free vulnerability in the process_nested_data function in ext/standard/var_unserializer.re in PHP before 5.4.36, 5.5.x before 5.5.20, and 5.6.x before 5.6.4 allows remote attackers to execute arbitrary code via a crafted unserialize call that leverages improper handling of duplicate keys w...

CVE-2013-4440
Published: 2014-12-19
Password Generator (aka Pwgen) before 2.07 generates weak non-tty passwords, which makes it easier for context-dependent attackers to guess the password via a brute-force attack.

CVE-2013-4442
Published: 2014-12-19
Password Generator (aka Pwgen) before 2.07 uses weak pseudo generated numbers when /dev/urandom is unavailable, which makes it easier for context-dependent attackers to guess the numbers.

CVE-2013-7401
Published: 2014-12-19
The parse_request function in request.c in c-icap 0.2.x allows remote attackers to cause a denial of service (crash) via a URI without a " " or "?" character in an ICAP request, as demonstrated by use of the OPTIONS method.

CVE-2014-2026
Published: 2014-12-19
Cross-site scripting (XSS) vulnerability in the search functionality in United Planet Intrexx Professional before 5.2 Online Update 0905 and 6.x before 6.0 Online Update 10 allows remote attackers to inject arbitrary web script or HTML via the request parameter.

Best of the Web
Dark Reading Radio
Archived Dark Reading Radio
Join us Wednesday, Dec. 17 at 1 p.m. Eastern Time to hear what employers are really looking for in a chief information security officer -- it may not be what you think.