Visible to the public A Hybrid Density-Based Outlier Detection Model for Privacy in Electronic Patient Record system

TitleA Hybrid Density-Based Outlier Detection Model for Privacy in Electronic Patient Record system
Publication TypeConference Paper
Year of Publication2019
AuthorsBoddy, Aaron, Hurst, William, Mackay, Michael, El Rhalibi, Abdennour
Conference Name2019 5th International Conference on Information Management (ICIM)
KeywordsAnalytical models, anomaly detection, Data models, Electronic Patient Records, Healthcare Infrastructures, human factors, human in the loop, Information security, machine learning, Medical services, patient privacy, privacy, pubcrawl, Scalability, security, visualisation
AbstractThis research concerns the detection of unauthorised access within hospital networks through the real-time analysis of audit logs. Privacy is a primary concern amongst patients due to the rising adoption of Electronic Patient Record (EPR) systems. There is growing evidence to suggest that patients may withhold information from healthcare providers due to lack of Trust in the security of EPRs. Yet, patient record data must be available to healthcare providers at the point of care. Ensuring privacy and confidentiality of that data is challenging. Roles within healthcare organisations are dynamic and relying on access control is not sufficient. Through proactive monitoring of audit logs, unauthorised accesses can be detected and presented to an analyst for review. Advanced data analytics and visualisation techniques can be used to aid the analysis of big data within EPR audit logs to identify and highlight pertinent data points. Employing a human-in-the-loop model ensures that suspicious activity is appropriately investigated and the data analytics is continuously improving. This paper presents a system that employs a Human-in-the-Loop Machine Learning (HILML) algorithm, in addition to a density-based local outlier detection model. The system is able to detect 145 anomalous behaviours in an unlabelled dataset of 1,007,727 audit logs. This equates to 0.014% of the EPR accesses being labelled as anomalous in a specialist Liverpool (UK) hospital.
DOI10.1109/INFOMAN.2019.8714701
Citation Keyboddy_hybrid_2019