Evidence-Based Cybersecurity
- Abstract
- People Involved
Abstract
Phishing and multi-factor authentication (MFA) are key focus areas within the Center’s Evidence-Based Cybersecurity research. This work examines how healthcare organizations can reduce credential-based attacks while implementing stronger security measures in ways that support, rather than disrupt, clinical operations.
Phishing in Healthcare
Phishing remains one of the most common and disruptive cyber threats facing healthcare organizations. Attacks that begin with deceptive emails, messages, or login prompts can lead to unauthorized access, data exposure, operational downtime, and risks to patient care.
- Studying how phishing and related social engineering tactics affect healthcare delivery environments.
- Identifying patterns of vulnerability that can inform better training, detection, and response strategies.
- Evaluating interventions that help reduce the likelihood and impact of credential-based attacks.
Multi-Factor Authentication (MFA) in Healthcare
MFA is an important safeguard against unauthorized access, particularly when passwords or other credentials have been compromised. In healthcare settings, however, implementation must be balanced with usability, system compatibility, and the realities of fast-paced clinical workflows.
- Examining how MFA can be implemented effectively in healthcare environments without creating unnecessary burden for clinicians and staff.
- Studying workflow, access, and system-integration challenges that affect adoption.
- Developing evidence-based recommendations for strengthening authentication practices across healthcare organizations.
Through this research, the Center is helping healthcare organizations better defend against phishing and implement stronger authentication practices in ways that improve cybersecurity resilience while supporting safe, continuous care.
People Involved
Faculty - Cyber Core
- Geoff Voelker, PhD
- Stefan Savage, PhD
- Alex Snoeren, PhD
- Pat Pannuto, PhD
- Earlence Fernandes, PhD
- Deepak Kumar, PhD
- Aaron Schulman, PhD