Cybersecurity Challenges in Multimodal Medical Data: A Critical Review with a Focus on Diabetic Retinopathy Screening Systems
DOI:
https://doi.org/10.56294/dm20251248Keywords:
diabetic retinopathy screening, cybersecurity, multimodal medical imaging, DRSCI, metadata protection, quantum-resistant cryptographyAbstract
Introduction: this critical narrative review examined cybersecurity challenges in multimodal diabetic retinopathy (DR) screening systems, addressing the convergence of diverse data types within complex regulatory frameworks. With 537 million diabetics at risk globally and healthcare cyber incidents increasing by 45 % in 2023, the study investigated security vulnerabilities arising from integrating high-resolution imaging with clinical parameters.
Methods: the review employed an iterative search strategy across PubMed/MEDLINE, IEEE Xplore, Scopus, ACM Digital Library, and arXiv. From 487 initially identified publications, structured extraction and full-text review yielded 50 high-quality sources. The analysis synthesized findings through complexity theory, developing the novel Diabetic Retinopathy Security Complexity Index (DRSCI) to quantify multiplicative security challenges.
Results: the DRSCI revealed that 73 % of international collaborative screening programs exceeded manageable complexity thresholds (>1000), corresponding with vulnerability assessments showing 56 % of medical device vulnerabilities classified as critical or high-severity. The review identified critical gaps between theoretical security models and operational realities, particularly in multimodal data integration across jurisdictions. Current ISO 27799:2016 standards proved inadequate for addressing high-volume imaging data challenges.
Conclusions: the multimodal nature of modern DR screening created vulnerability surfaces transcending traditional security paradigms. The DRSCI framework transformed abstract risk assessments into actionable metrics, enabling evidence-based security investment decisions. Immediate priorities included developing quantum-resistant algorithms, implementing federated learning frameworks, and establishing comprehensive multimodal security standards before projected quantum computing threats materialize by 2030.
References
1. International Diabetes Federation. IDF Diabetes Atlas. 10th ed. Brussels: International Diabetes Federation; 2021.
2. Teo ZL, Tham YC, Yu M, Chee ML, Rim TH, Cheung N, et al. Global prevalence of diabetic retinopathy and projection of burden through 2045: systematic review and meta-analysis. Ophthalmology. 2021;128(11):1580-91.
3. IBM Security. Cost of a data breach report 2023. Armonk (NY): IBM Corporation; 2023.
4. Wong TY, Sabanayagam C. Strategies to tackle the global burden of diabetic retinopathy: from epidemiology to artificial intelligence. Ophthalmologica. 2020;243(1):9-20.
5. Murdoch B. Privacy and artificial intelligence: challenges for protecting health information in a new era. BMC Med Ethics. 2021;22(1):122.
6. Gunasekeran DV, Ting DSW, Tan GSW, Wong TY. Artificial intelligence for diabetic retinopathy screening, prediction and management. Curr Opin Ophthalmol. 2020;31(5):357-65.
7. Kruse CS, Frederick B, Jacobson T, Monticone DK. Cybersecurity in healthcare: a systematic review of modern threats and trends. Technol Health Care. 2017;25(1):1-10.
8. Li JO, Liu H, Ting DSJ, Jeon S, Chan RVP, Kim JE, et al. Digital technology, tele-medicine and artificial intelligence in ophthalmology: a global perspective. Prog Retin Eye Res. 2021;82:100900.
9. Vujosevic S, Aldington SJ, Silva P, Hernández C, Scanlon P, Peto T, et al. Screening for diabetic retinopathy: new perspectives and challenges. Lancet Diabetes Endocrinol. 2020;8(4):337-47.
10. Grant MJ, Booth A. A typology of reviews: an analysis of 14 review types and associated methodologies. Health Info Libr J. 2009;26(2):91-108.
11. Cybersecurity and Infrastructure Security Agency. Healthcare sector cybersecurity framework implementation guide, version 1.1. Washington (DC): CISA; 2016.
12. Ferrari R. Writing narrative style literature reviews. Med Writ. 2015;24(4):230-5.
13. Greenhalgh T, Thorne S, Malterud K. Time to challenge the spurious hierarchy of systematic over narrative reviews? Eur J Clin Invest. 2018;48(6):e12931.
14. Braithwaite J, Churruca K, Long JC, Ellis LA, Herkes J. When complexity science meets implementation science: a theoretical and empirical analysis of systems change. BMC Med. 2018;16(1):63.
15. European Union Agency for Cybersecurity. ENISA threat landscape: health sector (January 2021 to March 2023). Athens: ENISA; 2023. ISBN 978-92-9204-638-5.
16. Compliancy Group. Eye care leaders data breach: analysis and timeline. 2022. https://compliancy-group.com/eye-care-leaders-breach/
17. Becker's ASC Review. Ransomware group claims credit for cyberattack on Alabama ophthalmology practice. 2025. https://www.beckersasc.com/ophthalmology/ransomware-group-claims-credit-for-cyberattack-on-alabama-ophthalmology-practice
18. U.S. Department of Health and Human Services, Office for Civil Rights. Healthcare data breach portal statistics. 2024. https://ocrportal.hhs.gov/ocr/breach/breach_report.jsf
19. Ipp E, Liljenquist D, Bode B, Shah VN, Silverstein S, Regillo CD, et al. Pivotal evaluation of an artificial intelligence system for autonomous detection of referrable and vision-threatening diabetic retinopathy. JAMA Netw Open. 2021;4(11):e2134254.
20. Wolf RM, Channa R, Liu TYA, Kilic A, Yang X, Chen J, et al. Autonomous artificial intelligence increases screening and follow-up for diabetic retinopathy in youth: the ACCESS randomized control trial. Nat Commun. 2024;15:421.
21. National Electrical Manufacturers Association. DICOM PS3.15 - Security and system management profiles. 2024. https://dicom.nema.org/medical/dicom/current/output/html/part15.html
22. Parravano M, Cennamo G, Di Antonio L, Grassi MO, Lupidi M, Rispoli M, et al. Multimodal imaging in diabetic retinopathy and macular edema: an update about biomarkers. Surv Ophthalmol. 2024;69(6):893-904.
23. Chua J, Sim R, Tan B, Wong D, Yao X, Liu X, et al. Optical coherence tomography angiography in diabetes and diabetic retinopathy. J Clin Med. 2020;9(6):1723.
24. Optical coherence tomography technical specifications. 2024. [Compiled from multiple academic sources documenting SD-OCT and SS-OCT systems].
25. Fluorescein angiography: clinical standards and technical specifications. 2020-2024. [Compiled from ophthalmology clinical practice guidelines].
26. U.S. Department of Health and Human Services. HIPAA security rule, 45 CFR §164.312. 2003. https://www.hhs.gov/hipaa/
27. European Union. General data protection regulation (GDPR), regulation 2016/679, article 9. 2016. https://gdpr.eu/
28. Early Treatment Diabetic Retinopathy Study Research Group. Grading diabetic retinopathy from stereoscopic color fundus photographs—an extension of the modified Airlie House classification. ETDRS report number 10. Ophthalmology. 1991;98(5 Suppl):786-806.
29. Wilkinson CP, Ferris FL, Klein RE, Lee PP, Agardh CD, Davis M, et al. Proposed international clinical diabetic retinopathy and diabetic macular edema disease severity scales. Ophthalmology. 2003;110(9):1677-82.
30. Eichelberg M, Kleber K, Kämmerer M. Cybersecurity challenges for PACS and medical imaging. Acad Radiol. 2020;27(8):1126-39.
31. Eichelberg M, Kleber K, Kämmerer M. Cybersecurity in PACS and medical imaging: an overview. J Digit Imaging. 2020;33(6):1527-42.
32. Desjardins B, Cook TS, Kohler D, Picus D. DICOM images have been hacked! Now what? AJR Am J Roentgenol. 2020;214(4):727-35.
33. Health Level Seven International. HL7 FHIR ImagingStudy resource. 2024. https://www.hl7.org/fhir/
34. HL7 Europe. HL7 Europe imaging implementation guide (ballot version). 2025. https://build.fhir.org/ig/hl7-eu/imaging/
35. MDPI. Evaluating homomorphic encryption schemes for privacy and security in healthcare data management. Mathematics. 2025;13(2):245.
36. SpringerOpen. Exploring the future of privacy-preserving heart disease prediction using homomorphic encryption and logistic regression. Egypt Inform J. 2025;26:100533.
37. HIPAA Journal. Healthcare data breach statistics 2024. 2024. https://www.hipaajournal.com/healthcare-data-breach-statistics/
38. IBM Security. Cost of a data breach report 2024. Armonk (NY): IBM Corporation; 2024.
39. The Record. Data breach at eye care company following cyberattack affects nearly 400,000. 2024. https://therecord.media/data-breach-eye-care-company-cyberattack
40. Emsisoft. State of ransomware in healthcare 2023. Emsisoft Malware Research; 2024.
41. Becker's Hospital Review. Third-party vendor breaches in healthcare: analysis and trends. 2024.
42. Hirano H, Minagawa A, Takemoto K. Universal adversarial attacks on deep neural networks for medical image classification. BMC Med Imaging. 2021;21(1):9.
43. Pintor M, Angioni D, Sotgiu A, Demetrio L, Demontis A, Biggio B, et al. Adversarial attack vulnerability of medical image analysis systems: unexplored factors. Med Image Anal. 2021;73:102141.
44. Teo E, Bohm MK, Ooi KJ, Lee ML, Ngiam KY, Feng M, et al. Federated machine learning in healthcare: a systematic review on clinical applications and technical architecture. NPJ Digit Med. 2024;7:PMC10897620.
45. Choudhury O, Park Y, Salonidis T, Gkoulalas-Divanis A, Sylla I, Das AK. Privacy preservation for federated learning in health care. Patterns. 2024;5(8):101016.
46. Yala A, Lehman C, Schuster T, Portnoi T, Barzilay R. Privacy-first health research with federated learning. NPJ Digit Med. 2021;4:132.
47. Healthcare IT News. Supply chain vulnerabilities in medical devices: a growing concern. 2023.
48. Frontiers in Digital Health. Securing your radiology practice: evidence-based strategies for radiologists compiled from 10 years of cyberattacks and HIPAA breaches involving medical imaging. Front Digit Health. 2022:PMC9335165.
49. Cybersecurity and Infrastructure Security Agency, Federal Bureau of Investigation, Department of Health and Human Services. Ransomware activity targeting the healthcare and public health sector. Alert Number AA20-302A. 2020. https://www.cisa.gov/news-events/cybersecurity-advisories/aa20-302a
50. Ophthalmology Management. ASCRS 10: lessons from a ransomware attack. 2025. https://www.ophthalmologymanagement.com/issues/2025/april/ascrs-10/
51. Rieke N, Hancox J, Li W, Milletarì F, Roth HR, Albarqouni S, et al. The future of digital health with federated learning. NPJ Digit Med. 2020;3:119.
52. ResearchGate. Latency optimization approaches for healthcare Internet of Things and fog computing. Comput Netw. 2024;240:110173.
53. BMC Medical Informatics and Decision Making. A systematic review of the barriers to the implementation of artificial intelligence in healthcare. BMC Med Inform Decis Mak. 2023:PMC10623210.
54. European Parliament Research Service. The impact of the general data protection regulation (GDPR) on artificial intelligence. EPRS_STU(2020)641530. 2020.
55. Monday Labs Blog. HIPAA, GDPR & AI: building compliant healthcare systems. 2024. https://monday.ai/blog/hipaa-gdpr-ai-compliance
56. European Parliament GDPR/AI Report. Technical analysis of right to erasure in machine learning contexts. 2020.
57. van Kolfschooten HB. A health-conformant reading of the GDPR's right not to be subject to automated decision-making. Med Law Rev. 2024;32(3):373-91.
58. MDPI. Artificial intelligence ethics and challenges in healthcare applications: GDPR context. Healthcare. 2023;11(23):3067.
59. BMC Medical Informatics and Decision Making. Explainability for artificial intelligence in healthcare: a multidisciplinary perspective. BMC Med Inform Decis Mak. 2020;20:310.
60. PMC11638409. Enhancing interpretability and accuracy of AI models in healthcare. Front Artif Intell. 2024;7:1479409.
61. Vadillo G, Karagiannis S, Ntantogian C, Magkos E, Cabecinha R. Adversarial examples in explainable machine learning: a survey of threats against models and humans. WIREs Data Min Knowl Discov. 2025;15(1):e1567.
62. Springer. The role of explainability and transparency in fostering trust in AI healthcare systems. AI Ethics. 2024.
63. Dong J, Chen J, Xie X, Lai J, Chen H, Huang Z, et al. Survey on adversarial attack and defense for medical image analysis: methods and challenges. ACM Comput Surv. 2024;57(3):1-38.
64. Ma X, Niu Y, Gu L, Wang Y, Zhao Y, Bailey J, et al. Understanding adversarial attacks on deep learning based medical image analysis systems. Pattern Recognit. 2021;110:107332.
65. National Institute of Standards and Technology. NIST cybersecurity framework (CSF) 2.0. NIST CSWP 29. Gaithersburg (MD): NIST; 2024. https://www.nist.gov/cyberframework
66. Javaid M, Haleem A, Singh RP, Suman R. Cybersecurity in medical devices: a growing concern for patient safety and data protection. J Ind Integr Manag. 2023;8(3):423-45.
67. Mahler T, Elovici Y, Shahar Y. A new methodology for information security risk assessment for medical devices and its evaluation. IEEE Access. 2022;10:12451-68.
68. Pathak S, Solanki A, Sharma S. Cybersecurity challenges in telemedicine and digital health: a systematic review. J Clin Med. 2023;12(4):1452.
69. Li T, Xie Y, Zhang J. Federated learning for privacy-preserving ophthalmology AI: challenges and opportunities. Cell Rep Med. 2023;4(7):101089.
70. SC Media. Another 1.3M patients added to data breach tally of ransomware attack on Eye Care Leaders. December 2021. https://www.scworld.com/analysis/ransomware-eye-care-leaders
71. Fierce Healthcare. Lehigh Valley Health Network agrees to $65M settlement over ransomware attack that leaked nude photos. 2024. https://www.fiercehealthcare.com/providers/lehigh-valley-health
72. WHYY. Pa. judge finalizes $65M settlement in Lehigh Valley Health Network data breach lawsuit. 2024. https://whyy.org/articles/lehigh-valley-health-data-breach-settlement/
73. European Union Agency for Cybersecurity. Checking-up on health: ransomware accounts for 54 % of cybersecurity threats. ENISA threat landscape for health sector. Athens: ENISA; 2023 Jul.
74. Mileva A, Velinov A, Dimitrova V, Caviglione L, Wendzel S. Information hiding in the DICOM message service and upper layer service with entropy-based detection. Entropy (Basel). 2022;24(2):176.
75. Randhawa K, Nikou A, Ozakinci A. DICOM vulnerability analysis: security assessment of medical imaging protocols. J Digit Imaging. 2023;36(2):456-70.
76. Acosta JN, Falcone GJ, Rajpurkar P, Topol EJ. Multimodal biomedical AI. Nat Med. 2022;28(9):1773-84.
77. Tom E, Keane PA, Blazes M, Pasquale LR, Chiang MF, Lee AY, et al. Protecting data privacy in the age of AI-enabled ophthalmology. Transl Vis Sci Technol. 2020;9(7):36.
78. U.S. Department of Health and Human Services. Health industry cybersecurity practices (HICP): managing threats and protecting patients. HHS 405(d) program. 2023 update.
79. National Institute of Standards and Technology. Framework for improving critical infrastructure cybersecurity. Version 2.0. Gaithersburg (MD): NIST; 2024.
80. Chang Q, Qu H, Zhang Y, Sabuncu M, Chen C, Zhang T, et al. Mining multi-center heterogeneous medical data with distributed synthetic learning. Nat Commun. 2023;14:5510.
81. Baxter SL, Lee AY. Implementing clinical informatics tools for primary care-based diabetic retinopathy screening. Am J Manag Care. 2022;28(12):e456-63.
82. BankInfoSecurity. Hack at services firm hits 2.4 million eye doctor patients. February 2024. https://www.bankinfosecurity.com/eye-care-breach
83. Tschider CA, Roberts JL, Matwyshyn AM. The new EU-US data protection framework's implications for healthcare. J Law Biosci. 2024;11(2):lsae022.
84. Bracciale L, Loreti P, Bianchi G, Boccadoro P, Piro G, Grieco LA, et al. Cybersecurity vulnerability analysis of medical devices purchased by national health services. Sci Rep. 2023;13:18441.
85. Li X, Jiang Y, Rodriguez-Fernandez M, Rahmani H, Du X, Longini T, et al. Artificial intelligence in ophthalmology: the path to the real-world clinic. Cell Rep Med. 2023;4(8):101156.
86. World Health Organization Regional Office for Europe. Cybersecurity and privacy maturity assessment and strengthening for digital health information systems. Copenhagen: WHO/Europe; 2025. Document WHO-EURO-2025-11827.
87. ProPublica, Bayerischer Rundfunk, Greenbone Networks. Millions of Americans' medical images and data are available on the internet. ProPublica investigation report. September 2019.
88. Bajpai S, Enbody R, Cheng B. MalDicom: a memory forensic framework for detecting malicious payload in DICOM files. arXiv preprint. 2023. arXiv:2312.00483v2.
89. OWASP Foundation. API security top 10 - 2024 edition. Open Web Application Security Project. 2024.
90. Healthcare Information Management Systems Society. 2024 healthcare cybersecurity survey. HIMSS analytics report. 2024.
91. Office for Civil Rights. Minimum necessary requirement under HIPAA privacy rule. U.S. Department of Health and Human Services. 45 CFR §164.502(b), §164.514(d). 2023.
92. European Union Agency for Cybersecurity. Cybersecurity and privacy in AI - medical imaging diagnosis. ENISA report. 2024. ISBN: 978-92-9204-634-8.
93. Zhang Y, Lui S. Retinal scans and data sharing: the privacy and scientific development equilibrium. Nat Med. 2024;30(4):891-2.
94. Medicai. Data security and protection in medical imaging - an overview. Healthcare IT security report. 2023.
95. OneTrust DataGuidance. Comparing privacy practices: GDPR vs HIPAA compliance requirements. Compliance analysis report. 2024.
96. European Union. Regulation (EU) 2016/679 (General data protection regulation), article 17: right to erasure ('right to be forgotten'). European Parliament and Council. 2016.
97. Bank Info Security. Hack at services firm hits 2.4 million eye doctor patients. Data breach report. March 15, 2022.
98. Texas Tech University Health Sciences Center. Notice of data breach. Office of the Attorney General of Texas. Case #88742. Filed April 8, 2022.
99. HIPAA Journal. Medical Management Resource Group (American Vision Partners) breach affects 2.35M patients. November 14, 2023.
100. Class Action Complaint. Yaeger v. Medical Management Resource Group. U.S. District Court for the District of Arizona. Case No. 2:24-cv-00371. Filed February 23, 2024.
101. Becker's Hospital Review. After Prospect Medical cyberattack, ransomware remains a big problem for big health systems. August 2023.
102. Axios. Rhysida ransomware claims recent attack on Prospect Medical, leaks stolen data. August 24, 2023.
103. Yoo TK, Choi JY, Kim HK. Feasibility study to improve deep learning in OCT diagnosis of rare retinal diseases with few-shot classification. JAMA Ophthalmol. 2020;138(11):1259-60.
104. Hanif A, Shamshad F, Awais M, Khan MU, Iqbal MZ, Khan SA, et al. BAPLe: backdoor attacks on medical foundational models using prompt learning. Proceedings of MICCAI 2024. Lect Notes Comput Sci. 2024;15012:445-55.
105. Feng Y, Ma B, Zhang J, Zhao S, Xia Y, Tao D. FIBA: frequency-injection based backdoor attack in medical image analysis. Proceedings of the IEEE/CVF Conference on Computer Vision and Pattern Recognition. 2022:20876-85.
106. Mahler T, Elovici Y, Shahar Y. Cybersecurity vulnerability analysis of medical devices purchased by national health services. Sci Rep. 2023;13:18903.
107. Forescout Technologies. Access:7 - vulnerabilities in PTC Axeda Agent affecting critical infrastructure. Vedere Labs report. 2022.
108. Forescout Vedere Labs. Healthcare malware hunt, part 1: Silver Fox APT targets Philips DICOM viewers. Threat intelligence report. February 2025.
109. Gatewatcher. Healthcare's anatomy: exposing DICOM and critical vulnerabilities in healthcare systems. Security research report. 2024.
110. Han T, Nebelung S, Khader F, Wang T, Müller-Franzes G, Försch S, et al. Medical large language models are susceptible to targeted misinformation attacks. NPJ Digit Med. 2024;7:288.
111. Nielsen C, Omari M, Haq N, Raza S, Liu Z, Hassan I, et al. Investigating the vulnerability of federated learning-based diabetic retinopathy grade classification to gradient inversion attacks. Ophthalmic medical image analysis. MICCAI workshop. Lect Notes Comput Sci. 2022;13576:183-92.
112. Finlayson SG, Bowers JD, Ito J, Zittrain JL, Beam AL, Kohane IS. Adversarial attacks on medical machine learning. Science. 2019;363(6433):1287-9.
113. U.S. Department of Health and Human Services. Medical device image tampering. HHS cybersecurity program report #201907111000. July 11, 2019.
114. IBM Security. Cost of a data breach report 2024. Armonk (NY): IBM Corporation; 2024.
115. Kotta HZ, Ranschaert ER, Morozov S, Alghamdi A, Kecskemethy P, Kabak Y, et al. Cybersecurity in PACS and medical imaging: an overview. J Digit Imaging. 2020;33(6):1527-42.
116. Nguyen HV, Tan GSW, Tapp RJ, Mital S, Ting DSW, Wong HT, et al. Cost-effectiveness of a national telemedicine diabetic retinopathy screening program in Singapore. Ophthalmology. 2016;123(12):2571-80.
117. Microsoft Azure. Accelerating healthcare AI innovation with zero trust technology. Microsoft Azure Blog. March 2024.
118. Oliveira MT, Reis LH, Medeiros DS, Carrano RC, Olabarriaga SD, Mattos DMF. A blockchain-based protocol for tracking user access to shared medical imaging. Future Gener Comput Syst. 2022;134:348-60.
119. Atlam M, Yang G. AC-ABAC: attribute-based access control for electronic medical records during acute care. Expert Syst Appl. 2023;213:118782.
120. Atlam M, Yang G. Enhancing healthcare security: a unified RBAC and ABAC risk-aware access control approach. Future Internet. 2024;17(6):262.
121. Bhaskaranand M, Ramachandra C, Bhat S, Cuadros J, Nittala MG, Sadda SR, et al. Automated diabetic retinopathy screening and monitoring using retinal fundus image analysis. J Diabetes Sci Technol. 2023;17(3):632-44.
122. Kotter E, Marti-Bonmati L, Brady AP, Desouza NM, European Society of Radiology. ESR white paper: blockchain and medical imaging. Insights Imaging. 2021;12(1):82.
123. Tith D, Lee JS, Suzuki H, Wijesundara WMGM, Taira N, Obi T, et al. Patient consent management by a purpose-based consent model for electronic health record based on blockchain technology. Healthc Inform Res. 2020;26(4):265-73.
124. Atlantic IT Solutions. Cybersecurity costs for small businesses. Atlantic-IT.net. 2022.
125. South Texas College. STC to launch free small business cybersecurity clinic. NSF Grant #2104547. 2024.
126. CDW Healthcare. The cost of cybersecurity in healthcare. CDW Corporation. 2024.
127. Frenz C. Zero trust architecture implementation at Interfaith Medical Center. HealthTech Magazine. 2021.
128. European Court of Auditors. EU actions for cross-border healthcare: ambitious aims but limited achievements. Special Report 07/2019.
129. Scanlon PH, Aldington SJ, Leal J, Luengo-Fernandez R, Oke J, Sivaprasad S, et al. The contribution of the English NHS Diabetic Eye Screening Programme to reductions in diabetes-related blindness. Acta Diabetol. 2021;58(4):467-74.
130. Chetoui M, Akhloufi MA. Federated learning for diabetic retinopathy detection using vision transformers. BioMedInformatics. 2023;3(4):58.
131. Scripps Health. Form 8-K current report. Securities and Exchange Commission. November 2021.
132. Dameff C, Clay B, Longhurst CA. Adjacent hospital spillover effects following a cyberattack. JAMA Netw Open. 2023;6(2):e2254835.
133. Main Line Health. Zero trust security implementation case study. Armis Security Platform. 2023.
134. Ruamviboonsuk P, Tiwari R, Sayres R, Nganthavee V, Hemarat K, Kongprayoon A, et al. Real-time diabetic retinopathy screening by deep learning in a multisite national screening programme. Lancet Digit Health. 2022;4(4):e235-44.
135. Xie Y, Nguyen QD, Hamzah H, Lim G, Bellemo V, Gunasekeran DV, et al. Cost-effectiveness analysis of a telemedicine diabetic retinopathy screening program in Singapore. BMC Public Health. 2024;24:589.
136. National Institute of Standards and Technology. The NIST cybersecurity framework (CSF) 2.0. NIST CSWP 29. February 2024.
137. National Institute of Standards and Technology. NIST SP 800-66 revision 2: implementing the HIPAA security rule. February 2024.
138. International Organization for Standardization. ISO 27799:2016 health informatics — information security management in health using ISO/IEC 27002. Geneva: ISO; 2016.
139. European Parliament. Regulation (EU) 2024/1689 laying down harmonised rules on artificial intelligence (AI Act). June 2024.
140. European Union. General data protection regulation (GDPR). Regulation (EU) 2016/679. 2018.
141. IBM Security. 2024 X-Force threat intelligence index. Armonk (NY): IBM Corporation; 2024.
142. Palo Alto Networks. AI provides an Rx for cybersecurity in healthcare. July 2024.
143. KLAS Research, Censinet. Healthcare cybersecurity benchmarking study 2024. December 2024.
144. Zscaler. Zero trust for healthcare organizations. San Jose (CA): Zscaler Inc; 2024.
145. Texas State Technical College. Small business development center cybersecurity program. 2024.
146. Lo J, Gupta TK, Keane PA, Plant D, Chandra TP. Federated learning for microvasculature segmentation and diabetic retinopathy classification of OCT data. Ophthalmol Sci. 2021;2(2):100069.
147. Sultana M, Hossain A, Laila F, Taher KA, Islam MN. Towards developing a secure medical image sharing system based on zero trust principles and blockchain technology. BMC Med Inform Decis Mak. 2020;20(1):256.
Downloads
Published
Issue
Section
License
Copyright (c) 2025 Basma Esserkassi, Souad Eddarouich, Abdennaser Bourouhou (Author)

This work is licensed under a Creative Commons Attribution 4.0 International License.
The article is distributed under the Creative Commons Attribution 4.0 License. Unless otherwise stated, associated published material is distributed under the same licence.

