Healthcare Cybersecurity Foundation

Publications

All of the Foundation’s research is published in peer-reviewed venues, free and open to the public.

2026

  1. “Cybersecurity Ratings to Support Domain-Specific Financial Decisions: Applications to National Infrastructures, Cyberinsurance, Gordon-Loeb Model, and NPV Analysis.” William Yurcik, Gregory Pluta, Joao Vieira, and Fabio Miranda. Workshop on the Economics of Information Security (WEIS), June 2–3, 2026. Paper (PDF)
  2. “Cybersecurity in Healthcare.” Proceedings of the 1st Annual HealthSec Workshop, Salt Lake City, UT, USA, 2024. W. Yurcik (ed.). Communications in Computer and Information Science, Vol. 2716. Springer Nature, 2026. Springer Link Amazon
  3. “Cybersecurity Measurability: Three Magnified Vulnerabilities of USA Healthcare.” W. Yurcik et al. Book chapter in Cybersecurity in Healthcare (HealthSec’24), Communications in Computer and Information Science, Vol. 2716. Springer Nature, 2026. DOI: 10.1007/978-3-032-13800-2_6

2025

  1. “Continuous Monitoring of Cybersecurity in U.S. Rural Hospitals.” W. Yurcik et al. Annual Computer Security Applications Conference Workshops (ACSAC Workshops), HealthSec, 2025. DOI: 10.1109/ACSACW69556.2025.00017
  2. “SoK: Hospital at Home Model of Care – Toward Appropriate Use Cases and Other Challenges.” R. Avelino et al. Annual Computer Security Applications Conference Workshops (ACSAC Workshops), HealthSec, 2025. DOI: 10.1109/ACSACW69556.2025.00019
  3. “SoK: Hospital Medical Devices as Industrial Control Systems (ICS) – Exposure and Vulnerability.” J. Malakai Bailey et al. Annual Computer Security Applications Conference Workshops (ACSAC Workshops), HealthSec, 2025. DOI: 10.1109/ACSACW69556.2025.00018
  4. “Convergence of Operational Technology / Industrial Control Systems / Internet of Medical Things: Internet-Exposed Medical Device Threats.” J. Malakai Bailey et al. 1st IEEE Workshop on Healthcare and Medical Device Security, Privacy, Resilience, and Trust (HMD-SPiRiT), 2025. DOI: 10.1109/TPS-ISA67132.2025.00062
  5. “Measurability: Toward Integrating Metrics into Ratings for Scalable Proactive Cybersecurity Management.” W. Yurcik et al. 19th International Conference on Emerging Security Information, Systems and Technologies (SECURWARE), Barcelona, Spain, 2025.
  6. “Measurability: Toward Proactive Scalable Cybersecurity Management of Large National Infrastructure.” William Yurcik et al. IARIA 10th International Conference on Informatics and Assistive Technologies for Healthcare, Medical Support and Wellbeing (HEALTHINFO), Barcelona, Spain, 2025. Keynote talk and Best Paper Award. Award (PDF) Keynote video
  7. “Cybersecurity Risk Measurements of Rural Independent Under-Resourced Hospitals.” W. Yurcik, R. O’Kane, S. North, O. Sami Saydjari, F. Miranda, R. Avelino, R. Pluta, and G. Pluta. 53rd Research Conference on Communication, Information, and Internet Policy (TPRC53), 2025. DOI: 10.2139/ssrn.5503758

2024

  1. “Cybersecurity Monitoring/Mapping of USA Healthcare (All Hospitals) – Magnified Vulnerability due to Shared IT Infrastructure, Market Concentration, & Geographical Distribution.” W. Yurcik et al. HealthSec: Proceedings of the Cybersecurity in Healthcare Workshop (HealthSec), 2024. DOI: 10.1145/3689942.3694754