Analyzing Healthcare Interoperability Vulnerabilities: Formal Modeling and Graph-Theoretic Approach

• URL: http://arxiv.org/abs/2604.03043v1
• Date: Fri, 03 Apr 2026 13:51:43 GMT
• Title: Analyzing Healthcare Interoperability Vulnerabilities: Formal Modeling and Graph-Theoretic Approach
• Abstract summary: The research on detecting a race condition only targets the OS kernel.<n>The gap in the research in this area is addressed through the introduction of FHIR Resource Access Graph (FRAG)<n>Three clinically relevant race condition classes are formally specified: Simultaneous Write Conflict (SWC), TOCTOU Authorization Violation (TAV), and Cascading Update Race (CUR)<n>FRAG attains a 90.0% F1 score vs. 25.5% for the baseline, a 64.5 pp improvement.
• Score: 0.6875312133832079
• License: http://creativecommons.org/licenses/by/4.0/
• Abstract: In a healthcare environment, the healthcare interoperability platforms based on HL7 FHIR allow concurrent, asynchronous access to a set of shared patient resources, which are independent systems, i.e., EHR systems, pharmacy systems, lab systems, and devices. The FHIR specification lacks a protocol for concurrency control, and the research on detecting a race condition only targets the OS kernel. The research on FHIR security only targets authentication and injection attacks, considering concurrent access to patient resources to be sequential. The gap in the research in this area is addressed through the introduction of FHIR Resource Access Graph (FRAG), a formally defined graph G = (P,R,E, λ, τ, S), in which the nodes are the concurrent processes, the typed edges represent the resource access events, and the race conditions are represented as detectable structural properties. Three clinically relevant race condition classes are formally specified: Simultaneous Write Conflict (SWC), TOCTOU Authorization Violation (TAV), and Cascading Update Race (CUR). The FRAG model is implemented as a three-pass graph traversal detection algorithm and tested against a time window-based baseline on 1,500 synthetic FHIR R4 transaction logs. Under full concurrent access (C2), FRAG attains a 90.0% F1 score vs. 25.5% for the baseline, a 64.5 pp improvement.

Related papers

• Autonomous Cyber Defense: Real-Time Attack Detection and Mitigation in Software-Defined Networks Using Machine Learning [78.29352305480285]
  In recent intrusions, the interval between initial access and the first lateral movement has been observed to be as short as 27 seconds.<n>This paper presents a closed-loop framework that detects and blocks attacks in software-defined networks without operator involvement.
  arXiv  Detail & Related papers  (2026-08-22T18:38:39Z)
• STCO: Conditional Neural Operators for Time-Dependent PDEs [8.239977577965861]
  We introduce the Spatiotemporal Conditional Operator (STCO) for prescribed-condition operator learning (PCOL)<n>Its condition interface combines Flow-Aware Graph Leaf (FAGL) with Dual-Site Feature-wise Linear Modulation (DSFiLM)<n>We evaluate twelve matched backbone architectures with different existing physical and temporal inputs.
  arXiv  Detail & Related papers  (2026-08-20T18:09:07Z)
• EGRL: Edge generation-guided relation-aware learning for RNA-protein interaction prediction [41.17218504310278]
  We propose Edge Generation-guided Relation-aware Learning (EGRL)<n>EGRL is a novel framework with several key components.<n> Comprehensive evaluations on four benchmark datasets demonstrate that EGRL achieves competitive overall performance.
  arXiv  Detail & Related papers  (2026-08-13T07:47:44Z)
• Three Generations of Healthcare IT: From the Digital Record to the Computable Care Process [47.027290803102666]
  We describe a computational layer whose object is patient-specific clinical intent.<n>We formalize the Actionable Clinical Record as the atomic object of the third layer.
  arXiv  Detail & Related papers  (2026-08-09T16:44:28Z)
• ECHO: A Locally-Deployable Agentic Health Assistant with Temporal Memory, Safety Guardrails, and Speech Assessment [0.0]
  ECHO (Enhanced Care & Health Observer) is a locally-deployable conversational health assistant for long-term chronic care management.<n>ECHO integrates three complementary software modules developed under shared supervision as a unified system.
  arXiv  Detail & Related papers  (2026-08-06T14:44:12Z)
• Temporal Generalization in fNIRS-Based Autism Classification: A Cross-Time-Window Transfer Benchmark [0.0]
  Functional near-infrared spectroscopy (fNIRS) is a promising modality for autism spectrum disorder (ASD) classification.<n>In practice, the optimal observation window varies across subjects due to differences in hemodynamic delay and neurovascular coupling.<n>We formalize this as a textitcross-time-window transfer problem, introducing a protocol that varies window length (2.5--10,s) and offset within biological motion trials.
  arXiv  Detail & Related papers  (2026-08-03T18:50:55Z)
• Semantic Risk Scoring of Aggregated Metrics: An AI-Driven Approach for Healthcare Data Governance [0.0]
  Large healthcare institutions typically operate multiple business intelligence (BI) teams.<n>Due to HIPAA, FERPA, and IRB restrictions, these teams face challenges in sharing patient-level data needed for analytics.<n>A metric aggregation table is proposed, which is a precomputed, privacy-compliant summary.
  arXiv  Detail & Related papers  (2026-03-09T03:36:11Z)
• Plug-and-Play Benchmarking of Reinforcement Learning Algorithms for Large-Scale Flow Control [61.155940786140455]
  Reinforcement learning (RL) has shown promising results in active flow control (AFC)<n>Current AFC benchmarks rely on external computational fluid dynamics (CFD) solvers, are not fully differentiable, and provide limited 3D and multi-agent support.<n>We introduce FluidGym, the first standalone, fully differentiable benchmark suite for RL in AFC.
  arXiv  Detail & Related papers  (2026-01-21T14:13:44Z)
• From Prototypes to Sparse ECG Explanations: SHAP-Driven Counterfactuals for Multivariate Time-Series Multi-class Classification [8.113866195465976]
  We propose a prototype-driven framework for generating sparse counterfactual explanations tailored to 12-lead ECG classification models.<n>Our method employs SHAP-based thresholds to identify critical signal segments and convert them into interval rules.<n>We evaluate three variants of our approach, Original, Sparse, and Aligned Sparse, with class-specific performance ranging from 98.9% validity for MI to challenges with hypertrophy (HYP) detection.
  arXiv  Detail & Related papers  (2025-10-22T12:09:50Z)
• GRID: Graph-based Reasoning for Intervention and Discovery in Built Environments [0.31096636737010974]
  Manual HVAC fault diagnosis in commercial buildings takes 8-12 hours per incident and achieves only 60 percent diagnostic accuracy.<n>We present GRID, a three-stage causal discovery pipeline that combines constraint-based search, neural structural equation modeling, and language model priors to recover directed acyclic graphs.<n>The framework integrates constraint-based methods, neural architectures, and domain-specific language model prompts to address the observational-causal gap in building analytics.
  arXiv  Detail & Related papers  (2025-09-19T20:19:48Z)
• HySemRAG: A Hybrid Semantic Retrieval-Augmented Generation Framework for Automated Literature Synthesis and Methodological Gap Analysis [55.2480439325792]
  HySemRAG is a framework that combines Extract, Transform, Load (ETL) pipelines with Retrieval-Augmented Generation (RAG)<n>System addresses limitations in existing RAG architectures through a multi-layered approach.
  arXiv  Detail & Related papers  (2025-08-01T20:30:42Z)
• LLM-Based Emulation of the Radio Resource Control Layer: Towards AI-Native RAN Protocols [28.04609776570199]
  Large AI Models (LAMs) are key enablers of the AI-Native Air Interface (AI-AI)<n>This paper presents the first standards-compliant emulation of the Radio Resource Control layer using a decoder-only LAM.<n>Results demonstrate that LAMs, when augmented with protocol-aware reasoning, can directly orchestrate control-plane procedures.
  arXiv  Detail & Related papers  (2025-05-22T15:55:56Z)
• One for All and All for One: GNN-based Control-Flow Attestation for Embedded Devices [16.425360892610986]
  Control-Flow (CFA) is a security service that allows an entity (verifier) to verify the integrity of code execution on a remote computer system. Existing CFA schemes suffer from impractical assumptions, such as requiring access to the prover's internal state. We introduce RAGE, a novel, lightweight CFA approach with minimal requirements.
  arXiv  Detail & Related papers  (2024-03-12T10:00:06Z)
• PS-ARM: An End-to-End Attention-aware Relation Mixer Network for Person Search [56.02761592710612]
  We propose a novel attention-aware relation mixer (ARM) for module person search. Our ARM module is native and does not rely on fine-grained supervision or topological assumptions. Our PS-ARM achieves state-of-the-art performance on both datasets.
  arXiv  Detail & Related papers  (2022-10-07T10:04:12Z)
• Robust-by-Design Classification via Unitary-Gradient Neural Networks [66.17379946402859]
  The use of neural networks in safety-critical systems requires safe and robust models, due to the existence of adversarial attacks. Knowing the minimal adversarial perturbation of any input x, or, equivalently, the distance of x from the classification boundary, allows evaluating the classification robustness, providing certifiable predictions. A novel network architecture named Unitary-Gradient Neural Network is presented. Experimental results show that the proposed architecture approximates a signed distance, hence allowing an online certifiable classification of x at the cost of a single inference.
  arXiv  Detail & Related papers  (2022-09-09T13:34:51Z)
• Disentangle Your Dense Object Detector [82.22771433419727]
  Deep learning-based dense object detectors have achieved great success in the past few years and have been applied to numerous multimedia applications such as video understanding. However, the current training pipeline for dense detectors is compromised to lots of conjunctions that may not hold. We propose Disentangled Dense Object Detector (DDOD), in which simple and effective disentanglement mechanisms are designed and integrated into the current state-of-the-art detectors.
  arXiv  Detail & Related papers  (2021-07-07T00:52:16Z)
• Higher Performance Visual Tracking with Dual-Modal Localization [106.91097443275035]
  Visual Object Tracking (VOT) has synchronous needs for both robustness and accuracy. We propose a dual-modal framework for target localization, consisting of robust localization suppressingors via ONR and the accurate localization attending to the target center precisely via OFC.
  arXiv  Detail & Related papers  (2021-03-18T08:47:56Z)

This list is automatically generated from the titles and abstracts of the papers in this site.

This site does not guarantee the quality of this site (including all information) and is not responsible for any consequences.