{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,1]],"date-time":"2026-06-01T22:15:51Z","timestamp":1780352151677,"version":"3.54.1"},"publisher-location":"Cham","reference-count":46,"publisher":"Springer International Publishing","isbn-type":[{"value":"9783030784584","type":"print"},{"value":"9783030784591","type":"electronic"}],"license":[{"start":{"date-parts":[[2021,1,1]],"date-time":"2021-01-01T00:00:00Z","timestamp":1609459200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springer.com\/tdm"},{"start":{"date-parts":[[2021,1,1]],"date-time":"2021-01-01T00:00:00Z","timestamp":1609459200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2021]]},"DOI":"10.1007\/978-3-030-78459-1_23","type":"book-chapter","created":{"date-parts":[[2021,6,19]],"date-time":"2021-06-19T08:03:05Z","timestamp":1624089785000},"page":"311-322","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":5,"title":["Investigating Protected Health Information Leakage from Android Medical Applications"],"prefix":"10.1007","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-3468-0182","authenticated-orcid":false,"given":"George","family":"Grispos","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-3871-1604","authenticated-orcid":false,"given":"Talon","family":"Flynn","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-8769-1646","authenticated-orcid":false,"given":"William Bradley","family":"Glisson","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9208-5336","authenticated-orcid":false,"given":"Kim-Kwang Raymond","family":"Choo","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2021,6,20]]},"reference":[{"issue":"4","key":"23_CR1","doi-asserted-by":"publisher","DOI":"10.2196\/mhealth.4924","volume":"3","author":"P Krebs","year":"2015","unstructured":"Krebs, P., Duncan, D.T.: Health app use among US mobile phone owners: a national survey. J. Med. Internet Res. mHealth uHealth 3(4), (2015)","journal-title":"J. Med. Internet Res. mHealth uHealth"},{"key":"23_CR2","unstructured":"Perna, G.: The State of Mobile Health in Today\u2019s Practice (2018). https:\/\/www.physicianspractice.com\/article\/state-mobile-health-todays-practice"},{"key":"23_CR3","unstructured":"Soti Inc.: US Consumer Survey: Physicians Using Mobile Apps Seen as a Major Differentiator Amongst US Patients (2019). https:\/\/www.globenewswire.com\/news-release\/2019\/06\/06\/1865254\/0\/en\/U-S-Consumer-Survey-Physicians-Using-Mobile-Apps-Seen-as-a-Major-Differentiator-Amongst-U-S-Patients.html"},{"issue":"1","key":"23_CR4","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1038\/s41746-019-0211-0","volume":"3","author":"DC Baumgart","year":"2020","unstructured":"Baumgart, D.C.: Digital advantage in the COVID-19 response: perspective from Canada\u2019s largest integrated digitalized healthcare system. NPJ Dig. Med. 3(1), 1\u20134 (2020)","journal-title":"NPJ Dig. Med."},{"key":"23_CR5","doi-asserted-by":"crossref","unstructured":"Neubeck, L., Hansen, T., Jaarsma, T., Klompstra, L., Gallagher, R.: Delivering healthcare remotely to cardiovascular patients during COVID-19: a rapid review of the evidence. Eur. J. Cardiovasc. Nurs., 1474515120924530 (2020)","DOI":"10.1177\/1474515120924530"},{"issue":"4","key":"23_CR6","doi-asserted-by":"publisher","DOI":"10.2196\/jmir.1933","volume":"15","author":"SA Moorhead","year":"2013","unstructured":"Moorhead, S.A., Hazlett, D.E., Harrison, L., Carroll, J.K., Irwin, A., Hoving, C.: A new dimension of healthcare: systematic review of the uses, benefits, and limitations of social media for health communication. J. Med. Internet Res. 15(4), (2013)","journal-title":"J. Med. Internet Res."},{"key":"23_CR7","unstructured":"Healthcare Information and Management Systems Society. 2019: HIMSS Cybersecurity Survey (2019)"},{"key":"23_CR8","unstructured":"United States Government Accountability Office: FDA Should Expand Its Consideration of Information Security For Certain Types of Devices (2012)"},{"key":"23_CR9","unstructured":"United States Food and Drug Administration. Cybersecurity (2019). https:\/\/www.fda.gov\/medical-devices\/digital-health\/cybersecurity"},{"key":"23_CR10","unstructured":"British Broadcasting Corporation: NHS \u2018Could Have Prevented\u2019 WannaCry Ransomware Attack (2017). https:\/\/www.bbc.com\/news\/technology-41753022"},{"key":"23_CR11","unstructured":"Van Devender, M.S., Glisson, W.B., Benton, R., Grispos, G.: Understanding de-identification of healthcare big data. In: 2017 Americas Conference on Information Systems (AMCIS 2017), Boston, USA (2017)"},{"key":"23_CR12","doi-asserted-by":"crossref","unstructured":"Flynn, T., Grispos, G., Glisson, W.B., Mahoney, W.: Knock! Knock! Who is there? Investigating data leakage from a medical Internet of Things hijacking attack. In: 53rd Hawaii International Conference on System Sciences, Maui, Hi, USA (2020)","DOI":"10.24251\/HICSS.2020.791"},{"key":"23_CR13","unstructured":"United States Government: The Health Insurance Portability and Accountability Act. United States Government (1996)"},{"key":"23_CR14","unstructured":"United States Government: Security Standards: Administrative Safeguards (2007)"},{"key":"23_CR15","unstructured":"United States Government: Code of Federal Regulations - Title 45: Public Welfare, p. 738 (2007)"},{"key":"23_CR16","doi-asserted-by":"crossref","unstructured":"Grispos, G., Glisson, W.B., Cooper, P.: A bleeding digital heart: identifying residual data generation from smartphone applications interacting with medical devices. In: 52nd Hawaii International Conference on System Sciences, Maui, Hi, USA (2019)","DOI":"10.24251\/HICSS.2019.516"},{"key":"23_CR17","unstructured":"Withings: BPM Connect (2019). https:\/\/www.withings.com\/us\/en\/bpm-connect"},{"key":"23_CR18","unstructured":"iHealth: Wireless Gluco-monitoring System (2019). https:\/\/ihealthlabs.com\/glucometer\/wireless-smart-gluco-monitoring-system\/"},{"key":"23_CR19","unstructured":"Shetty, R., Grispos, G., Choo, K.-K.R.: Are you dating danger? An interdisciplinary approach to evaluating the (in)security of android dating apps. IEEE Trans. Sustain. Comput. (2017, in Press)"},{"key":"23_CR20","doi-asserted-by":"crossref","unstructured":"Plachkinova, M., Andr\u00e9s, S., Chatterjee, S.: A taxonomy of mHealth apps\u2013security and privacy concerns. In: 2015 48th Hawaii International Conference on System Sciences (2015). IEEE","DOI":"10.1109\/HICSS.2015.385"},{"issue":"12","key":"23_CR21","doi-asserted-by":"publisher","first-page":"52","DOI":"10.1109\/MC.2012.288","volume":"45","author":"Y Wang","year":"2012","unstructured":"Wang, Y., Streff, K., Raman, S.: Smartphone security challenges. Computer 45(12), 52\u201358 (2012)","journal-title":"Computer"},{"key":"23_CR22","unstructured":"Grispos, G., Glisson, W.B., Pardue, J.H., Dickson, M.: Identifying user behavior from residual data in cloud-based synchronized apps. In: Conference for Information Systems Applied Research, vol. 8, no. 2, pp. 4\u201314 (2014)"},{"key":"23_CR23","doi-asserted-by":"crossref","unstructured":"Grispos, G., Bastola, K.: Cyber autopsies: the integration of digital forensics into medical contexts. In: 2020 IEEE 33rd International Symposium on Computer-Based Medical Systems (CBMS). IEEE (2020)","DOI":"10.1109\/CBMS49503.2020.00102"},{"issue":"7","key":"23_CR24","doi-asserted-by":"publisher","first-page":"74","DOI":"10.1109\/MCOM.2009.5183475","volume":"47","author":"K Malasri","year":"2009","unstructured":"Malasri, K., Wang, L.: Securing wireless implantable devices for healthcare: ideas and challenges. IEEE Commun. Mag. 47(7), 74\u201380 (2009)","journal-title":"IEEE Commun. Mag."},{"key":"23_CR25","doi-asserted-by":"publisher","first-page":"175","DOI":"10.1007\/978-1-4614-1674-6_8","volume-title":"Security and Privacy for Implantable Medical Devices","author":"C Li","year":"2014","unstructured":"Li, C., Zhang, M., Raghunathan, A., Jha, N.K.: Attacking and defending a diabetes therapy system. In: Burleson, W., Carrara, S. (eds.) Security and Privacy for Implantable Medical Devices, pp. 175\u2013193. Springer, New York (2014). https:\/\/doi.org\/10.1007\/978-1-4614-1674-6_8"},{"key":"23_CR26","unstructured":"Glisson, W.B., Andel, T., Campbell, M., Jacobs, M., Mayr, J., McDonald, T.: Compromising a medical mannequin. In: 21st Americas Conference on Information Systems, Puerto Rico, USA (2015)"},{"key":"23_CR27","doi-asserted-by":"crossref","unstructured":"Sun, W., Cai, Z., Li, Y., Liu, F., Fang, S., Wang, G.: Security and privacy in the medical Internet of Things: a review. Secur. Commun. Netw. (2018)","DOI":"10.1155\/2018\/5978636"},{"key":"23_CR28","doi-asserted-by":"crossref","unstructured":"Williams, P.A., McCauley, V.: Always connected: the security challenges of the healthcare Internet of Things. In: IEEE 3rd World Forum on Internet of Things, Reston, VA, USA (2016)","DOI":"10.1109\/WF-IoT.2016.7845455"},{"key":"23_CR29","doi-asserted-by":"crossref","unstructured":"Classen, J., Wegemer, D., Patras, P., Spink, T., Hollick, M.: Anatomy of a vulnerable fitness tracking system: dissecting the fitbit cloud, app, and firmware. Proc. ACM Interact. Mob. Wearable Ubiquitous Technol. 2(1), 1\u201324 (2018)","DOI":"10.1145\/3191737"},{"key":"23_CR30","doi-asserted-by":"crossref","unstructured":"Fereidooni, H., Frassetto, T., Miettinen, M., Sadeghi, A.-R., Conti, M.: Fitness trackers: fit for health but unfit for security and privacy. In: 2017 IEEE\/ACM International Conference on Connected Health: Applications, Systems and Engineering Technologies, Philadelphia, PA, USA (2017)","DOI":"10.1109\/CHASE.2017.54"},{"key":"23_CR31","doi-asserted-by":"crossref","unstructured":"Wood, D., Apthorpe, N., Feamster, N.: Cleartext data transmissions in consumer IoT medical devices. In: Proceedings of the 2017 Workshop on Internet of Things Security and Privacy. ACM (2017)","DOI":"10.1145\/3139937.3139939"},{"key":"23_CR32","unstructured":"Miller, S., Glisson, W.B., Campbell, M., Sittig, S.: Risk analysis of residual protected health information of android telehealth apps. In: Twenty-Fifth Americas Conference on Information Systems, Cancun, Mexico (2019)"},{"issue":"9","key":"23_CR33","doi-asserted-by":"publisher","first-page":"579","DOI":"10.1016\/j.ijmedinf.2012.04.007","volume":"81","author":"H Kharrazi","year":"2012","unstructured":"Kharrazi, H., Chisholm, R., VanNasdale, D., Thompson, B.: Mobile personal health records: an evaluation of features and functionality. Int. J. Med. Inf. 81(9), 579\u2013593 (2012)","journal-title":"Int. J. Med. Inf."},{"key":"23_CR34","unstructured":"Azfar, A., Choo, K.-K.R., Liu, L.: Forensic taxonomy of popular Android mHealth apps. In: 21st Americas Conference on Information Systems, Puerto Rico, USA (2015)"},{"key":"23_CR35","doi-asserted-by":"crossref","unstructured":"Hoog, A.: Android Forensics: Investigation, Analysis and Mobile Security for Google Android, Syngress (2011)","DOI":"10.1016\/B978-1-59749-651-3.10006-8"},{"key":"23_CR36","unstructured":"Hoog, A., Strzempka, K.: iPhone and iOS Forensics: Investigation, Analysis and Mobile Security for Apple iPhone, iPad and iOS Devices, Syngress (2011)"},{"issue":"1","key":"23_CR37","doi-asserted-by":"publisher","first-page":"23","DOI":"10.1016\/j.diin.2011.05.016","volume":"8","author":"G Grispos","year":"2011","unstructured":"Grispos, G., Storer, T., Glisson, W.B.: A comparison of forensic evidence recovery techniques for a windows mobile smart phone. Digit. Invest. 8(1), 23\u201336 (2011)","journal-title":"Digit. Invest."},{"key":"23_CR38","doi-asserted-by":"crossref","unstructured":"Levinson, A., Stackpole, B., Johnson, D.: Third party application forensics on apple mobile devices. In: 44th Hawaii International Conference on System Sciences, Kauai, HI, USA (2011)","DOI":"10.1109\/HICSS.2011.440"},{"key":"23_CR39","doi-asserted-by":"crossref","unstructured":"Al Mutawa, N., Baggili, I., Marrington, A.: Forensic analysis of social networking applications on mobile devices. Digit. Invest. 9, S24\u2013S33 (2012)","DOI":"10.1016\/j.diin.2012.05.007"},{"issue":"3","key":"23_CR40","doi-asserted-by":"publisher","first-page":"201","DOI":"10.1016\/j.diin.2014.04.003","volume":"11","author":"C Anglano","year":"2014","unstructured":"Anglano, C.: Forensic analysis of WhatsApp Messenger on Android smartphones. Digit. Invest. 11(3), 201\u2013213 (2014)","journal-title":"Digit. Invest."},{"key":"23_CR41","doi-asserted-by":"crossref","unstructured":"Grispos, G., Glisson, W.B., Storer, T.: Using smartphones as a proxy for forensic evidence contained in cloud storage services. In: 46th Hawaii International Conference on System Sciences, Hawaii, USA (2013)","DOI":"10.1109\/HICSS.2013.592"},{"key":"23_CR42","doi-asserted-by":"publisher","first-page":"347","DOI":"10.1016\/B978-0-12-801595-7.00016-1","volume-title":"The Cloud Security Ecosystem","author":"G Grispos","year":"2015","unstructured":"Grispos, G., Glisson, W.B., Storer, T.: Recovering residual forensic data from smartphone interactions with cloud storage providers. In: Choo, K.-K.R., Ko, R. (eds.) The Cloud Security Ecosystem, pp. 347\u2013382. Syngress, Boston (2015)"},{"key":"23_CR43","unstructured":"Oates, B.J.: Researching Information Systems and Computing. Sage, Thousand Oaks (2005)"},{"key":"23_CR44","unstructured":"Statscounter: Mobile Operating System Market Share Worldwide (2019). https:\/\/gs.statcounter.com\/os-market-share\/mobile\/worldwide"},{"key":"23_CR45","unstructured":"United States Department of Health and Human Services Office for Civil Rights: HIPAA Administrative Simplification - 5 CFR Parts 160, 162, and 164 (2013)"},{"key":"23_CR46","unstructured":"United States Department of Health and Human Services: HIPAA Security Guidance (2006)"}],"container-title":["Lecture Notes of the Institute for Computer Sciences, Social Informatics and Telecommunications Engineering","Future Access Enablers for Ubiquitous and Intelligent Infrastructures"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-030-78459-1_23","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2021,7,15]],"date-time":"2021-07-15T17:37:52Z","timestamp":1626370672000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-030-78459-1_23"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2021]]},"ISBN":["9783030784584","9783030784591"],"references-count":46,"URL":"https:\/\/doi.org\/10.1007\/978-3-030-78459-1_23","relation":{},"ISSN":["1867-8211","1867-822X"],"issn-type":[{"value":"1867-8211","type":"print"},{"value":"1867-822X","type":"electronic"}],"subject":[],"published":{"date-parts":[[2021]]},"assertion":[{"value":"20 June 2021","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"FABULOUS","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Conference on Future Access Enablers of Ubiquitous and Intelligent Infrastructures","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2021","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"6 May 2021","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"7 May 2021","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"5","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"fabulous2021","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"http:\/\/fabulous-conf.org\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Double-blind","order":1,"name":"type","label":"Type","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"EAI Confy +","order":2,"name":"conference_management_system","label":"Conference Management System","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"60","order":3,"name":"number_of_submissions_sent_for_review","label":"Number of Submissions Sent for Review","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"30","order":4,"name":"number_of_full_papers_accepted","label":"Number of Full Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"0","order":5,"name":"number_of_short_papers_accepted","label":"Number of Short Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"50% - The value is computed by the equation \"Number of Full Papers Accepted \/ Number of Submissions Sent for Review * 100\" and then rounded to a whole number.","order":6,"name":"acceptance_rate_of_full_papers","label":"Acceptance Rate of Full Papers","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"3.5","order":7,"name":"average_number_of_reviews_per_paper","label":"Average Number of Reviews per Paper","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"Yes","order":9,"name":"external_reviewers_involved","label":"External Reviewers Involved","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}}]}}