US Ignite demo request: SeaCat: Securing access to medical records

[kobus@cs.utah.edu]

One-sentence layman's description:

This demo will show how access to a medical record system can be secured from handheld devices like tablets and mobile phones.

Who should see this demo?

Attendees interested in how end-to-end isolation on both the network and the device can be used to provide secure access to sensitive data from mobile devices thus providing strong protection against data exfiltration.

Demo description paragraph(s):

Securing access to an OpenMRS system (an open source medical record system) by deploying it in the SeaCat Application Containment framework.

We will show how medical personnel can use mobile devices, such as tablets or mobile phones, to securely access medical records. Our approach combines software defined networking with isolation mechanisms on the mobile device to dynamically create an end-to-end isolated context in which the medical application and data are contained. This prevents sensitive data, like patient medical records, to be accidentally or intentionally leaked because of user error or malware resident on the mobile device. List of equipment that will need AC connections (e.g. laptop, switch, monitor):

• three laptops
• WiFi access point
• switch
• two mobile devices

Total number of wired network connections (sum standard IP and VLAN connections):

One wired connection.

Our demonstration will be self contained so we only need general Internet access. Number of wired layer 2 VLANs (if any): None.

Number of wireless network connections (include required bandwidth if significant):

We will be bringing our own WiFi access point for the demonstration and would need to coordinate with general WiFi provided at the venue to limit interference.

Number of static addresses needed (if any):

Dynamic addresses for general Internet access would be sufficient.

Monitor (y/n, specify VGA or DVI):

Yes. Either VGA or DVI should be fine.

Number of posters (max size poster boards are 30" x 40"):

One.

Special requests:

None.