Download PDF
Horizon3.ai > Case Studies > Enhancing Security in Medical Clinic with NodeZero
Horizon3.ai Logo

Enhancing Security in Medical Clinic with NodeZero

Technology Category
  • Cybersecurity & Privacy - Endpoint Security
  • Cybersecurity & Privacy - Intrusion Detection
Applicable Industries
  • Healthcare & Hospitals
  • National Security & Defense
Applicable Functions
  • Quality Assurance
Use Cases
  • Intrusion Detection Systems
  • Tamper Detection
Services
  • Testing & Certification
The Challenge

A medical clinic with over 120 providers was facing a significant security challenge. Despite using best-in-class endpoint detection and response (EDR) software, the clinic was still vulnerable to cyber threats. NodeZero, a security solution, was able to identify a device’s Local Security Authority Subsystem Service Process (LSASS), dump and crack user credentials, move laterally, and gain Windows Domain Administrator privileges. This resulted in full domain rights, a situation that should have been detected and blocked by the EDR. Upon investigation, it was discovered that the EDR solution was misconfigured on several devices. Additionally, the clinic had neglected to purchase an add-on module designed to alert on lateral movement. The clinic also faced challenges in patch management. While they recognized the urgency to install updates to their infrastructure, understanding what to patch, what to defer, and ensuring that patches remediate weaknesses was a complex task.

About The Customer

The customer in this case study is a medical clinic with over 120 providers. The clinic was using best-in-class endpoint detection and response (EDR) software to protect their systems from cyber threats. However, they were still vulnerable to attacks due to misconfigurations and a lack of certain add-on modules. The clinic also faced challenges in patch management, struggling to understand what to patch, what to defer, and how to ensure that patches effectively remediate weaknesses. Despite their best efforts, the clinic was unable to fully secure their systems, leading them to seek out the services of NodeZero.

The Solution

The clinic turned to NodeZero to address these security challenges. NodeZero is an autonomous penetration testing solution that identifies exploitable weaknesses in perimeter and/or internal systems. It does this even when vulnerability scanners and patch management systems show that security updates have been successful. NodeZero automates the process of penetration testing, which is typically expensive and manual. It is a 'self-service' offering that is safe to run in production and requires no persistent or credentialed agents. NodeZero assesses systems as would a manual pentester, but faster, more completely, and with more actionable results. By using NodeZero, the clinic was able to identify and address vulnerabilities in their system, enhancing their overall security posture.

Operational Impact

  • The implementation of NodeZero resulted in a more secure system for the medical clinic. The solution was able to identify and address vulnerabilities that the clinic's previous EDR solution had missed. This included identifying a device’s Local Security Authority Subsystem Service Process (LSASS), dumping and cracking user credentials, moving laterally, and gaining Windows Domain Administrator privileges. NodeZero also helped the clinic better manage their patching process, identifying what needed to be patched, what could be deferred, and ensuring that patches effectively remediated weaknesses. Overall, NodeZero enhanced the clinic's security posture, providing a more robust defense against cyber threats.

Related Case Studies.

Case Study
Hospital Inventory Management
The hospital supply chain team is responsible for ensuring that the right medical supplies are readily available to clinicians when and where needed, and to do so in the most efficient manner possible. However, many of the systems and processes in use at the cancer center for supply chain management were not best suited to support these goals. Barcoding technology, a commonly used method for inventory management of medical supplies, is labor intensive, time consuming, does not provide real-time visibility into inventory levels and can be prone to error. Consequently, the lack of accurate and real-time visibility into inventory levels across multiple supply rooms in multiple hospital facilities creates additional inefficiency in the system causing over-ordering, hoarding, and wasted supplies. Other sources of waste and cost were also identified as candidates for improvement. Existing systems and processes did not provide adequate security for high-cost inventory within the hospital, which was another driver of cost. A lack of visibility into expiration dates for supplies resulted in supplies being wasted due to past expiry dates. Storage of supplies was also a key consideration given the location of the cancer center’s facilities in a dense urban setting, where space is always at a premium. In order to address the challenges outlined above, the hospital sought a solution that would provide real-time inventory information with high levels of accuracy, reduce the level of manual effort required and enable data driven decision making to ensure that the right supplies were readily available to clinicians in the right location at the right time.
Learn more
Case Study
Driving Digital Transformations for Vitro Diagnostic Medical Devices
Diagnostic devices play a vital role in helping to improve healthcare delivery. In fact, an estimated 60 percent of the world’s medical decisions are made with support from in vitrodiagnostics (IVD) solutions, such as those provided by Roche Diagnostics, an industry leader. As the demand for medical diagnostic services grows rapidly in hospitals and clinics across China, so does the market for IVD solutions. In addition, the typically high cost of these diagnostic devices means that comprehensive post-sales services are needed. Wanteed to improve three portions of thr IVD:1. Remotely monitor and manage IVD devices as fixed assets.2. Optimizing device availability with predictive maintenance.3. Recommending the best IVD solution for a customer’s needs.
Learn more
Case Study
Harnessing real-time data to give a holistic picture of patient health
Every day, vast quantities of data are collected about patients as they pass through health service organizations—from operational data such as treatment history and medications to physiological data captured by medical devices. The insights hidden within this treasure trove of data can be used to support more personalized treatments, more accurate diagnosis and more advanced preparative care. But since the information is generated faster than most organizations can consume it, unlocking the power of this big data can be a struggle. This type of predictive approach not only improves patient care—it also helps to reduce costs, because in the healthcare industry, prevention is almost always more cost-effective than treatment. However, collecting, analyzing and presenting these data-streams in a way that clinicians can easily understand can pose a significant technical challenge.
Learn more
© 2015-2024 IoT ONE Limited | Privacy Policy

Contact us

Let's talk!

* Required
* Required
* Required
* Invalid email address
By submitting this form, you agree that IoT ONE may contact you with insights and marketing messaging.
No thanks, I don't want to receive any marketing emails from IoT ONE.
Submit

Thank you for your message!
We will contact you soon.