Mapping the cyberthreat landscape in healthcare using GDELT: a multimethod approach
Piazza, Anna ORCID: https://orcid.org/0000-0002-5785-6948 and Vasudevan, Srinidhi
ORCID: https://orcid.org/0000-0002-8584-9112
(2025)
Mapping the cyberthreat landscape in healthcare using GDELT: a multimethod approach.
Health Security.
ISSN 2326-5094 (Print), 2326-5108 (Online)
(doi:10.1089/hs.2024.0016)
Preview |
PDF (Author's Accepted Manuscript)
50460 PIAZZA_Mapping_The_Cyberthreat_Landscape_In_Healthcare_Using_GDELT_A_Multimethod_Approach_(AAM)_2025.pdf - Accepted Version Download (372kB) | Preview |
Abstract
Cyberattacks that target critical national infrastructure, such as hospitals, pose a significant threat to the safety and wellbeing of individuals, as evidenced by incidents like the WannaCry worldwide ransomware attack. To better understand vulnerabilities within the healthcare sector and develop preventive measures, it is crucial to examine the evolving nature of cyberthreats and the types of attacks occurring. In this article, we describe a multimethod approach comprising social networks analysis, natural language processing, and machine learning, using data from GDELT (Global Database of Events, Language, and Tone), to identify the prevalence of attacks on hospitals while considering the type of attack and its date. Through this approach, meaningful patterns in the evolution of cyberattacks are revealed by analyzing the relationships between emerging cyberattacks mentioned in news reports. Findings show that the number of attacks from 2017 to 2023 increased substantially, with hospitals being more prone to critical attacks such as cyberterrorism/state actor-sponsored criminal activities, advanced persistent threats, and distributed denial of service. Mapping real-time data from diverse sources using a multimethod approach, such as the framework proposed in this article, can lead to better understanding of the threat landscape. This is a crucial step in determining necessary cyber defenses and informing the development of policy interventions to ensure the cybersecurity of critical national infrastructure.
Item Type: | Article |
---|---|
Uncontrolled Keywords: | Critical national infrastructure (CNI), cyberattacks, cyberthreat landscape, GDELT, hospitals, machine learning, natural language processing, social networks analysis |
Subjects: | H Social Sciences > H Social Sciences (General) Q Science > QA Mathematics > QA75 Electronic computers. Computer science R Medicine > RA Public aspects of medicine |
Faculty / School / Research Centre / Research Group: | Greenwich Business School Greenwich Business School > Networks and Urban Systems Centre (NUSC) Greenwich Business School > School of Business, Operations and Strategy |
Last Modified: | 19 May 2025 16:12 |
URI: | http://gala.gre.ac.uk/id/eprint/50460 |
Actions (login required)
![]() |
View Item |
Downloads
Downloads per month over past year