Skip navigation

Mapping the cyberthreat landscape in healthcare using GDELT: a multimethod approach

Mapping the cyberthreat landscape in healthcare using GDELT: a multimethod approach

Piazza, Anna ORCID logoORCID: https://orcid.org/0000-0002-5785-6948 and Vasudevan, Srinidhi ORCID logoORCID: https://orcid.org/0000-0002-8584-9112 (2025) Mapping the cyberthreat landscape in healthcare using GDELT: a multimethod approach. Health Security. ISSN 2326-5094 (Print), 2326-5108 (Online) (doi:10.1089/hs.2024.0016)

[thumbnail of Author's Accepted Manuscript]
Preview
PDF (Author's Accepted Manuscript)
50460 PIAZZA_Mapping_The_Cyberthreat_Landscape_In_Healthcare_Using_GDELT_A_Multimethod_Approach_(AAM)_2025.pdf - Accepted Version

Download (372kB) | Preview

Abstract

Cyberattacks that target critical national infrastructure, such as hospitals, pose a significant threat to the safety and wellbeing of individuals, as evidenced by incidents like the WannaCry worldwide ransomware attack. To better understand vulnerabilities within the healthcare sector and develop preventive measures, it is crucial to examine the evolving nature of cyberthreats and the types of attacks occurring. In this article, we describe a multimethod approach comprising social networks analysis, natural language processing, and machine learning, using data from GDELT (Global Database of Events, Language, and Tone), to identify the prevalence of attacks on hospitals while considering the type of attack and its date. Through this approach, meaningful patterns in the evolution of cyberattacks are revealed by analyzing the relationships between emerging cyberattacks mentioned in news reports. Findings show that the number of attacks from 2017 to 2023 increased substantially, with hospitals being more prone to critical attacks such as cyberterrorism/state actor-sponsored criminal activities, advanced persistent threats, and distributed denial of service. Mapping real-time data from diverse sources using a multimethod approach, such as the framework proposed in this article, can lead to better understanding of the threat landscape. This is a crucial step in determining necessary cyber defenses and informing the development of policy interventions to ensure the cybersecurity of critical national infrastructure.

Item Type: Article
Uncontrolled Keywords: Critical national infrastructure (CNI), cyberattacks, cyberthreat landscape, GDELT, hospitals, machine learning, natural language processing, social networks analysis
Subjects: H Social Sciences > H Social Sciences (General)
Q Science > QA Mathematics > QA75 Electronic computers. Computer science
R Medicine > RA Public aspects of medicine
Faculty / School / Research Centre / Research Group: Greenwich Business School
Greenwich Business School > Networks and Urban Systems Centre (NUSC)
Greenwich Business School > School of Business, Operations and Strategy
Last Modified: 19 May 2025 16:12
URI: http://gala.gre.ac.uk/id/eprint/50460

Actions (login required)

View Item View Item

Downloads

Downloads per month over past year

View more statistics