{'fraction_non_alphanumeric': 0.021509911429776464, 'fraction_numerical': 0.0, 'mean_word_length': 4.98989898989899, 'pattern_counts': {'":': 0, '<': 0, '<?xml version=': 0, '>': 0, 'https://': 0, 'lorem ipsum': 0, 'www.': 0, 'xml': 0}, 'pii_count': 0, 'substrings_counts': 0, 'word_list_counts': {'cursed_substrings.json': 0, 'profanity_word_list.json': 0, 'sexual_word_list.json': 0, 'zh_pornsignals.json': 0}}
Survivability Requirements for the U . S . Health Care Industry

Over the last decade, our society has become more and more dependent on Information Systems (IS), and increasingly dependent on highly distributed IS that operate in unbounded networks, such as the Internet. These systems hold the necessary data on which the majority of our essential services rely. There is an increasing risk to the fulfillment of our essential services due to these systems’ vulnerabilities. In the presence of these vulnerabilities and the limited ability of traditional security approaches to protect such systems, there is a pressing need for new ways to develop systems that are able to survive, limit damage, recover, and operate robustly in the presence of attacks that cannot be completely repelled. Survivability is a new field of study that addresses these issues. A survivable system is able to fulfill its mission in a timely manner, in the presence of attacks, failures, or accidents. At the same time there is a critical need for survivable systems to evolve over time to exploit the changing requirements and new opportunities created by changes in its environment and advancing technology. This thesis examines a variety of issues related to survivability in the U.S. health care industry. It also reviews the concepts of survivability, security, unbounded networks, and emergent properties. It focuses on the deployment of a framework for identifying, validating, and applying mission critical requirements. These mission requirements are further refined into system requirements that lead to design and implementation decisions. The system requirements are highly constrained by the environment that surrounds the system. Moreover, requirements must evolve in response to changes in the environment to remain relevant and cost-effective. Thus, it is necessary to frequently upgrade the system so these changes are addressed. Based on the previously mentioned framework, we examine the current structure of the U.S. health care industry, and propose an initial set of mission requirements for the U.S. health care infrastructure. We also apply the framework to a case study involving a U.S. Army medical treatment facility. The case study allowed us to draw some conclusions about the specific facility, and relate them to the ones we drew from the health care industry.