![\"Drs.](\"https:\/\/www.newsbeep.com\/us-ca\/wp-content\/uploads\/2025\/11\/Dameff-and-Tully.jpg\")
Drs. Christian Dameff (left) and Jeff Tully are co-directors of the UC San Diego Center for Healthcare Cybersecurity. (UC San Diego Health Sciences)<\/p>\nWith projects like the creation of \u201ca hospital IT system in a box\u201d and studies on the impact of ransomware attacks on hospitals and the effectiveness of employee cybersecurity training, researchers at UC San Diego in La Jolla are trying to make hospitals more resilient in the face of cyberattacks.<\/p>\n
The Center for Healthcare Cybersecurity was launched in 2023 by Dr. Jeff Tully, an assistant professor of anesthesiology at UCSD, and Dr. Christian Dameff, an associate professor in the departments of Emergency Medicine and Computer Science & Engineering and the Division of Biomedical Informatics.<\/p>\n
Drs. Christian Dameff (left) and Jeff Tully are co-directors of the UC San Diego Center for Healthcare Cybersecurity. (UC San Diego Health Sciences)<\/p>\n
Though they lack a building with the center\u2019s name on it, their interdisciplinary work involves people from \u201ca bunch of different domains,\u201d including in the clinical field, technologists and cybersecurity experts.<\/p>\n
\u201cBasically everybody who has a stake in safe and secure patient-care technology all come to the center as sort of a way to convene research, education, innovation and advocacy that has a very clinically oriented but very technically rigorous focus,\u201d Tully said.<\/p>\n
\u201cWe really wanted an entire gambit of folks there, because our research is very practical and applied,\u201d Dameff said. \u201cWe don\u2019t just stop when we publish a paper. If the cybersecurity doesn\u2019t make the patient at the bedside safer, then there\u2019s a gap. And that\u2019s the gap we want to fill with this center.\u201d<\/p>\n
Dameff and Tully came up studying medicine in Arizona. Today, one of their main focuses at the UCSD center is collecting better data to aid in cybersecurity decisions.<\/p>\n
\u201cWe grew up as doctors, and we, in medicine, require a pretty rigorous amount of data before we can recommend a treatment or a surgery,\u201d Dameff said.<\/p>\n
\u201cWe subscribe to the belief that many cybersecurity problems and their solutions that are proposed are actually based on pretty poor data. When you make decisions based on bad data, you get bad outcomes.\u201d<\/p>\n
The center\u2019s drive for better data was shown in a pair of studies \u2014 one on the burden hospitals bear during cyberattacks and another showing that cybersecurity training may not be as effective as people think.<\/p>\n
The former paper, released via JAMA Network Open<\/a>, evaluated two hospitals adjacent to but separate from a health-care organization victimized by a months-long cyberattack. The results, according to the study, were increased patient load, wait times and length of stay.<\/p>\n In the latter study<\/a>, simulations of 10 different \u201cphishing\u201d attacks were sent to nearly 20,000 UCSD Health employees over eight months as a training exercise. The study determined those efforts did not make employees likelier to identify phishing attempts (using deceptive messages such as emails, texts or phone calls to trick people into revealing sensitive information or downloading malware). In some cases, their ability to sniff them out decreased with training, according to the study.<\/p>\n Tully noted the center\u2019s growth and breadth of study since its inception.<\/p>\n \u201cI would say we have built a community over the last two years,\u201d he said. \u201cOur faculty bench has gotten deeper, we have more projects and initiatives that have gotten underway, the papers have come out at an increasing pace. So we\u2019ve been very pleased with how we\u2019ve been able to scale and grow this.\u201d<\/p>\n As the center grows, the researchers have made an effort to take a proactive approach to ransomware attacks, which use malicious software to encrypt or lock up a victim\u2019s files, making them inaccessible until a ransom is paid.<\/p>\n \u201cMost people think that when you get hit with ransomware, you can\u2019t do much,\u201d Dameff said. \u201cYou have to just put your head down and \u2026 take care of patients without technology, which is really, really disruptive.\u201d<\/p>\n One of the center\u2019s recent projects, Crashcart, challenges that assumption and raises the question: Could you place critical technology in a portable package, drive it to medical centers and immediately deploy it to help doctors, nurses and patients amid a cyberattack?<\/p>\n Early returns are largely positive, Dameff said.<\/p>\n The project, which Tully calls \u201ca hospital IT system in a box,\u201d can greatly reduce hospital downtime by pulling up electronic health records, radiology and laboratory systems off the grid, according to UC San Diego.<\/p>\n Crashcart was built over 1\u00bd years, followed by six months of practice. Each practice run has brought improved outcomes, Dameff said.<\/p>\n The center\u2019s health-care cybersecurity work comes as attacks are increasing, Tully and Dameff said. A paper they published in September 2024<\/a> said ransomware attacks on health-care organizations nearly doubled between 2016 and 2021. A 2024 attack on technology conglomerate Change Healthcare took $22 million from the company, the study said, citing a report published by Wired magazine<\/a>.<\/p>\n That attack, Dameff said, demonstrated the extent to which health care is dependent on technology across the nation, posing national security risks.<\/p>\n The Center for Healthcare Cybersecurity seeks to identify those risks and intervene where possible.<\/p>\n \u201cI\u2019m very interested in trying to find out where those are and try to protect them,\u201d Dameff said. \u201cWe\u2019re becoming more and more dependent, and the failures are just getting higher and higher in stakes.\u201d<\/p>\n