Table of contents exchange of letters with the minister executive summary


PARTS OF THE SCM SYSTEM AND NETWORK



Download 5.91 Mb.
View original pdf
Page28/329
Date27.11.2023
Size5.91 Mb.
#62728
1   ...   24   25   26   27   28   29   30   31   ...   329
Report of the COI into the Cyber Attack on SingHealth 10 Jan 2019
8 PARTS OF THE SCM SYSTEM AND NETWORK
RELEVANT TO THE CYBER ATTACK
8.1
Overview
54. This section covers the key parts of the SCM system relevant to the Cyber Attack. The attacker also compromised servers that were not part of the SCM system, such as the servers referred to in this report as the NCC Server and SP. Server, which nonetheless played a role in the attack – see section 14.4.1 (pg 57), and section 14.7 (pg 70), below respectively.
55. Broadly speaking, users in the User Zone of the SingHealth network access the SCM database through an SCM client application hosted on Citrix servers. The Citrix servers serve as middleware between users workstations and the SCM servers. The users workstations communicate with Citrix servers,



COI Report – Part II
Page 21 of 425

which in turn communicate with the SCM database servers, where patient data is stored.
8.2
SCM application and database servers
56. The SCM database is hosted on a server in the HDC, and is accessible through the SCM client application. The SCM application and database servers are physically located at HDC.
8.3
Citrix servers
57. The SCM Application is not installed on individual users workstations. Instead, users access the SCM Application through Citrix servers in the H-Cloud, on which the said application is published (i.e. made available for access by multiple users through a process known as virtualisation). The HDC Citrix servers were protected by a firewall.
58. There is another set of Citrix servers critical to this Inquiry, which was located in Singapore General Hospital (“SGH”). The SGH Citrix servers were located at the SGH Local Data Centre (“LDC”). These servers were deployed in a sub-net that was not protected by a firewall. The SGH LDC also had another location at the SGH Academia building, which was protected by a firewall. This location contained other IHiS servers that are not relevant to the Inquiry.

Download 5.91 Mb.

Share with your friends:
1   ...   24   25   26   27   28   29   30   31   ...   329




The database is protected by copyright ©ininet.org 2024
send message

    Main page