8.5 Security Considerations for Encoding of Pixel, Overlay, and Waveform Data (Informative)

8.5 Security Considerations for Encoding of Pixel, Overlay, and Waveform Data (Informative) (Current)
Prev	8.4 Pixel Data Provider Service	Next

The encapsulated formats conform to other standards, e.g., JPEG. Many of these formats have had their own security issues, both with the format itself and with common implementations for processing the format.

Implementations that support encapsulated format encoding may need to:

Perform input validation and sanitation to detect and perhaps remove invalid or malicious content.
Perform output validation to ensure safe compliance with format specification.
Monitor library implementations for vulnerability reports, updates, and have a process for managing these updates.

Tracking, notification, and remediation of these security problems will normally be in the context of the encapsulated format and not in the context of DICOM. This means those implementing and deploying the encapsulated format must consider security issues from those other contexts.