compliance security threat model healthcare medical software security health care hospital management buffer overflow audit doctor security program manager medical billing firewall consulting smart card module software vulnerabilities exploit smart card deployment security medicine antivirus