Medical Device Cybersecurity Top Challenge to IoT Ecosystem

Nick_Baty · 22 February 2018 23:53

One-third of IoT professionals state legacy and medical device cybersecurity is the greatest cybersecurity challenge: https://healthitsecurity.com/news/medical-device-cybersecurity-top-challenge-to-iot-ecosystem

eduddy · 25 February 2018 22:41

Interesting article, does raise the question about our advice to the sector on ensuring that devices, especially those manages outside IT are secure. Perhaps an opportunity to engage the clinical engineers across the DHBs!
opengraphobject:[351561241829000 : https://healthitsecurity.com/news/medical-device-cybersecurity-top-challenge-to-iot-ecosystem : title=“Medical Device Cybersecurity Top Challenge to IoT Ecosystem” : description="Legacy and connected medical device cybersecurity issues are top concerns for professionals working in the IoT space, according to Deloitte. "]

Nick_Baty · 25 February 2018 22:43

Absolutely; any chance we can get to raise the profile of this issue with the sector directly we should be taking. Any opportunities coming up to do this?
opengraphobject:[351561241829000 : https://healthitsecurity.com/news/medical-device-cybersecurity-top-challenge-to-iot-ecosystem : title=“Medical Device Cybersecurity Top Challenge to IoT Ecosystem” : description="Legacy and connected medical device cybersecurity issues are top concerns for professionals working in the IoT space, according to Deloitte. "]

Mark_Foster · 26 February 2018 20:17

Reminds me of this other related article I found last month. Quite technical, but highlights the security concerns around medical appliances.

github.com

sgayou/medfusion-4000-research/blob/master/doc/README.md

# Remote Code Execution on the Smiths Medical Medfusion 4000

![Medfusion RCE Research Logo](./images/logo.png)

In which we detail the process of vulnerability research on a life critical embedded system: a medical [infusion pump](https://en.wikipedia.org/wiki/Infusion_pump).

## Table of Contents

   * [Remote Code Execution on the Smiths Medical Medfusion 4000](#remote-code-execution-on-the-smiths-medical-medfusion-4000)
      * [Table of Contents](#table-of-contents)
      * [Summary](#summary)
      * [Introduction](#introduction)
         * [Why Do This?](#why-do-this)
      * [Initial Threat Modeling](#initial-threat-modeling)
         * [Previous Research Review](#previous-research-review)
         * [Product Manual Examination](#product-manual-examination)
         * [GUI Analysis](#gui-analysis)
            * [BIOMED Mode](#biomed-mode)
         * [Networking Analysis](#networking-analysis)
            * [Telnet](#telnet)

This file has been truncated. show original

opengraphobject:[351561241829000 : https://healthitsecurity.com/news/medical-device-cybersecurity-top-challenge-to-iot-ecosystem : title=“Medical Device Cybersecurity Top Challenge to IoT Ecosystem” : description="Legacy and connected medical device cybersecurity issues are top concerns for professionals working in the IoT space, according to Deloitte. "], opengraphobject:[351561241963390 : https://github.com/sgayou/medfusion-4000-research/blob/master/doc/README.md : title=“medfusion-4000-research/README.md at master · sgayou/medfusion-4000-research · GitHub” : description=“medfusion-4000-research - Medfusion 4000 security research & a MQX RCE.”]