SECURITY CONCERNS WITH SMART MEDICAL DEVICES

Security Risk

Steps to Improve Connected Device Security

• Building security into the design process. Consider security concerns early in development to ensure the final product does not need to compromise on security.

• Evaluate security risk. No two devices risk profiles are the same. Thus no two devices have the same security risks. Security risk need to be evaluated to ensure a device is safe as possible.

• Utilize standard industry practices. Techniques exist for encryption, authorization and authentication. Utilizing the existing practices employs the magnitude of effort already invested into solving difficult security challenges.

• Test the security of the device. Often devices have vulnerabilities that are not the result of bad design but is merely a mistake that can be easily resolved. Testing ensures that misconfiguration or software anomalies do not lead to vulnerabilities in the field.

• Understand the security life cycles once a device is in the wild. Plan on how to respond and address security vulnerabilities when they occur in the field.

• Emphasize the encryption of all sensitive data, especially Protected Health Information (PHI).  This is critical in ensuring privacy and control over data.

• Institute more security measures after the initial configuration by the manufacturer. You should be able to update and adjust security settings throughout the life of the product.

Read more at sunriselabs.com