SECURITY CONCERNS WITH SMART MEDICAL DEVICES

The world has embraced connected devices. They’ve become a technology that people rely on, both personally and professionally. This is reflected in the medical field, where connected device usage is steadily increasing. A report by Statista claims over 161 million medical connected devices will be installed by 2020. The demand for these Internet of Things (IoT) devices is obvious.
However, there is an opportunity for these devices to be a security risk. In fact, it’s making a new approach to security necessary.

Security Risk

The crux of the risk is that connected medical devices are no longer stand-alone, they are part of a network with multitudes of other devices. For example, some types of infusion pumps communicate with electronic health record (EMR) systems or priority monitoring systems. This communication often includes personal health information (PHI). This communication must be safeguarded to maintain patient confidentiality and safety.
Without proper security, connected medical devices can be easily breached. A malicious actor (aka ‘hacker’) looking to infiltrate a network often only needs one weak device to be successful. McAfee Labs’ Threat Report reveals a 210% increase in disclosed security incidents related to healthcare. This surge indicates that hackers are finding programs on the network that are vulnerable.
Many of these vulnerabilities involve leveraging attack techniques such as phishing, ransomware or denial of service. However devices are often also vulnerable to more targeted attacks such as “replay attacks where communication is intercepted that is designated for the device. The communication can then be replayed to the device to cause it to repeat the action the communication originally intended to do. The FDA confirmed that connected pacemakers and defibrillators can be exploited. Leveraging these exploits a malicious actor could drain batteries or trigger shocks to the patient.

Steps to Improve Connected Device Security

To realize the advantages of connected devices, resolve concerns about security by employing these essential best practices:
  • Building security into the design process. Consider security concerns early in development to ensure the final product does not need to compromise on security.
  • Evaluate security risk. No two devices risk profiles are the same. Thus no two devices have the same security risks. Security risk need to be evaluated to ensure a device is safe as possible.
  • Utilize standard industry practices. Techniques exist for encryption, authorization and authentication. Utilizing the existing practices employs the magnitude of effort already invested into solving difficult security challenges.
  • Test the security of the device. Often devices have vulnerabilities that are not the result of bad design but is merely a mistake that can be easily resolved. Testing ensures that misconfiguration or software anomalies do not lead to vulnerabilities in the field.
  • Understand the security life cycles once a device is in the wild. Plan on how to respond and address security vulnerabilities when they occur in the field.
  • Emphasize the encryption of all sensitive data, especially Protected Health Information (PHI).  This is critical in ensuring privacy and control over data.
  • Institute more security measures after the initial configuration by the manufacturer. You should be able to update and adjust security settings throughout the life of the product.
Such a bright future for connected medical devices shouldn’t be compromised by lax security.
Learn more about Sunrise Labs and cyber security for medical devices.

 

Read more at sunriselabs.com

Follow us on social media for the latest updates in B2B!

Image

Latest

sustainable transformation
The Path to Sustainable Transformation Is Rooted in Strategy, Execution and Reflection
November 1, 2024

Many strive for change, yet achieving and sustaining it is a complex journey. As people chase higher goals, often in career, personal growth, or relationships, the need to reevaluate approaches to sustainable transformation becomes apparent. Research suggests that nearly 80% of New Year’s resolutions fail by mid-February, indicating a need for sustainable systems, not…

Read More
cloud-based solutions
C3 Cloud-Based Solutions Delivers Real-Time Transparency, Driver Coordination, and Simulation Tools for a Resilient Supply Chain
October 31, 2024

The logistics industry faces constant challenges as the need for efficient, cloud-based solutions intensifies. Many warehouses continue to operate manually; up to 53% of employee time is spent on non-value-adding tasks like walking and searching for items, according to industry studies. This manual approach not only hampers efficiency but leads to significant delays, errors,…

Read More
personalized solutions
Personalized Solutions Through Data Are the Future of Aligning Healthcare Staff Needs with Patient Outcomes
October 31, 2024

The healthcare industry faces unprecedented challenges, with workforce shortages pushing hospital labor costs to over 60% of total expenses. This strain is compounded by rising burnout rates among healthcare providers, particularly nurses. A recent AMN Healthcare survey revealed that nurses are prioritizing well-being and flexibility in 2024, underscoring the urgent need for personalized solutions…

Read More
Transforming Education: Connected Education Kits for Rural Markets
Transforming Education: Connected Education Kits for Rural Markets
October 31, 2024

In the latest episode of The Edge and Beyond podcast, Michelle Dawn Mooney dives into the transformative role of technology in education, highlighting Intel’s Connected Education Kits. Developed in partnership with ApplianSys, these kits are designed to bring quality digital learning to underserved and remote communities. The discussion explores how these kits are a game-changer…

Read More