​Refreshments Sponsored by ASIMILY & Health-ISAC

           

More than 15 years ago, security researchers confronted us with the new, stark reality that the very medical devices that are keeping patients alive could be hacked and turned into a deadly weapon. In years following, more research came to light and global regulators started to take action to ensure that future devices will be more secure and therefore safer. However, the possibility of harm, as stipulated by researchers and regulators, has yet to manifest itself as we have no documented evidence of patient harm through a targeted cyber-attack on a medical device. 

This session will examine why we see this apparent disconnect between what, on one hand, is deemed possible and the observed reality on the other. What do we actually know about medical device security incidents and their respective consequences? Is it as simple as us not having been able to identify such incidents and collect sufficient data? Or is there a misalignment between how researchers approach the topic as compared to how cyber adversaries typically operate? To further our understanding, we will examine a few known cases of cyber incidents involving medical devices and contrast that with gaps in our knowledge. Collectively, as an industry, we should be striving to address the current blind spots and try to come up with a realistic and practice-based definition of the problem, ultimately allowing us to make the right decisions that will guide us to implementing the most effective defensive strategy.​

 Gold Level

​

Bronze Level

 

Plan your travel:

To receive the special conference rate, book your hotel no later than May 30. Click here for an overview of the hotels.