9 Security

Question 1

What are 4 security challenges in relation to medical devices

Answer 1

Devices are critical: Devices can be life supporting, affect critical patient care or manage highly sensitive data.

Standardised configuration: Devices are typically produces in thousands or millions of units, all with the same software and hardware configuration. If an exploit is found on one device, it can be replicated across them all.

Long-living devices: Medical devices are designed to be used for 10-20 year. It is very difficult to protect against security threats decades into the future.

Non-secure design: Devices are often engineering under the assumption that they will not be exposed to security threats

Question 2

Name 4 FDA security recommendations

Answer 2

1. Restrict unauthorised access to medical devices
2. Make sure fire-walls are up to date
3. Disable unnecessary ports and services
4. Monitor network activity

Question 3

Name 4 security features

Answer 3

1. Secure boot
2. Authentication
3. Device tampering protection
4. Encryption