This course aims to educate participants on the risks associated with connected healthcare devices, specifically focusing on the potential vulnerabilities in medical devices. The learning outcomes include understanding the benefits and challenges of IoT adoption in the medical field, identifying common communication channels and interconnectivity approaches used in medical devices, and analyzing case studies to comprehend the security implications of stealing patient data through medical devices. The course teaches skills such as conducting reverse engineering, port scanning, and analyzing network settings. The teaching method involves a detailed examination of case studies, practical demonstrations, and hands-on lab setups. This course is intended for cybersecurity professionals, medical device manufacturers, healthcare IT professionals, and individuals interested in understanding the security risks associated with connected medical devices.
Breaking Bad - Stealing Patient Data Through Medical Devices
Overview
Syllabus
Introduction
Sara Barrett
Agenda
Disclaimer
What are connected medical devices
Categories of connected medical devices
Inhouse medical devices
Information loop
Ecosystem
Why connected medical devices
Challenges of connected medical devices
Serial to Ethernet converters
Attack surface
Metric
Financial vs Medical Data
Case Studies
Digital Pen
Workflow
Default Accounts
Use Case Scenario
Observations
Analysis
Reverse Engineering
Port Scan
Prescriptions
Summary
IV Infusion Pump
Pump Server
Lab Setup
Initial observations
Troubleshooting
eBay
Exporting Network Settings
More Observations
Initial Packet
Master Drug List
Conclusion
Taught by
Black Hat
