[NEW] Insights & News

What’s Next for Archimedes and Healthcare and Medical Device Security?

Archimedes Center — Mon, 16 Nov 2020 05:00:00 GMT

This year has brought unparalleled changes to our lives, affecting nearly every one of our industries and institutions. The field of healthcare and medical device security is no exception. As medical, pharmaceutical, and other healthcare services have had to rapidly adapt to a virtual landscape, new challenges to device and data security have followed.

2020 Medical Device Security 101 Conference Highlights

Sofia Martinez Gomez — Mon, 06 Apr 2020 04:00:00 GMT

This year, I had the privilege to attend the 2020 Medical Device Security 101 Conference held in New Orleans. I flew all the way from Zurich, where I am a research student at ETH Zurich. I came to the conference to learn more about current trends in medical device security and share the insights I gained with the medical device security community.

The conference, which was focused on helping attendees learn and network, gave me the opportunity to meet key representatives from the medical device security industry. The evening before the conference began, I attended a dinner sponsored by MedCrypt for speakers and organizers. Additional sponsors for the event included the University of Minnesota, H-ISAC, NetLib Security, Synopsys, and Virta Labs.

Five Questions with AHA’s Chantal Worzala

nikkimcdonald@mac.com (Nikki McDonald) — Wed, 14 Nov 2018 05:00:00 GMT

The health care industry is falling prey to cyber criminals intent on stealing patient data. Medical records are rich in lucrative patient information making hospitals prime targets for ransomware attacks similar to the massive WannaCry attack that hit Windows users last year and shut down hospitals across the UK. We spoke with Dr. Chantal Worzala last year, vice president of health information and policy operations at the American Hospital Association, to learn more about what health care organizations can do to protect themselves and their patients from cyber threats.

Mayo Clinic’s Kevin McDonald on Improving Security in Healthcare

nikkimcdonald@mac.com (Nikki McDonald) — Fri, 08 Dec 2017 05:00:00 GMT

Given the increase in ransomware attacks over the past year, healthcare organizations are making medical device security a top priority. At this year’s Medical Device Security 101 Conference, attendees will learn how to identify their biggest security challenges and develop solutions to protect their data and their patients.

In this interview with conference co-chair Kevin McDonald, Director of Clinical Information Security at Mayo Clinic, Kevin talks about what healthcare providers can learn by attending the conference, the biggest security challenges facing healthcare today, and the two things healthcare providers can do right now to improve security and protect patients.

Bill Aerts Joins Archimedes as New Deputy Director

nikkimcdonald@mac.com (Nikki McDonald) — Thu, 20 Jul 2017 04:00:00 GMT

The Archimedes Center for Medical Device Security is pleased to announce that Bill Aerts has joined Archimedes as its deputy director. In this part-time role, Aerts will lead Archimedes’ efforts to support and guide health delivery organizations and medical device manufacturers as they work to make devices safer and more secure.

Professor to Congress: 'Internet of Things security is woefully inadequate'

Nicole Casal Moore — Tue, 22 Nov 2016 05:00:00 GMT

As the Internet of Things grows around us, so do the threat of cybersecurity breaches severe enough to shut down hospitals and other vital infrastructure, a Michigan Engineering professor told federal lawmakers this week.

Commentary: Hospitals need better cybersecurity, not more fear

kevinfu@umich.edu (Kevin Fu) — Wed, 14 Sep 2016 04:00:00 GMT

We’ve seen unprecedented attention to medical-device security after an unorthodox report was recently released by short-selling investment research firm Muddy Waters Capital and MedSec, which alleged security vulnerabilities in St. Jude Medical’s pacemakers. An independent research team subsequently raised doubts about some of the clinical claims made by the report. St. Jude Medical, meanwhile, has filed a lawsuit disputing the allegations in the same report.

Correlation is Not Causation: Electrical Analysis of St. Jude Implant Shows Normal Pacing

kevinfu@umich.edu (Kevin Fu) — Tue, 30 Aug 2016 04:00:00 GMT

St. Jude Merlin Error Indicators Are Not Evidence of Malfunction

Here’s an abbreviated technical analysis of some claims by Muddy Waters and St. Jude regarding pacemaker/defibrillator security.

How to Make Medical Devices More Secure

nikkimcdonald@mac.com (Nikki McDonald) — Fri, 08 Jul 2016 04:00:00 GMT

Former Medtronic Director of Product Security Bill Aerts took some time recently to discuss the new security challenges arising from the IoT of medical devices, how to put together a strong security program, and the current state of medical device security (and how we can fix it).

Archimedes Circular Podcast 0x01: Co-Chairs of the AAMI Medical Device Security Working Group

kevinfu@umich.edu (Kevin Fu) — Mon, 02 May 2016 04:00:00 GMT

Welcome to the inaugural Archimedes Circular Podcast. Today, Dr. Kevin Fu interviews the co-chairs of the AAMI Working Group on Medical Device Security ahead of the release of its Technical Information Report 57 to medical device manufacturers on specific security engineering methods designed to help satisfy regulatory expectations of cybersecurity in the 510(k) and PMA processes.