In Proceedings of 2nd USENIX Workshop on Health Security and Privacy (HealthSec), August 2011.
Take Two Software Updates and See Me in the Morning: The Case for Software Security Evaluations of Medical Devices
https://spqr.eecs.umich.edu/papers/hanna-aed-healthsec11.pdf