Cybersecurity Seminar Series (November 2024): Jan Küfner

Title: Penetration Testing of Medical Devices

Description: As the healthcare sector becomes increasingly reliant on connected medical devices, ensuring their cybersecurity is essential for patient safety. This presentation will delve into the critical need for medical device penetration testing (pen-testing) in identifying vulnerabilities and protecting both devices and patient data from cyber threats.

We will begin by explaining the role of notified bodies in the medical device industry, particularly their involvement in assessing compliance with regulatory requirements. The growing importance of effective pen testing will be discussed in light of rising cyber threats and the increasing connectivity of medical devices. The current state of medical device cybersecurity will be examined, with a forward-looking glance at upcoming challenges and innovations.

Key topics include the regulatory requirements for pen-testing, the gap between those requirements and the realities of current practices, and how standards like CVSS scores, attack surface assessments, and economically feasible testing approaches come into play. We will also explore the role of threat modeling, and how cyber audits conducted by authorities are shaping the landscape of medical device security.

Attendees will gain a comprehensive understanding of the challenges and solutions surrounding medical device pen-testing, equipping them with the knowledge needed to navigate this rapidly evolving field.

Links in the presentation: