Medical Device Threat Modeling with Templates

Valery Berestetsky, Principal Product Security Leader, GE Healthcare
Jonathan Schaaf, Staff Product Security Analyst, GE Healthcare

Modern medical devices contain many software components and are growing exponentially in complexity. Medical device engineering has typically struggled to threat model while the practice has become standard procedure for software systems. To help solve the problem for their engineers, GE Healthcare created a template that combines the software and medical device threat modeling specifics together.
Learning Objectives:
1: Understand the unique and common aspects of medical device technology.
2: See how to use a medical device threat model template.
3: Learn how the model presented may apply in any IoT environment.