Cyberattacks: How to Up Your Cybersecurity Game for Medical Devices
In the healthcare industry, cyberattacks have become very common. This is mainly due to the increase in the networked medical devices. This is prompting device manufacturers to constantly reduce threats that would affect the devices’ security.
Many medical devices have embedded computer systems that are susceptible to security breaches which can affect how they operate. The rise in cyberattacks led to the FDA issuing a warning in March 2019, concerning 2 security flaws that affected implantable cardioverter defibrillators.
To better understand the risks a compromise in device security may have on an individual, we first look at how the attacks are launched.
When malware is introduced into an equipment or gains unauthorized access to a device’s data or configuration settings as well as the networks to which the said devices are connected, this is considered a cyberattack.
These attacks may result in data collection and transmission, which compromises patient safety, especially when it comes to devices such as insulin pumps and defibrillators, as malicious software could cause malfunctions that may result in patient harm or sometimes, death.
Furthermore, the access of data from networked devices through hacking may also disclose critical information. For example:
Data from other devices which are connected to the same network which expands the range of patient safety that has been compromised
Health data of patients, this information can be sold or used to aid in identity theft
Data of a product’s performance, this data can be sold to competitors or used to compromise a manufacturers’ efficacy and safety claims
Factors that can also pitch in to cybersecurity risks of devices in the medical sector include:
Lack of authority for health care centers to stop using devices that are no longer supported by the manufacturer
Using off-the-shelf software
Advancements in the Internet of Things; this blurs the lines between private and public data, thus making it easier for personal health data to be shared electronically
A survey that was done recently showed that 62% of consumers valued cybersecurity more than the ease of use of a medical device. Device manufacturers should therefore bear the responsibility of ensuring their device security. An effective cybersecurity plan should include both postmarket and premarket phases while also addressing risk management from device conception and use to disposal.
On the other hand, hospitals and other healthcare facilities should constantly evaluate and update their network security software and protect their systems diligently using guidelines that should be issued by the device manufacturing companies.
Experts say sector startups would do well to learn how companies like DarioHealth Corp. (NASDAQ: DRIO) safely offer their smartphone-centered, personalized chronic illness management software-as-a-service (“SaaS”).
Please see full terms of use and disclaimers on the BioMedWire website applicable to all content provided by BMW, wherever published or re-published: http://BMW.fm/Disclaimer
In the healthcare industry, cyberattacks have become very common. This is mainly due to the increase in the networked medical devices. This is prompting device manufacturers to constantly reduce threats that would affect the devices’ security.
Many medical devices have embedded computer systems that are susceptible to security breaches which can affect how they operate. The rise in cyberattacks led to the FDA issuing a warning in March 2019, concerning 2 security flaws that affected implantable cardioverter defibrillators.
To better understand the risks a compromise in device security may have on an individual, we first look at how the attacks are launched.
When malware is introduced into an equipment or gains unauthorized access to a device’s data or configuration settings as well as the networks to which the said devices are connected, this is considered a cyberattack.
These attacks may result in data collection and transmission, which compromises patient safety, especially when it comes to devices such as insulin pumps and defibrillators, as malicious software could cause malfunctions that may result in patient harm or sometimes, death.
Furthermore, the access of data from networked devices through hacking may also disclose critical information. For example:
Data from other devices which are connected to the same network which expands the range of patient safety that has been compromised
Health data of patients, this information can be sold or used to aid in identity theft
Data of a product’s performance, this data can be sold to competitors or used to compromise a manufacturers’ efficacy and safety claims
Factors that can also pitch in to cybersecurity risks of devices in the medical sector include:
Lack of authority for health care centers to stop using devices that are no longer supported by the manufacturer
Using off-the-shelf software
Advancements in the Internet of Things; this blurs the lines between private and public data, thus making it easier for personal health data to be shared electronically
A survey that was done recently showed that 62% of consumers valued cybersecurity more than the ease of use of a medical device. Device manufacturers should therefore bear the responsibility of ensuring their device security. An effective cybersecurity plan should include both postmarket and premarket phases while also addressing risk management from device conception and use to disposal.
On the other hand, hospitals and other healthcare facilities should constantly evaluate and update their network security software and protect their systems diligently using guidelines that should be issued by the device manufacturing companies.
Experts say sector startups would do well to learn how companies like DarioHealth Corp. (NASDAQ: DRIO) safely offer their smartphone-centered, personalized chronic illness management software-as-a-service (“SaaS”).
Please see full terms of use and disclaimers on the BioMedWire website applicable to all content provided by BMW, wherever published or re-published: http://BMW.fm/Disclaimer
