Abstract:Wearable and implantable medical devices (IMDs) are increasingly deployed to diagnose, monitor, and provide therapy for critical medical conditions. Such medical devices are safety-critical cyber-physical systems (CPSs). These systems support wireless features introducing potential security vulnerabilities. Although these devices undergo rigorous safety certification processes, runtime security attacks are inevitable. Based on published literature, IMDs such as pacemakers and insulin infusion systems can be remotely controlled to inject deadly electric shocks and excess insulin, posing a threat to a patient’s life. While prior works based on formal methods have been proposed to detect potential attack vectors using different forms of static analysis, these have limitations in preventing attacks at runtime. This paper discusses a formal framework for detecting cyber-physical attacks on a pacemaker by monitoring its security policies at runtime. We propose a wearable device that senses the Electrocardiogram (ECG) and Photoplethysmogram (PPG) of the body to detect attacks in a pacemaker. To facilitate the design of this device, we map the security policies of a pacemaker w.r.t ECG and PPG, paving the way for designing formal verification monitors for pacemakers for the first time using multiple physiological signals. The proposed monitoring framework allows the synthesis of parallel monitors from a given set of desired security policies, where all the monitors execute concurrently and generate an alarm to the user in the case of policy violation. Our implementation and the performance evaluation results demonstrate the technical feasibility of designing such a wearable device for attack detection in pacemakers. This device is separate from the pacemaker, ensuring no need for re-certification of pacemakers. Our approach is amenable to the application of security patches when new attack vectors are detected, making the approach ideal for runtime monitoring of medical CPSs.

IMDGuard: Securing Implantable Medical Devices with the External Wearable Guardian

IMDfence: Architecting a Secure Protocol for Implantable Medical Devices

e-SAFE: Secure, Efficient and Forensics-Enabled Access to Implantable Medical Devices

A survey on security issues in modern Implantable Devices: Solutions and future issues

A Secure Proxy-based Access Control Scheme for Implantable Medical Devices

Securing Pacemakers using Runtime Monitors over Physiological Signals

Security Defense Strategy for Intelligent Medical Diagnosis Systems (IMDS)

HW/SW Framework for Improving the Safety of Implantable and Wearable Medical Devices

An On-Chip Security Guard Based on Zero-Power Authentication for Implantable Medical Devices

Digital Investigation of Security Attacks on Cardiac Implantable Medical Devices

Towards Evaluating the Security of Wearable Devices in the Internet of Medical Things

Apparatus and method for protection of critical embedded system components via hardware-isolated secure element-based monitor

A Low-Power Dual-Factor Authentication Unit for Secure Implantable Devices

HealthGuard: A Machine Learning-Based Security Framework for Smart Healthcare Systems

Fringing Electric Field Sensors for Anti-Attack at System-Level Protection

HealthGuard: An Intelligent Healthcare System Security Framework Based on Machine Learning

Security Tradeoffs in Cyber Physical Systems: A Case Study Survey on Implantable Medical Devices

Cardiac implantable electronic devices and cybersecurity

A Biomechatronic Approach to Evaluating the Security of Wearable Devices in the Internet of Medical Things

Data Guardian: A Data Protection Scheme for Industrial Monitoring Systems

On the Feasibility of Non-contact Cardiac Motion Sensing for Emerging Heart-Based Biometrics