Abstract:Wearable and implantable medical devices (IMDs) are increasingly deployed to diagnose, monitor, and provide therapy for critical medical conditions. Such medical devices are safety-critical cyber-physical systems (CPSs). These systems support wireless features introducing potential security vulnerabilities. Although these devices undergo rigorous safety certification processes, runtime security attacks are inevitable. Based on published literature, IMDs such as pacemakers and insulin infusion systems can be remotely controlled to inject deadly electric shocks and excess insulin, posing a threat to a patient’s life. While prior works based on formal methods have been proposed to detect potential attack vectors using different forms of static analysis, these have limitations in preventing attacks at runtime. This paper discusses a formal framework for detecting cyber-physical attacks on a pacemaker by monitoring its security policies at runtime. We propose a wearable device that senses the Electrocardiogram (ECG) and Photoplethysmogram (PPG) of the body to detect attacks in a pacemaker. To facilitate the design of this device, we map the security policies of a pacemaker w.r.t ECG and PPG, paving the way for designing formal verification monitors for pacemakers for the first time using multiple physiological signals. The proposed monitoring framework allows the synthesis of parallel monitors from a given set of desired security policies, where all the monitors execute concurrently and generate an alarm to the user in the case of policy violation. Our implementation and the performance evaluation results demonstrate the technical feasibility of designing such a wearable device for attack detection in pacemakers. This device is separate from the pacemaker, ensuring no need for re-certification of pacemakers. Our approach is amenable to the application of security patches when new attack vectors are detected, making the approach ideal for runtime monitoring of medical CPSs.

Are implanted electronic devices hackable?

Cardiac implantable electronic devices and cybersecurity

Cybersecurity and medical devices: A practical guide for cardiac electrophysiologists

The implications of cardiac device cybersecurity responsibilities and challenges faced by policymakers, manufacturers, and patients

A survey on security issues in modern Implantable Devices: Solutions and future issues

The Enemy Within: The Emerging Threats to Healthcare from Malicious Mobile Devices

Security vulnerabilities in healthcare: an analysis of medical devices and software

The elephant in the room: cybersecurity in healthcare

Security Tradeoffs in Cyber Physical Systems: A Case Study Survey on Implantable Medical Devices

Towards Evaluating the Security of Wearable Devices in the Internet of Medical Things

Keep an eye on your personal belongings! The security of personal medical devices and their ecosystems

Security and privacy qualities of medical devices: an analysis of FDA postmarket surveillance

Prevention and Management of Cardiac Implantable Electronic Device Infections: State-of-the-Art and Future Directions

Embracing Cybersecurity Risk Management in the Industry of Medical Devices

Systematically Assessing the Security Risks of AI/ML-enabled Connected Healthcare Systems

Cardiovascular Implantable Electronic Device Infections: A Contemporary Review

Exploring Challenges and Opportunities in Cybersecurity Risk and Threat Communications Related To The Medical Internet Of Things (MIoT)

IoT Health Devices: Exploring Security Risks in the Connected Landscape

Understanding and Mitigating Security Risks of Network on Medical Cyber Physical System

A Biomechatronic Approach to Evaluating the Security of Wearable Devices in the Internet of Medical Things

Securing Pacemakers using Runtime Monitors over Physiological Signals