Hacking Exposed

Biomed: Implantable Medical Devices
• FDA has issued 23 recalls on IMDs in
2010 – six caused by software defects.
• In 2008, three Universities came together
to RE 2003 IMD’s – they were able to:
– Extract private data
– Reprogram the therapy
settings
– Keep the device “awake”
to run out the battery quicker
– Disable the “shocking” mechanism to
regulate beat
– Introduce additional “shock” to produce
fibrillation
Source: http://www.secure-medicine.org/icd-study/icd-study.pdf
• FDA in 2010 initiated to “Reduce Infusion
Pump Risks”…but nothing related to security.