Cyber Hacking into Medical Devices Possible, Cautions FDA

FDA of USA is cautioning of malware that can breach the security of medical devices, which have configurable embedded PCs, published infosecurity-magazine.com, June 17, 2013.

FDA alerts that since there's a growing interconnection of medical devices through the Internet, smart-phones, hospital networks alternatively more medical devices, cyber-security infiltrations into medical devices are increasing, posing danger to the operations of such equipments. Initiation of the assaults is possible through the use of malicious software against the devices alternatively, via illegal admission into hospital networks' or medical devices' configuration setups, the agency warns.

In 2012 autumn, IOActive realized a fact that a laptop could be used to remotely regulate as well as instruct many suppliers' pacemakers for delivering shock as intense as 830 volt, which was actually possible due to flawed software programs that configured the medical devices. Such efforts are certainly sufficient to kill a user, while Barnaby Jack Company Researcher observed that the security flaws provided opportunity for 'bulk killing.'

Disturbingly, FDA's alert is not just an announcement for, problem cases have been spotted occurring all across the Web.

And though it's not in the knowledge of FDA regarding death/injury of any patients because of the above kind of incidents, nor is there any sign to it about any particular computer or equipment in clinical application being deliberately targeted, still the agency decided to proceed in this aspect in close collaboration with manufacturers as well as other federal associations for the detection, communication and minimization of security flaws and consequent attacks.

In its advisory, the FDA gives suggestion to both health-care providers and device makers.

It wrote that expectedly, medical device makers would adopt suitable measures for restricting the situations that allowed illegal admission into medical equipments. Precisely, the device makers required examining their online security policies and practices for maintaining suitable protections from illegal admission into their products else allowance of modifications to the same just as they should defend against cyber-security hijacking of the device-connected hospital network, it explained. Softpedia.com published this, June 17, 2013.

To health-care providers, FDA suggested they should prevent illegal admission into their networks as well as interconnected medical equipments.

» SPAMfighter News - 7/3/2013