Medical Cyber-Physical Systems Development: A Forensics-Driven Approach

Abstract

Abstract-The synthesis of technology and the medical industry has partly contributed to the increasing interest in Medical Cyber-Physical Systems (MCPS). While these systems provide benefits to patients and professionals, they also introduce new attack vectors for malicious actors (e.g. financially-and/or criminally-motivated actors). A successful breach involving a MCPS can impact patient data and system availability. The complexity and operating requirements of a MCPS complicates digital investigations. Coupling this information with the potentially vast amounts of information that a MCPS produces and/or has access to is generating discussions on, not only, how to compromise these systems but, more importantly, how to investigate these systems. The paper proposes the integration of forensics principles and concepts into the design and development of a MCPS to strengthen an organization's investigative posture. The framework sets the foundation for future research in the refinement of specific solutions for MCPS investigations 1 .

Volkswagen Car Entertainment System Forensics

“…Another potential area of research is on integrating forensic readiness in the design of future vehicles, a term coined forensic-by-design in [16] [17]. This will facilitate future forensic investigations of such vehicles.…”

Attack Modeling and Mitigation Strategies for Risk-Based Analysis of Networked Medical Devices

“…In addition to the benefits, technology exposes healthcare to the risks that are inherent to digital settings, which fosters an environment that is conducive to adversarial cyberattacks [4][5][6]. These concerns are being raised by practitioners [7], the government [8], and academics [6,[9][10][11][12][13][14][15] for medical equipment and any devices that communicate with this equipment.…”

Cyber-Physical System Framework for Measurement and Analysis of Physical Activities

“…A CPS can be described as an input-output system that contains software and hardware components, collects historical data, and defines clear communication protocols. CPS can be used for a multitude of applications including healthcare and medical [9][10][11], wellbeing, industrial [12], or vehicular [13,14] systems. However, a framework that defines a clear structure to design CPSs is necessary such that it becomes configurable and adaptable to future improvements.…”