Next Meetup

RESCHEDULED Autumn Kick-Off: Billy Rios on Medical Device Insecurity
+++POSTPONED TO NOVEMBER+++ Our long Summer idyll has ended and its time to get serious about Internet of Things and security again. We're kicking off our[masked] agenda with one of the most noted embedded device researchers in the world: Billy Rios of the firm Whitescope. Billy will be joining us virtually and reprising his presentation on Understanding and Exploiting Implanted Medical Devices at the recent Black Hat Briefings in Las Vegas. From that presentation: There has been significant attention recently surrounding the risks associated with cyber vulnerabilities in critical medical devices. Understandably, people are concerned that an attacker may exploit a vulnerability to modify the delivery of patient therapy, such as altering the dosage of medicine, delivering insulin therapy, or administering a shock via a pacemaker. These concerns raise several questions, such as: How do these devices work? What does the typical attack surface for implanted medical device look like? What do exploits against these systems look like? How do manufacturers respond to potentially life-threatening security issues? This presentation will address all these questions. This presentation is the culmination of an 18-month independent case study in implanted medical devices. The presenters will provide detailed technical findings on remote exploitation of a pacemaker systems, pacemaker infrastructure, and a neurostimulator system. Exploitation of these vulnerabilities allow for the disruption of therapy as well as the ability to execute shocks to a patient. Geof and I are also working to line up additional speakers or possibly a panel on the topic of medical device security, testing, evaluation and regulation. We look forward to seeing you all there! Paul

Needs a location