Attacking and Defending Medical Devices

Description: In 2023 there were 141 hospitals that reported a ransomware attack. Unfortunately, many other affected hospitals did not report a ransomware breach. As attackers are shifting focus to critical systems and networks, it is important to consider the security of technology used to provide patient care. Medical devices and networks pose interesting security challenges that require careful consideration. This talk will focus on common medical device technologies, security testing strategies, and some best practices for defending medical devices and medical networks.

Bio: Marcus Richerson has 16 years experience hacking software, wireless technology and embedded systems. He worked on contract at the Department of Veteran Affairs assessing medical devices, patient applications and medical networks. He is currently the president of Somerset Recon where he has managed and performed security assessments against a wide variety of medical devices. He is an avid CTF player and has spoken at a variety of conferences such as LayerOne, Toorcon, BSides-SD, BSides-Portland and RSA Conference.