A taxonomy of vulnerabilities in implantable medical devices

Proceedings of the ACM Conference on Computer and Communications Security

Volumn , Issue , 2010, Pages 13-20

  Hansen, Jeremy A ^a   Hansen, Nicole M ^b  

^a NORWICH UNIVERSITY   (United States)

^b LOUISIANA STATE UNIVERSITY   (United States)

Author keywords

implantable medical device; intra body network; taxonomy; vulnerability

Indexed keywords

IMPLANTABLE MEDICAL DEVICES; INTRA-BODY NETWORK; SCIENCE FICTIONS; SECURITY VULNERABILITIES; VULNERABILITY; VULNERABILITY TAXONOMY;

BIOMEDICAL ENGINEERING; NETWORK SECURITY; TAXONOMIES;

EQUIPMENT;

EID: 78650197002     PISSN: 15437221     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1866914.1866917     Document Type: Conference Paper

References (39)

1. T. Aslam. A Taxonomy of Security Faults in the UNIX Operating System. PhD thesis, Purdue University, August 1995.
2. T. Aslam, I. Krsul, and E. H. Spafford. Use of a taxonomy of security faults. In Proc. 19th NIST-NCSC National Information Systems Security Conference, pages 551-560, 1996.
3. S. Baskiyar. A real-time fault tolerant intra-body network. IEEE Conference on Local Computer Networks, 0:0235, 2002.
4. S. Bergamasco, M. Bon, and P. Inchingolo. Medical data protection with a new generation of hardware authentication tokens. In Mediterranean Conference on Medical and Biological Engineering and Computing (MEDICON), pages 82-85, Pula, Croatia, 2001.
5. M. Bishop. A taxonomy of UNIX system and network vulnerabilities. Technical Report CSE-95-10, Department of Computer Science, University of California at Davis, 1995.
6. M. Bishop and D. Bailey. A critical analysis of vulnerability taxonomies. Technical Report CSE-96-11, Department of Computer Science, University of California at Davis, September 1996.
7. K. Bourzac. Implantable silicon-silk electronics. Technology Review, November 2009.
8. G. S. Brindley, C. E. Polkey, and D. Rushton. Sacral anterior root stimulators for bladder control in paraplegia. Paraplegia, 6(20):365-381, 1982.
9. H.-J. Chae, D. J. Yeager, J. R. Smith, and K. Fu. Maximalist cryptography and computation on the WISP UHF RFID tag. In Proceedings of the Conference on RFID Security, July 2007.
10. A. Y. Chow, V. Y. Chow, K. H. Packo, J. S. Pollack, G. A. Peyman, and R. Schuchard. The artificial silicon retina microchip for the treatment of vision loss from retinitis pigmentosa. Archives of Ophthalmology, 122(4):460-469, 2004.
11. P. Cinquin, C. Gondran, F. Giroud, S. Mazabrard, A. Pellissier, F. Boucher, J.-P. Alcaraz, K. Gorgy, F. Lenouvel, S. Mathé, P. Porcu, and S. Cosnier. A glucose biofuel cell implanted in rats. PLoS ONE, 5(5):e10476, 05 2010.
12. T. Denning, A. Borning, B. Friedman, B. Gill, T. Kohno, and W. H. Maisel. Patients, pacemakers, and implantable defibrillators: Human values and security for wireless implantable medical devices. In Conference on Human Factors in Computing Systems, 2010.
13. T. Denning, K. Fu, and T. Kohno. Absence Makes the Heart Grow Fonder: New Directions for Implantable Medical Device Security. In Proceedings of USENIX Workshop on Hot Topics in Security (HotSec), July 2008.
14. T. Denning, Y. Matsuoka, and T. Kohno. Neurosecurity: security and privacy for neural devices. Neurosurgical Focus, 27(1), July 2009.
15. B. Glenville and D. Ross. Ventricular assist devices. British Medical Journal, 292:361-362, February 1986.
16. S. K. S. Gupta, T. Mukherjee, and K. Venkatasubramanian. Criticality aware access control model for pervasive applications. In PERCOM '06: Proceedings of the Fourth Annual IEEE International Conference on Pervasive Computing and Communications, pages 251-257, Washington, DC, USA, 2006. IEEE Computer Society.
17. J. Halamka, A. Juels, A. Stubblefield, and J. Westhues. The security implications of VeriChip cloning. Journal of the American Medical Informatics Association, 13(6):601-607, 2006.
18. D. Halperin, T. S. Heydt-Benjamin, K. Fu, T. Kohno, and W. H. Maisel. Security and privacy for implantable medical devices. IEEE Pervasive Computing, Special Issue on Implantable Electronics, January 2008.
19. Hobbit. The ftp bounce attack, July 1995. http://nmap.org/hobbit. ftpbounce.txt.
20. D. Hollingworth. Towards threat, attack, and vulnerability taxonomies. In IFIP WG 10.4 Workshop of Measuring Assurance in Cyberspace, June 2003.
21. I. V. Krsul. Software vulnerability analysis. PhD thesis, Purdue University, West Lafayette, IN, USA, 1998.
22. C. E. Landwehr, A. R. Bull, J. P. McDermott, and W. S. Choi. A taxonomy of computer program security flaws, with examples. Technical report, Naval Research Laboratory, November 1993.
23. J.-C. Laprie. From dependability to resilience. In 38th IEEE/IFIP International Conference On Dependable Systems and Networks (DSN 2008 - Fast Abstracts), pages G8-G9, June 2008.
24. S. Lee, K. Fu, T. Kohno, B. Ransford, and W. H. Maisel. Clinically significant magnetic interference of implanted cardiac devices by portable headphones. Heart Rhythm, October 2009.
25. N. G. Leveson and C. S. Turner. An investigation of the Therac-25 accidents. Computer, 26(7):18-41, 1993.
26. D. L. Lough. A taxonomy of computer attacks with applications to wireless networks. PhD thesis, Virginia Polytechnic Institute and State University, 2001. Chairman-Davis,IV, Nathaniel J.
27. M. Mirowski, M. M. Mower, W. S. Staewen, B. Tabatznik, and A. I. Mendeloff. Standby Automatic Defibrillator: An Approach to Prevention of Sudden Coronary Death. Arch Intern Med, 126(1):158-161, 1970.
28. NHS National Research Ethics Service. Approval for medical devices research, 2008. http://www.nres.npsa.nhs.uk/EasySiteWeb/GatewayLink.aspx?alId= 11473.
29. R. B. North, D. H. Kidd, M. Zahurak, C. S. Jones, and D. M. Long. Spinal cord stimulation for chronic, intractable pain: Experience over two decades. Neurosurgery, 32(3):384-395, 1993.
30. K. B. Rasmussen, C. Castelluccia, T. S. Heydt-Benjamin, and S. Capkun. Proximity-based access control for implantable medical devices. In CCS '09: Proceedings of the 16th ACM conference on Computer and communications security, pages 410-419, New York, NY, USA, 2009. ACM.
31. J. Robert E Morley and E. J. Richter. Final report on measurements of static electricity generated from plastic playground slides, March 2006. http://www.access-board.gov/research/play-slides/report.htm.
32. G. Santhanam, S. I. Ryu, B. M. Yu, A. Afshar, and K. V. Shenoy. A high-performance brain-computer interface. Nature, 442(7099):195-198, 2006.
33. S. Schechter. Security that is meant to be skin deep: Using ultraviolet micropigmentation to store emergency-access keys for implantable medical devices. Technical Report MSR-TR-2010-33, Microsoft Research, April 2010.
34. D. Song, R. H. M. Chan, V. Z. Marmarelis, R. E. Hampson, S. A. Deadwyler, and T. W. Berger. 2009 special issue: Nonlinear modeling of neural population dynamics for hippocampal prostheses. Neural Netw., 22(9):1340-1351, 2009.
35. F. T. Sun, M. J. Morrell, and R. E. Wharen. Responsive cortical stimulation for the treatment of epilepsy. Neurotherapeutics, 5:68-74, January 2008.
36. Underwriters Laboratories. UL Standards for Safety, 2010. http://www.ul.com/global/eng/pages/corporate/standards/.
37. C. Vanden Berghe, J. Riordan, and F. Piessens. A vulnerability taxonomy methodology applied to web services. In Proceedings of the 10th Nordic Workshop on Secure IT Systems, 2005.
38. M. Velliste, S. Perel, M. C. Spalding, A. S. Whitford, and A. B. Schwartz. Cortical control of a prosthetic arm for self-feeding. Nature, 453(7198):1098-1101, May 2008.
39. World Health Organization. ICD-10 : international statistical classification of diseases and related health problems, 2007. http://apps.who.int/classifications/apps/icd/icd10online/.