Hijacking an insulin pump: Security attacks and defenses for a diabetes therapy system

2011 IEEE 13th International Conference on e-Health Networking, Applications and Services, HEALTHCOM 2011

Volumn , Issue , 2011, Pages 150-156

  Li, Chunxiao ^a   Raghunathan, Anand ^b   Jha, Niraj K ^a  

^a PRINCETON UNIVERSITY   (United States)

^b PURDUE UNIVERSITY   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

ACTIVE ATTACK; COMPUTING SYSTEM; CONTINUOUS GLUCOSE MONITORING; CRYPTOGRAPHIC PROTOCOLS; GLUCOSE MONITORING; IMPLANTABLE MEDICAL DEVICES; INSULIN DELIVERY SYSTEM; INSULIN PUMPS; LAUNCH SECURITY; MEDICAL CONDITIONS; MEDICAL DEVICES; OFF-THE-SHELF HARDWARES; PASSIVE ATTACKS; PERSONAL HEALTH CARE; PUBLIC DOMAINS; SECURITY ANALYSIS; SECURITY ATTACKS; SECURITY RISKS; SECURITY VULNERABILITIES; WIRELESS COMMUNICATION LINKS; WIRELESS COMMUNICATIONS;

GLUCOSE; HEALTH CARE; HEALTH RISKS; INSULIN; SECURITY SYSTEMS; WIRELESS TELECOMMUNICATION SYSTEMS;

MONITORING;

EID: 80053973692     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/HEALTH.2011.6026732     Document Type: Conference Paper

References (28)

1. "2007 national diabetes fact sheet." [Online]. Available: http://www.cdc.gov/diabetes/pubs/pdf/ndfs 2011.pdf
2. "US healthcare equipment and supplies - diabetes." [Online]. Available: http://www.research.hsbc.com
3. "Insulin pumps - global pipeline analysis, opportunity assessment and market forecasts to 2016, GlobalData." [Online]. Available: http://www.globaldata.com
4. C. Raine, L. Schrock, S. Edelman, S. Mudaliar, W. Zhong, L. Proud, and J. Parkes, "Significant insulin dose errors may occur if blood glucose results are obtained from miscoded meters," J. Diabetes Science and Technology, vol. 1(2), pp. 205-210, Mar. 2007.
5. "Experiences with insulin pump in 52 patients." [Online]. Available: professional.diabetes.org/Abstracts Display.aspx?TYP=1&CID=70361
6. N. Leveson and C. Turner, "An investigation of the Therac-25 accidents,"Computer, vol. 26, pp. 18-41, July 1993.
7. K. Venkatasubramanian and S. Gupta, "Security solutions for pervasive healthcare," in Security in Distributed, Grid, Mobile, and Pervasive Computing. Boca Raton, FL: Auerbach Publications, 2007, ch. 15, pp. 349-366.
8. P. Kulkarni and Y. Öztürk, "Requirements and design spaces of mobile medical care," SIGMOBILE Mobile Computing Communications Review, vol. 11, pp. 12-30, July 2007.
9. S. Warren, J. Lebak, J. Yao, J. Creekmore, A. Milenkovic, and E. Jovanov, "Interoperability and security in wireless body area network infrastructures," in Proc. IEEE Int. Conf. Engineering in Medicine and Biology Society, Jan. 2006, pp. 3837-3840.
10. O. Garcia-Morchon, T. Falck, T. Heer, and K. Wehrle, "Security for pervasive medical sensor networks," in Proc. Int. Conf. Mobile and Ubiquitous Systems, July 2009, pp. 1-10.
11. D. Halperin, T. S. Heydt-Benjamin, K. Fu, T. Kohno, and W. H. Maisel, "Security and privacy for implantable medical devices," IEEE Pervasive Computing, vol. 7, pp. 30-39, Jan. 2008.
12. K. Malasri and L. Wang, "Design and implementation of a secure wireless mote-based medical sensor network," in Proc. Int. Conf. Ubiquitous Computing, Sept. 2008, pp. 172-181.
13. O. Morchon and H. Baldus, "Efficient distributed security for wireless medical sensor networks," in Proc. Int. Conf. Intelligent Sensors, Sensor Networks and Information Processing, Dec. 2008, pp. 249-254.
14. D. Halperin, T. Heydt-Benjamin, B. Ransford, S. Clark, B. Defend, W. Morgan, K. Fu, T. Kohno, and W. Maisel, "Pacemakers and implantable cardiac defibrillators: Software radio attacks and zero-power defenses," in Proc. IEEE Symp. Security and Privacy, May 2008, pp. 129-142.
15. K. B. Rasmussen, C. Castelluccia, T. S. Heydt-Benjamin, and S. Capkun, "Proximity-based access control for implantable medical devices," in Proc. ACM Conf. Computer and Communications Security, 2009, pp. 410-419.
16. Y. Gao, S. Pun, M. Du, P. Mak, and M. Vai, "Simple electrical model and initial experiments for intra-body communications," in Proc. IEEE Int. Conf. Engineering in Medicine and Biology Society, Sept. 2009, pp. 697-700.
17. S. Pun, Y. Gao, P. Mak, M. Du, and M. Vai, "Simple electrical model and initial experiments for intra-body communications," in Proc. IEEE Int. Conf. Engineering in Medicine and Biology Society, Sept. 2009, pp. 693-696.
18. N. Cho, J. Yoo, S.-J. Song, J. Lee, S. Jeon, and H.-J. Yoo, "The human body characteristics as a signal transmission medium for intrabody communication," IEEE Trans. Microwave Theory and Techniques, vol. 55(5), pp. 1080-1086, May 2007.
19. H. Baldus, S. Corroy, A. Fazzi, K. Klabunde, and T. Schenk, "Human-centric connectivity enabled by body-coupled communications," IEEE Communications Magazine, vol. 47, pp. 172-178, June 2009.
20. T. Schenk, N. Mazloum, L. Tan, and P. Rutten, "Experimental characterization of the body-coupled communications channel," in Proc. IEEE Int. Symp. Wireless Communication Systems, Oct. 2008, pp. 234-239.
21. Y.-T. Huang and R. Rieger, "An OOK body-channel transceiver frontend ASIC for distributed force measurement," J. Signal Processing Systems, pp. 1-9, Oct. 2009.
22. N. Cho, J. Lee, L. Yan, J. Bae, S. Kim, and H.-J. Yoo, "A 60Kb/s-to-10Mb/s 0.37nJ/b adaptive-frequency-hopping transceiver for body-area network," in Proc. IEEE Int. Solid-State Circuits Conf., Feb. 2008, pp. 132-133.
23. A. Fazzi, S. Ouzounov, and J. van den Homberg, "A 2.75mW wideband correlation-based transceiver for body-coupled communication," in Proc. IEEE Int. Solid-State Circuits Conf., Feb. 2009, pp. 204-205.
24. "USRP." [Online]. Available: http://www.ettus.com/
25. "GNU radio." [Online]. Available: http://gnuradio.org/
26. A. Alrabady and S. Mahmud, "Analysis of attacks against the security of keyless-entry systems for vehicles and suggestions for improved designs," IEEE Trans. Vehicular Technology, vol. 54, pp. 41-50, Jan. 2005. (Pubitemid 40211088)
27. M. Novotny and T. Kasper, "Cryptanalysis of KeeLoq with COPACOBANA,"in Proc. Wksp. Special Purpose Hardware for Attacking Cryptographic Systems, Sept. 2009, pp. 159-164.
28. H.-J. Yoo, S.-J. Song, N. Cho, and H.-J. Kim, "Low energy on-body communication for BSN," in Proc. Int. Wksp. Wearable and Implantable Body Sensor Networks, Mar. 2007, pp. 15-20.