Security and privacy qualities of medical devices: An analysis of FDA postmarket surveillance

PLoS ONE

Volumn 7, Issue 7, 2012, Pages

  Kramer, Daniel B ^a   Baker, Matthew ^a   Ransford, Benjamin ^b   Molina Markham, Andres ^b   Stewart, Quinn ^b   Fu, Kevin ^b   Reynolds, Matthew R ^a  

^a HARVARD MEDICAL SCHOOL   (United States)

^b University of Massachusetts Amherst   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

ADVERSE OUTCOME; COMPUTER; COMPUTER PROGRAM; COMPUTER SECURITY; DATA BASE; DATA STORAGE DEVICE; DEVICE RECALL; FOOD AND DRUG ADMINISTRATION; INTERNET; MEDICAL DEVICE; MEDICINE; POSTMARKETING SURVEILLANCE; PRIVACY; REVIEW; RISK; SEARCH ENGINE; WIRELESS COMMUNICATION;

COMPUTER SECURITY; DATABASES, FACTUAL; GOVERNMENT REGULATION; HUMANS; PRIVACY; UNITED STATES; UNITED STATES FOOD AND DRUG ADMINISTRATION;

EID: 84864058685     PISSN: None     EISSN: 19326203     Source Type: Journal    
DOI: 10.1371/journal.pone.0040200     Document Type: Review

References (19)

1. Maisel WH, (2004) Medical device regulation: an introduction for the practicing physician. Ann Intern Med 140: 296-302.
2. Curfman GD, Redberg RF, (2011) Medical Devices- Balancing Regulation and Innovation. N Engl J Med.
3. Kramer DB, Xu S, Kesselheim AS, (2012) Regulation of medical devices in the United States and European Union. N Engl J Med 366: 848-855.
4. 2012 Blackhat.com website. Accessed May 1 Available at:http://www.blackhat.com/html/bh-us-11/bh-us-11-briefings.html.
5. Maisel WH, Kohno T, (2010) Improving the security and privacy of implantable medical devices. N Engl J Med 362: 1164-1166.
6. Halperin D, Heydt-Benjamin TS, Ransford B, Clark SS, Defend B, et al. (2008) Pacemakers and Implantable Cardioverter-Defibrillators: Software Radio Attacks and Zero Power Defenses. IEEE Symposium on Security and Privacy: 129-42. Available at http://www.secure-medicine.org/icd-study/icd-study.pdf.
7. Fu K, (2011) Trustworthy Medical Device Software. In Public Health Effectiveness of the FDA 510(k) Clearance Process, Insitute of Medicine, National Academies Press.
8. January (2012) Lynette Sherrill, Personal communication, "Medical Device Infection Data," Veterans Affairs OIT, OIS, Field Security Service, Health Information Security.
9. Zuckerman DM, Brown P, Nissen SE, (2011) Medical device recalls and the FDA approval process. Arch Intern Med 171: 1006-1011.
10. Hauser RG, Kallinen LM, Almquist AK, Gornick CC, Katsiyiannis WT, (2007) Early failure of a small-diameter high-voltage implantable cardioverter-defibrillator lead. Heart Rhythm 4: 892-896.
11. Shah JS, Maisel WH, (2006) Recalls and safety alerts affecting automated external defibrillators. Journal of the American Medical Association 296: 655-660.
12. 2012 FDA/CDRH Enforcement Reports Website. Accessed May 1 Available at:http://www.fda.gov/Safety/Recalls/EnforcementReports/default.htm.
13. 2012 FDA/CDRH Medical & Radiation Emitting Device Recalls Website. Accessed May 1 Available at:http://www.accessdata.fda.gov/scripts/cdrh/cfdocs/cfRES/res.cfm.
14. 2012 FDA/CDRH Manufacturer and User Facility Device Experience Database. Accessed June 20 Available at:http://www.accessdata.fda.gov/scripts/cdrh/cfdocs/cfMAUDE/TextSearch.cfm.
15. Safe Medical Devices Act of 1990. Pub L No. 101-629, 104 Stat 4511 (1990) Accessed January 4, 2012. Available at http://thomas.loc.gov/cgi-bin/bdquery/z?d101:HR03095:@@@D&summ2 = 1&{pipe}TOM:/bss/d101query.html{pipe}.
16. 2012 FDA/CDRH Enforcement Report for Baxter Colleague Single Channel Volumetric Infusion Pumps. Accessed June 20 Available at:http://www.fda.gov/Safety/Recalls/EnforcementReports/ucm234282.htm.
17. 2011 FDA/CDRH Medical and Radiation Emitting Device Recalls database entry for Tomo-Therapy HI-ART system. Accessed December 1 Available at:http://www.accessdata.fda.gov/scripts/cdrh/cfdocs/cfRES/res.cfm?id=74819.
18. Hanna S, Rolles R, Molina-Markham A, Poosankam P, Fu K, et al. (2011) Take two software updates and see me in the morning: The Case for Software Security Evaluations of Medical Devices. In Proceedings of 2nd USENIX Workshop on Health Security and Privacy (HealthSec). August.
19. Magrabi F, Ong MS, Runciman W, Coiera E, (2012) Using FDA reports to inform a classification for health information technology safety problems. J Am Med Inform Assoc 19: 45-53.