A major medical device maker's unique approach to data security

I would recommend following Billy Rios. He's a former Marine and current ANG Major and was one of the primary individuals forging the path for medical device hardening. Try this article to start: https://www.wired.com/2015/06/hackers-can-send-fatal-doses-hospital-drug-pumps/

MGySgt (Join to see) - Great article. I wonder when I hear responses like Rios received from this manufacture if the management at the company has any clue what products they are selling or how they work.

LTC (Join to see) - They do! One of the battles Rios faced was that he revealed all the vulnerabilities he found to the vendors. He spent his own money to purchase these products from eBay and sent his discoveries to the vendors (initially Alaris), which was ignored...on the MULTIPLE times he reported them! Their excuse was (and continues to be to this day) the fixes would break their FDA certification. I attended HiMSS and a FDA rep confirmed that securing the devices would NOT break vendors' certifications. He followed this statement by encouraging vendors to perform said updates. Rios followed the ignored findings by bringing it to the FDA itself; this took three times for the FDA to begin enforcing device hardening to occur.