Contributions to this post were made by Computing Community Consortium (CCC) Council Member Kevin Fu, Associate Professor at the University of Michigan. Kevin also co-founded Virta Labs, a healthcare cybersecurity company. A growing number of medical devices are designed to be networked to facilitate patient care. However, as we have seen, networked medical devices and hospital records incorporate software that make them vulnerable to cybersecurity threats. Proactively addressing cybersecurity risks in hospitals reduces the patient safety impact and the overall risk to public health. On January 22, 2016, the Food and Drug Administration (FDA) released a draft document to inform industry and FDA staff on recommendations for managing postmarket cybersecurity vulnerabilities for marketed medical devices. This document clarifies […]

The following is a guest post from CCC Council Member Kevin Fu, the Associate Professor of EECS at the University of Michigan and Chief Scientist of Virta Labs, Inc. Last month, the White House quietly convened a group of medical device security stakeholders and domain experts to discuss the cybersecurity challenges faced by healthcare delivery organizations and medical device manufacturers. There were actually multiple meetings. Here I summarize just one that I attended in my role as a professor leading the Archimedes Center for Medical Device Security at the University of Michigan, and in my role as a member of the Computing Research Association’s Computing Community Consortium (CCC) Council. Convened by the […]