TWC: Small: Collaborative Research: Enhancing the Safety and Trustworthiness of Medical Devices

TWC：小型：合作研究：增强医疗器械的安全性和可信度

• 批准号: 1219587
• 负责人: Anand Raghunathan
• 金额: $ 17.5万
• 依托单位: Purdue University
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2012
• 资助国家: 美国
• 起止时间: 2012-09-01 至 2016-08-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1219587&HistoricalAwards=false
• 关键词: TWC; Small; Collaborative; Research; Enhancing

Personal healthcare systems based on wearable/implantable medical devices are being increasingly deployed for a variety of diagnostic, monitoring, and therapeutic applications. A consequence of the increased functional complexity, software programmability, and wireless network connectivity of such devices is that they are now vulnerable to security attacks that have plagued general-purpose computing systems. Recent demonstration of security attacks on commercially deployed systems has raised medical device security concerns significantly. Unfortunately, medical devices come with extreme size/power constraints and unique usage models, making it infeasible to simply borrow conventional security solutions. This research focuses on developing a non-intrusive medical security monitor that snoops on all wireless communication to/from medical devices and uses multi-layered anomaly detection to identify potentially malicious transactions. While formal methods have been previously used to check for implementation flaws, they are not geared towards verifying the safety behavior of the medical device software in its interactions with the real world, which can expose logical flaws as well. The work investigates these interactions by transforming properties specified at the real-world interfaces (sensors and actuators) into program properties against which the medical device software can be verified. The findings will be disseminated through conferences and journals. The hardware and software developed will be placed in the public domain, and disseminated to the industry. The knowledge developed will be integrated into various courses. Undergraduates will be encouraged to perform independent research on this topic. Fellowships and outreach programs will be leveraged to encourage participation of female and minority students.

基于可穿戴/植入式医疗设备的个人医疗保健系统正越来越多地用于各种诊断、监测和治疗应用。这些设备的功能复杂性、软件可编程性和无线网络连接性增加的后果是，它们现在容易受到困扰通用计算系统的安全攻击。最近出现的针对商业部署系统的安全攻击事件极大地提高了人们对医疗设备安全的关注。不幸的是，医疗设备具有极端的尺寸/功率限制和独特的使用模式，因此无法简单地借用传统的安全解决方案。本研究的重点是开发一种非侵入式医疗安全监视器，该监视器可以窥探进出医疗设备的所有无线通信，并使用多层异常检测来识别潜在的恶意交易。虽然以前已经使用正式方法来检查实现缺陷，但它们并不适用于验证医疗设备软件在与现实世界交互中的安全行为，这也可能暴露逻辑缺陷。这项工作通过将在现实世界界面（传感器和执行器）指定的属性转换为可验证医疗设备软件的程序属性来研究这些相互作用。调查结果将通过会议和期刊传播。所开发的硬件和软件将置于公共领域，并向业界传播。所开发的知识将被整合到各种课程中。我们将鼓励本科生对这一主题进行独立研究。将利用奖学金和外展项目来鼓励女性和少数族裔学生的参与。