权益分类	功能权益	普通用户	{{item.name}}会员
{{category.name}}	{{benefitItem.name}}

Creating a Building Code for Medical Device Software Security

创建医疗设备软件安全构建代码

基本信息

批准号：
1452113
负责人：
Lance Hoffman
金额：
$ 4.91万
依托单位：
George Washington University
依托单位国家：
美国
项目类别：
Standard Grant
财政年份：
2014
资助国家：
美国
起止时间：
2014-09-01 至 2017-05-31
项目状态：
已结题

来源：
https://www.nsf.gov/awardsearch/showAward?AWD_ID=1452113&HistoricalAwards=false
关键词：
Creating Building Code Medical Device

项目摘要

Using physical buildings as a metaphor for software systems is a well-established idea, dating back at least to Fred Brooks' book, The Mythical Man-Month, from the mid-1970s. A recent paper by Landwehr suggests that software systems on whose security we rely might be more trustworthy if the software analog of a building code were developed and applied to them. This proposal is to support planning and participant travel for a workshop that aims to develop both (1) an initial draft for a building code for a specific domain of software-controlled systems, medical devices, which compose a domain of cyberspace in which security and trustworthiness are particularly critical, and (2) a related agenda for research into assuring desired security properties of such systems. The purpose of this workshop is to advance the adoption of proven techniques for assuring that software controlling medical devices is free of common sorts of vulnerabilities and to develop a research agenda that will provide the basis for continuing improvement of the security of future medical device software.The workshop could lead to significantly less vulnerable medical device software systems and could also motivate appropriate research in the area. The techniques for using a building code structure can be used to extend the approach to other possible software domains where security is a critical consideration.

使用物理建筑作为软件系统的隐喻是一个很好的想法，至少可以追溯到20世纪70年代中期Fred布鲁克斯的书《人月神话》。Landwehr最近的一篇论文表明，如果开发出类似于建筑规范的软件并应用于软件系统，那么我们所依赖的软件系统的安全性可能会更值得信赖。该提案旨在支持研讨会的规划和参与者旅行，该研讨会旨在制定（1）软件控制系统、医疗设备特定领域的建筑规范初稿，这些领域构成了安全性和可信度特别重要的网络空间领域，以及（2）确保此类系统所需安全属性的相关研究议程。本次研讨会的目的是推动采用经验证的技术，以确保控制医疗器械的软件不存在常见的漏洞，并制定研究议程，为继续改进未来医疗器械软件的安全性提供基础。研讨会可能会导致医疗器械软件系统的脆弱性大大降低，也可能会激励该领域的适当研究。使用构建代码结构的技术可以用于将该方法扩展到安全性是关键考虑因素的其他可能的软件域。