CAREER: Safety and security for next-generation world-scale real-time medical systems

可互操作、可重构的医疗设备系统是医疗技术的未来。它们将通过捕获常见错误来改善护理结果，通过抑制错误警报来减少临床医生的认知工作量，并简化和简化持续护理，特别是当患者在不同的医疗机构之间移动时。随着智能网络医疗技术渗透率的提高，我们将看到此类系统的网络安全问题增加。该项目正在构建理论基础和软件原型，以在不仅存在随机故障，而且存在活跃的恶意攻击者的情况下，实现安全可靠的实时医疗协调。医疗和网络物理系统依赖实时反馈和控制，其中微秒可能意味着正确功能和故障之间的差异，并最终在医疗系统中，生命和死亡。由于不可能指望技术完美地运行，特别是对于可能能够访问医疗设备或他们通信所通过的网络的智能主动攻击者，该项目寻求开发“乐观实时”安全关键系统的要求和最佳实践，如果无法满足定时或性能保证，该系统具有内置的后备到安全状态。该软件和通信协议将允许全球规模的医疗系统，实时护理独立于临床医生或患者的位置，最大限度地减少由于自然故障或篡改而导致的故障机会。系统的状态将传达给用户，而不需要安全或通信协议的专业知识。

Interoperable, reconfigurable systems of medical devices are the future of medical technology. They will improve care outcomes by catching common mistakes, reduce clinician cognitive workload by suppressing false alarms, and streamline and simplify continued care, especially when patients move between different medical facilities. As the penetration of "smart" networked medical technology increases, we will see increased problems with cybersecurity of such systems. This project is building the theoretical foundations and software prototypes to enable safe and secure real-time medical coordination in the presence of not only random faults, but actively malicious actors.Medical and cyber-physical systems rely on real-time feedback and control, where microseconds could mean the difference between correct functionality and a fault, and ultimately, in medical systems, life and death. Since it is not possible to count on technology functioning flawlessly, especially with intelligent active attackers who may have access to medical devices or the network through which they communicate, this project seeks to develop requirements and best practices for "optimistic real-time" safety-critical systems, with built-in fallback to safe states if timing or performance guarantees cannot be met. The software and communication protocols will allow for global-scale medical systems, with real-time care independent of the location of the clinician or the patient, minimizing the chance of malfunction as a result of natural faults or tampering. The status of the system will be communicated to users without requiring specialty knowledge of security or communication protocols.