MEDSECURANCE - Advanced Security-for-safety Assurance for Medical Device IoT

医疗IT系统的进步导致了复杂的社会技术架构，这些架构提供了以患者为中心的集成服务。所有这些转变，除了临床受益外，还引入了风险，包括需要理解和管理的安全风险，并将其降低到可接受的水平。有许多关于这种架构的新型安全漏洞的报告，这对当前安全工具的有效性提出了挑战。MEDPERANCE将构思新的方法、基础设施和技术，以实现医疗物联网（IoMT）中安全系统工程管理活动的有效、和谐和持续发展和演变。我们的目标是基于不同的系统和组件级交互，在不同的IoMT威胁环境中推进决策的知识和基本理解。这是通过开发一种新的整体战略来实现的，该战略考虑了多个IoMT子系统的相互依赖性、信息交换、风险阈值和监管后果。我们提供可扩展和可验证的安全系统工程管理解决方案，这些解决方案可以捕获，沟通和处理这些复杂性，以改善网络防御决策，同时自动化网络安全保证。我们的解决方案将与我们的医疗行业用户合作伙伴共同开发和验证，并通过医疗行业利益相关者的参与来补充，以支持对项目中也将开发的现有指南的建议。

Advances in healthcare IT systems have resulted in complex socio-technical architectures, which deliver integrated and patient centered services. All these transformations, in addition to clinical benefits, they also introduce risks including security risks that need to be understood and managed, reduced to acceptable levels. There are numerous reports of new types of security vulnerabilities for this kind of architectures, which challenge the effectiveness of the current security tools. MEDSECURANCE will conceive novel methodologies, infrastructures, and technologies that enable an effective, harmonious and continuous development and evolution of secure system engineering management activities in Internet of Medical Things (IoMT). Our objective is to advance knowledge and basic understanding of decision making in diverse IoMT threat landscapes based on different system and component level interactions. This is accomplished via the development of a novel holistic strategy that considers the interdependence of several IoMT subsystems, information exchange, risk thresholds, and regulatory ramifications. We provide scalable and verifiable secure system engineering management solution(s) that capture, communicate, and act on these complexities in order to improve decision-making in cyber defence while automating cybersecurity assurance. Our solution(s) will be co-developed and validated with our medical industry user partners, and complementedby engagement of healthcare industry stakeholders in support of the recommendations to existing guidelines that will also be developed in the project.