Medical devices and transportation vehicles are getting more autonomous by the day. This raises serious concern about their security and the level of defense built into them against cyber attacks.
The Food and Drug Administration (FDA) has issued its guidance on protecting medical devices like pacemakers and insulin pumps from cyberattacks, named: “Managing Medical Device Cybersecurity in the Postmarket: At the Crossroads of Cyber-safety and Advancing Technology”. It advises manufacturers to level up cybersecurity measures by incorporating monitoring and vulnerability detection into the products.
The paper recommends receiving information about potential vulnerabilities from cybersecurity researchers, in case of identified exploitable flaws, the agency wants the companies to assess the risk it poses to patients, and of course they should issue software patches to fix any emerged vulnerability.