TWC: Small: Collaborative Research: Enhancing the Safety and Trustworthiness of Medical Devices

TWC：小型：合作研究：增强医疗器械的安全性和可信度

• 批准号: 1219587
• 负责人: Anand Raghunathan
• 金额: $ 17.5万
• 依托单位: Purdue University
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2012
• 资助国家: 美国
• 起止时间: 2012-09-01 至 2016-08-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1219587&HistoricalAwards=false
• 关键词: TWC; Small; Collaborative; Research; Enhancing

Personal healthcare systems based on wearable/implantable medical devices are being increasingly deployed for a variety of diagnostic, monitoring, and therapeutic applications. A consequence of the increased functional complexity, software programmability, and wireless network connectivity of such devices is that they are now vulnerable to security attacks that have plagued general-purpose computing systems. Recent demonstration of security attacks on commercially deployed systems has raised medical device security concerns significantly. Unfortunately, medical devices come with extreme size/power constraints and unique usage models, making it infeasible to simply borrow conventional security solutions. This research focuses on developing a non-intrusive medical security monitor that snoops on all wireless communication to/from medical devices and uses multi-layered anomaly detection to identify potentially malicious transactions. While formal methods have been previously used to check for implementation flaws, they are not geared towards verifying the safety behavior of the medical device software in its interactions with the real world, which can expose logical flaws as well. The work investigates these interactions by transforming properties specified at the real-world interfaces (sensors and actuators) into program properties against which the medical device software can be verified. The findings will be disseminated through conferences and journals. The hardware and software developed will be placed in the public domain, and disseminated to the industry. The knowledge developed will be integrated into various courses. Undergraduates will be encouraged to perform independent research on this topic. Fellowships and outreach programs will be leveraged to encourage participation of female and minority students.

基于可穿戴/可植入医疗设备的个人医疗保健系统正在越来越多地用于各种诊断，监测和治疗应用。此类设备的功能复杂性，软件可编程性和无线网络连接的增强的结果是，它们现在容易受到困扰通用计算系统的安全攻击的影响。最近展示了对商业部署系统的安全攻击，这引起了医疗设备的安全问题。不幸的是，医疗设备具有极高的尺寸/功率限制和独特的用法模型，因此简单地借用常规的安全解决方案而言是不可行的。这项研究着重于开发非侵入性医疗安全监控器，该监视器在与医疗设备的所有无线通信有关，并使用多层异常检测来识别潜在的恶意交易。尽管以前已使用正式方法来检查实施缺陷，但它们并不旨在验证医疗设备软件与现实世界的互动中的安全行为，这也可能暴露出逻辑缺陷。该工作通过将在现实世界接口（传感器和执行器）中指定的属性转换为可以验证医疗设备软件的程序属性来研究这些交互。这些发现将通过会议和期刊传播。 开发的硬件和软件将放置在公共领域，并将其传播到该行业。开发的知识将集成到各种课程中。将鼓励本科生对此主题进行独立研究。将利用奖学金和外展计划，以鼓励女性和少数民族学生的参与。