Dysfunctional Unity: The Road to Nowhere
Discusses systemic vulnerabilities in hospital medical device topologies and examines common misconceptions regarding Software Bills of Materials.
Summary
Persistent Vulnerabilities in Medical Topologies
Hospital networks continue to house legacy, unpatched medical devices, creating high-risk environments that attract regulatory scrutiny from CISA and the FDA.
Misconceptions Surrounding Medical SBOMs
Software Bills of Materials (SBOMs) are often viewed as complete security solutions. However, inaccurate inventory parsing and lack of automated dependency tracking limit their standalone effectiveness.
Analyzing Medical Device CVE Trends
Examining disclosed CVEs across clinical equipment highlights recurring architectural flaws in embedded operating systems, default network services, and unauthenticated management ports.
A Pragmatic Security Roadmap for Healthcare
Building resilient hospital environments requires implementing strict network micro-segmentation, continuous asset discovery, and coordinated vulnerability disclosure with device manufacturers.
Related talks
Creator Stage·12 min
Richard Lawshae
Explores how unpatched software development kits from major chipset vendors perpetuate persistent vulnerabilities across millions of consumer IoT devices.
IoT Village·44 min
Parker Wiksell
Examines recurring vulnerability patterns, outdated third-party SDKs, and component reuse across IoT supply chains.
Creator Stage·24 min
Allan Friedman
Makes the case for Hardware Bills of Materials (HBOMs) to trace semiconductor provenance, detect component cloning, and secure hardware supply chains.