Tales of a Healthcare Hacker

The Healthcare Security Problem

Over the past decade, electronic medical records (EMRs) and networked medical devices have become healthcare infrastructure standards. Despite this critical role, vendors and consumers have neglected security implications of these systems.

Ethical Hacking in Healthcare

The speaker covers personal experiences conducting authorized penetration testing and social engineering attacks against healthcare networks. These real-world examples demonstrate how easily attackers can penetrate supposedly secure medical environments.

Common Security Issues

The talk highlights recurring security problems in healthcare networks: weak access controls, poorly segmented networks, lack of monitoring, and insufficient incident response procedures. Many of these issues are compounded by the legacy nature of much healthcare technology.

Real Life Stories

Through concrete examples, the speaker illustrates how security vulnerabilities in healthcare networks can be exploited and what defenders should prioritize when securing medical systems.