Security Driven Product Design for Open-Source Medical Syringe Infusion Pumps

Area of Science:

• Biomedical Engineering
• Cybersecurity
• Medical Device Technology

Background:

• Open-source medical devices offer cost and customization benefits.
• Integrating open-source software introduces significant cybersecurity vulnerabilities.
• Syringe infusion pumps are critical for accurate medication delivery.

Purpose of the Study:

• Investigate cybersecurity vulnerabilities in open-source medical syringe pumps.
• Assess the impact of identified vulnerabilities on patient safety and device reliability.
• Propose mitigation strategies for enhancing the security of these devices.

Main Methods:

• Simulated a Distributed Denial of Service (DDoS) attack on an open-source syringe pump's control system.
• Evaluated the attack's effect on pump operation, including medication delivery accuracy.
• Assessed patient safety risks and device reliability implications.
• Developed hardware modification and 3D printable design recommendations.

Main Results:

• Demonstrated that a DDoS attack can alter syringe pump operation, causing potential medication over- or under-infusion.
• Identified critical cybersecurity flaws impacting patient safety.
• Confirmed the need for enhanced device security and reliability.

Conclusions:

• Open-source medical devices require robust cybersecurity measures from the outset.
• Hardware modifications and secure design principles are essential for mitigating risks.
• Security-driven design is crucial for ensuring patient safety in connected medical devices.