Gradually we are all becoming more and more dependent on connected technology; we will be able to live longer with an increased quality of life due to medical devices and sensors integrated into our body. However, our dependence on technology grows faster than our ability to secure it, and a security failure of a medical device can have fatal consequences. Marie's life depends on the functioning of a medical device, a pacemaker that generates each and every beat of her heart. This talk is about Marie's personal experience with being the host of a vulnerable medical implant, and why she decided to start a hacking project, investigating the security of her own personal critical infrastructure.

1. UNPATCHABLE — LIVING WITH A
VULNERABLE IMPLANTED DEVICE.
Dr. Marie Moe, SINTEF
@MarieGMoe

2. MY LIFE DEPENDS
ON THIS HARDWARE
AND SOFTWARE
2

3. Pacemaker/ICD Programmer
Home monitoring
unit
Cellular or
Telephone Network Web portal
Inductive
near field
communicationMICS/
ISM
POTS/SMS
EMBODIED AND CONNECTED

5. WHAT COULD POSSIBLY GO WRONG?
Patient privacy issues
Battery exhaustion
Device malfunction
Death threats and extortion
Remote assassination scenario…

6. • Lack of testing user interfaces to
prevent medical error
• Insufficient reporting of adverse
events
• Missing logging and forensic
capabilities
MEDICAL DEVICES
SAVE LIVES AND
TAKE LIVES
6

7. 7

8. THE STAIRS THAT
ALMOST KILLED ME

9. BITFLIP IN THE AIR
AND DEBUGGING
MY PACEMAKER

10. DATA ERROR IN PACEMAKER
10

11. WHEN TRUST IS BROKEN...

12. 12

13. 13

14. 14

15. 15

16. 16

17. THE BENEFIT
OUTWEIGHS THE
RISK
17

18. Technology for a better society
marie.moe@sintef.no
@MarieGMoe