A cyber risk scoring system for medical devices

作者：Stine, Ian; Rice, Mason^*; Dunlap, Stephen; Pecarina, John

来源：International Journal of Critical Infrastructure Protection, 2017, 19: 32-46.

DOI：10.1016/j.ijcip.2017.04.001

• Medical Devices
• Cyber Risk Assessment
• Cyber Risk Scoring System

The increased connectivity of medical devices expedites patient treatment and provides lifesaving capabilities, but the lack of emphasis on device security has led to several cyber security breaches. Most medical professionals do not have adequate expertise in information technology or cyber security, yet they are responsible for assessing which medical de-vices provide the best balance of risk and probability of success. This paper proposes a cyber risk scoring system that considers a physician's worst-case assessment of the potential of a medical device to impact a patient. The scoring system also relies on a security questionnaire based on the STRIDE model that helps generate a risk score for the medical device. Three test scenarios involving medical devices are used to demonstrate the application and utility of the risk scoring system. Published by Elsevier B.V.

• 出版日期2017-12
• 单位中国人民解放军空军电子技术研究所