Medical Devices: Pwnage and Honeypots

Presented at DEF CON 23 (2015), Aug. 6, 2015, 6 p.m. (60 minutes).

We know medical devices are exposed to the Internet both directly and indirectly, so just how hard is it to take it to the next step in an attack and gain remote administrative access to these critical life saving devices?  We will discuss over 20 CVEís Scott has reported over the last year that will demonstrate how an attacker can gain remote administrative access to medical devices and supporting systems. Over 100 remote service and support credentials for medical devices will be presented. So is an attack against medical devices a reality or just a myth?  Now that we know these devices have Internet facing exposure and are vulnerable to exploit, are they being targeted?  We will release and present six months of medical device honeypot research showing the implications of these patient care devices increasing their connectivity.

Presenters:

• Scott Erven - Associate Director, Protiviti
  Scott Erven is an Associate Director at Protiviti.  He has over 15 years of information security and information technology experience with subject matter expertise in medical device and healthcare security.  Scott has consulted with the Department of Homeland Security, Food and Drug Administration and advised national policymakers.  His research on medical device security has been featured in Wired and numerous media outlets worldwide.  Mr. Erven has presented his research and expertise in the field internationally.   Scott also has served as a subject matter expert and exam writer for numerous industry certifications.  His current focus is on research that affects human life and public safety issues inside todayís healthcare landscape.
• Mark Collao - Security Consultant, Protiviti
  Mark Collao is a Security Consultant at Protiviti. He has over 5 years of experience in information security consulting, primarily in network and application penetration tests, red team assessments, and social engineering exercises. Mark also researches botnet activity and maintains several custom protocol and application honeypots on the net. He holds an Offensive Security Certified Professional (OSCP) certification, is a member of the MWCCDC red team, and graduated from DePaul University.

Links:

• https://defcon.org/html/defcon-23/dc-23-speakers.html#Erven
• https://infocon.org/cons/DEF CON/DEF CON 23/DEF CON 23 slides/DEF CON 23 - Scott Erven and Mark Collao - Medical Devices - Pwnage and Honeypots - Slides.mp4
• https://infocon.org/cons/DEF CON/DEF CON 23/DEF CON 23 video/DEF CON 23 - Scott Erven and Mark Collao - Medical Devices - Pwnage and Honeypots - Video.mp4
• https://infocon.org/cons/DEF CON/DEF CON 23/DEF CON 23 video and slides/DEF CON 23 - Scott Erven and Mark Collao - Medical Devices - Pwnage and Honeypots - Video and Slides.mp4 (Video and Slides)
• https://infocon.org/cons/DEF CON/DEF CON 23/DEF CON 23 slides/DEF CON 23 - Scott Erven and Mark Collao - Medical Devices - Pwnage and Honeypots - Slides.srt (subtitles)
• https://infocon.org/cons/DEF CON/DEF CON 23/DEF CON 23 video and slides/DEF CON 23 - Scott Erven and Mark Collao - Medical Devices - Pwnage and Honeypots - Video and Slides.srt (subtitles)
• https://infocon.org/cons/DEF CON/DEF CON 23/DEF CON 23 video/DEF CON 23 - Scott Erven and Mark Collao - Medical Devices - Pwnage and Honeypots - Video.srt (subtitles)
• https://www.youtube.com/watch?v=ZusL2BY6_XU

Similar Presentations:

• The Eleventh HOPE (2016) / Medical Devices: Pwnage and Honeypots
• ToorCon San Diego 17 (2015) / Medical Devices: Pwnage and Honeypots
• DerbyCon 8.0 Evolution (2018) / Abusing IoT Medical Devices For Your Precious Health Records