Absence makes the heart grow fonder: new directions for implantable medical device security

TLDR

Wireless implantable medical devices face a fundamental tension between safety in normal operation and security against adversarial attacks. The study proposes a new class of fail‑open defensive techniques that balance safety and security for these devices. These techniques, called Communication Cloakers, are externally worn devices similar to medical alert bracelets that intercept and mask device communications. When worn, Cloakers protect the implantable medical device’s security while still permitting open access during emergencies if removed.

Abstract

A fundamental tension exists between safety in the common case and security under adversarial conditions for wireless implantable medical devices. We propose a class of new, fail-open defensive techniques for implantable medical devices that attempt to strike a balance between these two goals. We refer to these defensive techniques as Communication Cloakers. Cloakers are externally worn devices, much like computational Medical Alert bracelets. Cloakers protect the security of an IMD when worn, but allow for open access during emergencies if removed.