Advanced Security-for-safety Assurance for Medical Device IoT

Advances in healthcare IT systems have resulted in complex socio-technical architectures, which deliver integrated and patient-centered services. All these transformations, in addition to clinical benefits, they also introduce risks including security risks that need to be understood and managed, reduced to acceptable levels. There are numerous reports of new types of security vulnerabilities for this kind of architectures, which challenge the effectiveness of the current security tools. MEDSECURANCE will conceive novel methodologies, infrastructures, and technologies that enable an effective, harmonious and continuous development and evolution of secure system engineering management activities in Internet of Medical Things (IoMT). Our objective is to advance knowledge and basic understanding of decision making in diverse IoMT threat landscapes based on different system and component level interactions. This is accomplished via the development of a novel holistic strategy that considers the interdependence of several IoMT subsystems, information exchange, risk thresholds, and regulatory ramifications. We provide scalable and verifiable secure system engineering management solution(s) that capture, communicate, and act on these complexities in order to improve decision-making in cyber defence while automating cybersecurity assurance. Our solution(s) will be co-developed and validated with our medical industry user partners, and complemented by engagement of healthcare industry stakeholders in support of the recommendations to existing guidelines that will also be developed in the project.