Medical Cyber-Physical Systems Development: A Forensics-Driven Approach

TL;DR

This paper advocates for integrating forensic principles into the design of Medical Cyber-Physical Systems to enhance their security and investigability, addressing the unique challenges posed by their complexity and data sensitivity.

Contribution

It introduces a forensic-driven framework for developing MCPS, aiming to improve investigation capabilities and security resilience in medical cyber-physical environments.

Findings

Framework provides a foundation for future research

Enhances investigation capabilities of MCPS

Addresses security challenges in medical cyber-physical systems

Abstract

The synthesis of technology and the medical industry has partly contributed to the increasing interest in Medical Cyber-Physical Systems (MCPS). While these systems provide benefits to patients and professionals, they also introduce new attack vectors for malicious actors (e.g. financially-and/or criminally-motivated actors). A successful breach involving a MCPS can impact patient data and system availability. The complexity and operating requirements of a MCPS complicates digital investigations. Coupling this information with the potentially vast amounts of information that a MCPS produces and/or has access to is generating discussions on, not only, how to compromise these systems but, more importantly, how to investigate these systems. The paper proposes the integration of forensics principles and concepts into the design and development of a MCPS to strengthen an organization's investigative posture. The framework sets the foundation for future research in the refinement of specific solutions for MCPS investigations.