17. Security Analytics and Monitoring of Medical Devices

This chapter outlines an approach for security monitoring powered by analytics to enhance the security posture of medical devices and its operational environment. Implementation experiences demonstrate feasibility. Empirical results show further that medical device security control status can be monitored with high accuracy and low false positive rate. Security monitoring of the operational environment is also promising. The approach demonstrates potential to integrate in larger cyber threat management systems. The perspective of the medical device nicely complements other monitoring solutions such as network monitoring. The expected impact on medical device security and its operating environment is very positive. Over time this can grow as medical device logging and log export capabilities are extended as part of their design, enabling more monitoring.