Towards a Security Analysis of Radiological Medical Devices using the MITRE ATT&CK Framework

Radiological medical devices (RMDs) are used to diagnose and treat various medical conditions. Modern healthcare is dependent on these devices since they make it easier to perform serious diagnoses and treatments. As technology continues to advance, these devices have become increasingly interconnected, introducing new challenges to their security which could have detrimental consequences for patients. To examine these threats systematically, we use the ATT&CK framework from MITRE¹¹Available at https://attack.mitre.org/ and Data Flow Diagrams (DFD) to categorize, evaluate, and rank the threats that are particular to radioactive equipment. This paper examines a variety of radiological medical devices, including radiation therapy machines, imaging diagnostic devices, and associated software platforms. We then used the ATT&CK framework to identify and assess possible threats, vulnerabilities, and attack routes, illuminating the particular security issues offered by these essential healthcare devices. In addition to that, we have proposed specific mitigation tactics that are intended to improve the safety of radiological medical devices.