Taxonomy and Statistics of Cyber and Physical Vulnerabilities in Medical Devices

This study introduces a taxonomy for analyzing cyber and physical vulnerabilities in medical devices, emphasizing the critical interplay between security and safety. An analysis of current data reveals that cyber vulnerabilities predominate, constituting 95% of identified issues, while physical vulnerabilities account for 5%. Among these, unauthorized access emerges as the most common attack vector, representing approximately 60% of identified vulnerabilities. These findings underscore the imperative of addressing vulnerabilities to safeguard patient well-being and data security. By correlating security vulnerabilities with device safety attributes, the research underscores the importance of integrating security-by-design principles into medical device development. This holistic approach to security is essential for mitigating risks and fostering a safer healthcare environment, necessitating collaboration among stakeholders across the health-care ecosystem.