A Study on the Evaluation of Cyber Security Vulnerabilities in Medical Software

In this paper, we examine the cybersecurity vulnerability assessment method of medical software. Medical software processes patient sensitive data and is linked to various medical devices and systems in real time. Due to these characteristics, medical software is highly likely to be exposed to various cybersecurity threats such as ransomware, data leakage, and medical device hacking. Based on the international standard IEC TS 60601-4-5, we propose threat modeling, vulnerability scanning, and penetration testing as a methodology for assessing the security vulnerabilities of medical software. Through this, we can identify security vulnerabilities in advance and prepare measures to respond quickly. We can prevent security threats and improve the safety of medical software through response strategies such as security patches and updates, network separation, data encryption, and security education. In conclusion, strengthening the security of medical software is essential to maintain patient safety and the reliability of the medical system, and systematic security assessment and continuous response are required.