Hardware Podcasts

Securing the Internet of Medical Things | Asimily's Shankar Somasundaram | Internet of Things Podcast

IoT For All Podcast · 4 May 2023 · 21m

What this episode covers

Shankar Somasundaram, CEO and founder of Asimily, discusses the unique security challenges of the Internet of Medical Things (IoMT) in healthcare environments. He explains that healthcare is a 'system of systems' where legacy medical devices, industrial controls, and lab equipment interact, making traditional scanning dangerous and isolation ineffective. Somasundaram highlights the financial incentives for attackers targeting healthcare data and outlines best practices including inventory management, risk mitigation, and incident response.

Most relevant to

companies scaling up

Topics

Mentioned

Companies
Asimily, Semantix
Products
iPhone 3G, ChatGPT
Also
Klop ransomware, HIPAA, GDPR

Related episodes from other shows

Other shows on the same ground, closest first.

  • EE Times Current · 36m

    IoT Security is only as good as its weakest link

    Nitin Dahad hosts an episode on IoT security featuring John Moore of the IoT Security Foundation, who emphasizes that security is a process requiring resilience and vulnerability disclosure policies rather than a static certification. Sharon Hagi, Chief Security Officer at Silicon Labs, explains the 'silicon to cloud' ecosystem approach, arguing that security is only as strong as its weakest link across the entire device, network, and cloud stack. Emmanuel Sambuy of Silicon Labs details specific security implementations for medical devices, including the Series 2 Bluetooth Low Energy (BLE) portfolio, Secure Vault technology, and compliance with Diabetes Technology Society (DTSec) standards.

    Security & privacyConnected products & IoT
    5 chapters

  • Let's Combinate · 30m

    140 - Medical Device & Diagnostics Cybersecurity, 3rd Party Software, SBOM's, Evaluating Skill and Mindset with Christian Espinosa

    Christian Espinosa, CEO of Blue Goat Cyber, explains the unique cybersecurity challenges of medical devices, emphasizing that patient safety is the primary driver over data privacy. He details the importance of Software Bill of Materials (SBOM) and identifying third-party open-source components, such as the Shellshock vulnerability, to mitigate supply chain risks. Espinosa also discusses his hiring philosophy for Blue Goat Cyber, prioritizing practical aptitude and clarity of purpose over formal certifications or degrees.

    Security & privacyPCB design & layout
    6 chapters

  • Global Medical Device Podcast · 42m

    #407: Cybersecurity in MedTech: FDA Compliance, Patient Safety & the Hidden Risks You’re Missing

    Christian Espinosa, founder of Blue Goat Cyber, explains why medical device cybersecurity must be integrated from the requirements phase to ensure patient safety, citing real-world risks like skin burns from hacked acne lasers and missed sepsis diagnoses. He details the FDA's September 2023 regulatory overhaul, which mandates Software Bill of Materials (SBOMs), static/dynamic testing, and risk assessments tied to patient harm, noting that traditional IT security vendors often fail to meet these specific medical device standards. Espinosa warns that waiting until the last minute to address security can lead to catastrophic delays, costly retrofits like disabling hardware features due to lack of secure boot support, or even abandoned projects.

    Security & privacyCertification & compliance
    8 chapters

  • Embedded.fm · 1h 10m

    515: Script Boomers

    Nick Kartsioukas, a Senior Security Engineer, discusses the evolving landscape of embedded system security, emphasizing the critical importance of Software Bill of Materials (SBOMs) and monitoring the Common Vulnerabilities and Exposures (CVE) database. He explains how to secure IoT devices through mutual TLS authentication and hardware roots of trust, while warning against the risks of using complex platforms like the Raspberry Pi in constrained environments. The conversation also covers threat modeling strategies, the crossover between safety and security, and practical advice for engineers to improve their security posture through Capture The Flag (CTF) challenges.

    Security & privacyConnected products & IoT
    8 chapters

  • Global Medical Device Podcast · 31m

    Navigating the MedTech Cybersecurity Ecosystem

    Jon Speer, founder of Greenlight Guru, interviews Mike Drues from Vascular Sciences about the scope and strategy of medical device cybersecurity. They clarify that the FDA’s concern is limited to device safety and efficacy, excluding identity theft and HIPAA privacy issues. Drues advises developers to question the necessity of constant internet connectivity and to use regulatory logic to apply existing standards to new threats.

    Security & privacyCertification & compliance
    6 chapters

The summary, chapters and topics are generated from the episode’s audio by this directory, not written by IoT For All Podcast. The episode itself belongs to its publisher.