• 主题
高级搜索  >
历史搜索 清空历史
首页> 外文学位 >Security issues and defense methods for wireless medical devices.
【24h】

Security issues and defense methods for wireless medical devices.

机译：无线医疗设备的安全性问题和防御方法。

获取原文
获取原文并翻译 | 示例
页面导航
  • 摘要
  • 著录项
  • 相似文献
  • 相关主题

摘要

This dissertation evaluates the design of several defense schemes for wireless medical devices to address security issues. These schemes are designed to enable efficient and effective access control of wireless medical devices in both non-emergency and emergency situations.;In recent years, the range of available wireless medical devices has increased and includes cardiac pacemakers, insulin pump, defibrillators, cochlear implants, neurostimulators, and various drug delivery systems. Unfortunately, most existing wireless medical devices lack sufficient security mechanisms to protect patients from malicious attacks. Thus, with the rise in use of medical implants, security becomes a critical issue as attacks on wireless medical devices may harm patients. Security on wireless medical devices is a relatively new field, which has not been thoroughly researched yet. The authors of a lot of articles have proposed token based, certification based and proximity based schemes to address the issue. However, most of the current solutions have many limitations and cannot be widely applied. Therefore, better solutions are needed.;In order to address this issue, we design a novel and multiple-layer access control framework for wireless medical devices. In a low layer level, we utilize bi-channel technology and multi-factor authentication to defend against various attacks at wireless medical devices. Our system utilizes near field communication (NFC) to do device pairing and uses the medical device's wireless radio to perform remote programming. This approach defends against most attacks because our NFC pairing scheme guarantees that the successful communication range between the programmer and wireless medical devices is less than 6cm. When the patient is in a crowded area such as on public transportation, a different person's mobile devices and the patient's medical devices may be located less than 6cm apart; we use the patient's cell phone to detect such an environment. To avoid attacks in crowded areas, we design a scheme to detect such a situation using the patient's cell phone. User involvement is used on non-implantable medical devices (IMDs) and a patient access pattern based access control (PAPAC) scheme is used on IMDs. We also design a response time based scheme to defend against fake patient attacks. Our analyses and experiments show that the protection schemes are efficient and effective.;For IMDs in non-emergency case, the PAPAC scheme we design utilizes the patient's IMD access pattern to address resource depletion (RD) attacks. It is a novel support vector machine (SVM) based scheme. This SVM based scheme is very effective at defending against RD attacks. Our experimental results show that the average detection rate is above 90%. For IMDs in emergency cases, we design a novel biometrics based two-level secure access control scheme that utilizes a patient's biometrics to prevent unauthorized access to the IMD. The scheme consists of two levels: level-one employs a patient's some basic biometrics and is lightweight; level-two uses a patient's customized iris data to achieve effective authentication. The experimental results show that our IMD access control scheme is very effective and has small overhead in terms of battery, CPU and memory. Thus, it is suitable for IMDs. Both the false acceptance rate (FAR) and false rejection rate (FRR) are close to zero with a suitable threshold.;Protecting wireless medical devices is a very challenging task due to their extremely limited resource constraints. It is necessary to balance the overhead of security schemes and security requirements. In this dissertation, we will first discuss security vulnerabilities in wireless medical device systems. Then we will present our framework using smart phones and other technologies, such as near field communication based access control. Further, we will describe the detailed design of this framework. Finally, extensive experiments show that our schemes can achieve good performance with small overhead. (Abstract shortened by UMI.).
机译：本文对无线医疗设备防御安全问题的几种防御方案进行了评估。这些方案旨在在非紧急情况和紧急情况下实现对无线医疗设备的有效访问控制。近年来，可用的无线医疗设备范围不断扩大，其中包括心脏起搏器，胰岛素泵，除颤器，人工耳蜗，神经刺激器和各种药物输送系统。不幸的是，大多数现有的无线医疗设备缺乏足够的安全机制来保护患者免受恶意攻击。因此，随着医疗植入物使用的增加，安全性成为关键问题，因为对无线医疗设备的攻击可能会伤害患者。无线医疗设备的安全性是一个相对较新的领域，尚未进行彻底的研究。许多文章的作者提出了基于令牌，基于证书和基于邻近度的方案来解决该问题。但是，当前大多数解决方案都有很多局限性，不能被广泛应用。因此，需要更好的解决方案。为了解决此问题，我们设计了一种用于无线医疗设备的新颖的多层访问控制框架。在低层级别，我们利用双通道技术和多因素身份验证来防御无线医疗设备上的各种攻击。我们的系统利用近场通信（NFC）进行设备配对，并使用医疗设备的无线电进行远程编程。这种方法可以抵御大多数攻击，因为我们的NFC配对方案可确保编程器与无线医疗设备之间的成功通信范围小于6厘米。当患者处于拥挤的地方（例如，在公共交通工具上）时，另一个人的移动设备和患者的医疗设备之间的距离可能小于6厘米；我们使用患者的手机来检测这种环境。为了避免在人群拥挤的地方袭击，我们设计了一种使用患者手机检测这种情况的方案。用户参与用于非植入式医疗设备（IMD），基于患者访问模式的访问控制（PAPAC）方案用于IMD。我们还设计了一种基于响应时间的方案来防御假冒患者的攻击。我们的分析和实验表明，该保护方案是有效的。对于非紧急情况下的IMD，我们设计的PAPAC方案利用患者的IMD访问模式来解决资源耗竭（RD）攻击。这是一种新颖的基于支持向量机（SVM）的方案。这种基于SVM的方案在防御RD攻击方面非常有效。我们的实验结果表明，平均检出率在90％以上。对于紧急情况下的IMD，我们设计了一种新颖的基于生物特征的两级安全访问控制方案，该方案利用患者的生物特征来防止对IMD的未经授权的访问。该计划包括两个级别：第一级别采用患者的一些基本生物特征识别，并且轻巧。第二级使用患者的自定义虹膜数据来实现有效的身份验证。实验结果表明，我们的IMD访问控制方案非常有效，并且在电池，CPU和内存方面的开销很小。因此，它适用于IMD。错误接受率（FAR）和错误拒绝率（FRR）都接近零且具有适当的阈值。保护无线医疗设备是一项非常具有挑战性的任务，因为它们的资源非常有限。必须平衡安全方案的开销和安全要求。在本文中，我们将首先讨论无线医疗设备系统中的安全漏洞。然后，我们将介绍使用智能手机和其他技术（例如基于近场通信的访问控制）的框架。此外，我们将描述此框架的详细设计。最后，大量实验表明，我们的方案可以以较小的开销获得良好的性能。 （摘要由UMI缩短。）。

著录项

  • 作者

    Hei, Xiali.;

  • 作者单位

    Temple University.;

  • 授予单位 Temple University.;
  • 学科 Computer Science.;Engineering Computer.
  • 学位 Ph.D.
  • 年度 2014
  • 页码 165 p.
  • 总页数 165
  • 原文格式 PDF
  • 正文语种 eng
  • 中图分类
  • 关键词

相似文献

  • 外文文献
  • 中文文献
  • 专利
获取原文

客服邮箱：kefu@zhangqiaokeyan.com

京公网安备：11010802029741号 ICP备案号：京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有

  • 客服微信

  • 服务号