Fu: Wireless signals could trigger fatal heart rhythms in cardiac defibrillators
Kevin Fu · Kevin Fu · Jul 28, 2017 · at 5:17
Kevin Fu, CS professor at University of Michigan and Chief Scientist at Virta Labs, describes security vulnerabilities uncovered during research on implanted cardiac devices.
0:00 / 0:09exact quote · 9.3s
▶ Watch the full episode on YouTube → 720p mp4 · rendered on demand · StarZero watermark
“We discovered we could actually generate our own wireless signals that would trigger this, what is effectively a debugging command to wirelessly induce fatal heart rhythms.”
quote is from the automated transcript, cleaned for reading: filler sounds and stutters are removed, nothing is rephrased. names can be misheard (the analysis reads context, assessments check outside sources). how →
More from Kevin Fu
Fu: Hospital medical device malware is mostly decade-old, automated malware
“There's, it's nothing too sophisticated. We're not talking about nation state adversaries or even the kid in the basement trying to hack into things. This is garden variety malware automated, sometimes 10 or 15 years old getting in.”
Fu: Pacemakers can be tricked into shutting down via RF interference
“A fun little trick you can do is if you send a particular pulse at a rate that looks like a normal cardiac rhythm in this case one hertz, so 60 beats per minute we've been able to trick pacemakers into effectively turning off because they say, oh, the heart is…”
Fu: Wireless connectivity is added to devices for marketing, not safety
“But the interesting thing about wireless is that, you know, it was used for a specific reason, to address the clinical risk, but now I often see it used sort of willy-nilly on devices, more for the marketing side, less for actually addressing a safety risk, bu…”
Fu: Medical manufacturer bundled malware into a ventilator software update
“This medical device manufacturer was attaching this bonus piece of malware to the software update for ventilators.”
Fu: An infusion pump provided unauthenticated root access via telnet
“He discovered that there was actually if you tell net to port 23, you get a root shell.”
Fu: Acoustic tones at 8 kHz can disable drones mid-flight
“He discovered if you send acoustic tones to a particular drone, you can cause the drone to fall out of the sky, because the MEMS accelerometer on the inside of the chip has a resonant frequency, and if you hit it at eight kilohertz, It just tricks that little …”