Live Webinar
The Real-World Challenges of Medical Device Cybersecurity: Mitigating Vulnerabilities
April 25, 2024 | 1 pm EDT
A great deal of attention in medical devices has shifted towards cybersecurity with the ratification of section 524B of the FD&C act.
Essentially this new law enables the FDA to enforce cybersecurity controls in any medical device that is capable of networked communications or that has software.
At the end of this process are the tools and practices to fix vulnerabilities in devices. While the objective sounds straightforward, a breakdown of the categories of fixes and their management is often involved.
In this webinar we will:
-
Recap the process for managing vulnerabilities
-
Identify the categories of vulnerabilities and solutions
-
Describe the methods for applying mitigation
- OS
- Kernel mode drivers
- Open source
- Custom application software
-
Provide an overview of Software Bill of Materials (SBOM) and explain why it’s relevant but challenging
-
Discuss Cybersecurity reporting to the FDA including the handling of CVEs and the role of Penetration testing
About The Presenters
Milton Yarberry
ICS
Milton is the Director of Medical Programs and Cybersecurity for ICS. He is a certified PMP and Scrum Master with a background in software architecture, medical device product development and program management. He has 20 years in product development with 10 years in software consulting and 15 years working with Class II and Class III medical device manufacturers.
Maciej Halasz
Timesys
Maciej Halasz, Vice President of EMEA Business Development and Technical Sales, has more than 25 years of experience in embedded computing with a focus on embedded Linux and real-time systems. He is the technical lead and creator of a number of Timesys-offered tools and products, the creator of Timesys University embedded Linux workshops, and the co-host of LinuxLink Radio. Throughout his career, Maciej has authored numerous embedded Linux and industry articles.