IoT in Healthcare: Life or Death

1. IoT in Healthcare: Life or Death Dr. May Wang SBX2-R4 Co-Founder & CTO ZingBox

2. Introduction • Healthcare IoT • Challenges • Why not current solutions? • What can we do? • What’s in real world?

3. BIOMED IT IoT offers New Values to Healthcare Delivery Organizations Medical Device Management Safety, Efficiency and Effectiveness Information Technology Infrastructure, Security, Applications + Real-Time Health System (RTHS) PEOPLE | PROCESS | SERVICES BENEFITS CHALLENGES Situational aware patient care Increased operational efficiency Security risks Service integrity & continuity

4. The Healthcare IoT MedicalIoT Operational IoT Real-Time Health System 90%hospitals are victims of cyber threatsBLOOMBERG Infusion Pumps Connected HVAC Smart Lighting MRI Scanners Patient Monitors Surveillance Camera 25%of identified attacks will involve IoT by 2020 Quality Safety • Patient safety • Care delivery quality Security Serviceability GARTNER • Care service integrity & continuity • Data and equipment security

5. Unmonitored network (Medical IT network remains unprotected) Lack of endpoint visibility & security (Agents cannot be deployed) Firewall - the single line of defense (With no device context, only works at IP level) Challenges of Securing Medical IoT HOSPITAL NETWORK FIREWALL Gateway Gateway PACS Patient Rooms MEDICAL IT NETWORK IV Pumps Patient Monitors Radiology

6. Today’s Network Intelligent & Proactive Security Reactive Approach Why Not Current Security Solutions? Context of use combined with Machine Learning & Behavioral Analysis Detects & Blocks known malware Homogeneous Infrastructure Network of the Future • Variety of unique devices • Specific-purpose hardware • Unique malware for each device • Reactive approach not effective • Future • 2015

7. ZingBox Cloud Healthcare IoTSecurity through Deep Learning IoT Visibility • Detect unmanaged devices • Recognize & classify • Actively manage inventory 1 IoT Knowledge-base & AI Engine 3 2 IoT Personality • Behavioral modeling • Device profiling • Personality Deep Learning Regulate Behavior • Security posture • Risk assessment • Smart whitelisting

8. Reality of Healthcare IoT 71% Non-Medical IoT Non-traditional IT equipment (IoT) outnumber the IT devices 68% IoT 29% Medical IoT • IoT Devices are - • Unmanaged assets • Shadow devices Total IoT Devices Total Number of Devices

9. What are Medical IoTs 29% 23% 16% 10% 9% 5% 4% 3% 1% Percentage of Medical IoTs

10. Device Personality Based IoT Security Understanding each device without touching device • Individual device model • Device group model • Category model

11. Examples of IoT Security Use Cases • Infiltration • Botnet • Ransomware • Data Exfiltration

12. Example of Infiltration

13. Example of Data Exfiltration

14. In Conclusion URGENCY • IoT in Healthcare is real • IoT security in Healthcare is life or death • Current solutions are not enough, we need new solutions WHAT CAN WE DO TODAY? • Visibility – Know what IoT devices you have • Risk Assessment – Know the IoT vulnerabilities • Management – Get a handle on unmanaged IoT assets