Navigation Links
Alpine Security Introduces Evolutions for Medical Device Cybersecurity Assessment and Penetration Testing

St. Louis-based firm Alpine Security ("Alpine") aims to secure the healthcare industry from cyberattacks. One way Alpine is securing healthcare is by working with medical device manufacturers to help ensure their devices are safe from cybercriminals. Medical devices range from external systems, such as drug infusion pumps or patient monitoring systems to implantable (internal) devices, like pacemakers. Cybercriminals go after medical devices for four main reasons:

1. To steal Protected Health Information (PHI) (Motive: Financial Gain)
2. Ransomware (Motive: Financial Gain)
3. To harm or kill a patient (Motive: Terrorism or Assassination)
4. To use the medical device as a beachhead for enemy advancement (Motive: Foothold to Expand Operations)

Alpine developed and introduced its "Evolution" methodology for medical device cybersecurity assessments and testing to help medical device manufacturers mature the cybersecurity of their devices. Alpine's Evolution approach is based on Navy SEAL Evolutions. The SEALs use Evolutions to describe each progressive event in a training schedule. The general idea is that as you progress through each Evolution you mature and evolve. Alpine assists medical device manufacturers to evolve the cybersecurity of their medical devices using a structured, phased approach.

Alpine's medical device cybersecurity assessment and penetration testing methodology has two main Evolutions and can include as many as necessary. During each Evolution, the medical device is thoroughly assessed and tested. The first Evolution establishes a cybersecurity baseline for the medical device. This baseline includes all the ways an attacker could gain entry to and compromise the device, as well as the risk associated with each method of compromise. Higher rated risks typically affect patient safety or privacy. After the first Evolution, the medical device manufacturer works to fix the vulnerabilities identified by Alpine Security. The next Evolution validates the vulnerabilities were fixed and checks for any new vulnerabilities that may have been introduced. This process, the Evolution, repeats as many times as necessary to get the medical device to an acceptable risk level.

Alpine's Evolutions include the following activities, in addition to a technical "white box" penetration test:
-- Identification and prioritization of risk pertaining to confidentiality, integrity, and availability
-- Identification and assessment of all entry points into the device (system)
-- Assessment of existing cybersecurity controls
-- Identification and assessment of data flows
-- Identification and assessment of use case risk
-- Threat (Attack) Tree development
-- Assessment of the cybersecurity Traceability Matrix
-- Assessment of medical device standard operating procedures
-- Assessment of software cybersecurity architecture

For more information on Alpine Security's medical device cybersecurity assessment and testing, contact Alpine Security at 844-925-7463 / or visit their website at

Read the full story at

Source: PRWeb
Copyright©2020 Vocus, Inc.
All rights reserved

Related medicine technology :

1. Ortho Development Receives FDA Clearance for Alpine Hip Stem
2. Distinguished Speaker to Discuss the Intersection of Privacy and Security Laws and Biometrics at the 3rd Annual Healthcare Compliance Symposium on April 23rd, 2020
3. SweetLeaf® Joins Industry Leaders to Discuss Sustainable Nutrition Security at Forum
4. COMPLIANCY GROUP Hires VP of Partner Engagement and Cybersecurity to Help the Managed Service Provider (MSP) Evolve to Business Solution Provider (BSP)
5. FDAnews Announces — Understanding the Drug Supply Chain Security Act (DSCSA): Latest Regulatory Developments and Best Practices Webinar, Sept. 26, 2019
6. Cyberbit and Purdue Partner to Advance Cybersecurity Workforce Education and Training
7. Fortified Health Security Releases 2019 Mid Year Horizon Report
8. Social Security Benefits Lose 33% of Buying Power Since 2000 According to Latest Study By The Senior Citizens League
9. Center for Information Security Awareness - (CFISA) Offers Exciting New In-Person "Security Awareness Training” for Businesses
10. Data Security Leader GTB Technologies to Showcase the Markets' First Data Misclassification & Cloud / Container Data Exfiltration Solutions during the RSA Conference 2019
11. United Security Health & Casualty Insurance Company Introduces Personal Accident and Medical Insurance Plan
Post Your Comments:
(Date:3/27/2020)... ... March 27, 2020 , ... ... platform based on students' holistic portfolios, revealed that college-bound young adults are reconsidering ... is creating huge new barriers to high school senior’s path to college and ...
(Date:3/22/2020)... ... March 21, 2020 , ... Since 1988, Gwatney dealerships have strived to ... heighten over the spread of COVID-19, Gwatney Mazda is pleased to announce two new ... of the Memphis community. , The dealership’s new Home Test Drives and Delivery ...
(Date:3/20/2020)... ... March 20, 2020 , ... ... many Frederick County families. Many of the most vulnerable community members are those ... we know as ALICE (Asset Limited, Income Constrained, Employed). Today, these ALICE households ...
Breaking Medicine Technology:
(Date:4/1/2020)... ... April 01, 2020 , ... According to data released ... reproductive age (13-44) in need of publicly funded contraception live in counties impacted by ... of Minnesota’s counties have lost some or all of their Title X resources. , ...
(Date:3/30/2020)... ... 30, 2020 , ... Achieve Medical Center now offers ... comprehensive and compassionate mental health and wellness services in the midst of the ... telemedicine services including initial consultations, evaluations, and follow-up care. It also allows patients ...
(Date:3/28/2020)... (PRWEB) , ... March 27, 2020 , ... ... practice OrthoSC is now offering telemedicine as an alternative approach to ... of the practice’s doctors in the comfort of their own home or office ...
(Date:3/27/2020)... MARY, Fla. (PRWEB) , ... March 27, 2020 , ... ... three-month online educational health conference for people with asthma, their families and caregivers living ... a day between March 27, 2020 and June 30, 2020, and will focus on ...
(Date:3/22/2020)... ... March 21, 2020 , ... TriageLogic, a leader in ... organizations, and health centers can use for patient care during the COVID-19 crisis. ... professionals are working around the clock to implement emergency support solutions for patients ...
Breaking Medicine News(10 mins):