1. Pacemakers and Implantable Cardiac Defibrillators: Software Radio Attacks and Zero- Power Defenses By: Halperin, Heydt—Benjamin, Ransford, Clark, Defend, Morgan, Fu, Kohno, and Maisel Presented by: Charlie Allen

2. Overview IMDs Attacks Defenses – Notification – Authentication – Key Exchange Future Work

3. IMDs Pacemakers Implantable Cardioverter Defibrilators (ICD) Neurostimulators Drug Pumps Wireless

4. Implanted ICD

5. Programming IMDs Commercial Programmers Radio Communicator

6. Security Model Access to programmers Passive Adversary Active Adversary Assumptions – ICDs Honest

7. Intercepting Communication Reverse engineering Eavesdropping Limitations

8. Attacks ICD Identification Disclosing patient data Disclosing cardiac data Changing patient name Setting the ICD’s clock Changing therapies Inducing fibrillation Power denial of service

9. WISPer Notification Zero-Power Sound Audibility

10. WISP with Attached Piezo-element

11. Authentication Uses Master Key known by all programmers Identity specific to IMD Nonce known by programmer in advance Improvements Random nonce

12. Key Exchange Process Medium

13. Questions?