1. IoT in Healthcare: Life or Death
SBX2-R4
IoT in Healthcare: Life or Death
Dr. May Wang
Co-Founder & CTO
ZingBox

2. Introduction Healthcare IoT Challenges Why not current solutions?
What can we do?
What’s in real world?

3. IoT offers New Values to Healthcare Delivery Organizations+ IT
Information Technology
Infrastructure, Security, Applications
BIOMED
Medical Device Management
Safety, Efficiency and Effectiveness
Real-Time Health System (RTHS)
PEOPLE | PROCESS | SERVICES
BENEFITS
CHALLENGES
Situational aware patient care
Increased operational efficiency
Security risks
Service integrity & continuity

4. The Healthcare IoT
Medical IoT
Real-Time
Health System
Operational IoT
Infusion
Pumps
90% hospitals are victims of cyber threats BLOOMBERG
Connected HVAC
MRI
Scanners
Smart
Lighting
Patient
Monitors
Surveillance Camera
25% of identified attacks will involve IoT by 2020
Safety
Quality
Patient safety
Care delivery quality
Security
Serviceability
Data and equipment security
Care service integrity & continuity
GARTNER

5. Challenges of Securing Medical IoT
HOSPITAL NETWORK
FIREWALL
Firewall - the single line of defense
(With no device context, only works at IP level)
Gateway
Gateway
PACS
Unmonitored network
(Medical IT network remains unprotected)
Patient
Rooms
MEDICAL IT NETWORK
Lack of endpoint visibility & security
(Agents cannot be deployed)
IV Pumps
Patient Monitors
Radiology

6. Why Not Current Security Solutions?
Network of the Future
Today’s Network
Homogeneous Infrastructure
Variety of unique devices
Specific-purpose hardware
Unique malware for each device
Reactive approach not effective
Future
2015
Reactive Approach
Detects & Blocks known malware
Intelligent & Proactive Security
Context of use combined with Machine Learning & Behavioral Analysis

7. Healthcare IoT Security through Deep Learning1
IoT Visibility
Detect unmanaged devices
Recognize & classify
Actively manage inventory 3
Regulate Behavior
Security posture
Risk assessment
Smart whitelisting 2
IoT Personality
Behavioral modeling
Device profiling
Personality Deep Learning
ZingBox Cloud
IoT Knowledge-base & AI Engine

8. Reality of Healthcare IoT
71% Non- Medical IoT
Non-traditional IT equipment (IoT) outnumber the IT devices
68% IoT
29% Medical IoT
IoT Devices are -
Unmanaged assets
Shadow devices
Total IoT Devices
Total Number of Devices
There are 68% IoT Devices (out of total number of devices)
Of all IoT Devices, 
71% Non-Medical IoT Devices 
29% Medical IoT Devices

9. What are Medical IoTs 29% 23% 16% 10% 9% 5% 4% 3% 1%
Percentage of Medical IoTs
Combined average in numeric order, 9 total categories:
Infusion Pump (29%)
ECG Machine (23%)
Imaging Systems (16%)
Patient Monitor (10%)
Point of Care Analyzer (9%)
Patient Tracking (5%)
Medical Printer (4%)
Nurse Call System (3%)
Other Healthcare* (1%)
*Other HealthCare includes: 
Clinical Analyzer, Microdialysis System, Patient Security System
Total 735

10. Device Personality Based IoT Security
Understanding each device without touching device
Individual device model
Device group model
Category model
Individual device model – describes learned behaviors of an individual IoT device.
Device group model – describes the common behaviors of a group of IoT devices – they can be categorized based on vendor or type, e.g. all Stinger vital sign monitors, or all vital sign monitors.
User model – describes user (admin) defined behavior standards based on domain knowledge or

11. Examples of IoT Security Use Cases
Infiltration
Botnet
Ransomware
Data Exfiltration

12. Example of Infiltration

13. Example of Data Exfiltration
Hospitals are among the most attracted targets for data exfiltration. Medical records = big money for organized crime.
Detections — look for unseen internal app/destinations, and external destinations anomalies.
Correlate events (scanning, infiltration, malware upload, etc.) in attack phase based on timeline and associated devices, and trigger early detections and actions.

14. In Conclusion URGENCY IoT in Healthcare is real
IoT security in Healthcare is life or death
Current solutions are not enough, we need new solutions
WHAT CAN WE DO TODAY?
Visibility – Know what IoT devices you have
Risk Assessment – Know the IoT vulnerabilities
Management – Get a handle on unmanaged IoT assets