The Ongoing Silent Storm in Medical Devices Industry - Cybersecurity Challenges and Regulations

Explore the complex challenges facing the medical device industry in this hour-long conference talk from the 38th Chaos Communication Congress (38C3). Gain deep insights into how heavily regulated the medical technology sector is and understand the mounting cybersecurity requirements that particularly impact small and medium-sized manufacturers. Learn about key industry developments including eStar evolution, regulatory frameworks, and the roles of various stakeholders from manufacturers to security companies. Examine critical aspects of modern medical device development including Software Bill of Materials (SBOM), threat modeling, and security risk management. Delve into numerous technical challenges such as legacy systems, embedded technology, certification requirements, and the complexities of managing Common Platform Enumeration (CPE) and National Vulnerability Database (NVD) integration. Presented by Haitham Abbadi, this talk illuminates the intersection of medical device regulation and cybersecurity in an increasingly complex technological landscape.