Securing Medical Devices Using Adaptive Testing Methodologies

Daniel Miessler presented on using an adaptive testing methodology to secure medical devices. He discussed that the growing attack surface of medical devices outpaces the maturity of testing procedures. An adaptive methodology tests devices based on their attributes and context to create customized and consumable test plans that reduce tester fatigue. Key takeaways included that visibility of attack surfaces is critical, testing plans should be approachable and modular to avoid being disregarded, and understanding surfaces should occur before buying, installing, or implementing devices.