Healthscare – An Insider's Biopsy of Healthcare Application Security
Dive into a critical examination of healthcare application security in this 42-minute Black Hat conference talk. Explore vulnerabilities and design issues within various clinical systems, including radiology reading, EMR downtime, patient entertainment, pharmacy distribution, nurse communication, M&A EMR, clinical documentation, and temperature monitoring. Analyze the dissection of numerous healthcare solutions, revealing a concerning prognosis for hospital enterprise security. Follow Seth Fogie's in-depth investigation of clinical productivity software, drug dispensaries, imaging systems, and downtime devices. Learn about decrypting client-side data, SQL account decryption, binary patching, and privileged escalation. Discover red flag indicators and gain insights into Penn Med's approach to addressing these security challenges. Understand the critical need for improved healthcare application security and explore potential solutions for the future.