“Fatal” infusion pump hack demonstrated at BlackBerry Security Summit
At last week’s BlackBerry Security Summit in New York City, attendees were treated to a unique demonstration that outlined one way by which a digital attack could turn deadly.
A “white hat” hacker (that means he’s a good guy) by the name of Graham Murphy and BlackBerry Chief Security Officer, David Kleidermacher, conducted a live hack of an infusion pump, easily bypassing its security to show the level of control hackers can gain over vulnerable electronic devices.
An infusion pump is designed to automatically administer a dose of morphine at the touch of a button. Within minutes, Murphy is able to gain full control of the device remotely via the (hypothetical) hospital WiFi network, including safety controls that assure a lethal dose of the painkiller is never administered.
Moments later, malware is installed and the demo patient is “dead.”
Check out the video below.
