WHISTL: JYVÄSKYLÄ - A Medical Device Hackathon!

MDISS, the Medical Device Innovation, Safety and Security Consortiumis a 501(c)3 nonprofit helping healthcare providersassess and improvemedical device security in complex multi-vendor networks.  MDISS brings device manufacturers and healthcare providers together with regulatory bodies, patient advocates, insurers and security researchers to improvepublic healthand enhancepatient safetyby advancing best practices in medical device risk management and cybersecurity.Built and funded by its members and a contract from the U.S. Department of Homeland Security, theMDISS medical device risk assessment platform(or MDRAP) helpshospitals and device-makers build, buy, deploy and assess safer medical devices.  MDRAP represents a next-generation platform that makes device assessmentseasier, fasterand (most importantly)worth the effort.MDRAP assessments are designed to beshared and compared,even across device classes.  MDRAP helps busy healthcare technology leaders understand the tradeoffs between their many device-related security projects, and helps them seeprecisely where they can make the most impact... all through the lens of patient safety.

MDISS.org

<A HREF="http://novasano.com/" TARGET="_blank" DATA-MSYS-CLICKTRACK="0" REL="nofollow noopener noreferrer">Novasano,</A> together with <A HREF="https://www.mdiss.org" TARGET="_blank" TITLE="MDISS" DATA-MSYS-CLICKTRACK="0" REL="nofollow noopener noreferrer">MDISS</A>, <A HREF="https://www.synopsys.com/" TARGET="_blank" DATA-MSYS-CLICKTRACK="0" REL="nofollow noopener noreferrer">Synopsys</A>, the University of Jyväskylä and Jyväskylä Hospital invite you to join us for the WHISTL: JYVÄSKYLÄ Medical Device Hackathon on 1-2 November 2017!
Visit Jyväskylä's very first World Health Information Security Testing Lab (WHISTL) facility, with actual medical device targets and an impressive array of advanced penetration tools to help you evaluate medical device cybersecurity, resilience, vulnerabilities and patching.   
<H3>SNACKS!       DRINKING!!       MEDI-DIGITAL MAYHEM!         PRIZES!!!!!</H3>
This is a great place to catch up with the scene and network with other experts in and around the medical device security field.   The WHISTL: JYVÄSKYLÄ Medical Device Hackathon is free of charge.    Join us!
THINGS TO BRING 'N STUFF: 1.) Please bring your own laptop. 2.) Feel free to bring any open source or commercial hacking tools you have along with you.  3.) Novasano engineers will be on hand to offer advice and suggest genius hacks. 4.) If you have time, take a look at the devices we plan to have onsite (links below). This list is subject to change, and we'd love your suggestions. 5.) If you are not familiar with the SYNOPSYS tools, get up to speed fast with the video tutorial links below.
 
<H3 CLASS="p2">DAY ONE AGENDA:  1 NOV</H3>
09:00   Doors open, people welcome to come in and work on getting tools installed.
10:00   Hackathon starts with brief introduction and getting familiar with the tools and devices. Form groups and start hacking.
17:30   SPECIAL GUEST SPEAKER talks about medical device vulnerabilites
<H3 CLASS="p2">DAY TWO AGENDA: 2 NOV</H3>
10:00 Hackathon continues
15:00 Wrap up & Awarding of Prizes
16:00 Hackathon Ends
__________
<H2 CLASS="p2">Medical Devices on Hand for Your Pleasure and Experimentation (SUBJECT TO CHANGE)</H2>
We'll have quite a nice selection of medical devices available on-site. The devices vary from infusion pumps to patient monitoring and infusion therapy devices, with connectivity ranging from RS-232 to ethernet and Bluetooth LE.  Please find below a list of planned devices, along with links to their manuals/websites/datasheets, so that you can start preparing your attacks! :-)
Philips IntelliVue MX800 <A CLASS="external-link" HREF="https://s3.amazonaws.com/novasano-device-manuals/EQU1200417.pdf" TARGET="_blank" DATA-MSYS-CLICKTRACK="0" REL="nofollow noopener noreferrer">https://s3.amazonaws.com/novasano-device-manuals/EQU1200417.pdf</A>
Fresenius Agilia Link 8+, Volumat MC and Injectomat MC <A CLASS="external-link" HREF="https://s3.amazonaws.com/novasano-device-manuals/EQU1600743.pdf" TARGET="_blank" DATA-MSYS-CLICKTRACK="0" REL="nofollow noopener noreferrer">https://s3.amazonaws.com/novasano-device-manuals/EQU1600743.pdf </A><A CLASS="external-link" HREF="https://s3.amazonaws.com/novasano-device-manuals/EQU1600739.pdf" TARGET="_blank" DATA-MSYS-CLICKTRACK="0" REL="nofollow noopener noreferrer">https://s3.amazonaws.com/novasano-device-manuals/EQU1600739.pdf</A>
B.Braun SpaceStation, Perfusor Space and Infusomat Space <A CLASS="external-link" HREF="https://s3.amazonaws.com/novasano-device-manuals/EQU1402930.pdf" TARGET="_blank" DATA-MSYS-CLICKTRACK="0" REL="nofollow noopener noreferrer">https://s3.amazonaws.com/novasano-device-manuals/EQU1402930.pdf </A><A CLASS="external-link" HREF="https://s3.amazonaws.com/novasano-device-manuals/EQU1500410.pdf" TARGET="_blank" DATA-MSYS-CLICKTRACK="0" REL="nofollow noopener noreferrer">https://s3.amazonaws.com/novasano-device-manuals/EQU1500410.pdf</A>
GE Healthcare Carescape -series device <A CLASS="external-link" HREF="https://s3.amazonaws.com/novasano-device-manuals/EQU1600745.pdf" TARGET="_blank" DATA-MSYS-CLICKTRACK="0" REL="nofollow noopener noreferrer">https://s3.amazonaws.com/novasano-device-manuals/EQU1600745.pdf</A> 
Monidor Monidrop  <A CLASS="external-link" HREF="https://monidor.com/monidrop-en.html" TARGET="_blank" DATA-MSYS-CLICKTRACK="0" REL="nofollow noopener noreferrer">https://monidor.com/monidrop-en.html</A>
Philips CX50 <A CLASS="external-link" HREF="https://s3.amazonaws.com/novasano-device-manuals/1485-1643.pdf" TARGET="_blank" DATA-MSYS-CLICKTRACK="0" REL="nofollow noopener noreferrer">https://s3.amazonaws.com/novasano-device-manuals/1485-1643.pdf</A>
 
SYNOPSYS TESTING AND ANALYSIS TOOLS FOR YOU!
Synopsys will provide you with access to Defensics fuzz testing and Protecode software composition analysis tools. Learn more about Synopsys Defensics <A CLASS="external-link" HREF="https://www.synopsys.com/software-integrity/security-testing/fuzz-testing.html" TARGET="_blank" DATA-MSYS-CLICKTRACK="0" REL="nofollow noopener noreferrer">https://www.synopsys.com/software-integrity/security-testing/fuzz-testing.html</A> and have a look at the video tutorials at <A CLASS="external-link" HREF="https://www.synopsys.com/software-integrity/training/education/video-tutorials.html" TARGET="_blank" DATA-MSYS-CLICKTRACK="0" REL="nofollow noopener noreferrer">https://www.synopsys.com/software-integrity/training/education/video-tutorials.html</A> Also, feel free to bring any open source tools, or commercial tools you have licensed with you.
 
RESPONSIBLE DISCLOSURE
We kindly ask all participants to follow responsible disclosure best practices. For your hosts, responsible and coordinated disclosure is very important. MDISS will collect all vulnerabilities found during the hackathon and report them to the vendor. If you want your name mentioned in a potential security advisory, please let us know. MDISS will be using the MD-VIPER portal for this: <A CLASS="external-link" HREF="https://mdviper.org/" TARGET="_blank" DATA-MSYS-CLICKTRACK="0" REL="nofollow noopener noreferrer">https://mdviper.org/</A>. The vendors may be interested in talking directly to the person(s) who have found a vulnerability, in order to get more information.  Maybe you'll get a job offer out of it ;-)
CONTACT INFO / QUESTIONS
Email MDISS at info@mdiss.org

WHISTL: JYVÄSKYLÄ @ Agora Building Room AgD122.1

Our {communityGuidelinesLink} describe the sort of content we prohibit on Eventbrite. If you suspect an event may be in violation, you can report it to us so we can investigate.

To report other categories of prohibited or illegal content, submit {link}

WHISTL: JYVÄSKYLÄ - A Medical Device Hackathon!

More events from MDISS.org

Discover more events from MDISS.org, from Science & Tech to other experiences you might love.

WHISTL: JYVÄSKYLÄ - A Medical Device Hackathon!

More events from MDISS.org

Discover more events from MDISS.org, from Science & Tech to other experiences you might love.

You might also like...

Browse more events with different dates, prices, and formats to find your next great experience.