CyMed: A framework for testing connected medical devices

Abstract

Connected Medical Devices (CMDs) significantly benefit patients but are also vulnerable to malfunctions that can harm. Despite strict safety regulations for market entry, there’s a notable shortage of specific cybersecurity frameworks for CMDs. Existing regulations on cybersecurity practices are often broad and lack detailed implementation steps. This paper introduces the CyMed framework, designed for vendors and end-users, offering explicit strategies to enhance the cybersecurity of CMDs. The effectiveness of CyMed is assessed through practical testing and expert interviews.