{"id":17576,"date":"2020-01-28T10:52:23","date_gmt":"2020-01-28T18:52:23","guid":{"rendered":"https:\/\/www.palada.net\/index.php\/2020\/01\/28\/news-11311\/"},"modified":"2020-01-28T10:52:23","modified_gmt":"2020-01-28T18:52:23","slug":"news-11311","status":"publish","type":"post","link":"http:\/\/www.palada.net\/index.php\/2020\/01\/28\/news-11311\/","title":{"rendered":"VB2019 paper: Medical IoT for diabetes and cybercrime"},"content":{"rendered":"<p>It is estimated that between 8% and 9% of the population worldwide suffers with some form of diabetes.<\/p>\n<p>People with type 1 diabetes typically have to measure their blood glucose levels several times a day and adjust their treatment according to the results. Traditionally, this has been done by means of the person pricking their finger to draw a drop of blood, from which the levels of glucose are measured. A relatively recent innovation that can help make this process less arduous \u2013 and less intrusive\u00a0\u2013 is an IoT device that automatically measures the levels of glucose in a person&#8217;s blood without the need for them to prick their finger.<\/p>\n<p>Clearly a welcome innovation for those affected by the disease, but are there any security risks?<\/p>\n<p>In a paper written for VB2019,<em> Fortinet<\/em> researchers Axelle Apvrille and Aamir Lakhani asked: what threats are faced by diabetes sufferers who want to use medical IoT devices?<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" style=\"display: block; margin-left: auto; margin-right: auto;\" src=\"https:\/\/www.virusbulletin.com\/files\/cache\/79d4d60e9e388c8d48df99d49e992c20_f3945.png\" alt=\"threats-overview.png\" width=\"480\" height=\"321\" \/><\/p>\n<p class=\"centered-caption\">Privacy and security threats on a Flash Glucose Monitoring system.<\/p>\n<p>The researchers looked at potential threats from three different angles: the security and privacy the IoT devices themselves, the existence of diabetic-related pieces of malware, and the trading in patient records on the Darknet.\u00a0<\/p>\n<p>Today we publish the researchers&#8217; paper in both <a title=\"VB2019 paper: Medical IoT for diabetes and cybercrime\" href=\"https:\/\/www.virusbulletin.com\/virusbulletin\/2020\/01\/vb2019-paper-medical-iot-diabetes-and-cybercrime\/\">HTML<\/a> and <a href=\"https:\/\/www.virusbulletin.com\/uploads\/pdf\/magazine\/2019\/VB2019-Apvrille-Lakhani.pdf\" target=\"_blank\">PDF<\/a> format, as well as the recording of the presentation given by Axelle in London.<\/p>\n<p>\u00a0<\/p>\n<p>\u00a0<\/p>\n<p style=\"text-align: center;\" width=\"100%\" height=\"420\"><iframe loading=\"lazy\" src=\"https:\/\/www.youtube.com\/embed\/gKE-Tli4AQc\" frameborder=\"0\" width=\"100%\" height=\"420\" style=\"\"> <\/iframe><\/p>\n<p>\u00a0<\/p>\n<p><em><em>Have you carried out research that furthers our understanding of the threat landscape? <\/em>The <a title=\"VB2020 call for papers - now open!\" href=\"https:\/\/www.virusbulletin.com\/blog\/2019\/12\/vb2020-call-papers-now-open\/\">Call for Papers<\/a> for VB2020 in Dublin is open! Submit your abstract before 15 March for a chance to make it onto the programme of one of the most international threat intelligence conferences.<\/em><\/p>\n<p>outertext<br \/><a href=\"https:\/\/www.virusbulletin.com\/blog\/2020\/01\/vb2019-paper-medical-iot-diabetes-and-cybercrime\/\" target=\"bwo\" >https:\/\/www.virusbulletin.com\/rss<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p><img decoding=\"async\" src=\"https:\/\/www.virusbulletin.com\/files\/cache\/79d4d60e9e388c8d48df99d49e992c20_f3945.png\"\/><br \/>                                 At VB2019 in London, Fortinet researcher Axelle Apvrille presented a paper co-written with Aamir Lakhani that looked at the threats faced by those who use medical IoT devices to help manage their diabetes. Today we publish the researchers&#8217; paper, as well as the recording of Axelle&#8217;s presentation.                <\/p>\n<p>                 <a href=\"https:\/\/www.virusbulletin.com\/blog\/2020\/01\/vb2019-paper-medical-iot-diabetes-and-cybercrime\/\">Read more<\/a>                                <\/p>\n","protected":false},"author":4,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"colormag_page_container_layout":"default_layout","colormag_page_sidebar_layout":"default_layout","footnotes":""},"categories":[23177,10378,23176],"tags":[],"class_list":["post-17576","post","type-post","status-publish","format-standard","hentry","category-magazine","category-security","category-virusbulletin"],"_links":{"self":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/17576","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/comments?post=17576"}],"version-history":[{"count":0,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/17576\/revisions"}],"wp:attachment":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/media?parent=17576"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/categories?post=17576"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/tags?post=17576"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}