Medical Cyber-Physical Systems Development: A Forensics-Driven Approach
This addresses security and forensic investigation problems for medical organizations using MCPS, but it is incremental as it builds on existing forensics concepts.
The paper tackles the challenge of investigating security breaches in Medical Cyber-Physical Systems (MCPS) by proposing a forensics-driven approach to integrate forensics principles into MCPS design and development, aiming to strengthen investigative capabilities.
The synthesis of technology and the medical industry has partly contributed to the increasing interest in Medical Cyber-Physical Systems (MCPS). While these systems provide benefits to patients and professionals, they also introduce new attack vectors for malicious actors (e.g. financially-and/or criminally-motivated actors). A successful breach involving a MCPS can impact patient data and system availability. The complexity and operating requirements of a MCPS complicates digital investigations. Coupling this information with the potentially vast amounts of information that a MCPS produces and/or has access to is generating discussions on, not only, how to compromise these systems but, more importantly, how to investigate these systems. The paper proposes the integration of forensics principles and concepts into the design and development of a MCPS to strengthen an organization's investigative posture. The framework sets the foundation for future research in the refinement of specific solutions for MCPS investigations.