Work

Security Driven Product Design for Open-Source Medical Syringe Infusion Pumps

Year: 2025

Type: conference-paper

Abstract: Open-source medical devices, including syringe infusion pumps, have gained popularity due to their cost-effectiveness and adaptability. However, integrating open-source components, such as their open-source software controlling system, raises significant cybersecurity concerns. This paper investigates cybersecurity vulnerability targeting an open-source medical syringe pump. We present a DDoS attack that alters the pump's operation, potentially leading to over-infusion or under-infusion of medication. We then assess the implications of these security flaws on patient safety and device reliability. Based on this assessment, we propose mitigation strategies that involve hardware modifications to enhance the device's resistance to such attacks and change designs for the 3D printing hardware pieces for open electronics. This research highlights the urgent need for security-driven product design, where security considerations guide the healthcare product's design choices and implementation.

Source: IEEE Integrated STEM Education Conference (ISEC)

DOI: 10.1109/isec64801.2025.11147320

Authors: Wei Lu, Elvin Colon, James Fitzpatrick, Lisa Hix, Curtis Mead

Institutions: Keene State College, University System of New Hampshire

Language: English

Topic: Information and Cyber Security

Subfield: Information Systems

Field: Computer Science

Domain: Physical Sciences

SDGs: Good health and well-being, Industry, innovation and infrastructure

Open Access status: green

Funders: National Institutes of Health, National Institute of Biomedical Imaging and Bioengineering