An open test bed for medical device integration and coordination

King, A. C.; Procter, Sam; Andresen, Dan; Hatcliff, John; Warren, Steve; Spees, William; Jetley, Raoul; Jones, Paul; Weininger, Sandy

doi:10.1109/icse-companion.2009.5070972

Cited by 57 publications

(48 citation statements)

References 8 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…We implemented trace recording, reconstruction, and causality analysis modules based on the publicly available medical device coordination framework (MDCF) [12]. MDCF is a message exchange platform for medical devices operating in a cooperative fashion.…”

Section: Implementing Causality Analyzermentioning

confidence: 99%

A Hybrid Approach to Causality Analysis

Wang

Geoffroy

Gößler

et al. 2015

Runtime Verification

View full text Add to dashboard Cite

In component-based safety-critical systems, when a system safety property is violated, it is necessary to analyze which components are the cause. Given a system execution trace that exhibits component faults leading to a property violation, our causality analysis formalizes a notion of counterfactual reasoning (\what would the system behavior be if a component had been correct?") and algorithmically derives such alternative system behaviors, without re-executing the system itself. In this paper, we show that we can improve precision of the analysis if 1) we can emulate execution of components instead of relying on their contracts, and 2) take into consideration input/output dependencies between components to avoid blaming components for faults induced by other components. We demonstrate the utility of the extended analysis with a case study for a closed-loop patient-controlled analgesia system. Abstract. In component-based safety-critical systems, when a system safety property is violated, it is necessary to analyze which components are the cause. Given a system execution trace that exhibits component faults leading to a property violation, our causality analysis formalizes a notion of counterfactual reasoning ("what would the system behavior be if a component had been correct?") and algorithmically derives such alternative system behaviors, without re-executing the system itself. In this paper, we show that we can improve precision of the analysis if 1) we can emulate execution of components instead of relying on their contracts, and 2) take into consideration input/output dependencies between components to avoid blaming components for faults induced by other components. We demonstrate the utility of the extended analysis with a case study for a closed-loop patient-controlled analgesia system.

show abstract

Section: Implementing Causality Analyzermentioning

confidence: 99%

A Hybrid Approach to Causality Analysis

Wang

Geoffroy

Gößler

et al. 2015

Runtime Verification

View full text Add to dashboard Cite

show abstract

“…King et al [18] present an open-source Medical Device Coordination Framework (MDCF) for exploring solutions related to designing, implementing, verifying, and certifying systems of integrated medical devices. The goal of this project is to describe some of the details of enabling plug-n-play interoperability between medical devices that the ICE standard proposes.…”

Section: Related Workmentioning

confidence: 99%

Understanding the security of interoperable medical devices using attack graphs

Taylor

Venkatasubramanian

Shue

2014

Proceedings of the 3rd International Conference on High Confidence Networked Systems

View full text Add to dashboard Cite

Medical device interoperability is an increasingly prevalent example of how computing and information technology will revolutionize and streamline medical care. The overarching goal of interoperable medical devices (IMDs) is increased safety, usability, decision support, and a decrease in false alarms and clinician cognitive workload. One aspect that has not been considered thus far is ensuring IMDs do not inadvertently harm patients in the presence of malicious adversaries. Security for medical devices has gained some traction in the recent years following some well-publicized attacks on individual devices, such as pacemakers and insulin pumps. This has resulted in solutions being proposed for securing these devices, usually in stand-alone mode. However, the introduction of interoperability makes medical devices increasingly connected and dependent on each other. Therefore, security attacks on IMDs becomes easier to mount and in a stealthy manner.This work outlines our effort in understanding the threats faced by IMDs, an important first step in eventually designing secure interoperability architectures. In this regard, we present: (1) a detailed attack graph-based analysis of threats on a specific interoperability environment based on providing patients pain medication (PCA) under various levels of interoperability from data aggregation to fully closedloop control, (2) a description of the mitigation approaches possible for each of class of attack vectors identified, and (3) lessons learned from this experience which can be leveraged for improving existing IMD architectures. Our analysis demonstrates that even if we use provably safe medical systems in an interoperable setting with a safe interoperability engine, the presence of malicious behavior may render the entire setup unsafe for the patients.

show abstract

“…There have been a number of high-level proposals for how to achieve safe on-demand medical systems [20,11,25,5]. These proposals all involve separating system functionality between interoperable componenets: coordination applications (apps), medical devices, and a Medical Application Platform (MAP).…”

Section: Introductionmentioning

confidence: 99%

A Modal Specification Approach for On-Demand Medical Systems

King

Sokolsky

et al. 2014

Foundations of Health Information Engineering and Systems

View full text Add to dashboard Cite

The on-demand approach, where systems are assembled from components by lay users, has seen success in the consumer electronics industry. Currently, there is growing demand for on-demand capabilities in medical systems so caregivers can create larger medical systems from smaller medical devices. Unlike consumer electronics, medical systems pose challenges for the on-demand approach due to attributes such as device complexity, device variability and safety requirements. In this paper, we propose a formal specification language for on-demand (medical) systems. Our approach is based on the formalism of Modal I/O Automata, which allows system designers to express complex device requirements and can be used to reason about safety and liveness properties of on-demand medical systems directly from their specifications. We illustrate the applicability of our approach through a case study of a closed-loop patient controlled analgesia system. we propose a formal speci cation language for on-demand (medical) systems. Our approach is based on the formalism of Modal I/O Automata, which allows system designers to express complex device requirements and can be used to reason about safety and liveness properties of ondemand medical systems directly from their speci cations. We illustrate the applicability of our approach through a case study of a closed-loop patient controlled analgesia system.

show abstract

An open test bed for medical device integration and coordination

Cited by 57 publications

References 8 publications

A Hybrid Approach to Causality Analysis

A Hybrid Approach to Causality Analysis

Understanding the security of interoperable medical devices using attack graphs

A Modal Specification Approach for On-Demand Medical Systems

Contact Info

Product

Resources

About