Medical Device Cybersecurity Engineering

BMG 525 'Medical Device Cybersecurity Engineering' is a graduate-level course designed for professionals seeking to specialize in securing critical healthcare technology. This course delves into advanced methodologies for protecting medical devices from cyber threats, emphasizing a proactive, engineering-centric approach. Students will gain expertise in constructing robust threat models, implementing secure design principles from concept to deployment, and establishing effective vulnerability management programs. A significant focus will be placed on architectural segmentation strategies to isolate and protect sensitive device components and patient data. Through rigorous theoretical instruction and practical application, students will develop the skills necessary to contribute to the development of safe, secure, and compliant medical devices, ensuring patient safety and data integrity in an increasingly connected healthcare environment.

Course outline

Lectures, virtual labs, and graded assignments — completed in your browser.

01Lesson 1: Introduction to Medical Device Cybersecurity Ecosystem and Regulatory Landscapelecture

02Lesson 2: Foundational Concepts in Medical Device Risk Managementlecture

03Lesson 3: Advanced Threat Modeling for Complex Medical Device Systemslecture

04Hands-on Lab: Developing and Analyzing Threat Models for an Integrated Medical Systemlab

05Lesson 5: Principles of Secure Design for Medical Device Hardware and Softwarelecture

06Lesson 6: Cryptographic Controls and Secure Communication Protocols in Medical Deviceslecture

07Lesson 7: Implementing Secure Software Development Lifecycle Practiceslecture

08Hands-on Lab: Identifying and Mitigating Vulnerabilities in Medical Device Codelab

09Lesson 9: Vulnerability Management Strategies and Post-Market Surveillancelecture

10Lesson 10: Network Segmentation and Isolation Architectures for Medical Device Securitylecture

11Hands-on Lab: Designing and Testing Network Segmentation for a Healthcare Environmentlab

12Lesson 12: Incident Response and Recovery Planning for Medical Device Breacheslecture

13Lesson 13: Compliance, Auditing, and Continuous Security Improvementlecture

14Capstone Service Project: Comprehensive Medical Device Cybersecurity Engineering Planassignment

Syllabus

["Week 1: Lesson 1: Introduction to Medical Device Cybersecurity Ecosystem and Regulatory Landscape","Week 2: Lesson 2: Foundational Concepts in Medical Device Risk Management","Week 3: Lesson 3: Advanced Threat Modeling for Complex Medical Device Systems","Week 4: Hands-on Lab: Developing and Analyzing Threat Models for an Integrated Medical System","Week 5: Lesson 5: Principles of Secure Design for Medical Device Hardware and Software","Week 6: Lesson 6: Cryptographic Controls and Secure Communication Protocols in Medical Devices","Week 7: Lesson 7: Implementing Secure Software Development Lifecycle Practices","Week 8: Hands-on Lab: Identifying and Mitigating Vulnerabilities in Medical Device Code","Week 9: Lesson 9: Vulnerability Management Strategies and Post-Market Surveillance","Week 10: Lesson 10: Network Segmentation and Isolation Architectures for Medical Device Security","Week 11: Hands-on Lab: Designing and Testing Network Segmentation for a Healthcare Environment","Week 12: Lesson 12: Incident Response and Recovery Planning for Medical Device Breaches","Week 13: Lesson 13: Compliance, Auditing, and Continuous Security Improvement","Week 14: Capstone Service Project: Comprehensive Medical Device Cybersecurity Engineering Plan"]