Red tape keeps Conficker on medical devices

TalkBack 5 of 6:

Next »

« Previous

• Thread View
• Flat View

RE: Red tape keeps Conficker on medical devices

"They should have never, ever been connected to the Internet"

Is incorrect.

The proper way of putting it is that "They should have never, ever been connected to the Internet in a manner that permitted close interaction with the data sets and IP ports associated with the collection and correlation of the data."

Distribution of the data, or correlation of data sets can be published without exposing the underlying data sets or data collection systems to malicious manipulation.
It is the lack of infrastructure, management, and control of the "publishing" vs. the collection and data set systems themselves that become an issue here.
The MRI machine should be permitted to talk to the Medical Center maintained data storage systems, ONLY. These Data Storage systems should only be allowed to talk to "Middleware" systems, also maintained by the entity.
the Middleware or interpretive systems should only be able to talk through port, protocol and data specific IPS systems before it actually leaves the facility.
It is unfortunate that most communities do not recognize the need to issolate their data in this manner, thus the exposure. If, in this era of "virtualization" of services within a single physical server, this was recognized, but the OS and HW manufacturers, then this type of liability could be a thing of the past....unfortunately, this is not true. Nor is it true in companies that do not virtualize servers/services with a single IP address with many ports open to investigation.

Posted by: GDoC   Posted on: 05/05/09  (Edited: 05/05/2009 @ 07:23) You are currently: a Guest | Members login | Terms of Use

Alert moderator to an offensive message

Subscribe to this discussion via Email or RSS

SponsoredWhite Papers, Webcasts, and Downloads

• Why Isn't Server Virtualization Saving Us More? A Few Small Changes May Dramatically Increase Your Efficiency VMware Companies have rapidly adopted server virtualization over the past few ... Download Now
• Three Steps You Need to Know to Stop Data Loss Varonis Sensitive data exposed to misuse or loss... it is the stuff of nightmares ... Download Now
• Finally, an easier way for Small and Mid-Sized Companies to Run Their Business Applications: IBM Smart Business IBM From the PC to the Internet to every piece of hardware and software in ... Download Now