Philips follows up #WeHeartHackers pledge by placing product under the cybersecurity microscope at DEF CON 2019

Philips will participate in the FDA-backed Biohacking Village: Device Lab ‘Capture the Flag’ challenge at DEF CON 27 (August 8-11, 2019, Las Vegas, US) – a unique exercise designed to champion the principles of trustworthiness, transparency, and resilience that underlie the FDA’s approach to medical device manufacturer cybersecurity. During the event, participants will seek to gain cyber-access to an array of medical devices to gain valuable information on how to help to protect them with new techniques. Participants in the event agree to abide by Coordinated Vulnerability Disclosure protocols, for the collaborative identification, resolution and publication of potential vulnerabilities in a controlled and responsible manner. The announcement follows up on a commitment made earlier this year by Michael McNeil, Philips’ Head of Global Product Security & Services, to support the FDA’s #WeHeartHackers event at DEF CON. 

Michael also stressed the importance of medical device cybersecurity at the Information Security Media Group’s Healthcare Security Summit: New York (June 25, 2019) during a ‘state of the union’ discussion on medical device security, in which he expressed the opinion that the medical device industry is 10 to 15 years behind cybersecurity advances in other industries such as financial services. In a video interview with Information Security Media Group, he also reviews public-private medical device cybersecurity initiatives and best practices, and introduces a concept that Philips calls ‘security ninjas’ – a dedicated product security team that helps Philips to develop and test medical devices in line with best-in-class processes and outcomes. 

For more information about Philips’ cybersecurity efforts, visit the Philips Product Security webpage and read Philips’ Product Security statement and white papers.