Hinweis: Die aktuelle OOP-Konferenz finden Sie hier!
SIGS DATACOM Fachinformationen für IT-Professionals

Die Konferenz für Software-Architekturen
30. Januar - 03. Februar 2017

Marie Moe

Marie Moe cares about public safety and securing systems that may impact human lives, this is why she has joined the grassroots organisation “I Am The Cavalry". Marie is a research scientist at the independent research organisation SINTEF, and has a PhD in information security. She is also an associate professor at the Norwegian University of Science and Technology and teaches a class on incident management and contingency planning. She has experience as a team leader at the Norwegian Cyber Security Centre NorCERT, where she did incident handling of cyberattacks against Norway’s critical infrastructure. She is currently doing research on the security of her own personal critical infrastructure, an implanted pacemaker that is generating every single beat of her heart.

Unpatchable: Living with a Vulnerable Implanted Device

Gradually we are all becoming more and more dependent on machines, we will be able to live longer with an increased quality of life due to machines integrated into our body. However, our dependence on technology grows faster than our ability to secure it, and a security failure of a medical device can have fatal consequences.

Marie’s life depends on the working of a medical device, a pacemaker that generates every single beat of her heart. As a security-professional Marie is worried about her heart's attack surface. How can she trust the machine inside her body, when it is running on proprietary code and there is no transparency? This is why she acquired medical devices that can communicate with her pacemaker, and started a project on investigating the security of her medical implant, together with a team of volunteer hackers.

This talk is about Marie's personal experience with being the host of a vulnerable medical implant, and why she decided to start a hacking project on the security of her own personal critical infrastructure.