Vulnerabilities / Threats
8/5/2011
12:19 PM
Connect Directly
RSS
E-Mail
50%
50%
Repost This

Getting Root On The Human Body

Black Hat researcher shows it is possible to remotely control a diabetic's insulin pump without person's knowledge

BLACK HAT USA 2011 -- Las Vegas -- A security researcher at Black Hat yesterday demonstrated how a hacker could remotely turn off a diabetic person's insulin pump without his knowledge. The findings came after months of research delving into the security of the portable medical devices that monitor diabetics' blood-sugar levels and those that deliver the body-chemistry-balancing insulin necessary to keep those levels in check throughout the day.

Click here for more of Dark Reading's Black Hat articles.

A SCADA security expert by day, Jerome Radcliffe himself is a diabetic and had been curious about the security of the devices that keep him alive. He looked into both continuous glucose monitors (CGMs) and insulin pumps within his research, with the findings from his pump-tinkering offering the most dramatic hackability.

According to Radcliffe, it is possible for a hacker to not only illicitly turn off the pump remotely, with the device only offering a small chirp as a response, but also to remotely manipulate any setting on the pump without it notifying the user at all.

"It's basically like having root on the device, and that's like having root on the chemistry of the human body," he said.

Diabetics today measure their glucose levels either by using blood-testing kits or a CGM that attaches a wire in the body and wirelessly transmits readings to a small pager-like device. Using those findings, a diabetic would then manually trigger the insulin pump he wears throughout the day to deliver the appropriate amount to keep blood-sugar levels stable. When a diabetic doesn't get enough insulin, he can suffer from a potentially fatal high-blood sugar level. But too much insulin can also cause fatally low-blood sugar, and once it is delivered to the body it can't be taken out.

The ability to fully control insulin delivery to a person is "scary" because of the precarious balance a diabetic must walk with the drug in order to stay alive.

In addition to his hack of the insulin pump, Radcliffe also learned how to listen into the transmissions of a CGM device using an oscilloscope. Though he wasn't able to fully hack the device in order to deliver precise false readings, he says the possibility is technically possible, and he was still able to disrupt and jam the device.

Radcliffe says that medical device manufacturers in this space need to be thinking of these types of vulnerabilities as the industry begins to move to support the Juvenile Diabetes Research Foundation's Artificial Pancreas Project. This project hopes to develop the toolset to the point where it is possible to link CGM data directly to insulin pumps to completely automate the insulin-delivery process. It sounds convenient, but if it is possible for hackers to own either device, the diabetic's life could be in grave danger.

"This makes the secure transmission of the CGM much more important," Radcliffe says. "We've got to think about how these technologies talk to each other."

Have a comment on this story? Please click "Discuss" below. If you'd like to contact Dark Reading's editors directly, send us a message.

Comment  | 
Print  | 
More Insights
Register for Dark Reading Newsletters
White Papers
Flash Poll
Current Issue
Video
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2008-3277
Published: 2014-04-15
Untrusted search path vulnerability in a certain Red Hat build script for the ibmssh executable in ibutils packages before ibutils-1.5.7-2.el6 in Red Hat Enterprise Linux (RHEL) 6 and ibutils-1.2-11.2.el5 in Red Hat Enterprise Linux (RHEL) 5 allows local users to gain privileges via a Trojan Horse p...

CVE-2010-2236
Published: 2014-04-15
The monitoring probe display in spacewalk-java before 2.1.148-1 and Red Hat Network (RHN) Satellite 4.0.0 through 4.2.0 and 5.1.0 through 5.3.0, and Proxy 5.3.0, allows remote authenticated users with permissions to administer monitoring probes to execute arbitrary code via unspecified vectors, rela...

CVE-2011-3628
Published: 2014-04-15
Untrusted search path vulnerability in pam_motd (aka the MOTD module) in libpam-modules before 1.1.3-2ubuntu2.1 on Ubuntu 11.10, before 1.1.2-2ubuntu8.4 on Ubuntu 11.04, before 1.1.1-4ubuntu2.4 on Ubuntu 10.10, before 1.1.1-2ubuntu5.4 on Ubuntu 10.04 LTS, and before 0.99.7.1-5ubuntu6.5 on Ubuntu 8.0...

CVE-2012-0214
Published: 2014-04-15
The pkgAcqMetaClearSig::Failed method in apt-pkg/acquire-item.cc in Advanced Package Tool (APT) 0.8.11 through 0.8.15.10 and 0.8.16 before 0.8.16~exp13, when updating from repositories that use InRelease files, allows man-in-the-middle attackers to install arbitrary packages by preventing a user fro...

CVE-2013-4768
Published: 2014-04-15
The web services APIs in Eucalyptus 2.0 through 3.4.1 allow remote attackers to cause a denial of service via vectors related to the "network connection clean up code" and (1) Cloud Controller (CLC), (2) Walrus, (3) Storage Controller (SC), and (4) VMware Broker (VB).

Best of the Web