All ecosystems
Ecosystem
Connected & Cyber-Physical Devices
The full cybersecurity stack for connected medical devices: SBOMs, threat modeling, secure-by-design, vulnerability disclosure, and the FDA, IMDRF, and HSCC guidance that defines today's expectations.
66 terms
Regulatory1
Cybersecurity61
- AAMI SW96
- AAMI TIR57
- AAMI TIR97(TIR97)
- Brainjacking
- CISA Known Exploited Vulnerabilities Catalog(KEV)
- Code Signing
- Common Vulnerabilities and Exposures(CVE)
- Common Vulnerability Scoring System(CVSS)
- Common Weakness Enumeration(CWE)
- Coordinated Vulnerability Disclosure(CVD)
- Cryptographic Agility
- CycloneDX
- De-Identification of Health Data
- FedRAMP(FedRAMP)
- Hardcoded Credentials
- Hardware Root of Trust(HRoT)
- Health Industry Cybersecurity Practices(HICP)
- Health Information Sharing and Analysis Center(H-ISAC)
- Healthcare and Public Health Cybersecurity Performance Goals(HPH-CPG)
- HIPAA(HIPAA)
- HITECH Act(HITECH)
- HITRUST CSF(HITRUST)
- HSCC Joint Security Plan(HSCC JSP)
- ICS Medical Advisory(ICSMA)
- IEC 80001-1
- IEC 81001-5-1
- IMDRF Principles and Practices for Medical Device Cybersecurity
- ISO/IEC 27001(ISO 27001)
- Legacy Device Cybersecurity
- LINDDUN
- Manufacturer Disclosure Statement for Medical Device Security(MDS2)
- Medhacking
- Medjacking
- MITRE ATT&CK(ATT&CK)
- MITRE D3FEND(D3FEND)
- NIST Cybersecurity Framework(NIST CSF)
- NIST IR 8473, Cybersecurity Framework Profile for HPH(NIST IR 8473)
- NIST SP 800-53 / 800-171(NIST 800-53/171)
- Over-the-Air Updates(OTA)
- OWASP IoT and Embedded Application Security
- Patchability
- Penetration Testing
- PHI and ePHI
- Postmarket Cybersecurity Management
- Premarket Cybersecurity Submission
- Refuse to Accept (Cybersecurity)(RTA (cyber))
- SAST and DAST
- Section 524B of the FD&C Act(524B)
- Secure Boot
- Secure Product Development Framework(SPDF)
- Secure Software Development Framework(SSDF)
- Side-Channel Attack
- SOC 2
- Software Bill of Materials(SBOM)
- Software Safety Case
- SPDX(SPDX)
- STRIDE Threat Model(STRIDE)
- Supply-chain Levels for Software Artifacts(SLSA)
- Threat Modeling
- Vulnerability Exploitability eXchange(VEX)
- Zero Trust Architecture(ZTA)