Recently, GE Aestiva and GE Aespire anesthesia systems have been found to have firmware vulnerabilities that can control the alarm system and change the concentration of anesthesia gas through external intervention. It is reported that as long as the attacker is in the same network as the device, the vulnerability can be used to attack. If the anesthesia system is connected to the terminal server, it may cause greater losses.
The safety of key medical and technical departments and medical equipment has always been a challenge to the construction of hospital network security. Take the hospital radiology department as an example: First of all, the CT and other devices use Windows + Linux dual system, which has the risk of vulnerability utilization and virus infection, and because the device comes with special software, it is generally difficult to install anti-virus software and client software, which makes the equipment's own security difficult to guarantee. Secondly, because the radiology department needs to use high-risk ports frequently when conducting business, therefore, the hospital information Department often cannot deploy effective strategies on the network, resulting in CT and other equipment running naked in the intranet. At the same time, radiology is also facing the risk of virus transmission caused by temporary PC access, the security risks brought by 4G operation and maintenance channels, and the potential threat to business security and stable operation.
To this end, Dipu Technology has launched a self-security network solution for medical technology departments through in-depth investigation of hospital scenes, and realized the safety protection of medical technology equipment through whitelist thinking. By deploying self-safety controllers and self-safety switches, manufacturers and models of medical equipment (such as Siemens CT equipment, general DR equipment, etc.) are automatically collected and identified, and on this basis, the protocol whitelist is used, only the credit terminal transmits the traffic of the credit, which naturally prevents the threat from spreading in the network.
At the same time, in view of the business characteristics of radiology, Dipu technology and medical technology department's self-security network solution has made in-depth scene adaptation:
■ The self-security controller can flexibly choose the online or bypass deployment scheme to realize self-security reinforcement with minimal network changes;
■ White list-based business processing mode and high-performance hardware platform to meet the low-delay and large-flow transmission requirements of radiology;
■ Self-safe switches are mute, fan-free, and wide-temperature designs that can be flexibly deployed in weak-current wells or workstations.
■ In addition, Dipu technology also provides a business threat perception system for medical technology departments to help users see assets, clarify business and perceive threats through a visual interface.
In the hospital scenario, in addition to the medical technology department, Dipu technology's self-security network solution can also build a simple operation and maintenance, visual and controllable, and secure intranet architecture for the hospital, it has been applied to Zhejiang Provincial People's Hospital, Hangzhou Hospital of Traditional Chinese medicine and other provincial and municipal top three hospitals to help hospital Internet plus medical and health construction.
