NIST SPECIAL PUBLICATION 1800-8

---

Securing Wireless Infusion Pumps

in Healthcare Delivery Organizations

---

Includes Executive Summary (A); Approach, Architecture, and Security Characteristics (B); and How-To Guides (C)

Gavin O’Brien

Sallie Edwards

Kevin Littlefield

Neil McNab

Sue Wang

Kangmin Zheng

This publication is available free of charge from: https://doi.org/10.6028/NIST.SP.1800-8

NIST SPECIAL PUBLICATION 1800-8

Securing Wireless Infusion Pumps in Healthcare Delivery Organizations

Includes Executive Summary (A); Approach, Architecture, and Security Characteristics (B); and How-To Guides (C)

Gavin O’Brien

National Cybersecurity Center of Excellence

Information Technology Laboratory

Sallie Edwards

Kevin Littlefield

Neil McNab

Sue Wang

Kangmin Zheng

The MITRE Corporation

McLean, VA

August 2018

U.S. Department of Commerce

Wilbur Ross, Secretary

National Institute of Standards and Technology

Walter G. Copan, Undersecretary of Commerce for Standards and Technology and Director

• Volume A
  • Executive Summary
    • Challenge
    • Solution
    • Benefits
    • Share Your Feedback
    • Technology Partners/Collaborators

• Volume B
  • 1. Summary
    • 1.1. Challenge
    • 1.2. Solution
    • 1.3. Benefits
  • 2. How to Use This Guide
    • 2.1. Typographic Conventions
  • 3. Approach
    • 3.1. Audience
    • 3.2. Scope
    • 3.3. Assumptions
    • 3.4. Security
    • 3.5. Existing Infrastructure
    • 3.6. Technical Implementation
    • 3.7. Capability Variation
  • 4. Risk Assessment and Mitigation
    • 4.1. Risk Assessments
      • 4.1.1. Industry Analysis of Risk
      • 4.1.2. Questionnaire-Based Risk Assessment
      • 4.1.3. Assets
      • 4.1.4. Threats
      • 4.1.5. Vulnerabilities
      • 4.1.6. Risks
      • 4.1.7. Recommendations and Best Practices
    • 4.2. Risk Response Strategy
      • 4.2.1. Risk Mitigation
    • 4.3. Security Characteristics and Controls Mapping
    • 4.4. Technologies
  • 5. Architecture
    • 5.1. Basic System
    • 5.2. Data Flow
    • 5.3. Cybersecurity Controls
      • 5.3.1. Network Controls
      • 5.3.2. Pump Controls
      • 5.3.3. Pump Server Controls
      • 5.3.4. Enterprise-Level Controls
    • 5.4. Final Architecture
  • 6. Life-Cycle Cybersecurity Issues
    • 6.1. Procurement
    • 6.2. Operation
    • 6.3. Maintenance
    • 6.4. Disposal
  • 7. Security Characteristics Analysis
    • 7.1. Assumptions and Limitations
    • 7.2. Application of Security Characteristics
      • 7.2.1. Supported NIST Cybersecurity Framework Subcategories
    • 7.3. Security Analysis Summary
  • 8. Functional Evaluation
    • 8.1. Functional Test Plan
      • 8.1.1. Test Case WIP-1
      • 8.1.2. Test Case WIP-2
      • 8.1.3. Test Case WIP-3
      • 8.1.4. Test Case WIP-4
      • 8.1.5. Test Case WIP-5
      • 8.1.6. Test Case WIP-6
      • 8.1.7. Test Case WIP-7
  • 9. Future Considerations

• Volume C
  • 1. Introduction
    • 1.1. Practice Guide Structure
    • 1.2. Typographical Conventions
    • 1.3. How-To Overview
    • 1.4. Logical Architecture Summary
  • 2. Product Installation Guides
    • 2.1. The Core Network
      • 2.1.1. Cisco ASA Baseline Configuration
      • 2.1.2. External Firewall and Guest Network
      • 2.1.3. Enterprise Services
      • 2.1.4. Biomedical Engineering Network
      • 2.1.5. Medical Devices
      • 2.1.6. Cisco Catalyst Switch Configuration
      • 2.1.7. Cisco Enterprise Wi-Fi Infrastructure
      • 2.1.8. TDi ConsoleWorks External Remote Access
    • 2.2. Infusion Pump and Pump Server
      • 2.2.1. Infusion Pumps
      • 2.2.2. Infusion Pumps Server Systems
    • 2.3. Identity Services
      • 2.3.1. Cisco Identity Service Engine
      • 2.3.2. DigiCert Certificate Authority
    • 2.4. Symantec Endpoint Protection and Intrusion Detection
      • 2.4.1. Symantec Data Center Security: Server Advanced
      • 2.4.2. Symantec Endpoint Protection Manager
      • 2.4.3. Symantec Advanced Threat Protection: Network
    • 2.5. Risk Assessment Tools
      • 2.5.1. PFP Device Monitoring System: pMon 751 and P2Scan
      • 2.5.2. Clearwater IRM|Analysis™ Software
      • 2.5.3. MDISS MDRAP