Navigating the medical device landscape can be complex, so it’s especially important to select a partner with medical device security knowledge and expertise.. Black Duck is a key contributor in developing the secure design guidance documentation put out by leading agencies, consortiums, and working groups. Also, you can feel confident in partnering with us knowing that the world’s leading medical device manufacturers trust us to secure their most critical software devices and applications.
The guidance and standards outlined by the FDA, IEEE, NTIA, MDISS, MDIC, AAMI, and NIST can be difficult to implement. Our medical device security services team of industry experts is poised to help you address:
From security program strategy and planning to device- and protocol-specific security testing, our medical device security solutions are tailored to your exact cyber security needs.
Static analysis helps you find and fix security defects in your proprietary code as it’s built. Uncover even more when you integrate software composition analysis (SCA). Black Duck® SCA generates a comprehensive open source bill of materials (BOM), which you can easily export in SPDX format to help you build out a full software bill of materials (SBOM). Combining SAST and SCA allows you to track and manage security, quality, and license risks and meet anticipated pre-market guidance outlined by the FDA.
Medical devices use a diverse set of protocols, such as Bluetooth, HL7, and DICOM, that have the potential to carry zero-day vulnerabilities. With Defensics® Fuzzing, you can proactively detect security defects during development and testing and avoid having to respond to breaches and device failures in the field.
Black Duck SCA
Black Duck Static Analysis
Defensics Fuzzing
Five best practices for medical device security
Build security into connected medical devices
Cheat Sheet: Your Recipe for an Actionable SBOM
Securing Connected Medical Devices for FDA Submissions