Security Analysis of Medical Devices within Wireless Body Area Networks and Mobile Health Applications

Body Area Networks (BAN) consisting of medical devices that interact with human body have been developed in accordance with technical developments in healthcare area. Providing this, devices automatically measuring human blood pressure or insulin value and feeding data into hospital management systems have started being used in daily-life. These medical devices help to improve health status of patients, however they are also subject to risks caused by unauthorized intervention. In this study, medical devices used in Wireless Body Area Networks (WBAN) and mobile health applications have been analyzed according to different security requirements and aspects. Initially, all threats and risks faced by remotely accessible medical devices in WBAN have been identified by applying WBAN threat modeling. Security analysis and penetration testing of mobile health applications running on smart devices have been conducted. In addition, secure architecture principles for WBAN design have been specified in detail