medical-device-security

Embedded AppSec Best Practices

Network Intrusion Detection System for the purpose of anomaly detection in network data based on the SDC11073 protocol

Passive CLI tool for medical device network security assessments. Detects PHI leakage, unencrypted DICOM/HL7/FHIR traffic, and fingerprints medical devices from network traffic. Built for healthcare penetration testers.

Clinical IoT Gateway Attack Simulator — Modbus/MQTT security research tool for medical device environments

Healthcare Cybersecurity Strategist | IoMT & Medical Device Security | Featured Defender — Midnight in the War Room, Black Hat USA 2026

IoMT risk education platform built from 28 years of clinical emergency medicine and lived device dependency. Real failure scenarios. No hypotheticals.

Premarket cybersecurity documentation package for a connected medical device, structured to FD&C Act section 524B: threat model, ISO 14971 security risk assessment, CycloneDX SBOM, post-market plan

Parkinson's tremor monitoring system — Raspberry Pi sensor node, AWS IoT backend, and Flutter app, with full threat model and FDA-style design controls. JHU coursework.

HealthNet-MACGuard - Automated HIPAA compliance tool that scans hospital networks for medical devices with default credentials. Identifies GE, Siemens, Philips, Medtronic devices via MAC OUI.

Premarket cybersecurity documentation scaffolding for medical devices, aligned to FDA 2023 guidance, FD&C 524B, and AAMI TIR57/TIR97.

Framework-specific penetration testing checklists for SOC 2, FDA premarket cybersecurity, and CMMC readiness.

TVRA toolkit combining OpenVAS, SpydeRisk, evidence management and LLM-assisted threat modelling for traceable AI assurance in IoMT and cyber-physical systems.

Aegis-11073-Scanner: brutally technical IEEE 11073 / MBAN cyber-physical auditor for plaintext telemetry, missing AEAD MACs, and >8ms latency anomalies.

A collection of papers written in grad school