Day 2

Hacking DICOM: the hospital’s standard

Track:
Amazon
Session complexity:
Time:
10:45
11:35
Have you ever thought that radiographs were just JPG images?

Medical images transmitted within hospitals, such as X-rays or ultrasounds, are not in the common image formats but are in DICOM (Digital Imaging and Communications in Medicine) format.

DICOM is the standard for the transmission, storage, retrieval, printing, processing, and visualization of medical images and their information.

Thanks to the implementation of this standard, technology in the health field was revolutionized, replacing physical radiographs with digital radiographs with all the implied data. Today, DICOM is recognized as the ISO 12052 standard. How can DICOM configurations affect hospital data breaches? During this presentation, we will focus on how an attacker, taking advantage of these weaknesses, could quickly access hospital or health center data and how this could affect patient safety.

The presentation will discuss the Digital Imaging and Communications in Medicine (DICOM) protocol, which is used for the transmission, storage, retrieval, printing, processing, and visualization of medical images and their associated data.

We will highlight the vulnerabilities in DICOM that can expose medical imaging equipment to cyberattacks, compromising patient data and safety.

We will also discuss the potential abuse cases that can occur due to these vulnerabilities and propose countermeasures to protect the healthcare environment, including strong passwords, DICOM communication encryption, and periodic audits of the medical network.

Speakers in this session