IEEE Proposes Standards For Safe, Connected Health Products

The IEEE and NSF released a proposed "building code" for medical device software security to address widespread vulnerabilities in connected health devices, recommending secure coding practices, vulnerability scanning, signed firmware updates, application whitelisting, and least-privilege policies. The article references FDA and DHS advisories—highlighting exploitable infusion pump software—and urges manufacturers to include cybersecurity controls and patching plans in premarket submissions.