Pedro Umbelino
Pedro Umbelino holds the position of Principal Research Scientist at Bitsight and co-chairs the FIRST Time Security SIG.
His eclectic curiosity has led to the uncovering of vulnerabilities spanning a variety of technologies, highlighting critical issues in multiple devices and software, ranging from your everyday smartphone to household smart vacuums, from the intricacies of HTTP servers to the nuances of NFC radio frequencies, from vehicle GPS trackers to blowing up gas stations ATGs.
Pedro is committed to advancing cybersecurity knowledge and somehow help fixing Y2K38.
He has shared his findings at prominent conferences, including Bsides Lisbon, BruCON, Critical Effect, DEFCON, FIRST, Hack.lu, RSAC or Underground Economy.
Session
Hospitals are a perfect example of a complex System of Systems. Their infrastructure is like a small city, with multiple, independent, operationally distinct systems that interact to deliver healthcare services to users at the end of the day. No single system controls the whole, instead, clinical services emerge from the coordinated behavior of clinical, administrative, and logistical subsystems.
This also mean multiple single points of failure. And the convergence of IT and OT in this small cities we call hospitals is ramping up their cascading risk profiles. In this talk, we will explore 1000 ways do die, from delayed surgeries caused by a ransomware attack on the scheduling software to patient evacuation from HVAC systems, from infusion pumps being manipulated to target kills to medical data exfiltration to some country in Asia, from backup generator damage to DICOM clinical image manipulation.
We will marathon through many different scenarios, protocols and technologies, highlights as much as possible about the challenges hospitals face in this world where everything seems connected, online and at the reach of a button.