Rigorous modeling and analysis of interoperable medical devices

• Atif Mashkoor
• Johannes Sametinger

Medical Devices (MDs) are by definition safety-critical and increasingly also become security-critical when interoperating, i.e., when communicating in some form. Finding errors, inconsistencies, or vulnerabilities in MDs before deployment can significantly decrease costs, and increase quality and reliability. In this paper, we present a rigorous “correct-by-construction” approach for modeling and analyzing interoperating MDs by considering various abstraction levels, i.e., the functional, the safety, and the security level. The approach is illustrated using sample requirements of a hemodialysis device.