Medical device security: threats and solutions

Brought to you by The Healthcare Group

Join CW in debating the medical device security threats and solutions for the internet of hospitals and patients.Confirmed speakers include Hugo Vincent of Arm, Pat Nash of InVMA, Andrew Tsonchev of Darktrace and Michelle Ellerbeck of Cambridge University Hospitals NHS Foundation Trust

Registration for this event is now closed.

About the event

In previous CW SIG presentations we have heard about the need and capability to provide patients with smart medical devices that can quantify and curate chronic illnesses. The benefits of empowered patients to gain insight into their day to day rhythms of chronic disease is widely understood. The ability to collect data from medical devices and use that data to enhance treatment and give a predictive insight can give clinicians a window into the patient’s life separate from the clinical visit. With all these benefits, this event asks the question of whether we can trust medical devices from a cyber environment that is intent on penetrating all IT system, from hospitals to baby monitors.

In this regulated risk aware health market, the event will provide a wide insight into what industry, enterprise and authorities are doing to make health solutions safe whilst giving patients the full benefits of being responsibly connected.

You can follow @cambwireless on Twitter and tweet about this event using #CWHealthcare.

Sponsored by Arm

We design the technology that lies at the heart of advanced digital products.

View profile


Expand all

The information supplied below may be subject to change before the event.


Registration and networking with lunch


Introduction to Healthcare from Peter Ferguson of Arm Limited


Security Challenges and Opportunities for Connected Medical Devices; Hugo Vincent, Principal Research Engineer, Arm Research

While connected devices and IoT are still relatively new fields, there is already general acceptance of a set of best practices for how to secure them, as well as roadmaps across the industry to drive up the level of security achieved over time. However, medical devices can often have different risk/reward and cost sensitivities compared to many other uses for IoT. This talk will summarise industry best practices for achieving security in connected devices, relate these to the risks and benefits unique to medical devices, and explore some of the challenges and opportunities that emerge.


Welcome from event supporter, Arm Limited




Building Secure IoT Medical Devices; Pat Nash, Managing Director, InVMA Limited

InVMA are setting out on a journey of using their experience in safety critical control systems and applying them to the healthcare market. After the 25 Minute presentation attendees, will be aware of some of the challenges involved in protecting medical devices and their users, know where to start to address the challenges and simply go from the “unknown unknowns to the known unknowns.” To do this Pat will review some of the recent news, go on to discuss the “attack surface” and the security implications and then discuss the operationalisation of the ongoing review and management your security posture. Pat will discuss the implications through a use case and architecture adopted and wrap up with a question and answer session. The presentation is aimed at people who want to understand the main issues and a high-level approach to addressing some of them..




Using AI to stop Ransomware: A Real-Life Case Study on how the Enterprise Immune System Detected and Responded to Wannacry; Andrew Tsonchev, Director of Cyber Analysis, Darktrace

This session will explore the implications of ransomware; why traditional security tools are not sufficient to defend against it; how to defend against subtle, novel attacks in the future using an ‘immune system’ approach and how to achieve 100% visibility of your network. It will look at how machine learning and artificial intelligence was used to identify the Wannacry attack before it was able to spread.




Refreshments and networking


General Data Protection Regulation (GDPR); Michelle Ellerbeck, Information Governance Lead, Cambridge University Hospitals NHS Foundation Trust

Michelle will provide an overview of the GDPR and the impact on the UK. The GDPR will apply in the UK from 25 May 2018.




Medical Device Security – Reducing the Risk; Caroline Rivett, Director, Risk Consulting, KPMG (Information Protection in Life Sciences & Health)

This presentation explores the risks of insecure medical devices to hospitals and patients and the potential approaches to reduce these risks.




Panel session with all speakers chaired by SIG Champion, Paul Winter, TTP Group


Event closes


Drinks reception


Michelle Ellerbeck - Information Governance Lead, Cambridge University Hospitals NHS Foundation Trust

Pat Nash - Managing Director, InVMA

Caroline Rivett - Director, Risk Consulting, KPMG

Andrew Tsonchev - Director of Cyber Analysis, Darktrace

Hugo Vincent - Principal Research Engineer, Arm

SIG Champions

Leila Ali - Founder, Digital Health Cambridge

Leila is passionate about applying innovative approaches in bridging the worlds between health and technology. She has worked in the health sector for over 10 years and has a deep understanding of the importance of identifying opportunities of engagement and the evolving needs of patients. 


During Covid-19 she has been exploring digital health solutions at Addenbrooke's Hospital on safely connecting patients to families.


Leila is the founder and organiser of Digital Health Cambridge, a meet-up group that brings together various stakeholders, clinicians, investors and startups in Cambridge to foster a multi - stakeholder partnership. She is currently an eHospital support link at Cambridge University Hospitals NHS Foundation Trust, where she trains and supports colleagues regarding best practice using Epic (electronic patient record system). A digital strategy which enables clinicians to use the latest in computer technology to help them to consistently provide high quality patient care.

Peter Ferguson - Director for Healthcare Technologies, Arm

Peter is director for healthcare technologies at Arm and has been actively involved in the delivery of mobile and healthcare solutions since starting his Medical Electronics PhD in 1994. Based in Cambridge, UK, Peter is responsible for driving Arm's health strategies in Medical Sensors and Genomics. His remit is helping the healthcare industry to utilize Arm's high efficiency technology in developing new products and services. Peter has more than 20 years' experience working in the healthcare, mobile tech and pharmaceutical technology market and has been instrumental in delivering innovative mobile health solutions including wearable ECG, Mobile Devices, Adverse Event Systems and Portal Hospital solutions in the UK and China.

Siddhi Trivedi - Founder, Beyond Identity

Siddhi’s ambition is to build an inclusive community with a focus on social innovation through the intersection between emerging technologies and creative minds.

Siddhi specialises in strategic, operational and technology-enabled business transformation. She founded Beyond Identity, to implement digital tools through the application of IOT, AI and blockchain enabled solutions. She has deep insight into developing apps and platforms, and regularly speaks about innovations within the healthcare sector at international conferences. Since the advent of COVID-19, she has been working with medical clinicians within Oxfordshire to develop an app to empower patients to manage their health.

She is a healthcare SIG champion for Cambridge Wireless and a lead organiser for Tech London Advocates Blockchain Group a think tank and repository for knowledge sharing and to position London as a global leader in blockchain advocacy.

As a champion for women and girls in tech, Siddhi founded project BIBA, a platform designed to connect girls and women with live projects with tech companies who are keen to bridge the gender gap in their organisations. This project has been supported and born out London Tech week in September 2020 and will officially launch at London Tech Week in September 2021.

Nigel Whittle - VP, Medical & Healthcare, Plextek

Nigel is Head of Medical & Healthcare at Plextek, spearheading engagement with a range of clients in the medical device sector, helping them develop innovative technology around sensors, data collection, communications and related areas. Nigel has over 25 years’ experience in the global life science industry, in a wide range of senior scientific, commercial and managerial roles. He conducted research work at Genentech and Celltech, then at Cantab Pharmaceuticals he was responsible for all company product development, taking proprietary products into late-stage Clinical Trials. With the IP Group he established a programme of technology commercialisation from Kings College London, including start up and flotation of companies. Later, working for UK Trade & Investment, Nigel worked with a portfolio of overseas pharmaceutical companies to secure high-level investment into the UK’s R&D capabilities. More recently he has worked as a business consultant both as an independent and at Sagentia. His current interests include the development of wearable technology to support clinical studies, and the use of monitoring systems for assisted living.

Paul Winter - Senior RF Consultant, TTP plc

Paul Winter is a programme manager and RF engineer in the Communications and Wireless group at TTP. He has led numerous projects in commercial, industrial and healthcare sectors developing connected devices and precision instrumentation. Paul has a heritage in developing products integrating multiple wireless standards including GPS, GPRS, Wi-Fi, Bluetooth and proprietary ISM band radios, deployed within multi-sensor systems for in-home and on-body applications, often coupled to 'Cloud' based analysis and visualisation services. In healthcare Paul has applied aspects of wireless, antennas and electronics to a number of medical devices including inhalers, glucose testing and point of care diagnostic instruments. Paul has also led several incubation projects for TTP's Carbon Trust Incubator, covering a wide range of cutting edge technologies. Paul joined TTP in 2006; prior to this he worked as a radio engineer for Global Communications developing high volume consumer in-home satellite and digital TV distribution equipment, as well as portable equipment for the 'on-location' broadcasting industry. Paul has a Masters degree in Electrical & Electronic Engineering from the University of Wales, Cardiff. He is a member of the Institute of Engineering and Technology, the Royal Academy of Engineering and is a Charted Engineer.

Event Location

Open in google maps

Location info

St Catharine's College, University of Cambridge, Trumpington St, Cambridge, CB2 1RL

Email organiser

Related resources

Related events

  • CW (Cambridge Wireless)

    What is Driving the Rapid Deployment of Wireless Sensor Devices in Condition Monitoring?

    Register now
  • CW (Cambridge Wireless)

    Tracking technology - the reality after the hype

    Register now
  • CW (Cambridge Wireless)

    The Impact of the Covid Pandemic on Healthcare Innovation

    Register now

Subscribe to the CW newsletter

This site uses cookies.

We use cookies to help us to improve our site and they enable us to deliver the best possible service and customer experience. By clicking accept or continuing to use this site you are agreeing to our cookies policy. Learn more

Reserve your place

Join the CW network

CW is a leading and vibrant community with a rapidly expanding network of nearly 400 companies across the globe interested in the development and application of wireless and mobile technologies to solve business problems.

Sign in to your account

Please sign in to your CW account to reserve a place at this event and to qualify for any member discounts.

Start typing and press enter or the magnifying glass to search

Sign up to our newsletter
Stay in touch with CW

Choosing to join an existing organisation means that you'll need to be approved before your registration is complete. You'll be notified by email when your request has been accepted.

Your password must be at least 8 characters long and contain at least 1 uppercase character, 1 lowercase character and at least 1 number.

I would like to subscribe to

Select at least one option*