WattsUpDoc: power side channels to nonintrusively discover untargeted malware on embedded medical devices

摘要: Medical devices based on embedded systems are ubiquitous in clinical settings. Increasingly, they connect to networks and run off-the-shelf operating vulnerable malware. But strict validation requirements make it prohibitively difficult or costly use anti-virus software automated system updates these systems. Our add-on monitoring system, WattsUpDoc, uses a traditionally undesirable side channel of power consumption enable run-time malware detection. In our experiments, WattsUpDoc detected previously known with at least 94% accuracy unknown 85% several devices--detection rates similar those conventional malware-detection PCs. detects without requiring hardware modifications network communication.