Posts

Showing posts with the label security

Stop the insanity Stop sensationalism of medical device security

Image
Stop the insanity Stop sensationalism of medical device security I am tired of hearing about medical device security "news" chuck full of sensationalism and hyperbole.  You dont have to shout that the sky is falling.  Its not.  Yes, there are real cybersecurity problems for medical devices that need innovative engineering and policy solutions.  But there is no reason to panic or run for the hills in fright.  Even though its Halloween.  The latest example is an abstract at the Medical Device Connectivity Conference that I did not write.  I was aghast when I read what the conference had written as a placeholder for my talk on medical device security, as I have no intention to play the doom-and-gloom card about hacking medical devices.  Yes, medical devices can be hacked. Surprise. Yes, its important to share the facts for science and engineering. But lets focus our attention on improving public health rather than what sells headlines.  Heres th...
Post a Comment
Read more

Spring Migrating from spring security 3 2 6 to spring security 4 0 0

Spring Migrating from spring security 3 2 6 to spring security 4 0 0 In this post, i document some changes i went through to successfully migrate from security 3.2.6 to spring security 4.0.0 Changes in <http> in security-config.xml  In security-config.xml, if you have the <http> section set to: <http auto-config="true"> For spring security 3.2.6, the following is implied: <http auto-config="true"> is same as <http auto-config="true" use-expressions="false"> For spring security 4.0.0, the following is implied instead: <http auto-config="true"> is same as <http auto-config="true" use-expressions="true">  Therefore, need to be careful if you do not use expressions, as in that case you need to set use-expressions="false" in the <http> element Changes in JSP views  In spring security 4.0.0, the csrf is enabled by default, which is equivalent to: <http auto-confi...
Post a Comment
Read more

Spring AngularJS login integration with Spring Security Spring Security 3 and Spring Security 4

Spring AngularJS login integration with Spring Security Spring Security 3 and Spring Security 4 This post shows how to use angularjs for login to spring mvc with spring security set to custom <form-login> Spring security 3 Below is the login.jsp <%@ taglib prefix="c" uri="http://java.sun.com/jsp/jstl/core" %> <html> <head ng-app="login-module"> <script src="angular.min.js"></script> <script src="login.js"></script> </head> <body ng-controller="MainController"> <form> <input type="text" name="username" ng-model="myusername" /> <input type="password" name="password" ng-model="mypassword" /> <button ng-click="login(<c:url value="/" />, myusername, mypassowrd)" /> </form> </body> </html> The login.js looks like the following: (function(){ var Ma...
Post a Comment
Read more

Stop the sensationalism of medical device security

Stop the sensationalism of medical device security There have been some recent blog posts that sensationalize research on electromagnetic inference and medical devices. Worse, some statements are just factually wrong and misleading to the public. For instance, we did not use a Weezer song in any experiments involving defibrillators or pacemakers, and we did not conclude that listening to any music could harm medical devices. For an accurate non-technical summary of this work, read the MedGadget story. The full technical paper on mitigating the risks of electromagnetic interference on analog sensors appeared at the 34th Annual IEEE Symposium on Security and Privacy. The sky is not falling, and were quite clear that patients can remain confident in the safety of their devices. Medical devices do a world of good. download  file  now
Post a Comment
Read more