Archimedes Medical Device Security 101 Workshop

Confirmed Speakers Include:

David brumley

CEO
ForAllSecure

David Brumley is the CEO of ForAllSecure and a full professor at Carnegie Mellon University. His research focuses on novel program analysis and verification techniques that prove the presence of bugs and vulnerabilities. He has published numerous academic papers, won several test-of-time and achievement awards, competed and won the DARPA Cyber Grand Challenge, and holds a black badge. ForAllSecure created Mayhem to bring the same technology used by the world’s best hackers into commercial software development pipelines.

Dr. Kevin Fu

Professor; Director Archimedes Center for Health Care and Medical Device Cybersecurity
Former Acting Director, US FDA CDRH Medical Device Security

IEEE Fellow; ACM Fellow, AAAS Fellow

Kevin Fu is credited for establishing the field of medical device security beginning with the 2008 IEEE paper on defibrillator security.

Kevin is a former MIT Technology Review TR35 Innovator of the Year and Fellow of the AAAS, ACM, and IEEE. He has testified in the House and Senate on matters of information and medical device security and has written commissioned work on trustworthy medical device software for the Institute of Medicine of the National Academies. He was a member of NIST Information Security and Privacy Advisory Board, the CRA Computing Community Consortium Council, and the ACM Committee on Computers and Public Policy. He received the Dr. Dwight E. Harken Memorial Lecturer Award from the Association for the Advancement of Medical Instrumentation (AAMI) for his leadership on medical device security standardization.

Cropped_Image-19

gREG GARCIA

Executive Director,

Health Sector Coordinating Council

Greg Garcia is the Executive Director of the Health Sector Coordinating Council Cybersecurity Working Group, the government-recognized critical infrastructure industry advisory council of more than 400 healthcare providers, pharmaceutical and medtech companies, payers and health IT entities partnering with government to identify and mitigate cyber threats to health data and research, systems, manufacturing
and patient care.

Greg was appointed by President George W. Bush as the nation's first Assistant Secretary for Cybersecurity and Communications for the U.S. Department of Homeland Security.

Throughout his 32-year career in national service he has influenced and implemented change at the intersection of business, public policy and national security, including
executive positions in healthcare, financial services, high technology and the United States Congress.

Greg is a 2024 recipient of the Baldrige Foundation Award for Leadership Excellence in Cybersecurity.

aNDREw Ginter

VP Industrial Security
Waterfall Security Solutions

At Waterfall Security, Andrew leads a team of experts who work with the world's most secure industrial enterprises, focused on manufacturing, heavy industry, critical industrial infrastructures, and building automation.

Before Waterfall, he led the development of high-end industrial control system products at Hewlett-Packard, products that automated some of the world's largest pipelines and power grids. At Agilent Technologies he led the development of IT/OT middleware products that connected industrial automation systems to SAP and other business automation systems. At Industrial Defender he led the development of the world's first industrial Security Information and Event Management (SIEM) system.

Andrew is the author of three books on industrial / OT cybersecurity, a co-author of the Industrial Internet Security Framework, and a co-author of the UITP report on cybersecurity requirements in rail system tendering. He co-hosts the Industrial Security Podcast and contributes regularly to industrial security standards and best-practice guidance.

Cropped_Image-5

jack kufahL

Chief Information Security Officer
Michigan Medicine

Jack Kufahl is the Chief Information Security Officer for Michigan Medicine at the University of Michigan, one of the nation’s top academic medical centers that brings together world-class experts from research, patient care, and education to make groundbreaking discoveries that create life-changing medicine.

He has over 20 years of experience in information technology, primarily in leadership roles. He is one of the incorporating officers of the Michigan Healthcare Cybersecurity Council and is a current board member. The MiHCC is a public-private partnership in the State of Michigan and the healthcare industry supporting the citizens, patients, workforce , and students of Michigan. MiHCC seeks to protect the critical healthcare infrastructure and institutions of Michigan by providing relevant knowledge, meaningful relationships, and information security services to the partnering individuals, agencies, organizations , and vendors. Jack is also a graduate of the esteemed FBI CISO Academy and has completed the Masters of Legal Studies program with a concentration in compliance law at Washington University in St Louis.

As the Chief Information Security Officer, he is currently responsible for planning, developing, implementing, and maintaining the Michigan Medicine information assurance program. He directs all information assurance activities across the academic medical center to ensure the confidentiality, integrity, and availability of electronic information resources critical to the tripartite mission of patient care, research, and education at Michigan Medicine.