Assessing critical vulnerabilities in health care software

Many health care systems and devices run on outdated infrastructures and code with known vulnerabilities and without software patches, putting much of the industry at great risk.

To address this, the Center for Cybersecurity and Trusted Foundations was awarded $10 million from the Advanced Research Projects Agency for Health in September 2023 to develop a cyber reasoning system called RxCRS to assess vulnerabilities in existing health care-related software.

The system will be compatible with legacy programs, search for vulnerabilities automatically and generate patches that meet the needs of the health care field.

CTF is assembling an interdisciplinary team from across ASU to develop RxCRS, drawing expertise from the Ira A. Fulton Schools of Engineering, Biodesign Institute and the School of Life Sciences.