The DOI matches its Crossref record; 24 of the 24 references it cites were found in a registry or an index.
Pacemakers and Implantable Cardiac Defibrillators: Software Radio Attacks and Zero-Power Defenses
Open accessAbstract
Our study analyzes the security and privacy properties of an implantable cardioverter defibrillator (ICD). Introduced to the U.S. market in 2003, this model of ICD includes pacemaker technology and is designed to communicate wirelessly with a nearby external programmer in the 175 kHz frequency range. After partially reverse-engineering the ICD's communications protocol with an oscilloscope and a software radio, we implemented several software radio-based attacks that could compromise patient safety and patient privacy. Motivated by our desire to improve patient safety, and mindful of conventional trade-offs between security and power consumption for resource-constrained devices, we introduce three new zero-power defenses based on RF power harvesting. Two of these defenses are human-centric, bringing patients into the loop with respect to the security and privacy of their implantable medical devices (IMDs). Our contributions provide a scientific baseline for understanding the potential security and privacy risks of current and future IMDs, and introduce human-perceptible and zero-power mitigation techniques that address those risks. To the best of our knowledge, this paper is the first in our community to use general-purpose software radios to analyze and attack previously unknown radio communications protocols.
Overview
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Integrity signals
Registry
Cites
Statistics
Verification
Claims the paper makes
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Self-check
Percentages, sums and reported differences re-computed from the paper’s own numbers.
The self-check needs the paper’s full text.
Citations
Cites
SPINS: security protocols for sensor networks
Perrig, A., Szewczyk, R., Wen, V., Culler, D., & Tygar, J. D. (2001) · Proceedings of the 7th annual international conference on Mobile computing and networking · doi:10.1145/381677.381696 · Cited by 2,532
SPINS: Security Protocols for Sensor Networks
Perrig, A., Szewczyk, R., Tygar, J. D., Wen, V., & Culler, D. E. (2002) · Wireless Networks · doi:10.1023/a:1016598314198 · Cited by 2,264
TinySec: a link layer security architecture for wireless sensor networks
Karlof, C., Sastry, N., & Wagner, D. (2004) · Proceedings of the 2nd international conference on Embedded networked sensor systems · doi:10.1145/1031495.1031515 · Cited by 1,612
An investigation of the Therac-25 accidents
Leveson, N. G., & Turner, C. S. (1993) · Computer · doi:10.1109/mc.1993.274940 · Cited by 1,238
The Resurrecting Duckling: Security Issues for Ad-hoc Wireless Networks
Stajano, F., & Anderson, R. (2000) · Lecture Notes in Computer Science · doi:10.1007/10720107_24 · Cited by 1,160
Rivest, R. L. (1995) · Lecture Notes in Computer Science · doi:10.1007/3-540-60590-8_7 · Cited by 892
The S/KEY One-Time Password System
Haller, N. (1995) · doi:10.17487/rfc1760 · Cited by 537
Security and Privacy for Implantable Medical Devices
Halperin, D., Heydt-Benjamin, T. S., Fu, K., Kohno, T., & Maisel, W. H. (2008) · IEEE Pervasive Computing · doi:10.1109/mprv.2008.16 · Cited by 470
Self-citationSeeing-Is-Believing: Using Camera Phones for Human-Verifiable Authentication
McCune, J. M., Perrig, A., & Reiter, M. K. (2005) · 2005 IEEE Symposium on Security and Privacy (S&P'05) · doi:10.1109/sp.2005.19 · Cited by 390
Pacemaker and ICD Generator Malfunctions: Analysis of Food and Drug Administration Annual Reports
Maisel, W. H., Moynahan, M., Zuckerman, B. D., Gross, T. P., Tovar, O. H., Tillman, D.-B., & Schultz, D. B. (2006) · JAMA · doi:10.1001/jama.295.16.1901 · Cited by 353
Self-citation
Cited by
A Survey on Security and Privacy Issues in Internet-of-Things
Yang, Y., Wu, L., Yin, G., Li, L., & Zhao, H. (2017) · IEEE Internet of Things Journal · doi:10.1109/jiot.2017.2694844 · Cited by 1,278
Cyber-Physical Systems Security—A Survey
Humayed, A., Lin, J., Li, F., & Luo, B. (2017) · IEEE Internet of Things Journal · doi:10.1109/jiot.2017.2703172 · Cited by 1,185
(2008) · Cited by 577
Slotwiner, D., Varma, N., Akar, J. G., Annas, G., Beardsall, M., Fogel, R. I., Galizio, N. O., Glotzer, T. V., Leahy, R. A., Love, C. J., et al. (2015) · Heart Rhythm · doi:10.1016/j.hrthm.2015.05.008 · Cited by 532
Radio-Wave Heating of Iron Oxide Nanoparticles Can Regulate Plasma Glucose in Mice
Stanley, S. A., Gagner, J. E., Damanpour, S., Yoshida, M., Dordick, J. S., & Friedman, J. M. (2012) · Science · doi:10.1126/science.1216753 · Cited by 490
Metadata
- Authors
- Halperin, D., Heydt-Benjamin, T. S., Ransford, B., Clark, S. S., Defend, B., Morgan, W., Fu, K., Kohno, T., & Maisel, W. H.
- Venue
- 2008 IEEE Symposium on Security and Privacy (sp 2008)
- Publisher
- IEEE
- Published
- 2008-05
- Pages
- 129-142
- ISSN
- 1081-6011 (ISSN-L)
- OpenAlex
- W2143472559
- Cited by
- 743
- References
- 24
- FWCI
- 68.34
- Type
- conference paper
- Language
- en
- Open access
- green
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
How to cite
Cite CoChat for the checks on this page, and the paper for its own findings.
- This page
- CoChat. (2026). Citation check: Pacemakers and Implantable Cardiac Defibrillators: Software Radio Attacks and Zero-Power Defenses. https://app.cochat.ai/papers/10.1109/sp.2008.31
- The paper
- Halperin, D., Heydt-Benjamin, T. S., Ransford, B., Clark, S. S., Defend, B., Morgan, W., Fu, K., Kohno, T., & Maisel, W. H. (2008). Pacemakers and Implantable Cardiac Defibrillators: Software Radio Attacks and Zero-Power Defenses. 2008 IEEE Symposium on Security and Privacy (sp 2008). https://doi.org/10.1109/sp.2008.31
Data sources
Bibliographic data: Semantic Scholar, OpenAlex, Crossref.
Contains information from the Semantic Scholar Academic Graph Datasets, made available under the ODC Attribution License (ODC-BY 1.0).
Semantic Scholar’s data is described in: Kinney, R., et al. (2023). The Semantic Scholar Open Data Platform. arXiv:2301.10140.
