The Cavalry has so far been most successful in capturing the momentum of the growing trend towards manufacturers becoming more aware of security issues in their devices and willing to listen to expertise from security professionals. Over the past couple of years we’ve seen manufacturers hire top security talent, become much more open to talking about safety issues, the media has covered many stories fairly and Capital Hill has made it clear they’re listening. Demonstrating the necessity of security research makes the criminalization issue a moot point and starts to give the researchers a trusted place to engage in the civil liberties dialog.
One specific storyline goes like this: In June 2013 the Department of Homeland Security ICS-CERT published a security advisory on 300 medical devices. This was due to the actions of Billy Rios, Terry McCorkle and other security researchers who discovered the issues. This directly resulted in multiple medical device makers initiating audits of their entire line of medical devices. Also as a result of this publication a large healthcare provider initiated a series of medical device security tests. And the story will keep going from here.