Segregerad Mjukvaruarkitektur för Medicinska Enheter

Research provides analysis, evaluation, overview, and mitigation techniques for segregated software architectures, and how such architectures can be utilized to securely isolate medical device software from external communication software in order to protect against cyber security threats. The research evaluates the following models of segregation architecture: Separate Hardware, Multi-core, Virtualization, Containerization, and Task Segregation. Experiments are conducted on virtualization and containerization architectures in order to measure, analyze, and compare performance affects of the medical software system as a result of Denial-of-Service (DoS) through an overload of the external communication system. Research also provides context for segregation architecture in relation to IEC medical device regulations. Results show that no single segregation architecture universally outperforms the others across all criteria. Virtualization provides naturally strong isolation at the cost of performance, containerization offers flexibility and lightweight performance but requires careful configuration in order to provide sufficient isolation. Separate hardware and multi-core architectures can also provide high isolation, but require careful configuration. Task Segregation offers lightweight performance but may be vulnerable even with configuration. Ultimately, the correct choice of architecture depends on the specific isolation, performance, and regulatory requirements of the medical system.