Security in FHIR
summary
Demonstrates a complete exploit chain against a public FHIR server that starts from reused credentials (14 million leaked logins), uses malicious JavaScript in narrative to steal a clinician’s OAuth token, then applies GPU-style brute force to crack client secret and forge a long‑lived doctor token, enabling lateral movement to thousands of patient records; cites 466 healthcare incidents with 304 breaches (65%) and 197‑day detection times, and shows defenses: input sanitization (helmet), mTLS/client certs, token validation, short TTLs and 2FA.
AI-written summary · about
chapters (5)
- 0:00Start
- 6:45Let's assume basic network security
- 18:16Clean the Narrative
- 22:41Protect your secrets
- 34:53What about Data Blocking?
related talks
41mPlenary session
01h 00mHack to the Future
21mFHIR meets corporate security
16mSecurity, Fraud, and Compliance
58mMedical Device Security
36m Macabre stories of a hacker in the public health sector (Chile)
33mBreaking Tokens: Modern Attacks on OAuth, OIDC, and JWT Auth Flows
40mThe Attack Surface of the Healthcare Industry