Welcome

research/

Medical Device Security & Forensic-Ready System Design

When a device keeps a patient alive, it must also be able to tell us what happened to it.

My work focuses on digital forensics, incident response and cyber security in regulated, safety-critical environments. A central thread is the security and observability of network-connected medical devices.

As part of my PhD at the University of Plymouth, I am developing forensic-ready logging frameworks for embedded medical devices. The goal is that devices relied on for clinical care produce structured, verifiable and defensible telemetry.

The practical challenge is to build evidential integrity and security monitoring into constrained systems while preserving regulatory compliance, performance and, above all, patient safety.

core themes
Forensic-ready logging architectures
Embedded & low-energy device telemetry
Healthcare cyber resilience
Software supply chain & SBOMs
IoT & distributed investigations
talks/

Selected presentations

2024
SANS Healthcare Forum
Medical Device Cybersecurity

The impact of ransomware on healthcare environments, and how device-level observability strengthens detection, containment and recovery across clinical ecosystems.

Watch the recording
2023
SANS DFIR Summit
Emerging Technology & Investigative Expansion

How the investigative landscape is expanding across IoT, implanted systems, vehicles and distributed digital ecosystems, and how DFIR methodology must evolve to keep up.

Watch the recording
2022
SANS DFIR Summit
Engineering Observability into Medical Devices

Research carried out with Medtronic on building incident response capability into the medical device design lifecycle and improving logging practice for constrained embedded systems.

Watch the recording
open research/

Research in practice

An OWASP project I maintain that turns the research on log design into a practical benchmark for assessing whether logging is secure, complete and forensically useful.
Verity
An offline, zero-retention tool that validates and benchmarks Software Bills of Materials against FDA, EU MDR, CISA and Cyber Resilience Act expectations, supporting a more transparent medical device supply chain.
// principle
In safety-critical environments, security must be engineered with evidential integrity from the outset. Observability is not optional. It is foundational.