Welcome

Research · Digital Forensics · Cybersecurity

Medical Device Security & Forensic-Ready System Design

My work focuses on digital forensics, incident response, and cybersecurity within regulated and safety-critical environments. A central area of research is the security and observability of network-connected medical devices.

As part of my PhD at the University of Plymouth, I am developing forensic-ready logging frameworks for embedded systems. The objective is to ensure that devices relied upon for clinical care produce structured, verifiable, and defensible telemetry.

The research addresses a practical challenge: how to embed evidential integrity and security monitoring into constrained systems while maintaining regulatory compliance, performance stability, and patient safety.

Core Research Themes
Forensic-Ready Logging Architectures

Embedded & Low-Energy Device Telemetry

Healthcare Cyber Resilience

IoT & Distributed Investigations

Selected Presentations

2024

SANS Healthcare Forum — Medical Device Cybersecurity

An examination of ransomware impact in healthcare environments and how device-level observability strengthens detection, containment, and recovery across clinical ecosystems.

View Recording →
2023

SANS DFIR Summit — Emerging Technology & Investigative Expansion

A technical analysis of expanding investigative terrain across IoT, implanted systems, vehicles, and distributed digital ecosystems — and how DFIR methodologies must evolve accordingly.

View Recording →
2022

SANS DFIR Summit — Engineering Observability into Medical Devices

Research conducted in collaboration with Medtronic focused on embedding incident response capability into the medical device design lifecycle and advancing logging practices for constrained embedded systems.

View Recording →

Publications

Medical Device Forensics
IEEE Security & Privacy, 2022
Digital Forensics in Healthcare: CPAP Machine Analysis
Forensic Science International, 2024
In safety-critical environments, security must be engineered with evidential integrity from the outset. Observability is not optional — it is foundational.