CypherCon 2023
Weighing in on Smart Health Device Security: Hacking a Smart Scale
Matt Brown
Abstract:
The market for smart health and wellness devices has exploded recently, aided in part by the ubiquitous support for Bluetooth Low Energy (BLE). In this talk, we dive into the fundamentals of BLE security as well as the tools and techniques we use when performing BLE device security assessments. We will also explain our reverse-engineering of the FitTrack Smart Scale that uses BLE to transmit sensitive health data to a user’s mobile device. We hope to inspire the audience to start their own security research projects of other BLE and IoT devices.
Matt Brown
Healthcare Device Security
Matt Brown is an Embedded Security Pentester and Reverse Engineer that loves all things IoT. Over his career he has had a wide array of Security, System Administration and Software Engineering experience that he enjoys bringing to bear on tough business problems. He enjoys finding vulnerabilities and helping businesses remediate those vulnerabilities to create better products and services for their customers. Matt Brown graduated from Iowa State University with an undergraduate degree in Management Information Systems and a graduate degree in Information Assurance.