Kevin Fu
(Professor, Northeastern University)

"Introduction to Medical Device Security"

Prof. Kevin Fu, Ph.D., previously the first Acting Director of Medical Device Security at the U.S. Food and Drug Administration (FDA), will demystify medical device cybersecurity for an international audience of regulators, manufacturers, and researchers. Drawing from two decades of experience in clinical, academic, and industrial settings, Prof. Fu will explain how global regulators and manufacturers are embracing cybersecurity as a fundamental part of safety and effectiveness, not merely compliance. This keynote will highlight key international frameworks, common engineering pitfalls, and practical steps to help medical device manufacturers foster a security-minded culture that supports innovation without delaying market entry.

Heejo Lee (Professor, Korea University)

"IoTcube 2.0: Automated SBOM and VEX Management for Supply Chain Security"

Cybersecurity regulations increasingly require clear visibility into software components and their vulnerabilities - often through Software Bills of Materials (SBOMs) and Vulnerability Exploitability eXchange (VEX) documents. While supply chain security using SBOMs and VEX is becoming essential across many industries, including healthcare, manufacturers and service providers still face significant challenges in practical adoption. Over the past decade, KU CSSA has developed and publicly operated IoTcube, an automated vulnerability analysis platform. This year, we are launching IoTcube 2.0, which offers one-stop SBOM generation and VEX management. In this talk, we will share our R&D progress, discuss best practices, and explore opportunities for collaboration and feedback to advance the technology further.

Christian Dameff (Emergency Physician, UC San Diego) 

"Rapidly Deployable Clinical Support Systems for Ransomware"

This talk will explore the conceptualization, design, and prototyping of a technology stack designed to provide a complete technical solution for the clinical workflow challenges arising from ransomware and other adverse events on hospital networks.

Sang Kil Cha

(Professor, KAIST)

"ASFuzzer: Differential Testing of Assemblers"

In this talk, I will present our recent work on differential testing of assemblers. Ensuring the correctness of assemblers (or compilers in general) is crucial for the reliability of software systems including IoT devices and healthcare systems.

Jeff Tully (Anesthesiologist, UC San Diego)

"Validating Healthcare Security Research with Clinical Simulation & Evidence Based Medicine"

This talk will demonstrate the power of multidisciplinary collaboration in medical device and healthcare cybersecurity research by illustrating how evidence based medicine and clinical education principals can help design impactful studies and exercises validating and contextualizing the bedside impact of technical computer science research.

Jack Kufahl 

(CISO, Michigan Medicine)

"Top Cybersecurity Challenges in 2025 : Perspective from a Health care Delivery Organization’s Chief Information Security Officer"

Healthcare delivery organizations face a unique and evolving set of cybersecurity challenges shaped by complex internal operations and an increasingly dynamic external threat landscape. Too often, well-intentioned security initiatives fall short—not due to lack of effort, but because they overlook the nuanced context in which they operate. In this talk, I will explore how a deep understanding of these complexities is essential for aligning cybersecurity strategies with real-world risks. By staying grounded in the realities of healthcare environments and maintaining a focused, context-aware approach, security leaders can more effectively safeguard critical infrastructure and ensure the resilience of care delivery systems. 

 Yuseung Kim

(Corporate VP, Samsung Networks)

"The Untold Story of SBOM: It Might Make Your Life Easier"

SBOMs (Software Bills of Materials) are no longer optional - regulations and industry standards increasingly demand them. But for those responsible for generating SBOMs, the real question is: how do you do it right, without impacting your development pipeline? In this talk, we'll uncover the untold, practical side of SBOMs from the generator's point of view. You'll learn what the SBOM consumers actually expect, how to choose the right tools and formats, and how to integrate SBOM in to your CI/CD process.