The Universal Patching and Remediation for Autonomous Defense (UPGRADE) tool suite from a Department of Health and Human Services agency has the chance to help hospitals improve their patch management plans, i.e., how facilities apply necessary software fixes to their (many) internet-connected devices.
One minor issue with the UPGRADE proposed this spring: It doesn’t exist yet.
In May, the Advanced Research Projects Agency for Health (ARPA-H) called for ideas to build “a semi-autonomous cyber-threat mitigation platform that enables proactive, scalable, and synchronized security updates, adaptable to any hospital environment, and across a wide array of the most vulnerable equipment classes.”
The core of the UPGRADE effort relies upon a digital replica, or “twin,” of a hospital’s cyber environment—a kind of “gym” for testing the effects of any proposed device changes, according to Andrew Carney, program manager at ARPA-H.
“You can move through the multiverse of modifications you might make to your network before you deploy. And then ideally, UPGRADE will assist with that deployment,” he said.
Read the rest here.—BH
Do you work in IT or have information about your IT department you want to share? Email [email protected].
|