Design with Security in Mind

So, use the same technology used with keyless car locks.

Lookup "double-password-handshake" within encrypted data flow.

Our professor in Electronics Lab in University (at the late 80s) used to tell us that we should always have in mind 3 main factors when we design a product (in this order):

• Safety

• Functionality-Quality

• Appearance

Of course, as a profesional, I'm taking into account many more factors, like low cost, environmentally friendly, EMI e.t.c. However, in my mind, the "safety issue" comes always first. Especially in medical equipment this is extremely important as human lives depend on that. I believe that in such critical situations we should not rely on IoT and the control/operation should take place in a more "direct way". Although the Internet is much more reliable and fast than in the past, just one malfunction or a big delay or a link failure could cost a human's life.

In project management three main factors are:

• Cost
• Schedule
• Quality

Pick 2 of them.

Because everyone's been trying to get more out of their software as fast as they can, security has taken a back seat. I find that most of these principles also apply to system design in general:

https://www.owasp.org/index.php/Secure_Coding_Principles

Minimize attack surface area

Establish secure defaults

Principle of Least privilege

Principle of Defense in depth

Fail securely

Don't trust services

Separation of duties

Avoid security by obscurity

Keep security simple

Fix security issues correctly