skip to main content
10.1145/3528580.3532995acmotherconferencesArticle/Chapter ViewAbstractPublication PageseiccConference Proceedingsconference-collections
poster

POSTER: Launching a ZIP Bomb on the DICOM-enabled Devices

Published:21 July 2022Publication History

ABSTRACT

During the past several years, the healthcare sector has become an interesting target for cybercriminals. The concept of E-health can not be imagined without medical images, which are usually presented, stored and/or transferred by using the DICOM standard. This poster aims to present three different attack scenarios, how one can launch a ZIP bomb against some DICOM-enabled device, which can crash the involved application or the system will run out of memory or out of disk space.

References

  1. Marco Eichelberg, Klaus Kleber, and Marc Kammerer. 2020. Cybersecurity Challenges for PACS and Medical Imaging. Academic Radiology 27, 8 (2020), 14. https://doi.org/10.1016/j.acra.2020.03.026Google ScholarGoogle ScholarCross RefCross Ref
  2. David Fifield. 2019. A better zip bomb. Retrieved February 2, 2022 from https://www.bamsoftware.com/hacks/zipbomb/Google ScholarGoogle Scholar
  3. Sebastien Jodogne. 2018. The Orthanc Ecosystem for Medical Imaging. Journal of Digital Imaging 31, 3 (2018), 12. https://doi.org/10.1007/s10278-018-0082-yGoogle ScholarGoogle ScholarCross RefCross Ref
  4. Sébastien Jodogne, Claire Bernard, Magali Devillers, Eric Lenaerts, and Philippe A. Coucke. 2013. Orthanc - A lightweight, restful DICOM server for healthcare and medical research. In Proceedings of the 2013 IEEE 10th International Symposium on Biomedical Imaging. IEEE, San Francisco, CA, USA, 190–193.Google ScholarGoogle ScholarCross RefCross Ref
  5. Deutsch. P.1996. Request for Comments 1951, DEFLATE Compressed Data Format Specification version 1.3. Technical Report.Google ScholarGoogle Scholar

Recommendations

Comments

Login options

Check if you have access through your login credentials or your institution to get full access on this article.

Sign in
  • Published in

    cover image ACM Other conferences
    EICC '22: Proceedings of the 2022 European Interdisciplinary Cybersecurity Conference
    June 2022
    114 pages
    ISBN:9781450396035
    DOI:10.1145/3528580

    Copyright © 2022 Owner/Author

    Permission to make digital or hard copies of part or all of this work for personal or classroom use is granted without fee provided that copies are not made or distributed for profit or commercial advantage and that copies bear this notice and the full citation on the first page. Copyrights for third-party components of this work must be honored. For all other uses, contact the Owner/Author.

    Publisher

    Association for Computing Machinery

    New York, NY, United States

    Publication History

    • Published: 21 July 2022

    Check for updates

    Qualifiers

    • poster
    • Research
    • Refereed limited
  • Article Metrics

    • Downloads (Last 12 months)15
    • Downloads (Last 6 weeks)2

    Other Metrics

PDF Format

View or Download as a PDF file.

PDF

eReader

View online with eReader.

eReader

HTML Format

View this article in HTML Format .

View HTML Format