NP-200 system security design review

NimbusPump NP-200 Program · candidate AREV-0004 vs effective baseline DRB-0007

PRJ-2026-0042-DRV-0001Threat review

Threat workbench

STRIDE register for candidate AREV-0004; a row opens the threat record.

Context: element AE-000042 (Infusion dosing command processor)


Attacker sends unauthorized dosing commandTV-000118TamperingSpoofingSafety	Critical	Mitigation pending	Noor Haddad	High
Replay of captured dosing command re-doses patientTV-000124Tampering	High	Treatment planned	Noor Haddad	High
Tampered drug library uploaded from compromised pharmacy workstationTV-000129TamperingSafety	High	Treatment planned	Noor Haddad	High
Gateway flood starves dosing command channelTV-000133Denial of service	High	Treatment planned	Owen Blake	High

Attacker sends unauthorized dosing commandTV-000118TamperingSpoofingSafety
CriticalMitigation pending
Owner
Noor Haddad
Replay of captured dosing command re-doses patientTV-000124Tampering
HighTreatment planned
Owner
Noor Haddad
Tampered drug library uploaded from compromised pharmacy workstationTV-000129TamperingSafety
HighTreatment planned
Owner
Noor Haddad
Gateway flood starves dosing command channelTV-000133Denial of service
HighTreatment planned
Owner
Owen Blake

4 threats