DEF CON 33 - China's Health Sector Ambitions and Info Needs - Amelia Shapiro
Source: YouTube · DEFCONConference · published Oct 10, 2025 · 25:10
China views US medical big data as a strategic asset for national security and economic development, making it a target for state-sponsored cyber attacks 0:06. Through "military-civil fusion," commercial medical goals become national security priorities 2:28.
Key Takeaways:
• China's 14th 5-year plan prioritizes big medical data integration as an upstream foundation for biotechnology advancement 5:56
• China employs an "upstream control" strategy to acquire data, forcing technology development and enabling IP transfer 7:56
• Most valuable targets include plug-and-chug biomedical data, information not accessible in China, and upstream technology like genetic testing chips 16:02
• Recent US regulations banning genetic data export will likely force China to increase cyber attacks instead of purchasing data 19:01
Increased cyber attacks on medical infrastructure would actually indicate that US data protection regulations are working effectively 20:19.
Sources:
- 0:06 Introduction to PRC cyber motivations in medical data
- 2:28 Military-civil fusion concept
- 5:56 China's 5-year plan highlighting medical data
- 7:56 Upstream control strategy
- 16:02 Types of medical data China targets
- 19:01 US regulations banning genetic data export
- 20:19(https://www.youtube.com/watch?v=bp4E9
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 0.5 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Cybersecurity. Commonly maps to: Security and Risk Management, Security Operations. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
Hello. Thank you all so much for coming. Um, my name is Amelia Shapiro and I'm going to be talking to you today about PRC cyber attack motivations in mi in big medical data. Um, I work for an offensive security research company um called Margin Research um in New York. Um, and this research was funded by ARPA. So a big thanks to them. Okay. So this is where we're hoping to sort of get at the end of this talk. I am trying to rank targets in terms of how interested I believe based on this research China is in acquiring them. And um we're going to talk about why later. this month and this upcoming year is going to be a bellweather year um for big data medical hacking um in the PRC. Uh I we're I'm going to come back to the slide later so don't worry um and I'll publish slides. Okay, so this is…