No abstract

No abstract

No abstract

SROS is a proposed addition to the ROS API and ecosystem to support modern cryptography and security measures. An overview of current progress will be presented, rationalizing each major advancement, including: over-the-wire cryptography for all data transport, namespaced access control enforcing graph policies/restrictions, and finally process profiles using Linux Security Modules to harden a nodes resource access. By making the community aware of the vulnerabilities in ROS, as well as the proposed solutions provided by SROS, we intend to improve the state of security for future robotics subsystems.

Logging plays a crucial role in robotic research, providing prolonged insight into a robots encountered environmental stimuli, internal behavioral state, and performance or outcome of actions taken; all necessary for profiling and debugging robotic application ex post facto. As robotic development matures into production, logging assumes an additional role in equipping auditors with the evidence necessary for investigating issues, accidents or fraud. Given robotic sectors such as drone delivery or autonomous transport must operate in the open world, ensuring the integrity, authenticity and non-repudiation of generated logs on these mobile cyberphical systems presents new threats that extend beyond those in traditional IT computing: such as physical system access or postmortem collusion between robot and OEM resulting in the truncation or alteration of previous records. In this work, we address the topic of immutabilized logs using integrity proofs and distributed ledgers with the additional consideration for mobile and public service robotic applications.

Security of robotics systems, as well as of the related middleware infrastructures, is a critical issue for industrial and domestic IoT, and it needs to be continuously assessed throughout the whole development lifecycle. The next generation open source robotic software stack, ROS2, is now targeting support for Secure DDS, providing the community with valuable tools for secure real world robotic deployments. In this work, we introduce a framework for procedural provisioning access control policies for robotic software, as well as for verifying the compliance of generated transport artifacts and decision point implementations.

No abstract

No abstract