Can ROS be used securely in industry? Red teaming ROS-Industrial

Mayoral-Vilches, Víctor; Pinzger, Martin; Raß, Stefan; Dieber, Bernhard; Gil-Uriarte, Endika

doi:10.48550/arxiv.2009.08211

Cited by 2 publications

(6 citation statements)

References 0 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Various security issues affect the ROS data layer graph [70], including TCP's SYN-ACK DoS flooding or FIN-ACK flood attacks. These and many more attacks can easily be implemented using simple constructs that make use of 3.…”

Section: The Ros Data Layer Graphmentioning

confidence: 99%

“…Accordingly, on top of intra-robot network security issues described in the pre-vious sub-section another dimension arises, inter-robot network security. Figure 3.2 presents one such synthetic industrial scenario [70] to study the interactions between different robots and the insecurities arising from them. The scenario presents an assembly line operated by ROS-powered robots while following industrial guidelines on setup and security.…”

Section: The Ros Data Layer Graphmentioning

confidence: 99%

“…One of the interesting observations made by [70] is that often, robot endpoints are considered as part of the critical path of production and manufacturing processes. Correspondingly, unless there's a functional issue and production stops, robots are rarely modified or updated (their firmware).…”

Section: A 4 : Targeting a Vulnerable Robot Endpoint To Compromise Th...mentioning

confidence: 99%

See 2 more Smart Citations

Cybersecurity in Robotics: Challenges, Quantitative Modeling, and Practice

Zhu¹,

Raß²,

Dieber³

et al. 2021

Preprint

Self Cite

View full text Add to dashboard Cite

Robotics is becoming more and more ubiquitous, but the pressure to bring systems to market occasionally goes at the cost of neglecting security mechanisms during the development, deployment or while in production. As a result, contemporary robotic systems are vulnerable to diverse attack patterns, and an a posteriori hardening is at least challenging, if not impossible at all. This book aims to stipulate the inclusion of security in robotics from the earliest design phases onward and with a special focus on the cost-benefit tradeoff that can otherwise be an inhibitor for the fast development of affordable systems. We advocate quantitative methods of security management and design, covering vulnerability scoring systems tailored to robotic systems, and accounting for the highly distributed nature of robots as an interplay of potentially very many components. A powerful quantitative approach to model-based security is offered by game theory, providing a rich spectrum of techniques to optimize security against various kinds of attacks. Such a multiperspective view on security is necessary to address the heterogeneity and complexity of robotic systems. This book is intended as an accessible starter for the theoretician and practitioner working in the field.

show abstract

Section: The Ros Data Layer Graphmentioning

confidence: 99%

Section: The Ros Data Layer Graphmentioning

confidence: 99%

Section: A 4 : Targeting a Vulnerable Robot Endpoint To Compromise Th...mentioning

confidence: 99%

See 1 more Smart Citation

Cybersecurity in Robotics: Challenges, Quantitative Modeling, and Practice

Zhu¹,

Raß²,

Dieber³

et al. 2021

Preprint

Self Cite

View full text Add to dashboard Cite

show abstract

“…The mitigation and patching of vulnerabilities has been an active area of research [19], [20], [21], [22], [23], [24] in computer science and other technological domains. Unfortunately, with robotics being an interdisciplinary field composed from a set of heterogeneous disciplines (including computer science), to the best of our knowledge and literature review, except for a few preliminary tools and reviews [25], [26], [27], [28], [29], [30], not much vulnerability mitigation research related to robotics has been presented so far.…”

Section: Related Workmentioning

confidence: 99%

“…By doing so we obtained a lightweight yet high-fidelity environment whereto perform attacks. Results of the exercise are discussed at [43] and further documented in [44], [28].…”

Section: Red Teaming Ros-industrialmentioning

confidence: 99%

alurity, a toolbox for robot cybersecurity

Mayoral-Vilches,

Abad-Fernández,

Pinzger

et al. 2020

Preprint

Self Cite

View full text Add to dashboard Cite

The reuse of technologies and inherent complexity of most robotic systems is increasingly leading to robots with wide attack surfaces and a variety of potential vulnerabilities. Given their growing presence in public environments, security research is increasingly becoming more important than in any other area, specially due to the safety implications that robot vulnerabilities could cause on humans. We argue that security triage in robotics is still immature and that new tools must be developed to accelerate the testing-triage-exploitation cycle, necessary for prioritizing and accelerating the mitigation of flaws.The present work tackles the current lack of offensive cybersecurity research in robotics by presenting a toolbox and the results obtained with it through several use cases conducted over a year period. We propose a modular and composable toolbox for robot cybersecurity: alurity. By ensuring that both roboticists and security researchers working on a project have a common, consistent and easily reproducible development environment, alurity aims to facilitate the cybersecurity research and the collaboration across teams.

show abstract

Can ROS be used securely in industry? Red teaming ROS-Industrial

Cited by 2 publications

References 0 publications

Cybersecurity in Robotics: Challenges, Quantitative Modeling, and Practice

Cybersecurity in Robotics: Challenges, Quantitative Modeling, and Practice

alurity, a toolbox for robot cybersecurity

Contact Info

Product

Resources

About