Home-Network Threats and Access Controls

Baugher, Mark; Lortz, Victor

doi:10.1007/978-3-642-21599-5_16

Cited by 4 publications

(4 citation statements)

References 8 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…However, using NAT alone does not provide a comprehensive solution to prevent exposure of ROS traffic to the Internet. In general, NAT is not a security apparatus: an internal host that makes external connections can still leak data, and NAT implementations can be misconfigured or, in some cases, exploited to open ports for outside access [4,9,19]. As one example, our Baxter robot was found in our scan results because the ROS master port for its lab was forwarded to its address.…”

Section: Recommendations For Improved Securitymentioning

confidence: 99%

Scanning the Internet for ROS: A View of Security in Robotics Research

DeMarinis¹,

Tellex²,

Kemerlis³

et al. 2019

2019 International Conference on Robotics and Automation (ICRA)

View full text Add to dashboard Cite

Because robots can directly perceive and affect the physical world, security issues take on particular importance. In this paper, we describe the results of our work on scanning the entire IPv4 address space of the Internet for instances of the Robot Operating System (ROS), a widely used robotics platform for research. Our results identified that a number of hosts supporting ROS are exposed to the public Internet, thereby allowing anyone to access robotic sensors and actuators. As a proof of concept, and with consent, we were able to read image sensor information and move the robot of a research group in a US university. This paper gives an overview of our findings, including the geographic distribution of publiclyaccessible platforms, the sorts of sensor and actuator data that is available, as well as the different kinds of robots and sensors that our scan uncovered. Additionally, we offer recommendations on best practices to mitigate these security issues in the future.

show abstract

Section: Recommendations For Improved Securitymentioning

confidence: 99%

Scanning the Internet for ROS: A View of Security in Robotics Research

DeMarinis¹,

Tellex²,

Kemerlis³

et al. 2019

2019 International Conference on Robotics and Automation (ICRA)

View full text Add to dashboard Cite

show abstract

“…Before accessing restricted services or resources, devices must first be paired with each other. As explained by Baugher and Lortz [12], device pairing uses the same mechanisms as WiFi Protected Setup (WPS) and avoids exposing the underlying PKI to the user. In order to enforce the principle of least privilege, UPnP-DP uses three roles: Public, Basic, and Admin.…”

Section: Related Workmentioning

confidence: 99%

“…We use data from existing analyses [15,12,16] as well as threats discovered as part of the webinos project [17] which are relevant to home or personal scenarios. We ignore issues commonly dealt with at lower layers in the communication stack, such as communication jamming, as well as potential weaknesses in standard cryptography.…”

Section: Personal Network Definition and Threatsmentioning

confidence: 99%

“…Sharing a physical network (such as home WiFi) can implicitly authorize access to a home router or administration console, which facilitates attacks such as adding rogue devices to the trusted network. Baugher and Lortz [12] suggest that three tiers of access are therefore required: guest, user, and administrator. Unauthorized remote access to personal networks.…”

Section: Personal Network Definition and Threatsmentioning

confidence: 99%

See 1 more Smart Citation

Personal PKI for the Smart Device Era

Lyle

Paverd

King-Lacroix

et al. 2013

Public Key Infrastructures, Services and Applications

View full text Add to dashboard Cite

Abstract. As people use an increasing number of smart devices for their everyday computing, it is surprising that these powerful, internet-enabled devices are rarely connected together to create personal networks. The webinos project is an attempt to make this possible so that resources can easily be shared between devices, regardless of the operating system or network they are using. However, increased connectivity raises a number of security and privacy issues, and in this paper we introduce a public key infrastructure designed to be suitable for personal computing across multiple devices. We recognize the need for our PKI to work on both mobile and home networks, use existing online user identities and take into consideration the different interaction styles found on smart devices in different form factors. We propose a set of principles for personal key infrastructures, describe our implementation and outline how it mitigates common threats and issues.

show abstract