Security for the Robot Operating System
Security for the Robot Operating System
复制标题
DOI：
10.1016/j.robot.2017.09.017
复制
发表时间：
2017-12-01
影响因子：
4.3
通讯作者：
Schartner, Peter
中科院分区：
文献类型：
--
作者：
Dieber, Bernhard;Breiling, Benjamin;Schartner, Peter
未来的机器人系统将位于高度网络化的环境中，在那里它们可以与远程位置的工业控制系统、云服务或其他系统进行通信。在工业系统(有时也称为工业4.0)的强烈数字化趋势中，网络攻击对作为这一新发展核心的机器人系统的完整性构成越来越大的威胁。预计，机器人操作系统(ROS)将在纯研究导向的场景之外，在机器人学中发挥重要作用。然而，ROS存在重大的安全问题，在此类产品进入大众市场之前，需要解决这些问题。在本文中，我们介绍了ROS最常见的漏洞，利用这些漏洞的攻击载体，以及保护ROS和类似系统的几种方法。我们展示了如何在应用程序级别保护ROS，并描述了直接集成到ROS核心中的解决方案。我们提出的解决方案已经在最新版本的ROS上进行了实现和测试，并在不影响系统内核本身的情况下增加了所有通信通道的安全性。(C)2017爱思唯尔B.V.保留所有权利。
Future robotic systems will be situated in highly networked environments where they communicate with industrial control systems, cloud services or other systems at remote locations. In this trend of strong digitization of industrial systems (also sometimes referred to as Industry 4.0), cyber attacks are an increasing threat to the integrity of the robotic systems at the core of this new development. It is expected, that the Robot Operating System (ROS) will play an important role in robotics outside of pure research oriented scenarios. ROS however has significant security issues which need to be addressed before such products should reach mass markets. In this paper we present the most common vulnerabilities of ROS, attack vectors to exploit those and several approaches to secure ROS and similar systems. We show how to secure ROS on an application level and describe a solution which is integrated directly into the ROS core. Our proposed solution has been implemented and tested with recent versions of ROS, and adds security to all communication channels without being invasive to the system kernel itself. (C) 2017 Elsevier B.V. All rights reserved.