Introducing the Robot Vulnerability Database (RVD)
Introducing the Robot Vulnerability Database (RVD)
复制标题
机器人漏洞数据库 (RVD) 简介
DOI：
--
复制
发表时间：
2019
期刊：
影响因子：
--
通讯作者：
E. Gil
中科院分区：
文献类型：
--
作者：
V. Vilches;Lander Usategui San Juan;Bernhard Dieber;Unai Ayucar Carbajo;E. Gil
机器人技术中的网络安全是一个新兴的话题，已经获得了巨大的吸引力。研究人员最近展示了网络攻击对机器人的一些潜力和影响。这意味着安全相关的不良后果，导致人类伤害，死亡或导致重大的完整性损失，显然克服了传统IT世界中的隐私问题。在网络安全研究中，使用漏洞数据库是一种非常可靠的工具，可以负责任地披露软件产品中的漏洞，并提高供应商解决这些问题的意愿。在本文中，我们认为，现有的漏洞数据库的信息密度不足，并显示出一些有偏见的内容与机器人的漏洞。本文介绍了机器人漏洞数据库（RVD），负责披露机器人的错误，弱点和漏洞的目录。本文旨在介绍差饷物业估价署的设计和程序，以及相关的披露政策。此外，作者提出了RVD中已经包含的初步选定的漏洞，并呼吁机器人和安全社区为消除机器人零日漏洞的努力做出贡献。
Cybersecurity in robotics is an emerging topic that has gained significant traction. Researchers have demonstrated some of the potentials and effects of cyber attacks on robots lately. This implies safety related adverse consequences causing human harm, death or lead to significant integrity loss clearly overcoming the privacy concerns in classical IT world. In cybersecurity research, the use of vulnerability databases is a very reliable tool to responsibly disclose vulnerabilities in software products and raise willingness of vendors to address these issues. In this paper we argue, that existing vulnerability databases are of insufficient information density and show some biased content with respect to vulnerabilities in robots. This paper presents the Robot Vulnerability Database (RVD), a directory for responsible disclosure of bugs, weaknesses and vulnerabilities in robots. This article aims to describe the design and process as well as the associated disclosure policy behind RVD. Furthermore the authors present preliminary selected vulnerabilities already contained in RVD and call to the robotics and security communities for contribution to the endeavour of eliminating zero-day vulnerabilities in robotics.
DOI：
10.14236/ewic/ics2016.2
发表时间：
2016-08
期刊：
--
影响因子：
--
作者：
Rob Antrobus;Sylvain Frey;A. Rashid;B. Green
通讯作者：
Rob Antrobus;Sylvain Frey;A. Rashid;B. Green