为ROS 2机器人设计专用入侵防御系统,防范物理环境中的安全威胁。
Implementing a Robot Intrusion Prevention System (RIPS) for ROS 2
- 基于ROS 2框架构建专用入侵防御架构,支持实时规则检测。
- 在真实社交机器人上验证,可有效拦截针对传感器与执行器的攻击。
- 适合开发高安全需求的自主机器人系统,如服务型或医疗机器人。
必须为自主机器人系统开发专用的入侵预防系统(IPS),因其属于典型的网络物理系统(CPS),不仅具备分布式系统特性,还依赖机器人中间件与框架,协同传感器、执行器及认知子系统完成人机交互。作为典型网络物理系统,其与人类和物理环境的交互可能引发严重后果,如物理损伤。为此,我们设计并实现了针对基于ROS 2的机器人应用的RIPS系统。本文详述了安全挑战、ROS 2的安全特征,以及为机器人环境构建的威胁模型。同时介绍了系统的整体架构与初始原型实现,包括一种专用于定义多样现实场景下检测与防护规则的领域特定语言。此外,通过在真实社交机器人上运行国际机器人竞赛常用测试平台的一系列实验,全面评估了该方法的有效性。
原文摘要 · Abstract (English)
It is imperative to develop an intrusion prevention system (IPS), specifically designed for autonomous robotic systems. This is due to the unique nature of these cyber-physical systems (CPS), which are not merely typical distributed systems. These systems employ their own systems software (i.e. robotic middleware and frameworks) and execute distinct components to facilitate interaction with various sensors and actuators, and other robotic components (e.g. cognitive subsystems). Furthermore, as cyber-physical systems, they engage in interactions with humans and their physical environment, as exemplified by social robots. These interactions can potentially lead to serious consequences, including physical damage. In response to this need, we have designed and implemented RIPS, an intrusion prevention system tailored for robotic applications based on ROS 2, the framework that has established itself as the de facto standard for developing robotic applications. This manuscript provides a comprehensive exposition of the issue, the security aspects of ROS 2 applications, and the key points of the threat model we created for our robotic environment. It also describes the architecture and the implementation of our initial research prototype and a language specifically designed for defining detection and prevention rules for diverse, real-world robotic scenarios. Moreover, the manuscript provides a comprehensive evaluation of the approach, that includes a set of experiments with a real social robot executing a well known testbed used in international robotic competitions.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。