ROS2 Security Workshop | ROSCon 2019

Security workshop - Demonstrating vulnerabilities and ways to protect your robots

This workshop will demonstrate different real-world attacks performed on robots while teaching techniques on how to secure them against those attacks. This will include teaching on how to design threat models for robotics, hardening the ROS ecosystem through SROS2 as well as using several penetration testing tools to verify that the robot is no longer vulnerable to those attacks.

When

Wednesday, 30th October 2019 (14:00-17:00)

ROSCon is a single-track 2-day conference, the 2019 edition will take place in Macao during the week preceeding IROS, from October 31st to November 1st. Starting with the 2019 edition, ROSCon has a pre-conference workshops half-day, this workshop will thus take place on the afternoon of October 30th.

Where

Conrad Macao, Cotai Central (room TBD):

For further Venue info, please visit the official ROSCon website:

Program

Schedule

  • TO BE UPDATED
Materials

Materials

Prerequisites for the workshop

  • Docker CE Installed - Instructions
  • A Linux based host system

Examples

Supplemental

TO BE updated for this workshop

References

Publications

Aztarna, a footprinting tool for robots

Industry 4.0 is changing the commonly held assumption that robots are to be deployed in closed and isolated networks. When analyzed from a security point of view, the global picture is disheartening: robotics industry has not seriously allocated effort to follow good security practices in the robots produced. Instead, most manufacturers keep forwarding the problem to the end-users of these machines. As learned in previous technological revolutions, such as at the dawn of PCs or smartphones, action needs to be taken in time to avoid disastrous consequences. In an attempt to provide the robotics and security communities with the right tools to perform assessments, in this paper we present aztarna, a footprinting tool for robotics. We discuss how such tool can facilitate the process of identifying vestiges of different robots, while maintaining an extensible structure aimed for future fingerprinting extensions. With this contribution, we aim to raise awareness and interest of the robotics community, robot manufacturers and robot end-users on the need of starting global actions to embrace security. We open source the tool and disclose preliminary results that demonstrate the current insecurity landscape in industry. We argue that the robotic ecosystem is in need of generating a robot security community, conscious about good practices and empowered by the right tools.

  

@ARTICLE{2018arXiv181209490M,
       author = {{Mayoral Vilches}, V{\'\i}ctor and {Olalde Mendia}, Gorka and
         {Perez Baskaran}, Xabier and {Hern{\'a}ndez Cordero}, Alejandro and
         {Usategui San Juan}, Lander and {Gil-Uriarte}, Endika and
         {Olalde Saez de Urabain}, Odei and {Alzola Kirschgens}, Laura},
        title = "{Aztarna, a footprinting tool for robots}",
      journal = {arXiv e-prints},
     keywords = {Computer Science - Cryptography and Security, Computer Science - Robotics},
         year = "2018",
        month = "Dec",
          eid = {arXiv:1812.09490},
        pages = {arXiv:1812.09490},
archivePrefix = {arXiv},
       eprint = {1812.09490},
 primaryClass = {cs.CR},
       adsurl = {https://ui.adsabs.harvard.edu/abs/2018arXiv181209490M},
      adsnote = {Provided by the SAO/NASA Astrophysics Data System}
}


External Links

Who

Speakers

Ruffin White | UCSD

Ruffin White is a Ph.D. student in the Contextual Robotics Institute at University of California San Diego, under the direction of Dr. Henrik Christensen. Having earned his Masters of Computer Science at the Institute for Robotics \& Intelligent Machines, Georgia Institute of Technology, he remains an active contributor to ROS and a collaborator with the Open Source Robotics Foundation. His research interests include mobile robotics, with an focus on secure sub-systems design, as well as advancing repeatable and reproducible research in the field of robotics by improving development tools and standards for robotic software.

 

Mikael Arguedas | Unaffiliated

Mikael received his joint MSc from GeorgiaTech and ENSEA (France) in 2015 with a major in Electronics and Computer Engineering and a minor in Computer Science. He worked as a research assistant at GTRI and developed Computer Vision algorithms for detection of rigid and deformable objects. Before that, Mikael received a BS in Embedded Systems, Robotics and RTOS from IUT Cachan in 2011. He has been working on various ROS projects during the last few years. He worked at Open Robotics from 2015 to 2018 where he worked on ROS2 and more relevantly authored the SROS2 tools.

 

Thomas Moulard | AWS Robotics

Dr. Thomas Moulard is a Sr. Software Engineer at AWS Robotics, Amazon Web Services. Dr. Moulard received a Ph.D. from LAAS-CNRS in Toulouse, France in 2012 and was a Japan Society for the Promotion of Science (JSPS) Postdoctoral Research Fellow at the AIST from 2012 to 2014. From 2016 to 2018, Dr. Moulard worked for Alphabet/Google first as a software engineer on an undisclosed robotics project and then, as the Technical Lead of the Daydream Data Infrastructure team, designing cloud services to evaluate computer vision algorithms performance. In 2018, Dr. Moulard joined the AWS RoboMaker team. AWS RoboMaker is a service that makes it easy to develop, test, and deploy intelligent robotics applications at scale.

 

Odei Olalde | Alias Robotics

Odei Olalde is the CISO at Alias Robotics, leading the offensive team and hacking robots. Prior to this role, he has been working on information security for different companies along his more than 6 year of experience. Started as a pen tester he found his way to the robotic world few years back and he has been researching and hacking robots since then.

 

Gorka Olalde | Alias Robotics

Gorka is a computer engineer graduated at the University of Mondragon, with a Master’s in Cloud computing and software development automation by the UNIR. He has always been passionate about technology and electronics since he was joung, tinkering with anything that had wires on it. With a background in the financial industry, working as part of the security team of an important bank on the Basque Country, and in the security research field, with an internship at the Fraunhofer SIT institute. Now he leads the technical offensive team research as a robotics security enginner at Alias Robotics.

 

Additional Organizers

Henrik Christensen | UCSD

Dr. Henrik I. Christensen is a Professor of Computer Science at the Department of Computer Science and Engineering University of California San Diego. He is also Director of the Institute for Contextual Robotics. Prior to his coming to the University of California San Diego he was the founding director of the Institute for Robotics and Intelligent machines (IRIM) at Georgia Institute of Technology (2006-2016). Dr. Christensen does research on systems integration, human-robot interaction, mapping and robot vision. He has published more than 300 contributions across AI, robotics and vision. His research has a strong emphasis on “real problems with real solutions.” A problem needs a theoretical model, implementation, evaluation, and translation to the real world.