REQUEST: Add project RTPS scapy dissector

vmayoral commented 2 years ago

Description

What is this project? A scapy RTPS crafter/dissector used to assess the security of ROS 2 interactions (PR). A subset of RTPS 2.5 is implemented at the time of writing. Over time, expectation is to a) comply with the full RTPS spec and b) extend it to support DDS Security plugins.
What is your motivation for wanting it under the Security Working Group? Make it available for participants and encourage them to contribute to it.

Existing URL

https://github.com/secdev/scapy/pull/3403 (soon to be https://github.com/secdev/scapy)

Requirements

[x] Builds on ROS 2 master with no warnings - N/A
[x] Has linters enabled
[x] colcon test runs successfully - N/A
[x] Test coverage is greated than 50%

Sponsors (if applicable)

Xilinx
Trend Micro

vmayoral commented 2 years ago

@artivis let's please consider this initiative constructively (opposed to past contribution attempts which were blocked by the Security WG (past discussion, failed contribution 1 failed contribution 2).

As pointed out in the past, we need to revamp the interest in security by maintaining projects and tools that are useful to ROS users from a security standpoint.

mikaelarguedas commented 2 years ago

Looks like a cool project! As the WG activity, attendance and member availability changed quite a bit I will not vote on this right now. If we revisit who is allocating significant time to this WG I believe updating approvers list and let the active approvers (that will be in charge on contributing and maintaining that project) do the voting

artivis commented 2 years ago

@vmayoral Please do update this request as per the new template. Thx.

ros-security / community