search

seanrivera / rosploit

rosploit tools
MIT License
14 stars 1 forks source link

For some questions about the tool and article #1

Open alexis-pepe opened 3 years ago

alexis-pepe commented 3 years ago

I've been interested in robot operating system security recently, and I read your article "ROSploit: Cybersecurity Tool for ROS"， I'd like to ask some questions： 1.Do you think it makes sense to study the security of robot operating systems now? ROS2 already has security in mind, even if it is not yet widespread 2.What are the tampering methods we can implement for the data of the robot sensor

In addition, I want to know more about your research results and learn more knowledge. Could you please share your other articles with me for reference 1.DiscoFuzzer: Discontinuity-based Vulnerability Detector for Robotic Systems 2.Auto-Encoding Robot State Against Sensor Spoofing Attacks 3.ROS-Defender: SDN-Based Security Policy Enforcement for Robotic Applications 4.Real-Time Attack Detection on Robot Cameras: A Self-Driving Car Application I think your research results are very valuable. Can you send these materials to my email？（yubeibei7@sina.com） Thank you very much!

seanrivera commented 3 years ago

1) I still think it makes sense to study ROS1 as it is over half of all ROS downloads (http://download.ros.org/downloads/metrics/metrics-report-2020-07.pdf). That said, tools should probably support both ROS1 and ROS2 if you are starting development now.

  1. That really depends on the sensor in question. Which sensors are you looking at?
alexis-pepe commented 3 years ago

  1. I still think it makes sense to study ROS1 as it is over half of all ROS downloads (http://download.ros.org/downloads/metrics/metrics-report-2020-07.pdf). That said, tools should probably support both ROS1 and ROS2 if you are starting development now.

  2. That really depends on the sensor in question. Which sensors are you looking at? I am very glad to receive your reply! The sensors I focus on are lidar and vision sensors (like Kinect), I want to carry out some network attacks on ROS, unlike DOS, but I want to carry out data tampering attacks, such as FDI and tampering with sensor data, which will lead to the reduction of slam mapping accuracy and target recognition accuracy.

alexis-pepe commented 3 years ago

In addition, have you already published these four articles? I cannot download them from "ResearchGate". If they are already open and do not involve research secrets, could you please share them with me

seanrivera commented 3 years ago

I have sent you the articles at the email address you provided.

neil-okikiolu commented 3 years ago

Hi @seanrivera, I also read your paper and this is a great set of tools you have put together.

Could you also please send me the 4 articles: 1.DiscoFuzzer: Discontinuity-based Vulnerability Detector for Robotic Systems 2.Auto-Encoding Robot State Against Sensor Spoofing Attacks 3.ROS-Defender: SDN-Based Security Policy Enforcement for Robotic Applications 4.Real-Time Attack Detection on Robot Cameras: A Self-Driving Car Application

My email is neil@simius.ai

Thanks.