Tamara Bonaci, Junjie Yan, Jeffrey A. Herron, Tadayoshi Kohno, H. Chizeck
{"title":"Experimental analysis of denial-of-service attacks on teleoperated robotic systems","authors":"Tamara Bonaci, Junjie Yan, Jeffrey A. Herron, Tadayoshi Kohno, H. Chizeck","doi":"10.1145/2735960.2735980","DOIUrl":null,"url":null,"abstract":"Applications of robotic systems have had an explosive growth in recent years. In 2008, more than eight million robots were deployed worldwide in factories, battlefields, and medical services. The number and the applications of robotic systems are expected to continue growing, and many future robots will be controlled by distant operators through wired and wireless communication networks. The open and uncontrollable nature of communication media between robots and operators renders these cyber-physical systems vulnerable to a variety of cyber-security threats, many of which cannot be prevented using traditional cryptographic methods. A question thus arises: what if teleoperated robots are attacked, compromised or taken over? In this paper, we systematically analyze cyber-security attacks against Raven II R, an advanced teleoperated robotic surgery system. We classify possible threats, and focus on denial-of-service (DoS) attacks, which cannot be prevented using available cryptographic solutions. Through a series of experiments involving human subjects, we analyze the impact of these attacks on teleoperated procedures. We use the Fitts' law as a way of quantifying the impact, and measure the increase in tasks' difficulty when under DoS attacks. We then consider possible steps to mitigate the identified DoS attacks, and evaluate the applicability of these solutions for teleoperated robotics. The broader goal of our paper is to raise awareness, and increase understanding of emerging cyber-security threats against teleoperated robotic systems.","PeriodicalId":344612,"journal":{"name":"Proceedings of the ACM/IEEE Sixth International Conference on Cyber-Physical Systems","volume":"108 1","pages":"0"},"PeriodicalIF":0.0000,"publicationDate":"2015-04-14","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"50","resultStr":null,"platform":"Semanticscholar","paperid":null,"PeriodicalName":"Proceedings of the ACM/IEEE Sixth International Conference on Cyber-Physical Systems","FirstCategoryId":"1085","ListUrlMain":"https://doi.org/10.1145/2735960.2735980","RegionNum":0,"RegionCategory":null,"ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"","JCRName":"","Score":null,"Total":0}
引用次数: 50
Abstract
Applications of robotic systems have had an explosive growth in recent years. In 2008, more than eight million robots were deployed worldwide in factories, battlefields, and medical services. The number and the applications of robotic systems are expected to continue growing, and many future robots will be controlled by distant operators through wired and wireless communication networks. The open and uncontrollable nature of communication media between robots and operators renders these cyber-physical systems vulnerable to a variety of cyber-security threats, many of which cannot be prevented using traditional cryptographic methods. A question thus arises: what if teleoperated robots are attacked, compromised or taken over? In this paper, we systematically analyze cyber-security attacks against Raven II R, an advanced teleoperated robotic surgery system. We classify possible threats, and focus on denial-of-service (DoS) attacks, which cannot be prevented using available cryptographic solutions. Through a series of experiments involving human subjects, we analyze the impact of these attacks on teleoperated procedures. We use the Fitts' law as a way of quantifying the impact, and measure the increase in tasks' difficulty when under DoS attacks. We then consider possible steps to mitigate the identified DoS attacks, and evaluate the applicability of these solutions for teleoperated robotics. The broader goal of our paper is to raise awareness, and increase understanding of emerging cyber-security threats against teleoperated robotic systems.
近年来,机器人系统的应用有了爆炸性的增长。2008年,全世界有超过800万个机器人被部署在工厂、战场和医疗服务中。机器人系统的数量和应用预计将继续增长,许多未来的机器人将由远程操作员通过有线和无线通信网络控制。机器人和操作员之间通信媒体的开放性和不可控性使得这些网络物理系统容易受到各种网络安全威胁,其中许多威胁无法使用传统的加密方法进行预防。这样就产生了一个问题:如果远程操作的机器人受到攻击、破坏或被接管怎么办?在本文中,我们系统地分析了针对Raven II R的网络安全攻击,这是一种先进的远程操作机器人手术系统。我们对可能的威胁进行分类,并重点关注拒绝服务(DoS)攻击,使用可用的加密解决方案无法阻止这种攻击。通过一系列涉及人类受试者的实验,我们分析了这些攻击对远程操作程序的影响。我们使用Fitts定律作为一种量化影响的方法,并测量在遭受DoS攻击时任务难度的增加。然后,我们考虑可能的步骤来减轻已识别的DoS攻击,并评估这些解决方案对远程操作机器人的适用性。我们的论文的更广泛的目标是提高意识,并增加对远程操作机器人系统的新兴网络安全威胁的理解。