Thanks to new technologies and communication paradigms, such as the Internet of Things (IoT) and the Robotic Operating System (ROS), modern robots can be built by combining heterogeneous standard devices in a single embodiment. Although this approach brings high degrees of modularity, it also yields uncertainty, with regard to providing cybersecurity assurances and guarantees on the integrity of the embodiment. In this paper, first we illustrate how cyberattacks on different devices can have radically different consequences on the robot's ability to complete its tasks and preserve its embodiment. We also claim that modern robots should have self-awareness for what concerns such aspects, and formulate in two propositions the different characteristics that robots should integrate for doing so. Then, we show how these propositions relate to two established cybersecurity frameworks, the NIST Cybersecurity Framework and the MITRE ATT&CK, and we argue that achieving these propositions requires that robots possess at least three properties for mapping devices and tasks. Last, we reflect on how these three properties could be achieved in a larger conceptual framework.
翻译:得益于物联网(IoT)和机器人操作系统(ROS)等新技术与通信范式的出现,现代机器人可以通过在单一实体中集成异构标准设备来构建。尽管这种方法带来了高度的模块化,但也导致在提供网络安全保障及实体完整性保证方面存在不确定性。本文首先阐述了针对不同设备的网络攻击如何对机器人完成任务及保持其实体完整性的能力产生截然不同的影响。我们进一步主张,现代机器人应具备对此类方面的自我认知能力,并通过两项命题阐述了机器人为此应集成的不同特性。随后,我们展示了这些命题如何与两个成熟的网络安全框架——NIST网络安全框架和MITRE ATT&CK——相关联,并论证实现这些命题要求机器人至少具备三项用于映射设备与任务的属性。最后,我们探讨了在更宏观的概念框架中实现这三项属性的可能路径。