Formal Analysis and Detection for ROS2 Communication Security Vulnerability

Shuo Yang,Jian Guo,Xue Rui

DOI: https://doi.org/10.3390/electronics13091762

IF: 2.9

2024-05-03

Electronics

Abstract:Robotic systems have been widely used in various industries, so the security of communication between robots and their components has become an issue that needs to be focused on. As a framework for developing robotic systems, the security of ROS2 (Robot Operating System 2) can directly affect the security of the upper-level robotic systems. Therefore, it is a worthwhile research topic to detect and analyze the security of ROS2. In this study, we adopted a formal approach to analyze the security of the communication mechanism of ROS2. First, we used a state transition system to model the potential vulnerabilities of ROS2 based on the ROS2 communication mechanism and the basic process of penetration testing. Secondly, we introduced a CIA model based on the established vulnerability model and used linear temporal logic to define its security properties. Then, we designed and implemented a vulnerability detection tool for ROS2 applications based on the vulnerability model and security properties. Finally, we experimentally tested some ROS2-based applications, and the results show that ROS2 has vulnerabilities without additional protection safeguards.

engineering, electrical & electronic,physics, applied,computer science, information systems

What problem does this paper attempt to address?

The paper attempts to address the issue of security vulnerabilities in the communication mechanisms of the Robot Operating System ROS2 (Robot Operating System 2). Specifically, the researchers analyzed the security of ROS2 communication mechanisms using formal methods and based on this, established a vulnerability detection tool to identify and analyze potential security threats in ROS2 applications.

### Main Work Content:
1. **Formal Modeling and Analysis**: The researchers conducted formal modeling and analysis of different communication mechanisms in ROS2, and formally expressed the CIA (Confidentiality, Integrity, and Availability) properties as security attributes.
2. **Design and Development of Vulnerability Detection Tool**: Based on the established vulnerability models and security attributes, a ROS2 vulnerability detection tool was designed and developed. This tool detects vulnerabilities in the ROS2 system through reachability analysis and analyzes which CIA properties of ROS2 are compromised by these vulnerabilities.
3. **Experimental Validation**: Experimental tests were conducted on some ROS2-based applications, and the results showed that ROS2 has vulnerabilities in the absence of additional protective measures.

### Specific Security Vulnerability Analysis:
- **Topic Communication**: Includes basic data theft, unauthorized subscription, and unauthorized publication.
- **Service Communication**: Includes basic service data theft and unauthorized service invocation.
- **Action Communication**: Includes basic action data theft and unauthorized action invocation.

### Model Construction:
The researchers used state transition systems and Linear Temporal Logic (LTL) to represent the CIA security attributes and formally modeled the various vulnerabilities mentioned above. Through these models, the researchers were able to better understand and detect potential security risks in ROS2 communication mechanisms.

Overall, the paper aims to improve the security of the ROS2 system and provides developers with effective tools to detect and fix security vulnerabilities in communication.