Zero Trust Architecture in Robotics
Talk provided during the Workshop on Security and Privacy in Robotics as part of ICRA 2020.
Security is a pre-requiste for ensuring safety in robotics and needs to be ensured inter and intra robot communications. Traditional cyber security is often based on the castle-and-moat approach—also known as perimeter security— to protect systems from malicious attacks. Like medieval castles protected by stone walls and moats, organizations and their cyber-physical systems use perimeter security fortifying their network perimeters with firewalls, proxy servers, honeypots, and other Intrusion Prevention (or Detection) Systems (IPS (or IDS)). The problem with this approach is that once an attacker gains access to the network, they have free reign over everything inside.
In this talk Víctor Mayoral-Vilches will introduce a security architecture for robots that makes no trust assumptions and demands strict identity verification for every person, device or sub-component trying to access resources on a robot network (internal or external), regardless of whether they are sitting inside or outside of the network perimeter.