The Problem of Assessing Information Security Risks for Robotic Systems

Abstract

Today, robotic systems are becoming very popular. They are typically used to monitor critical objects. Human lives often depend on the correct operation of a robotic system. Therefore, risk analysis of a robotic information system is an important task. However, to date there is no standard that describes this process. We conducted a study of existing standards for industrial control system and typical information systems. We have identified one common problem. If the risk assessment process is still described in these documents, then the analysis of initial security is not considered at all. This assessment of the initial level of security, the analysis of structural and functional characteristics is a very important task. If we are not completely knowledgeable about our system, then we may not fully assess the risks. Therefore, an attacker can take advantage of this. This article also discusses security incidents related to robotic systems. We concluded that an attacker may not have special means to attack, and at the same time causes substantial damage to the robotic system. Indeed, the main problem in the analysis of robotic systems is the difference of this type of network from the typical computer networks, which in turn requires the creation of new methods and approaches to the analysis of the security of a network of mobile robots.