STRIDE 위협모델링을 활용한 이동로봇 배송 서비스 보안 요구사항 도출
Deriving Mobile Robot Delivery Service Security Requirements Using STRIDE Threat Modeling
0
조회
0
다운로드
0
인용
0
참고문헌
키워드
초록
전 세계적인 저출산과 고령화로 인해 노동력이 부족한 가운데, 해결 방안으로 로봇 기술이 각광받고 있다. 특히 급성장 중인 이동로봇은 스스로 주변 환경을 인식하고 장애물을 피해 작업을 수행할 만큼 지능화되었다. 그러나 IT 기술의 접목으로 잠재된 보안위협이 증가하였고, 대응책을 마련하기 위해 보안 연구가 진행되었다. 하지만 이동로봇 전반의 보안위협을 점검하기 위한 연구는 부족하다. 전체적인 로봇 시스템의 강화를 위해선 설계 단계부터 체계적인 방법론으로 보안위협을 식별할 필요가 있다. 본 논문에서는 이동로봇 배송 서비스 환경을 대상으로 Data Flow Diagram과 STRIDE 위협모델링을 통해 보안위협을 식별하였다. 그리고 Attack Library의 취약점과 공격기법들을 Attack Tree를 통해 도식화하고, 최종적으로 Check List를 작성하여 보안 요구사항을 도출하였다. 본 연구를 통해 도출된 결과가 로봇 보안 관련 지침 및 정책 수립 시 활용되어 안전한 로봇 기반 조성에 기여하길 바라는 마음으로 연구를 진행하였다.
Abstract
Due to the global low birth rate and aging population, there is a growing interest in utilizing robot technology as a solution to address labor shortages. Specifically, mobile robots, which are growing rapidly, have become intelligent enough to recognize their environment and avoid obstacles to carry out tasks. However, the integration of IT technology into these robots has led to an increase in potential security vulnerabilities, and security research has been conducted to prepare countermeasures. However, research to examine the security threats of mobile robots in general is insufficient. To enhance the overall security of robot systems, it is imperative to systematically identify security threats starting from the design phase. In this paper, we identify security threats within the mobile robot delivery service environment using a structured approach that involves Data Flow Diagram and STRIDE threat modeling. Additionally, we visualize vulnerabilities and attack techniques through Attack Tree based on the Attack Library, and a Check List has finally been created to derive security requirements. We have been conducted this study with the hope that the results derived from this study will be utilized in establishing guidelines and policies related to robot security and contribute to the establishment of a safe robot foundation.
참고문헌 (48)
- "Global Mobile Rob ot Industry Size" (2024)[URL]
- "‘Outdoor mobile robot’ business permit ted… “New markets such as delivery a nd patrol have opened”", Electronic Newspaper, Nov. 2023, 8~
- "Robot Mistake" (2024)[URL]
- "Robot Vacuum Cleaner" (2024)[URL]
- I. Reithner, "Analysis of the Interaction Between Safety and Securi ty Demonstrated on a Mobile Robot an d a Production Network", Proceedings of the 32nd International DAAAM Sym posium 2021, pp.349~355 (2021)
- K. M. Ahmad Yousef, "Secur ity risk assessment of the PeopleBot mobile robot research platform", Intern ational Conference on Electrical and C omputing Technologies and Applications, pp.1~5 (2017)
- S. Haas, "Secure d action authorization for industrial m obile robots", 2018 IEEE Industrial Cy ber-Physical Systems (ICPS), pp.806~811 (2018)
- C. Wang, "How to secure autonomous mobile robots? An approach with fuzzing, detection and mitigation", Journal of Systems Archit ecture, 112(5), pp.1~14 (2021)
- Adam Shostak, "Threat Modeling: Desi gning for Security" (2014), Wiley Publishing
- M. Cagnazzo, "Threat modeling for mobile health systems", 2018 IEEE Wir eless Communications and Networking Conference Workshops, pp.314~319 (2018)
- M. N. Anwar, "Modeling Security Threats for Smart Cities: A STRIDE-Based Approach", Smart Cities-Opportunities and Challenges, pp.387~396 (2020)
- S. M. Khalil, "Threat Modeling of Cyber-Physical Systems - A Case Study of a Microgri d System", Computers & Security, 124(C), pp.1~16 (2023)
- R. H. Jacobsen, "Secu rity Threats Analysis of the Unmanne d Aerial Vehicle System", MILCOM 2021 - 2021 IEEE Military Communicatio ns Conference (MILCOM), pp.316~322 (2021)
- International Organization for Standar dization, "Robots and robotic devices -Safety requirements for personal care robots", ISO 13482:2014, ~ (2014)
- Overweight, "Ha na Financial Investment", 2023
- Myeong-Cheol Park, "Development of anapartment type self-driving courier delivery robot", Proceedings of the Korean Society of Computer Information Conference, pp.301~302 (2022)
- Seung-Bin Lee, "Autonomous d riving guidance robot using ultrasonic sensors", Proceedings of KIIT Conferen, pp.456~459 (2022)
- N. Sathiabalan, "Autonomous robotic fire detection and extinguishing system", Journal of Physics Conference Series, pp.7499~7504 (2021)
- J. Saike, "Autonomous Navi gation System of Greenhouse Mobile R obot Based on 3D Lidar and 2D Lidar SLAM", Frontiers in Plant Science, 13, pp.1~18 (2022)
- S. Vongbunyong, "Development of Tele-O perated Mobile Robots for COVID-19 F ield Hospitals", 25th International Co mputer Science and Engineering Confe rence, pp.319~324 (2021)
- D. Yanmida, "D esign and Implementation of an Auton omous Delivery Robot for Restaurant Services", Journal of Electrical Engine ering, 19(3), pp.66~69 (2020)
- Su-Min Shim, "Analysis of mobile small robot wireless communication protocols and related service trends and considerations on considerations", The Journal of Korean Institute of Communication and Information Sciences, 49(1), pp.142~156 (2024)
- Telecommunication Techonology Associ ation, "Urban autonomous delivery rob ot service – Part 1: Interconnection requirements", TTAK.KO-10.1486-Part1, ~ (2023)
- Seong-Rok Choi, "Trends and implications of logistics", delivery robots in the era o f the 4th Industrial Revolution, 2019, pp.34(34), 98~107
- "Twinny Self-Driving Robot" (2024)[URL]
- "Domestic Guidance Mobile Robot" (2024)[URL]
- Dong-Hyeon Ko, "Integration of mobile robots and manipulators using ROS", Journal of t he Korean Society of Manufacturing Technology Engineers, 29(3), pp.182~188 (2020)
- K. Rahul, "Design of a 4 DOF parallel robot arm and the firmware implementation on embedded system to transplant pot seedlings", Artificial Intelligence in Agriculture, 4(2), pp.172~183 (2020)
- Z. Yin, "A Metho d of Constructing Robotics Service Pla tform for Assisting Handicapped or El derly People", Journal of Robotics, 2020(1), pp.1~6 (2020)
- H. Kabir, "Internet of robotic things for mobile robots : Concepts, technologies, chall enges, applications, and future directi ons", Digital Communications and Networks, 9(6), pp.1265~1290 (2023)
- Eui-Seon Kim, "Implementation of a serving mobile robot using ROS", Journal of Korean Institute of Information Technology, 17(2), pp.33~43 (2019)
- Korea Research Institute for Vocationa l Education and Training, "Robot hard ware architecture and input", output int erface design, 2023
- Ji-Tae Park, "Design of a robot control platf orm for efficient indoor robot control", Proceedings of Korean Institute of Co mmunications and Information Science s Conference, pp.1301~1302 (2022)
- E. Kadëna, "Mobile Robots: An Overview of Data and Security", 7th International Confer ence on Information Systems Security and Privacy, pp.291~299 (2020)
- Exploiting Physical D ynamics to Detect Actuator and Senso r Attacks in Mobile Robots, "P. Guo", Pennsylva nia State University, ~ (2017)
- JP. A. Yaacoub, "Robotics cyber secu rity: vulnerabilities,attacks, counterm easures, and recommendations", Intern ational Journal of Information Security, 21(1), pp.115~158 (2022)
- K. M. Ahmad Yousef, "Analyzing Cyber-Physical Threats on Robotic Platforms", Sensors, 18(5), pp.1643~1654 (2018)
- JP. A. Yaacoub, "The internet of modular robo tic things: Issues, limitations, challen ges, & solutions", Internet of Things, 23(1), pp.1~66 (2023)
- E. Basan, "Analysis of the Impact of Denial of Service Attacks on the Grou p of Robots", 2018 International Confer ence on Cyber-Enabled Distributed Co mputing and Knowledge Discovery, pp.63~638 (2018)
- G. Cornelius, "A Pers pective of Security for Mobile Service Robots", Iberian Robotics Conference, pp.88~100 (2017)
- S. Hollerer, "Cobot attack: a security assessment exemplified by a s pecific collaborative robot", 10th CIRP Sponsored Conference on Digital Enter prise Technologies (DET 2021), pp.191~196 (2021)
- G. W. Clark, "Cybersecurity issues in robotics", 2017 IEEE Conference on Cognitive and Computational Aspects of Situation Management, pp.1~5 (2017)
- E. Yag˘dereli, "A study on cyber-security of autono mous and unmanned vehicles", Journal of Defense Modeling and Simulation:Applications, Methodology, Technology, 12(4), pp.369~381 (2015)
- S. O. Oruma, "Securit y Threats to 5G Networks for Social R obots in Public Spaces: A Survey", IEEE Access, 11, pp.63205~63237 (2023)
- S. Kim, "RoboFuzz: fuzzin g robotic systems over robot operating system(ROS) for finding correctness bugs", Proceedings of the 30th ACM Joi nt European Software Engineering Con ference and Symposium on the Founda tions of Software Engineering, pp.447~458 (2022)
- K. -T. Xie, "ROZZ: Property-based F uzzing for Robotic Programs in ROS", 2022 International Conference on Robo tics and Automation, pp.6786~6792 (2022)
- MITRE, "CVE-2024-30735", ~ (2024)
- MITRE, "CVE-2023-3103", ~ (2023)