ROS 2의 이벤트 기반 런타임 모니터링을 활용한 실시간 공격 탐지 시스템
Real-Time Attack Detection System Using Event-Based Runtime Monitoring in ROS 2
0
조회
0
다운로드
0
인용
0
참고문헌
키워드
초록
로봇 시스템은 지난 10년 간 매우 빠른 속도로 발전했다. Robot Operating System은 로봇 시스템 및 애플리케이션의 효율적인 개발을 위한 오픈소스 기반의 소프트웨어 프레임워크이며, 다양한 연구 및 산업 현장에서 널리 사용되고 있다. ROS 애플리케이션은 다양한 취약점을 내재하고 있을 수 있다. 이러한 ROS 애플리케이션의 실행을 런타임 모니터링 하기 위해 다양한 연구가 진행되어 왔다. 본 연구에서는 ROS 2에서의 이벤트 기반 런타임 모니터링을 활용한 실시간 공격 탐지 시스템을 제안한다. 우리의 공격 탐지 시스템은 ros2_tracing의 tracetools를 확장하여 ROS 2 미들웨어 계층의 주요 라이브러리에 이벤트 계측을 삽입하고 런타임 중에 이벤트를 모니터링함으로써 API의 비순차적 실행을 통한 애플리케이션 계층에서의 공격을 탐지한다.
Abstract
Robotic systems have developed very rapidly over the past decade. Robot Operating System is an open source-based software framework for the efficient development of robot operating systems and applications, and is widely used in various research and industrial fields. ROS applications may contain various vulnerabilities. Various studies have been conducted to monitor the excution of these ROS applications at runtime. In this study, we propose a real-time attack detection system using event-based runtime monitoring in ROS 2. Our attack detection system extends tracetools of ros2_tracing to instrument events into core libraries of ROS 2 middleware layer and monitors the events during runtime to detect attacks on the application layer through out-of-order execution of the APIs.
참고문헌 (25)
- Rizk, Yara, "Cooperative heterogeneous multi-robot systems : A survey", ACM Computing Surveys (CSUR), 52(2), pp.1~31 (2019)
- Twinkle Jain, "DMTCP : Fixing the single point of failure of the ros master", ROSCon 2017 (2017)
- Pushyami Kaveti, "ROS rescue : fault tolerance system for robot operating system", Robot Operating System (ROS), Studies in Computational Intelligence, 895, pp.381~397 (2021), Springer
- Ruffin White, "SROS : Securing ROS over the wire, in the graph, and through the kernel", arXiv preprint arXiv:1611.07060, ~ (2016)
- Jongkil Kim, "Security and performance considerations in ros 2 : A balancing act", arXiv preprint arXiv:1809.09566, ~ (2018)
- Buffer Overflow Vulnerabilities in C and C++, "Patrice Lacroix", Université Laval, ~, pp.Rapport de Recherche DIUL-RR-0803 (2008)
- José D’Abruzzo Pereira, "Characterizing Buffer Overflow Vulnerabilities in Large C", C++Projects, 2021, pp.9, 142879~142892
- Saleh M. Alnaeli, "Vulnerable C", C++ code usage in IoT software systems, 2016 (2016), 348~352[DOI]
- Marc Pichler, "Can i depend on you? mapping the dependency and quality landscape of ros packages", 2019 third IEEE international conference on robotic computing (IRC), pp.78~85 (2019), IEEE
- JeffHuang, "ROSRV : Runtime verification for robots", International Conference on Runtime Verification, pp.247~254 (2014), Springer
- Angelo Ferrando, "ROSMonitoring: a runtime verification framework for ROS", Annual Conference Towards Autonomous Robotic Systems, pp.387~399 (2020), Springer
- Sean Rivera, "ROS-FM: Fast Monitoring for the Robotic Operating System (ROS)", 2020 25th International Conference on Engineering of Complex Computer Systems (ICECCS). IEEE, pp.187~196 (2020)
- Christophe Bédard, "ros2_tracing:Multipurpose Low-Overhead Framework for Real-Time Tracing of ROS 2", IEEE Robotics and Automation Letters, 7(3), pp.6511~6518 (2022)
- Mathieu Desnoyers, "The lttng tracer: A lowimpact performance and behavior monitor for gnu", linux, 2006, 209~224
- "The LTTng Docu mentation"[URL]
- "Babeltrace2 documentatio n"[URL]
- "babeltrace"[URL]
- Salima Omar, "Machine learning techniques for anomaly detection : an overview", International Journal of Computer Applications, 79(2), pp.33~41 (2013)
- Qiang Liu, "Learning-assisted secure end-to-end network slicing for cyber-physical systems", IEEE Network, 34(3), pp.37~43 (2020)
- Vedanth Narayanan, "Learning based anomaly detection for industrial arm applications", Proceedings of the 2018Workshop on Cyber-Physical Systems Security and PrivaCy, pp.13~23 (2018)
- Varun Chandola, "Anomaly detection : A survey", ACM computing surveys (CSUR), 41(3), pp.1~58 (2009)
- Varun Chandola, "Anomaly detection for discrete sequences : A survey", IEEE transactions on knowledge and data engineering, 24(5), pp.823~839 (2012)
- 서강욱, "시퀀스 유사도 기반 무인 비행체 이상 탐지 시스템", 정보보호학회논문지, 32(1), pp.39~48 (2022), 한국정보보호학회[DOI]
- Anam Tahir, "Swarms of unmanned aerial vehicles—a survey", Journal of Industrial Information Integration, 16 (2019)
- Hazim Shakhatreh, "Unmanned aerial vehicles(UAVs) : A survey on civil applications and key research challenges", IEEE Access, 7, pp.48572~48634 (2019)