Robotics cyber security: vulnerabilities, attacks, countermeasures, and recommendations

Towards an extensive set of criteria for safety and cyber-security evaluation of cyber-physical systems

Verification and validation (V&V) are complex processes combining different approaches and incorporating many different methods including many activities. System engineers regularly face the question if their V&V activities lead to better products, and having appropriate criteria at hand for evaluation of safety and cybersecurity of the systems would help to answer such a question. Additionally, when there is a demand to improve the quality of an already managed V&V process, there is a struggle over what criteria to use in order to measure the improvement. This paper presents an extensive set of criteria suitable for safety and cybersecurity evaluation of cyberphysical systems. The evaluation criteria are agreed upon by 60 researchers from 32 academic and industrial organizations jointly working in a large-scale European research project on 13 real-world use cases from the domains of automotive, railway, aerospace, agriculture, healthcare, and industrial robotics.

Analyses of unpredictable properties of a wind-driven triboelectric random number generator

Wind-driven triboelectric nanogenerators (W-TENGs) are a promising candidate for an energy harvester because wind itself possesses unexhausted, ubiquitous, and clean properties. W-TENG has also been used as a random number generator (RNG) due to the inherent chaotic properties of wind that is also an entropy source. Thus, a W-TENG which simultaneously generates both power and true random numbers with a two-in-one structure, is a wind-driven RNG (W-RNG) like the Janus. However, a root cause of W-RNG unpredictability has not been elucidated. In this work, the unpredictability, which is essential and critical for an RNG, is statistically and mathematically analyzed by auto-correlation, cross-correlation, joint entropy, and mutual information. Even though the overall shape of the total output analog signals from the W-RNG looks like a sinusoidal wave that is not obviously unpredictable, discretized digital signals from the continuous analog output become unpredictable. Furthermore, partial adoption of 4-bit data from 8-bit raw data, with the aid of analog-to-digital converter hardware, further boosts the unpredictability. The W-RNG, which functions as a W-TENG, can contribute to self-powering and self-securing outdoor electrical systems, such as drones, by harvesting energy and generating true random numbers.

Cyber Attack Detection for Self-Driving Vehicle Networks Using Deep Autoencoder Algorithms

Connected and autonomous vehicles (CAVs) present exciting opportunities for the improvement of both the mobility of people and the efficiency of transportation systems. The small computers in autonomous vehicles (CAVs) are referred to as electronic control units (ECUs) and are often perceived as being a component of a broader cyber-physical system. Subsystems of ECUs are often networked together via a variety of in-vehicle networks (IVNs) so that data may be exchanged, and the vehicle can operate more efficiently. The purpose of this work is to explore the use of machine learning and deep learning methods in defence against cyber threats to autonomous cars. Our primary emphasis is on identifying erroneous information implanted in the data buses of various automobiles. In order to categorise this type of erroneous data, the gradient boosting method is used, providing a productive illustration of machine learning. To examine the performance of the proposed model, two real datasets, namely the Car-Hacking and UNSE-NB15 datasets, were used. Real automated vehicle network datasets were used in the verification process of the proposed security solution. These datasets included spoofing, flooding and replay attacks, as well as benign packets. The categorical data were transformed into numerical form via pre-processing. Machine learning and deep learning algorithms, namely k-nearest neighbour (KNN) and decision trees, long short-term memory (LSTM), and deep autoencoders, were employed to detect CAN attacks. According to the findings of the experiments, using the decision tree and KNN algorithms as machine learning approaches resulted in accuracy levels of 98.80% and 99%, respectively. On the other hand, the use of LSTM and deep autoencoder algorithms as deep learning approaches resulted in accuracy levels of 96% and 99.98%, respectively. The maximum accuracy was achieved when using the decision tree and deep autoencoder algorithms. Statistical analysis methods were used to analyse the results of the classification algorithms, and the determination coefficient measurement for the deep autoencoder was found to reach a value of R² = 95%. The performance of all of the models that were built in this way surpassed that of those already in use, with almost perfect levels of accuracy being achieved. The system developed is able to overcome security issues in IVNs.

A Broad View on Robot Self-Defense: Rapid Scoping Review and Cultural Comparison

With power comes responsibility: as robots become more advanced and prevalent, the role they will play in human society becomes increasingly important. Given that violence is an important problem, the question emerges if robots could defend people, even if doing so might cause harm to someone. The current study explores the broad context of how people perceive the acceptability of such robot self-defense (RSD) in terms of (1) theory, via a rapid scoping review, and (2) public opinion in two countries. As a result, we summarize and discuss: increasing usage of robots capable of wielding force by law enforcement and military, negativity toward robots, ethics and legal questions (including differences to the well-known trolley problem), control in the presence of potential failures, and practical capabilities that such robots might require. Furthermore, a survey was conducted, indicating that participants accepted the idea of RSD, with some cultural differences. We believe that, while substantial obstacles will need to be overcome to realize RSD, society stands to gain from exploring its possibilities over the longer term, toward supporting human well-being in difficult times.

Maintenance Performance in the Age of Industry 4.0: A Bibliometric Performance Analysis and a Systematic Literature Review

Recently, there has been a growing interest in issues related to maintenance performance management, which is confirmed by a significant number of publications and reports devoted to these problems. However, theoretical and application studies indicate a lack of research on the systematic literature reviews and surveys of studies that would focus on the evolution of Industry 4.0 technologies used in the maintenance area in a cross-sectional manner. Therefore, the paper reviews the existing literature to present an up-to-date and content-relevant analysis in this field. The proposed methodology includes bibliometric performance analysis and a review of the systematic literature. First, the general bibliometric analysis was conducted based on the literature in Scopus and Web of Science databases. Later, the systematic search was performed using the Primo multi-search tool following Preferred Reporting Items for Systematic Reviews and Meta-Analyses (PRISMA) guidelines. The main inclusion criteria included the publication dates (studies published from 2012-2022), studies published in English, and studies found in the selected databases. In addition, the authors focused on research work within the scope of the Maintenance 4.0 study. Therefore, papers within the following research fields were selected: (a) augmented reality, (b) virtual reality, (c) system architecture, (d) data-driven decision, (e) Operator 4.0, and (f) cybersecurity. This resulted in the selection of the 214 most relevant papers in the investigated area. Finally, the selected articles in this review were categorized into five groups: (1) Data-driven decision-making in Maintenance 4.0, (2) Operator 4.0, (3) Virtual and Augmented reality in maintenance, (4) Maintenance system architecture, and (5) Cybersecurity in maintenance. The obtained results have led the authors to specify the main research problems and trends related to the analyzed area and to identify the main research gaps for future investigation from academic and engineering perspectives.

A Systematic Review on Social Robots in Public Spaces: Threat Landscape and Attack Surface

There is a growing interest in using social robots in public spaces for indoor and outdoor applications. The threat landscape is an important research area being investigated and debated by various stakeholders. Objectives: This study aims to identify and synthesize empirical research on the complete threat landscape of social robots in public spaces. Specifically, this paper identifies the potential threat actors, their motives for attacks, vulnerabilities, attack vectors, potential impacts of attacks, possible attack scenarios, and mitigations to these threats. Methods: This systematic literature review follows the guidelines by Kitchenham and Charters. The search was conducted in five digital databases, and 1469 studies were retrieved. This study analyzed 21 studies that satisfied the selection criteria. Results: Main findings reveal four threat categories: cybersecurity, social, physical, and public space. Conclusion: This study completely grasped the complexity of the transdisciplinary problem of social robot security and privacy while accommodating the diversity of stakeholders’ perspectives. Findings give researchers and other stakeholders a comprehensive view by highlighting current developments and new research directions in this field. This study also proposed a taxonomy for threat actors and the threat landscape of social robots in public spaces.

Autonomous Vehicles: The Cybersecurity Vulnerabilities and Countermeasures for Big Data Communication

The possible applications of communication based on big data have steadily increased in several industries, such as the autonomous vehicle industry, with a corresponding increase in security challenges, including cybersecurity vulnerabilities (CVs). The cybersecurity-related symmetry of big data communication systems used in autonomous vehicles may raise more vulnerabilities in the data communication process between these vehicles and IoT devices. The data involved in the CVs may be encrypted using an asymmetric and symmetric algorithm. Autonomous vehicles with proactive cybersecurity solutions, power-based cyberattacks, and dynamic countermeasures are the modern issues/developments with emerging technology and evolving attacks. Research on big data has been primarily focused on mitigating CVs and minimizing big data breaches using appropriate countermeasures known as security solutions. In the future, CVs in data communication between autonomous vehicles (DCAV), the weaknesses of autonomous vehicular networks (AVN), and cyber threats to network functions form the primary security issues in big data communication, AVN, and DCAV. Therefore, efficient countermeasure models and security algorithms are required to minimize CVs and data breaches. As a technique, policies and rules of CVs with proxy and demilitarized zone (DMZ) servers were combined to enhance the efficiency of the countermeasure. In this study, we propose an information security approach that depends on the increasing energy levels of attacks and CVs by identifying the energy levels of each attack. To show the results of the performance of our proposed countermeasure, CV and energy consumption are compared with different attacks. Thus, the countermeasures can secure big data communication and DCAV using security algorithms related to cybersecurity and effectively prevent CVs and big data breaches during data communication.

A Survey on Recent Advances in Social Robotics

Over decades, social robotics has evolved as a concept that presently covers different areas of application, and interacts with different domains in technology, education, medicine and others. Today, it is possible to envision social robots in tasks that were not expected years ago, and that is not only due to the evolution of social robots, but also to the evolution of the vision humans have for them. This survey addresses recent advances in social robotics from different perspectives. Different contexts and areas of application of social robots are addressed, as well as modalities of interaction with humans. Different robotic platforms used in social contexts are shown and discussed. Relationships of social robotics with advances in other technological areas are surveyed, and methods and metrics used for the human evaluation of the interaction with robots are presented. The future of social robotics is also envisioned based on surveyed works and from different points of view.

Preparing for hybrid warfare and cyber-attacks on health services' digital infrastructure: what nurse managers need to know

AIM

This article aims to outline the key concepts in hybrid warfare and cyber-attack to better inform nurses managers in their strategic contribution to the defence of critical digital infrastructure.

BACKGROUND

Hybrid warfare often targets a nation's critical digital infrastructure including health services. Hybrid warfare against national health services, primarily through cyber-attack, is likely to increase in a more destabilised and conflictual international environment.

EVALUATION

Key literature, reports and assessments on hybrid warfare, advanced persistent threats and cyber-attack referenced to health services were analysed.

KEY ISSUE

Health services are a key element of a nation's critical infrastructure and as such are a key target in hybrid war strategies. Cyber-attack through exploiting clinicians', such as nurses', online susceptibilities, is a key route of attack. Nurse managers, to be effective planners, need to be fully informed on both the context for and specific nature of cyber-attack.

CONCLUSION(S)

Articles that deal with the relationship of hybrid warfare and cyber-attack on health services are rarely aimed at nurses and nurse managers.

IMPLICATIONS FOR NURSING MANAGEMENT

Nurse managers need to be fully informed about the the geo-political nature of cyber-attacks if they are to be fully consulted and listened to in response planning.

Assistive Multimodal Robotic System (AMRSys): Security and Privacy Issues, Challenges, and Possible Solutions

Assistive robotic systems could be a suitable solution to support a variety of health and care services, help independent living, and even simulate affection, to reduce loneliness. However, adoption is limited by several issues, as well as user concerns about ethics, data security, and privacy. Other than the common threats related to internet connectivity, personal robotic systems have advanced interaction possibilities, such as audio, video, touch, and gestures, which could be exploited to gain access to private data that are stored in the robot. Therefore, novel, safer methods of interaction should be designed to safeguard users’ privacy. To solicit further research on secure and private multimodal interaction, this article presents a thorough study of the state-of-the-art literature on data security and user privacy in interactive social robotic systems for health and care. In our study, we focus on social robotics to assist older people, which is a global challenge that is receiving a great deal of attention from the robotics and social care communities. This application will have a significant positive impact on the economy and society, but poses various security and privacy issues. This article analyses the key vulnerable areas where data leakage could occur during a multimodal interaction with a personal assistive robotic system. Thus, blockchain with a resource-aware framework, along with a continuous multifactor authentication mechanism, are envisaged as a potential solution for making such systems secure by design; therefore, increasing trust, acceptability, and adoption. Among the key cybersecurity research challenges, it is crucial to create an intelligent mechanism that autonomously determines the right trade-off between continuous user prompts and system usability, according to data types and personal preferences.

The Cybersecurity and the Care Robots: A Viewpoint on the Open Problems and the Perspectives

Care robots represent an opportunity for the health domain. The use of these robots has important implications. They can be used in surgery, rehabilitation, assistance, therapy, and other medical fields. Therefore, care robots (CR)s, have both important physical and psychological implications during their use. Furthermore, these devices, meet important data in clinical applications. These data must be protected. Therefore, cybersecurity (CS) has become a crucial characteristic that concerns all the involved actors. The study investigated the collocation of CRs in the context of CS studies in the health domain. Problems and peculiarities of these devices, with reference to the CS, were faced, investigating in different scientific databases. Highlights, ranging also from ethics implications up to the regulatory legal framework (ensuring safety and cybersecurity) have been reported. Models and cyber-attacks applicable on the CRs have been identified.

Opportunities and Problems of the Consensus Conferences in the Care Robotics

Care robots represent an opportunity for the health domain. The use of these devices has important implications. They can be used in surgical operating rooms in important and delicate clinical interventions, in motion, in training-and-simulation, and cognitive and rehabilitation processes. They are involved in continuous processes of evolution in technology and clinical practice. Therefore, the introduction into routine clinical practice is difficult because this needs the stability and the standardization of processes. The agreement tools, in this case, are of primary importance for the clinical acceptance and introduction. The opinion focuses on the Consensus Conference tool and: (a) highlights its potential in the field; (b) explores the state of use; (c) detects the peculiarities and problems (d) expresses ideas on how improve its diffusion.

Industry 4.0, Disaster Risk Management and Infrastructure Resilience: A Systematic Review and Bibliometric Analysis

The fourth industrial era, known as ‘Industry 4.0’ (I4.0), aided and abetted by the digital revolution, has attracted increasing attention among scholars and practitioners in the last decade. The adoption of I4.0 principles in Disaster Risk Management (DRM) research and associated industry practices is particularly notable, although its origins, impacts and potential are not well understood. In response to this knowledge gap, this paper conducts a systematic literature review and bibliometric analysis of the application and contribution of I4.0 in DRM. The systematic literature review identified 144 relevant articles and then employed descriptive and content analysis of a focused set of 70 articles published between 2011 and 2021. The results of this review trace the growing trend for adoption of I4.0 tools and techniques in disaster management, and in parallel their influence in resilient infrastructure and digital construction fields. The results are used to identify six dominant clusters of research activity: big data analytics, Internet of Things, prefabrication and modularization, robotics and cyber-physical systems. The research in each cluster is then mapped to the priorities of the Sendai framework for DRR, highlighting the ways it can support this international agenda. Finally, this paper identifies gaps within the literature and discusses possible future research directions for the combination of I4.0 and DRM.