Procedimiento de auditor\'ia de ciberseguridad para sistemas aut\'onomos: metodolog\'ia, amenazas y mitigaciones

TL;DR

This paper introduces a security auditing procedure for autonomous systems, combining a layered methodology, threat taxonomy, and mitigation strategies, validated through four diverse robotic case studies.

Contribution

It presents a novel security auditing framework specifically tailored for autonomous systems, addressing their unique threats and mitigation needs.

Findings

Validated through four practical robotic case studies.

Demonstrated effectiveness of the auditing procedure.

Identified key security vulnerabilities in autonomous robots.

Abstract

The deployment of autonomous systems has experienced remarkable growth in recent years, driven by their integration into sectors such as industry, medicine, logistics, and domestic environments. This expansion is accompanied by a series of security issues that entail significant risks due to the critical nature of autonomous systems, especially those operating in human-interaction environments. Furthermore, technological advancement and the high operational and architectural complexity of autonomous systems have resulted in an increased attack surface. This article presents a specific security auditing procedure for autonomous systems, based on a layer-structured methodology, a threat taxonomy adapted to the robotic context, and a set of concrete mitigation measures. The validity of the proposed approach is demonstrated through four practical case studies applied to representative robotic platforms: the Vision 60 military quadruped from Ghost Robotics, the A1 robot from Unitree Robotics, the UR3 collaborative arm from Universal Robots, and the Pepper social robot from Aldebaran Robotics.