robotics-security

# Robotics Security Skill ## When to Use This Skill - Enabling SROS2 encryption and access control on ROS2 topics/services - Generating keystores, certificates, and security policies for DDS - Hardening robot onboard computers (SSH, firewalls, minimal packages) - Setting up network segmentation between robot control/data/management planes - Managing secrets and credentials across a robot fleet - Securing Docker containers running ROS2 nodes - Designing e-stop and safety systems that survive cyber compromise - Auditing a robot system for security vulnerabilities - Implementing secure boot and firmware verification - Addressing IEC 62443 requirements for industrial robot deployments ## The Robot Attack Surface Robots are unique: cyber vulnerabilities become **physical** threats. ``` NETWORK MIDDLEWARE APPLICATION ┌────────────────┐ ┌────────────────┐ ┌────────────────┐ │ Open DDS ports │───────▶│ Unauthenticated│──────────▶│ Hardcoded │ │ (7400-7500) │ │ /cmd_vel pub │ │ credentials │ │ Unsegmented LAN│ │ No msg signing │ │ Unvalidated cmd│ └────────────────┘ └────────────────┘ └────────────────┘ PHYSICAL FIRMWARE SUPPLY CHAIN ┌────────────────┐ ┌────────────────┐ ┌────────────────┐ │ USB/debug ports│───────▶│ Unsigned │──────────▶│ Compromised │ │ Serial consoles│ │ f...