Introducing the Robot Vulnerability Database (RVD)
This addresses cybersecurity risks in robotics, which can lead to safety issues like human harm, but it is incremental as it builds on existing vulnerability database concepts.
The authors tackled the problem of insufficient and biased vulnerability databases for robots by introducing the Robot Vulnerability Database (RVD), a directory for responsible disclosure of bugs, weaknesses, and vulnerabilities in robots, and they presented preliminary vulnerabilities and called for community contributions.
Cybersecurity in robotics is an emerging topic that has gained significant traction. Researchers have demonstrated some of the potentials and effects of cyber attacks on robots lately. This implies safety related adverse consequences causing human harm, death or lead to significant integrity loss clearly overcoming the privacy concerns in classical IT world. In cybersecurity research, the use of vulnerability databases is a very reliable tool to responsibly disclose vulnerabilities in software products and raise willingness of vendors to address these issues. In this paper we argue, that existing vulnerability databases are of insufficient information density and show some biased content with respect to vulnerabilities in robots. This paper presents the Robot Vulnerability Database (RVD), a directory for responsible disclosure of bugs, weaknesses and vulnerabilities in robots. This article aims to describe the design and process as well as the associated disclosure policy behind RVD. Furthermore the authors present preliminary selected vulnerabilities already contained in RVD and call to the robotics and security communities for contribution to the endeavour of eliminating zero-day vulnerabilities in robotics.