基于故障树的服务机器人信息安全测评系统模型  

Service Robot Information Security Evaluation System Model Based on Fault Tree

作　　者：李梦玮 赵晓飞 巩潇 LI Meng-wei;ZHAO Xiao-fei;GONG Xiao(Research Center for Computer and Microelectronics Development of MIIT(China Software Testing Center),Beijing 100048,China)

机构地区：[1]工业和信息化部计算机与微电子发展研究中心(中国软件评测中心),北京100048

出　　处：《工业技术创新》2020年第3期24-29,共6页Industrial Technology Innovation

摘　　要：为了有效开展服务机器人的信息安全测评工作,从受侵害对象、应用场景出发,总结服务机器人信息安全问题所带来的应用风险,提出一种基于故障树的服务机器人信息安全分析方法。对服务机器人本体系统、云网系统架构进行分析,应用故障树分析法,构造服务机器人信息安全测评系统模型架构,对硬件接入、数据采集、数据分析和操作展示进行详细设计,以兼具在线与离线信息安全测评功能。以某迎宾导引服务机器人为例,模拟各类攻击手段,对测评系统模型进行了验证实现,发现了服务机器人通信数据未加密、弱口令漏洞等信息安全问题,为后续服务机器人安全应用研究奠定了基础。In order to effectively advance the evaluation of service robot information security, started from the victim and application environment, the application risks brought by service robot information security problems are summarized, and a fault tree based service robot information security analysis method is proposed. By analyzing the ontology system and cloud network system architecture of service robots, a model architecture of service robot information security evaluation system using fault tree analysis is constructed. Hardware access, data support, data analysis and operation interface are designed in detail, to achieve both online and offline information security evaluation functions. By taking a visitor reception and guide service robot as an example, various attacks are simulated, and the evaluation system model is verified and realized, so that information security problems such as unencrypted communication data and weak password vulnerability of such a service robot are found, laying foundations for the follow-up research on the security application of service robots.

关 键 词：服务机器人 信息安全 故障树分析法 测评系统模型 云网系统 

分 类 号：TP242.6[自动化与计算机技术—检测技术与自动化装置]