A spotlight on security and privacy risks with future household robots: attacks and lessons

ABSTRACT

Future homes will be populated with large numbers of robots with diverse functionalities, ranging from chore robots to elder care robots to entertainment robots. While household robots will offer numerous benefits, they also have the potential to introduce new security and privacy vulnerabilities into the home. Our research consists of three parts. First, to serve as a foundation for our study, we experimentally analyze three of today's household robots for security and privacy vulnerabilities: the WowWee Rovio, the Erector Spykee, and the WowWee RoboSapien V2. Second, we synthesize the results of our experimental analyses and identify key lessons and challenges for securing future household robots. Finally, we use our experiments and lessons learned to construct a set of design questions aimed at facilitating the future development of household robots that are secure and preserve their users' privacy.

REFERENCES

• 1: R. Aiken and R. Epstein. Ethical Guidelines for AI in Education: Starting a Conversation. Intl. Journal of AI in Education, 11, 2000.
• 2: R. Anderson, P. Street, and M. Kuhn. Tamper Resistance -- a Cautionary Note. In Proc. 2nd USENIX Workshop on Electronic Commerce, 1996.
• 3: S. Anderson. Asimov's "Three Laws of Robotics" and Machine Metaethics. AI & Society, 22(4), 2008.
• 4: R. Arkin. Governing Lethal Behavior: Embedding Ethics in a Hybrid Deliberative/Reactive Robot Architecture. In Proc. of the 3rd Intl. Conf. on Human Robot Interaction, 2008.
• 5: I. Asimov. I, Robot. Gnome Press, 1950.
• 6: A. Bacha, C. Bauman, R. Faruque, M. Fleming, C. Terwelp, C. Reinholtz, D. Hong, T. Alberi, D. Anderson, S. Cacciola, et al. Odin: Team VictorTango's entry in the DARPA Urban Challenge. Journal of Field Robotics, 25(8), 2008.
• 7: J. Billig, Y. Danilchenko, and C. Frank. Evaluation of Google Hacking. In Proc. of the 5th Conf. on Information Security Curriculum Development. ACM New York, NY, USA, 2008.
• 8: M. Bonney and Y. Yung. Robot Safety. IFS Publications, Springer-Verlag, Berlin, 1985.
• 9: D.R. Butcher. Invasion of the Robots in (Factory) Space, August 2006. http://news.thomasnet.com/IMT/archives/2006/08/state_of_industrial_robots_in_plants_factories_forcast_trend.html.
• 10: Y. Choi, J. Gordon, and N. Schweighofer. ADAPT -- Adaptive Automated Robotic Task Practice System for Stroke Rehabilitation. In IEEE Intl. on Conf. Robotics and Automation (ICRA), 2008.
• 11: R. Clarke. Asimov's Laws of Robotics: Implications for Information Technology, Parts 1 and 2. IEEE Computer, 1993.
• 12: Digital Chosun. 'Thinking' Robot Breaks Barriers but not Eggs, 2007. http://english.chosun.com/w21data/html/news/200511/200511150007.html.
• 13: W. Edwards and R. Grinter. At Home with Ubiquitous Computing: Seven Challenges. In Proc. of the 3rd International Conference on Ubiquitous Computing (Ubicomp 2001), pages 256--272, 2001.
• 14: S. Fluhrer, I. Mantin, and A. Shamir. Weaknesses in the key schedule algorithm of RC4. In Proc. 4th Workshop on Selected Areas of Cryptography, 2001.
• 15: J. Forlizzi. How Robotic Products Become Social Products: an Ethnographic Study of Cleaning in the Home. ACM SIGCHI/SIGART Human-Robot Interaction, 2007.
• 16: D. Halperin, T.S. Heydt-Benjamin, B. Ransford, S.S. Clark, B. Defend, W. Morgan, K. Fu, T. Kohno, and W.H. Maisel. Pacemakers and implantable cardiac defibrillators: Software radio attacks and zero-power defenses. In Proc. of the IEEE Symposium on Security and Privacy, 2008.
• 17: T.S. Heydt-Benjamin, D.V. Bailey, K. Fu, A. Juels, and T. Ohare. Vulnerabilities in First-Generation RFID-enabled Credit Cards. In Proc. of Eleventh Intl. Conf. on Financial Cryptography and Data Security, February 2007.
• 18: J. Hong, J. Ng, S. Lederer, and J. Landay. Privacy Risk Models for Designing Privacy-Sensitive Ubiquitous Computing Systems. In DIS '04: Proc. of the 5th Conf. on Designing Interactive Systems, Cambridge, MA, USA, 2004. ACM.
• 19: C. Kidd and C. Breazeal. Designing a Sociable Robot System for Weight Maintenance. In IEEE Consumer Communications and Networking Conference. Las Vegas, NV: IEEE, 2006.
• 20: T. Kohno, A. Stubblefield, A. Rubin, and D. Wallach. Analysis of an Electronic Voting System. In IEEE Symposium on Security and Privacy, 2004.
• 21: B. Laxton, K. Wang, and S. Savage. Reconsidering Physical Key Secrecy: Teleduplication via Optical Decoding, October 2008.
• 22: C. Liu, K. Conn, N. Sarkar, and W. Stone. Affect Recognition in Robot Assisted Rehabilitation of Children with Autism Spectrum Disorder. In Proc. of the 15th IEEE Intl. Conf. on Robotics and Automation, 2006.
• 23: T. Mukai, M. Onishi, T. Odashima, S. Hirano, and Z. Luo. Development of the Tactile Sensor System of a Human-Interactive Robot "RI-MAN". IEEE Transactions on Robotics, 24(2), 2008.
• 24: J. Schwartz. Nanny-Cam May Leave a Home Exposed. The New York Times, April 2002.
• 25: A. Steinfeld, T. Fong, D. Kaber, M. Lewis, J. Scholtz, A. Schultz, and M. Goodrich. Common Metrics for Human-Robot Interaction. In Proc. of the 1st ACM SIGCHI/SIGART Conf. on Human-Robot Interaction. ACM New York, NY, USA, 2006.
• 26: A. Stubblefield, J. Ioannidis, and A. Rubin. Using the Fluhrer, Mantin, and Shamir Attack to Break WEP. In Proc. of the 2002 Network and Distributed Systems Security Symposium, volume 1722, 2002.
• 27: J. Sung, L. Guo, R. Grinter, and H. Christensen. "My Roomba Is Rambo": Intimate Home Appliances. Proc. of UbiComp 2007, 2007.
• 28: A. Tapus, M. Mataric, and B. Scassellati. The Grand Challenges in Socially Assistive Robotics. IEEE Robotics and Automation Magazine, 14(1), 2007.
• 29: S. Thrun, M. Montemerlo, H. Dahlkamp, D. Stavens, A. Aron, J. Diebel, P. Fong, J. Gale, M. Halpenny, G. Hoffmann, et al. Stanley: The robot that won the DARPA Grand Challenge. Journal of Field Robotics, 23(9), 2006.
• 30: D. Voth. A new Generation of Military Robots. IEEE Intelligent Systems, 19(1), 2004.
• 31: P. Warren. Launching a New Kind of Warfare. The Guardian, October 2006.
• 32: A. Whitten and J.D. Tygar. Why Johnny Can't Encrypt: A Usability Evaluation of PGP 5.0. In 8th USENIX Security Symposium, 1999.
• 33: Wikipedia. WowWee Robotics home page. http://en.wikipedia.org/wiki/Wowwee.
• 34: J. Young, R. Hawkins, E. Sharlin, and T. Igarashi. Toward Acceptable Domestic Robots: Applying Insights from Social Psychology. Intl. Journal of Social Robotics, 2008.
• 35: Yuri Kageyama. Invention that may have far-reaching benefits for the disabled and elderly. Associated Press, 2009. http://www.msnbc.msn.com/id/27066773/.

INDEX TERMS

Primary Classification:
  I. Computing Methodologies
  I.m MISCELLANEOUS

General Terms:
Design, Human Factors, Security

Keywords:
cyber-physical systems, domestic robots, household robots, multi-robot attack, privacy, robots, security, single-robot attack, ubiquitous robots