機(jī)器人安全缺陷或被用于攻擊主人

The world’s best-known robots are at risk of spying on their users, revealing trade secrets or even being taken over and used in physical fights, according to security experts who warn that the devices are vulnerable to cyber attack.

安全專家表示，世界上最著名的一些機(jī)器人存在監(jiān)聽(tīng)它們的用戶、泄露商業(yè)機(jī)密，甚至被控制、被用于實(shí)施身體攻擊的風(fēng)險(xiǎn)。這些專家們警告，機(jī)器人很容易遭到網(wǎng)絡(luò)攻擊。

IOActive, a cyber security company, tested 50 robots — including SoftBank Robotics’ childlike Pepper robot and Rethink Robotics’ industrial Baxter robot — and discovered weaknesses that would allow a hacker to manipulate arms and legs and take over microphones and cameras.

網(wǎng)絡(luò)安全公司IOActive測(cè)試了50臺(tái)機(jī)器人，包括軟銀機(jī)器人(SoftBank Robotics)生產(chǎn)的孩子模樣的Pepper，以及Rethink Robotics的工業(yè)機(jī)器人Baxter，結(jié)果發(fā)現(xiàn)了一些缺陷，黑客可以利用這些缺陷來(lái)操縱機(jī)器人的手臂和腿，或者控制麥克風(fēng)和攝像頭。

As more robots replace humans in jobs from construction sites to hospitals, with Pepper already being used in stores and homes and Baxter deployed on assembly lines , the impact of a potential cyber attack increases. Spending on robots and related services is set to double to $188bn in 2020, according to data from research firm IDC.

隨著越來(lái)越多的機(jī)器人在從建筑工地到醫(yī)院的工作崗位上取代人類——Pepper已被用在商店和家庭，Baxter被用在裝配線上——潛在網(wǎng)絡(luò)攻擊的影響也將增加。研究公司IDC的數(shù)據(jù)顯示，2020年，機(jī)器人及相關(guān)服務(wù)方面的支出將比現(xiàn)在翻一番，達(dá)1880億美元。

Cesar Cerrudo, chief technology officer for IOActive Labs, which specialises in hunting for flaws in so-called Internet of Things devices, said he was concerned that robots were being connected to the internet with no thought for cyber security.

IOActive LabsIOActive專門致力于尋找物聯(lián)網(wǎng)設(shè)備的缺陷，該機(jī)構(gòu)的首席技術(shù)官塞薩爾•塞魯多(Cesar Cerrudo)表示，他擔(dān)心人們正將機(jī)器人接入互聯(lián)網(wǎng)而完全沒(méi)有考慮到網(wǎng)絡(luò)安全問(wèn)題。

“Once the robots start to be in every home and many businesses, the motivation to attack them will increase exponentially,” he said. “Since they can move around their surroundings, especially industrial robots, they use a lot of power and can be programmed to do very dangerous movements in real time.”

“一旦機(jī)器人開(kāi)始進(jìn)入千家萬(wàn)戶和許多企業(yè)，對(duì)它們進(jìn)行攻擊的動(dòng)機(jī)將大為增加，”他說(shuō)，“由于機(jī)器人可以在自己的環(huán)境中到處移動(dòng)，特別是工業(yè)機(jī)器人，它們要使用很多電力，因此可以通過(guò)編程讓它們實(shí)時(shí)地做出非常危險(xiǎn)的動(dòng)作。”

While it found no evidence yet of any cyber attacks on robots, Mr Cerrudo warned that they could be used to cause physical harm or to stall operations.

雖然IOActive尚未發(fā)現(xiàn)機(jī)器人遭網(wǎng)絡(luò)攻擊的任何證據(jù)，但塞魯多警告稱，它們可能被用來(lái)造成身體傷害或讓某些活動(dòng)停止。

He said that if one of the flaws that he discovered was used to infect a robot with ransomware, malicious software that shuts down a computer until its recipient pays a ransom, it could damage operations.

他表示，如果有人利用他這次發(fā)現(xiàn)的某個(gè)缺陷，以勒索軟件(一種惡意軟件，可以關(guān)閉計(jì)算機(jī)，直到被感染者支付贖金)感染一臺(tái)機(jī)器人，可能導(dǎo)致活動(dòng)無(wú)法正常進(jìn)行。

“If they start replacing workers with robots, it will be as if someone hacked the company’s employees,” he said. “如果一家公司開(kāi)始用機(jī)器人替換工人，(一旦這些機(jī)器人受到黑客攻擊)那就好像這家公司的員工受到了黑客攻擊，”他說(shuō)。

IOActive, which has informed robot manufacturers of the flaws, also found serious cyber security problems in robots from other companies including Ubtech Robotics, Robotis, Universal Robots and Sartec Corp.

IOActive已把這些缺陷通報(bào)給了機(jī)器人生產(chǎn)商。該公司也在優(yōu)必選科技(UBTech Robotics)、Robotis、優(yōu)傲機(jī)器人(Universal Robots)和Sartec Corp等公司出品的機(jī)器人身上發(fā)現(xiàn)了嚴(yán)重的網(wǎng)絡(luò)安全問(wèn)題。

Universal Robots said it was aware of IOActive’s report and was “investigating the potential vulnerability described and potential countermeasures”.

優(yōu)傲機(jī)器人公司表示，它已了解到IOActive的報(bào)告，并且“正在調(diào)查報(bào)告中描述的潛在薄弱環(huán)節(jié)，并研究潛在對(duì)策”。

Rethink Robotics said it had already addressed some of the issues highlighted by IOActive.

Rethink Robotics公司表示，它已解決了IOActive指出的一些問(wèn)題。