{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,11,6]],"date-time":"2025-11-06T11:45:49Z","timestamp":1762429549577,"version":"build-2065373602"},"reference-count":57,"publisher":"MDPI AG","issue":"4","license":[{"start":{"date-parts":[[2025,4,11]],"date-time":"2025-04-11T00:00:00Z","timestamp":1744329600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"name":"European Union\u2014NextGenerationEU","award":["PE00000014"],"award-info":[{"award-number":["PE00000014"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Future Internet"],"abstract":"<jats:p>The ongoing adoption of Robot Operating Systems (ROSs) not only for research-oriented projects but also for industrial applications demands a more thorough assessment of its security than in the past. This paper highlights that a key ROS component\u2014the ROS Master\u2014is indeed vulnerable to a novel kind of Slow Denial of Service (slow DoS) attack, the root reason of this vulnerability being an extremely high idle connection timeout. The effects of vulnerability exploitation have been evaluated in detail by means of a realistic test bed, showing how it leads to a systemwide and potentially dangerous disruption of ROS system operations. Moreover, it has been shown how some basic forms of built-in protection of the Linux kernel can be easily circumvented, and are therefore ineffective against this kind of threat.<\/jats:p>","DOI":"10.3390\/fi17040167","type":"journal-article","created":{"date-parts":[[2025,4,11]],"date-time":"2025-04-11T03:45:23Z","timestamp":1744343123000},"page":"167","update-policy":"https:\/\/doi.org\/10.3390\/mdpi_crossmark_policy","source":"Crossref","is-referenced-by-count":2,"title":["Analyzing Impact and Systemwide Effects of the SlowROS Attack in an Industrial Automation Scenario"],"prefix":"10.3390","volume":"17","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-9607-9993","authenticated-orcid":false,"given":"Ivan","family":"Cibrario Bertolotti","sequence":"first","affiliation":[{"name":"Istituto di Elettronica e di Ingegneria dell Informazione e delle Telecomunicazioni (IEIIT), Consiglio Nazionale delle Ricerche (CNR), 10129 Turin, Italy"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9319-7620","authenticated-orcid":false,"given":"Luca","family":"Durante","sequence":"additional","affiliation":[{"name":"Istituto di Elettronica e di Ingegneria dell Informazione e delle Telecomunicazioni (IEIIT), Consiglio Nazionale delle Ricerche (CNR), 10129 Turin, Italy"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-6932-1975","authenticated-orcid":false,"given":"Enrico","family":"Cambiaso","sequence":"additional","affiliation":[{"name":"Istituto di Elettronica e di Ingegneria dell Informazione e delle Telecomunicazioni (IEIIT), Consiglio Nazionale delle Ricerche (CNR), 16152 Genoa, Italy"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"1968","published-online":{"date-parts":[[2025,4,11]]},"reference":[{"key":"ref_1","unstructured":"ROS Industrial Consortium (2025, January 28). Consortium Home Page. Available online: https:\/\/rosindustrial.org."},{"key":"ref_2","doi-asserted-by":"crossref","unstructured":"Dechouniotis, D., Spatharakis, D., and Papavassiliou, S. (2022, January 25\u201329). Edge robotics experimentation over next generation iiot testbeds. Proceedings of the NOMS 2022-2022 IEEE\/IFIP Network Operations and Management Symposium, Budapest, Hungary.","DOI":"10.1109\/NOMS54207.2022.9789889"},{"key":"ref_3","doi-asserted-by":"crossref","unstructured":"Ayaida, M., Messai, N., Valentin, F., and Marcheras, D. (2022). Talkrobots: A middleware for robotic systems in industry 4.0. Future Internet, 14.","DOI":"10.3390\/fi14040109"},{"key":"ref_4","doi-asserted-by":"crossref","unstructured":"Lin, H.I., and Hwang, Y.C. (2019, January 13\u201316). Integration of robot and IIoT over the OPC unified architecture. Proceedings of the 2019 International Automatic Control Conference (CACS), Keelung, Taiwan.","DOI":"10.1109\/CACS47674.2019.9024732"},{"key":"ref_5","doi-asserted-by":"crossref","unstructured":"Profanter, S., Tekat, A., Dorofeev, K., Rickert, M., and Knoll, A. (2019, January 13\u201315). OPC UA versus ROS, DDS, and MQTT: Performance evaluation of industry 4.0 protocols. Proceedings of the 2019 IEEE International Conference on Industrial Technology (ICIT), Melbourne, Australia.","DOI":"10.1109\/ICIT.2019.8755050"},{"key":"ref_6","doi-asserted-by":"crossref","first-page":"300","DOI":"10.1504\/IJTMCC.2013.056440","article-title":"Slow DoS attacks: Definition and categorisation","volume":"1","author":"Cambiaso","year":"2013","journal-title":"Int. J. Trust. Manag. Comput. Commun."},{"key":"ref_7","doi-asserted-by":"crossref","unstructured":"Rios, V., Inacio, P., Magoni, D., and Freire, M. (2024, January 8\u201312). Detection of Slowloris Attacks using Machine Learning Algorithms. Proceedings of the 39th ACM\/SIGAPP Symposium on Applied Computing, Avila, Spain.","DOI":"10.1145\/3605098.3635919"},{"key":"ref_8","first-page":"23","article-title":"Slowcomm: Design, development and performance evaluation of a new slow DoS attack","volume":"35","author":"Cambiaso","year":"2017","journal-title":"J. Inf. Secur. Appl."},{"key":"ref_9","doi-asserted-by":"crossref","unstructured":"Sabri, S., Ismail, N., and Hazzim, A. (2021, January 7\u20138). Slowloris DoS attack based simulation. Proceedings of the IOP Conference Series: Materials Science and Engineering, Bapatla, India.","DOI":"10.1088\/1757-899X\/1062\/1\/012029"},{"key":"ref_10","doi-asserted-by":"crossref","first-page":"255","DOI":"10.1016\/j.cose.2017.09.009","article-title":"Slow rate denial of service attacks against HTTP\/2 and detection","volume":"72","author":"Tripathi","year":"2018","journal-title":"Comput. Secur."},{"key":"ref_11","doi-asserted-by":"crossref","unstructured":"Vaccari, I., Aiello, M., and Cambiaso, E. (2020). SlowTT: A slow denial of service against IoT networks. Information, 11.","DOI":"10.3390\/info11090452"},{"key":"ref_12","unstructured":"Cambiaso, E., Durante, L., and Cibrario Bertolotti, I. (2024, January 16\u201318). SlowROS: Investigating the possibility to perpetrate Slow DoS Attacks against Robot Operating System. Proceedings of the 8th International Conference on Communication and Network Technology (ICCNT), Florence, Italy."},{"key":"ref_13","doi-asserted-by":"crossref","unstructured":"Aiello, M., Cambiaso, E., Mongelli, M., and Papaleo, G. (2014, January 13\u201316). An on-line intrusion detection approach to identify low-rate DoS attacks. Proceedings of the 2014 International Carnahan Conference on Security Technology (ICCST), Rome, Italy.","DOI":"10.1109\/CCST.2014.6987039"},{"key":"ref_14","doi-asserted-by":"crossref","unstructured":"Kemp, C., Calvert, C., and Khoshgoftaar, T.M. (2020, January 11\u201313). Detection methods of slow read DoS using full packet capture data. Proceedings of the 2020 IEEE 21st International Conference on Information Reuse and Integration for Data Science (IRI), Las Vegas, NV, USA.","DOI":"10.1109\/IRI49571.2020.00010"},{"key":"ref_15","doi-asserted-by":"crossref","unstructured":"Wen, S., Jia, W., Zhou, W., Zhou, W., and Xu, C. (2010, January 1\u20133). CALD: Surviving various application-layer DDoS attacks that mimic flash crowd. Proceedings of the 2010 Fourth International Conference on Network and System Security, Melbourne, Australia.","DOI":"10.1109\/NSS.2010.69"},{"key":"ref_16","doi-asserted-by":"crossref","first-page":"1073","DOI":"10.1109\/TPDS.2011.262","article-title":"Discriminating DDoS attacks from flash crowds using flow correlation coefficient","volume":"23","author":"Yu","year":"2011","journal-title":"IEEE Trans. Parallel Distrib. Syst."},{"key":"ref_17","doi-asserted-by":"crossref","unstructured":"Alashhab, A.A., Zahid, M.S.M., Azim, M.A., Daha, M.Y., Isyaku, B., and Ali, S. (2022). A survey of low rate DDoS detection techniques based on machine learning in software-defined networks. Symmetry, 14.","DOI":"10.3390\/sym14081563"},{"key":"ref_18","doi-asserted-by":"crossref","first-page":"43920","DOI":"10.1109\/ACCESS.2020.2976609","article-title":"Low-rate DoS attacks, detection, defense, and challenges: A survey","volume":"8","author":"Wu","year":"2020","journal-title":"IEEE Access"},{"key":"ref_19","first-page":"3651","article-title":"Detection of the botnets\u2019 low-rate DDoS attacks based on self-similarity","volume":"10","author":"Lysenko","year":"2020","journal-title":"Int. J. Electr. Comput. Eng."},{"key":"ref_20","doi-asserted-by":"crossref","first-page":"2019","DOI":"10.30534\/ijeter\/2020\/90852020","article-title":"Detection of slow DDoS attacks based on user\u2019s behavior forecasting","volume":"8","author":"Savchenko","year":"2020","journal-title":"Int. J. Emerg. Trends Eng. Res. (IJETER)"},{"key":"ref_21","doi-asserted-by":"crossref","first-page":"102871","DOI":"10.1016\/j.jnca.2020.102871","article-title":"Distributed real-time SlowDoS attacks detection over encrypted traffic using Artificial Intelligence","volume":"173","author":"Garcia","year":"2021","journal-title":"J. Netw. Comput. Appl."},{"key":"ref_22","doi-asserted-by":"crossref","first-page":"210","DOI":"10.1016\/j.icte.2020.08.005","article-title":"A deep learning based HTTP slow DoS classification approach using flow data","volume":"7","author":"Muraleedharan","year":"2021","journal-title":"ICT Express"},{"key":"ref_23","doi-asserted-by":"crossref","unstructured":"Nugraha, B., and Murthy, R.N. (2020, January 9\u201312). Deep learning-based slow DDoS attack detection in SDN-based networks. Proceedings of the 2020 IEEE Conference on Network Function Virtualization and Software Defined Networks (NFV-SDN), Virtual.","DOI":"10.1109\/NFV-SDN50289.2020.9289894"},{"key":"ref_24","doi-asserted-by":"crossref","first-page":"107792","DOI":"10.1016\/j.comnet.2020.107792","article-title":"Detection of reduction-of-quality DDoS attacks using Fuzzy Logic and machine learning algorithms","volume":"186","author":"Magoni","year":"2021","journal-title":"Comput. Netw."},{"key":"ref_25","first-page":"102879","article-title":"Low-rate DoS attack detection method based on hybrid deep neural networks","volume":"60","author":"Xu","year":"2021","journal-title":"J. Inf. Secur. Appl."},{"key":"ref_26","doi-asserted-by":"crossref","unstructured":"Jeong, S.Y., Choi, I.J., Kim, Y.J., Shin, Y.M., Han, J.H., Jung, G.H., and Kim, K.G. (2017;, January 6\u20139). A Study on ROS Vulnerabilities and Countermeasure. Proceedings of the Companion of the 2017 ACM\/IEEE International Conference on Human-Robot Interaction, Vienna, Austria.","DOI":"10.1145\/3029798.3038437"},{"key":"ref_27","doi-asserted-by":"crossref","unstructured":"Abeykoon, I., and Feng, X. (2019, January 19\u201323). Challenges in ROS Forensics. Proceedings of the 2019 IEEE SmartWorld, Ubiquitous Intelligence & Computing, Advanced & Trusted Computing, Scalable Computing & Communications, Cloud & Big Data Computing, Internet of People and Smart City Innovation (SmartWorld\/SCALCOM\/UIC\/ATC\/CBDCom\/IOP\/SCI), Leicester, UK.","DOI":"10.1109\/SmartWorld-UIC-ATC-SCALCOM-IOP-SCI.2019.00299"},{"key":"ref_28","doi-asserted-by":"crossref","unstructured":"Teixeira, R.R., Maurell, I.P., and Drews, P.L. (2020, January 10\u201313). Security on ROS: Analyzing and exploiting vulnerabilities of ROS-based systems. Proceedings of the 2020 Latin American Robotics Symposium (LARS), 2020 Brazilian Symposium on Robotics (SBR) and 2020 Workshop on Robotics in Education (WRE), Virtual.","DOI":"10.1109\/LARS\/SBR\/WRE51543.2020.9307107"},{"key":"ref_29","doi-asserted-by":"crossref","unstructured":"Koubaa, A. (2020). Penetration Testing ROS. Robot Operating System (ROS): The Complete Reference (Volume 4), Springer International Publishing.","DOI":"10.1007\/978-3-030-20190-6"},{"key":"ref_30","unstructured":"Basan, E., Sushkin, N., Khabarov, O., Makarevich, O., and Azarov, I. (2021, January 1). Analysis of Attacks on Robotic Operation System. Proceedings of the International Workshop on Advanced in Information Security Management and Applications (AISMA 2021), CEUR Workshop Proceedings, Stavropol and Krasnoyarsk, Russia."},{"key":"ref_31","doi-asserted-by":"crossref","unstructured":"Mokhamed, T., Dakalbab, F.M., Abbas, S., and Talib, M.A. (2022, January 19\u201321). Security in Robot Operating Systems (ROS): Analytical review study. Proceedings of the 3rd International Conference on Distributed Sensing and Intelligent Systems (ICDSIS 2022), Dubai, United Arab Emirates.","DOI":"10.1049\/icp.2022.2422"},{"key":"ref_32","unstructured":"van Rossum, G., and the Python Development Team (2024). The Python Library Reference\u2014Release 3.12.3, Python Software Foundation."},{"key":"ref_33","unstructured":"MITRE Corporation (2025, January 28). Common Vulnerabilities and Exposures (CVE) List. Available online: https:\/\/cve.mitre.org\/cgi-bin\/cvekey.cgi?keyword=ros."},{"key":"ref_34","unstructured":"Open Source Robotics Foundation, Inc. (2025, January 28). SROS Documentation. Available online: https:\/\/wiki.ros.org\/SROS."},{"key":"ref_35","unstructured":"Open Source Robotics Foundation, Inc. (2025, January 28). ROS.org Documentation. Available online: http:\/\/wiki.ros.org\/Documentation."},{"key":"ref_36","doi-asserted-by":"crossref","unstructured":"DeMarinis, N., Tellex, S., Kemerlis, V.P., Konidaris, G., and Fonseca, R. (2019, January 20\u201324). Scanning the Internet for ROS: A View of Security in Robotics Research. Proceedings of the 2019 International Conference on Robotics and Automation (ICRA), Montreal, QC, Canada.","DOI":"10.1109\/ICRA.2019.8794451"},{"key":"ref_37","doi-asserted-by":"crossref","unstructured":"Antunes, R.A., Dalmazo, B.L., and Drews, P.L.J. (2022, January 18\u201321). Detecting Data Injection Attacks in ROS Systems using Machine Learning. Proceedings of the 2022 Latin American Robotics Symposium (LARS), 2022 Brazilian Symposium on Robotics (SBR), and 2022 Workshop on Robotics in Education (WRE), S\u00e3o Paulo, Brazil.","DOI":"10.1109\/LARS\/SBR\/WRE56824.2022.9995917"},{"key":"ref_38","doi-asserted-by":"crossref","unstructured":"Zaim, H.\u00c7., Yola\u00e7an, E.N., and Yavano\u011flu, U. (2023, January 15\u201318). Intelligent Attack Detection in ROS-based Systems. Proceedings of the 2023 IEEE International Conference on Big Data (BigData), Sorrento, Italy.","DOI":"10.1109\/BigData59044.2023.10386583"},{"key":"ref_39","doi-asserted-by":"crossref","first-page":"4465","DOI":"10.1109\/LRA.2023.3284379","article-title":"Training a Non-Cooperator to Identify Vulnerabilities and Improve Robustness for Robot Navigation","volume":"8","author":"Qiu","year":"2023","journal-title":"IEEE Robot. Autom. Lett."},{"key":"ref_40","doi-asserted-by":"crossref","unstructured":"Portugal, D., Rocha, R.P., and Castilho, J.P. (2024). Inquiring the robot operating system community on the state of adoption of the ROS 2 robotics middleware. Int. J. Intell. Robot. Appl., 1\u201326.","DOI":"10.1007\/s41315-024-00393-4"},{"key":"ref_41","unstructured":"Object Management Group, Inc (2024, May 24). DDS Security, Version 1.1. Available online: https:\/\/www.omg.org\/spec\/DDS-SECURITY\/1.1\/About-DDS-SECURITY."},{"key":"ref_42","unstructured":"Trend Micro Research, TXOne, ADLINK, Alias Robotics, and ZDI (2024, May 24). Defending the Supply Chain: Why the DDS Protocol Is Critical in Industrial and Software Systems. Available online: https:\/\/www.trendmicro.com\/en_us\/research\/22\/a\/defending-the-supply-chain-why-dds-is-critical-in-industrial-and-software-systems.html."},{"key":"ref_43","unstructured":"America\u2019s Cyber Defense Agency (2024, May 24). ICS ADVISORY\u2014Multiple Data Distribution Service (DDS) Implementations (Update A), Available online: https:\/\/www.cisa.gov\/news-events\/ics-advisories\/icsa-21-315-02."},{"key":"ref_44","doi-asserted-by":"crossref","unstructured":"Wyrobek, K.A., Berger, E.H., Van der Loos, H.M., and Salisbury, J.K. (2008, January 19\u201323). Towards a personal robotics development platform: Rationale and design of an intrinsically safe personal robot. Proceedings of the 2008 IEEE International Conference on Robotics and Automation, Pasadena, CA, USA.","DOI":"10.1109\/ROBOT.2008.4543527"},{"key":"ref_45","unstructured":"Winer, D. (2025, January 28). XML-RPC Specification. Available online: https:\/\/xmlrpc.com\/spec.md."},{"key":"ref_46","unstructured":"Internet Engineering Task Force (IETF) (2025, January 28). HTTP\/2, RFC 9113. Available online: https:\/\/datatracker.ietf.org\/doc\/html\/rfc9113."},{"key":"ref_47","unstructured":"World Wide Web Consortium (W3C) (2025, January 28). Extensible Markup Language (XML). Available online: https:\/\/www.w3.org\/XML\/."},{"key":"ref_48","unstructured":"Internet Engineering Task Force (IETF) (2025, January 28). Transmission Control Protocol (TCP), RFC 9293. Available online: https:\/\/datatracker.ietf.org\/doc\/html\/rfc9293."},{"key":"ref_49","first-page":"44","article-title":"SYN, SYN-ACK, and beyond: Learning by networking","volume":"35","author":"Shebaro","year":"2020","journal-title":"J. Comput. Sci. Coll."},{"key":"ref_50","unstructured":"ISO\/IEC\/IEEE (2009). International Standard ISO\/IEC\/IEEE 9945, Information Technology\u2014Portable Operating System Interface (POSIX\u00ae) Base Specifications, Issue 7, International Organization for Standardization."},{"key":"ref_51","doi-asserted-by":"crossref","unstructured":"Malavolta, I., Lewis, G., Schmerl, B., Lago, P., and Garlan, D. (July, January 27). How do you Architect your Robots? State of the Practice and Guidelines for ROS-based Systems. Proceedings of the 2020 IEEE\/ACM 42nd International Conference on Software Engineering: Software Engineering in Practice (ICSE-SEIP), Seoul, Republic of Korea.","DOI":"10.1145\/3377813.3381358"},{"key":"ref_52","unstructured":"Open Source Robotics Foundation, Inc. (2025, January 28). Source code of the Ros_comm Component. Available online: https:\/\/github.com\/ros\/ros_comm."},{"key":"ref_53","doi-asserted-by":"crossref","unstructured":"Yang, C.H., Wu, J.P., Lee, F.Y., Lin, T.Y., and Tsai, M.H. (2023). Detection and Mitigation of SYN Flooding Attacks through SYN\/ACK Packets and Black\/White Lists. Sensors, 23.","DOI":"10.3390\/s23083817"},{"key":"ref_54","unstructured":"Netfilter Core Team (2024, June 20). The netfilter.org \u201cIptables\u201d Project\u201d, 1999\u20132021. Available online: https:\/\/www.netfilter.org\/projects\/iptables\/index.html."},{"key":"ref_55","doi-asserted-by":"crossref","unstructured":"Bewasana, D.A.D., Harumnanda, M.S.A., and Priambodo, D.F. (2023, January 9\u201310). Securing Networks with Port Knocking: An Experimental Study on Ubuntu and Kali. Proceedings of the 2023 3rd International Conference on Electronic and Electrical Engineering and Intelligent System (ICE3IS), Yogyakarta, Indonesia.","DOI":"10.1109\/ICE3IS59323.2023.10335248"},{"key":"ref_56","doi-asserted-by":"crossref","unstructured":"Oktivasari, P., Zain, A.R., Agustin, M., Kurniawan, A., arbi Murad, F., and fabian Anshor, M. (2022, January 13\u201314). Analysis of effectiveness of iptables on web server from Slowloris attack. Proceedings of the 2022 5th International Conference of Computer and Informatics Engineering (IC2IE), Jakarta, Indonesia.","DOI":"10.1109\/IC2IE56416.2022.9970143"},{"key":"ref_57","doi-asserted-by":"crossref","unstructured":"Treglia, P. (2024, January 20\u201324). PiSecurityCheck: Server Security Check in a Hand. Proceedings of the 2024 47th MIPRO ICT and Electronics Convention (MIPRO), Opatija, Croatia.","DOI":"10.1109\/MIPRO60963.2024.10569384"}],"container-title":["Future Internet"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.mdpi.com\/1999-5903\/17\/4\/167\/pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,10,9]],"date-time":"2025-10-09T17:12:35Z","timestamp":1760029955000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.mdpi.com\/1999-5903\/17\/4\/167"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,4,11]]},"references-count":57,"journal-issue":{"issue":"4","published-online":{"date-parts":[[2025,4]]}},"alternative-id":["fi17040167"],"URL":"https:\/\/doi.org\/10.3390\/fi17040167","relation":{},"ISSN":["1999-5903"],"issn-type":[{"type":"electronic","value":"1999-5903"}],"subject":[],"published":{"date-parts":[[2025,4,11]]}}}