[ros-users] [Discourse.ros.org] [Next Generation ROS] ROS2 and DDS Security enhancement on arm platforms

[David Hu]

Hi,

I'm from arm. I'd like to share our enhancement of ROS2 and DDS security based on arm platforms.

In arm V7/V8 core architecture, we have **TrustZone** support (please take a look at this [link](https://www.arm.com/products/security-on-arm/trustzone)) which can enhance the DDS Security Plugins currently implemented based on OpenSSL.

Through the use of arm TrustZone feature, we can switch the system execution states into: 
	a _Normal World_ (rich OS environment is executing here) and 
	a physically isolated _Secure World_ (here a trusted OS is running which protects many ROS2 security assets, like root keys through hardware protection).
As shown in below figure, the ROS2 runs in Normal World (Non Trusted) and the security assets are protected in Secure World (Trusted). Since Secure World is physically isolated from Normal World, the Secure World can protect the ROS2/DDS sensitive security assets from leakage to Normal World even if Normal World is hacked.
![arm-trustzone-for-cortexA|354x339](upload://kWqhw14Kkfhens0fSAEhLWaoQdq.jpg)
In contrast, since OpenSSL runs in Normal World which is not considered as trusted, the security assets in OpenSSL might be vulnerable if rich OS or applications are hacked.

With arm TrustZone, ROS2 with DDS security can run on billions of arm devices in an enhanced security environment.
We are very glad to discuss with you in details. Looking forward to hearing from you.

Thank you.

@marguedas @Jaime_Martin_Losa





---
[Visit Topic](https://discourse.ros.org/t/ros2-and-dds-security-enhancement-on-arm-platforms/3677/1) or reply to this email to respond.