[ros-users] [Discourse.ros.org] [Next Generation ROS] ROS2 Security Working Group Online Meeting - Feb 13th, 2019 between 2:00 - 3:00 PM PST

[Rutvik Hora via Discourse.ros.org]

Thanks everyone who made time to attend this. [Here](https://s3.amazonaws.com/rutvik-public-artifacts/Security+WG/Meeting+Recording+-+Hora%2C+Rutvik+Conference+Bridge.mp4)  is the link to the recording of the meeting.

Summary:
* Discussed security tooling discussed as part of ROS2-C: [Demo](https://s3.amazonaws.com/rutvik-public-artifacts/Security+WG/SecurityDemo.mp4)

* Discussion around how this can be used for a fleet of robots. This out of the box is intended towards making local dev easier. There is still  work needed for fleet management and key/cert distribution across fleet of robots.
* High level discussion about current state of the threat model Amazon is  putting together. We discussed out current approach based on STRIDE (https://en.wikipedia.org/wiki/STRIDE_(security)). Feedback was mainly around using different hardware platforms to include platform specific threats. We're hoping to make this available to the community in 2-3 weeks of  timeline (publish on discourse and/or ROS2 design page). Idea is to keep this as a live document where community members can collaborate on including variety of hardware platforms, threats that are not captured and discuss potential mitigations for those threats. We will setup another Security WG meeting in 2-3 weeks timeline to review final version of threat model document.

Cheers,
Rutvik





---
[Visit Topic](https://discourse.ros.org/t/ros2-security-working-group-online-meeting-feb-13th-2019-between-2-00-3-00-pm-pst/7639/2) or reply to this email to respond.