@@ -6,13 +6,15 @@ Network topologies
66Case 1
77++++++
88
9+ A common network architecture in small companies and laboratories is shown below.
10+
911.. mermaid ::
1012
1113 %%{init: { "theme" : "dark" }}%%
1214 architecture-beta
1315 group api(internet)[Internet]
1416
15- service internet(server )[Enterprise Intranet] in api
17+ service internet(router-outline )[Enterprise Intranet] in api
1618 service computer(material-symbols:computer-outline)[Computer] in api
1719 service robot1(material-symbols:robot-2-outline)[Robot 1] in api
1820 service robot2(material-symbols:robot-2-outline)[Robot 1] in api
@@ -27,6 +29,19 @@ Case 1
2729 junctionCenter2:L -- R: junctionCenter1
2830 junctionCenter3:L -- R: junctionCenter2
2931
32+ In it, each computer and robot is directly connected to the internet. This setup is rather tempting because from the
33+ point-of-view of the robotics software developer they might want to have as much freedom as possible to develop their
34+ software as quickly as possible. Depending on the internet services they want to provide, they might even DMZ
35+
36+ This setup leads to a high level of risk. As mentioned in the previous section, although you *might * be able to keep
37+ your computers up-to-date, the same is not usually possible for the robots' control computers. They could have vulnerabilities
38+ such as unpatched security bugs that will leave them exposed. In addition, the robots' might have been left with their
39+ original credentials. This means that an attacker could easily ssh into the robot.
40+
41+ Although from a robotics software developer you might think that they might have little to gain from accessing a robot
42+ computer, that can easily be the first door into any other resource in the network. Just because the computer is attached
43+ somehow to a robot it does not make it less of a computer just, usually, easier to exploit.
44+
3045Case 3
3146++++++
3247
3651 architecture-beta
3752 group api(server)[Intranet]
3853
39- service internet(server )[Enterprise Intranet] in api
54+ service internet(router-outline )[Enterprise Intranet] in api
4055 service computer(material-symbols:computer-outline)[Computer] in api
4156 service robot1(material-symbols:robot-2-outline)[Robot 1] in api
4257 service robot2(material-symbols:robot-2-outline)[Robot 1] in api
@@ -60,14 +75,15 @@ Case 2
6075 architecture-beta
6176 group api(server)[Intranet]
6277
78+ service internet(router-outline)[Enterprise Intranet] in api
6379 service computer(material-symbols:computer-outline)[Computer] in api
64- service router(server )[Switching hub] in api
80+ service router(router-outline )[Switching hub] in api
6581 service robot1(material-symbols:robot-2-outline)[Robot 1] in api
6682 service robot2(material-symbols:robot-2-outline)[Robot 1] in api
6783 junction junctionCenter1 in api
6884 junction junctionCenter2 in api
6985
70-
86+ router :R -- L: internet
7187 computer:R -- L: router
7288 router:R -- L: junctionCenter1
7389 junctionCenter1:B -- T: robot1
0 commit comments