{"id":"https://openalex.org/W7164390072","doi":"https://doi.org/10.1016/j.cose.2026.105018","title":"Uncovering robot joint-level controller actions from encrypted network traffic: Empirical attacks and information-theoretic bounds","display_name":"Uncovering robot joint-level controller actions from encrypted network traffic: Empirical attacks and information-theoretic bounds","publication_year":2026,"publication_date":"2026-06-12","ids":{"openalex":"https://openalex.org/W7164390072","doi":"https://doi.org/10.1016/j.cose.2026.105018"},"language":"en","primary_location":{"id":"doi:10.1016/j.cose.2026.105018","is_oa":true,"landing_page_url":"https://doi.org/10.1016/j.cose.2026.105018","pdf_url":null,"source":{"id":"https://openalex.org/S12529635","display_name":"Computers & Security","issn_l":"0167-4048","issn":["0167-4048","1872-6208"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Computers & Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://doi.org/10.1016/j.cose.2026.105018","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5046996143","display_name":"Cheng Tang","orcid":"https://orcid.org/0009-0009-9238-0445"},"institutions":[{"id":"https://openalex.org/I151746483","display_name":"University of Waterloo","ror":"https://ror.org/01aff2v68","country_code":"CA","type":"education","lineage":["https://openalex.org/I151746483"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Cheng Tang","raw_affiliation_strings":["University of Waterloo, 200 University Ave W, Waterloo, N2L 3G1, Ontario, Canada"],"raw_orcid":"https://orcid.org/0009-0009-9238-0445","affiliations":[{"raw_affiliation_string":"University of Waterloo, 200 University Ave W, Waterloo, N2L 3G1, Ontario, Canada","institution_ids":["https://openalex.org/I151746483"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5041341066","display_name":"Diogo Barradas","orcid":"https://orcid.org/0000-0003-0338-2692"},"institutions":[{"id":"https://openalex.org/I151746483","display_name":"University of Waterloo","ror":"https://ror.org/01aff2v68","country_code":"CA","type":"education","lineage":["https://openalex.org/I151746483"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Diogo Barradas","raw_affiliation_strings":["University of Waterloo, 200 University Ave W, Waterloo, N2L 3G1, Ontario, Canada"],"raw_orcid":"https://orcid.org/0000-0003-0338-2692","affiliations":[{"raw_affiliation_string":"University of Waterloo, 200 University Ave W, Waterloo, N2L 3G1, Ontario, Canada","institution_ids":["https://openalex.org/I151746483"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5102843571","display_name":"Urs Hengartner","orcid":"https://orcid.org/0000-0002-9840-0015"},"institutions":[{"id":"https://openalex.org/I151746483","display_name":"University of Waterloo","ror":"https://ror.org/01aff2v68","country_code":"CA","type":"education","lineage":["https://openalex.org/I151746483"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Urs Hengartner","raw_affiliation_strings":["University of Waterloo, 200 University Ave W, Waterloo, N2L 3G1, Ontario, Canada"],"raw_orcid":"https://orcid.org/0000-0002-9840-0015","affiliations":[{"raw_affiliation_string":"University of Waterloo, 200 University Ave W, Waterloo, N2L 3G1, Ontario, Canada","institution_ids":["https://openalex.org/I151746483"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100755023","display_name":"Yue Hu","orcid":"https://orcid.org/0000-0002-3846-9096"},"institutions":[{"id":"https://openalex.org/I151746483","display_name":"University of Waterloo","ror":"https://ror.org/01aff2v68","country_code":"CA","type":"education","lineage":["https://openalex.org/I151746483"]}],"countries":["CA"],"is_corresponding":true,"raw_author_name":"Yue Hu","raw_affiliation_strings":["University of Waterloo, 200 University Ave W, Waterloo, N2L 3G1, Ontario, Canada"],"raw_orcid":"https://orcid.org/0000-0002-3846-9096","affiliations":[{"raw_affiliation_string":"University of Waterloo, 200 University Ave W, Waterloo, N2L 3G1, Ontario, Canada","institution_ids":["https://openalex.org/I151746483"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":["https://openalex.org/A5100755023"],"corresponding_institution_ids":["https://openalex.org/I151746483"],"apc_list":{"value":3190,"currency":"USD","value_usd":3190},"apc_paid":{"value":3190,"currency":"USD","value_usd":3190},"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.72517389,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"170","issue":null,"first_page":"105018","last_page":"105018"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.4593000113964081,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.4593000113964081,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.181099995970726,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10714","display_name":"Software-Defined Networks and 5G","score":0.044199999421834946,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/robot","display_name":"Robot","score":0.6279000043869019},{"id":"https://openalex.org/keywords/encryption","display_name":"Encryption","score":0.6177999973297119},{"id":"https://openalex.org/keywords/controller","display_name":"Controller (irrigation)","score":0.5788000226020813},{"id":"https://openalex.org/keywords/cryptography","display_name":"Cryptography","score":0.33090001344680786},{"id":"https://openalex.org/keywords/control","display_name":"Control (management)","score":0.322299987077713}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8061000108718872},{"id":"https://openalex.org/C90509273","wikidata":"https://www.wikidata.org/wiki/Q11012","display_name":"Robot","level":2,"score":0.6279000043869019},{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.6177999973297119},{"id":"https://openalex.org/C203479927","wikidata":"https://www.wikidata.org/wiki/Q5165939","display_name":"Controller (irrigation)","level":2,"score":0.5788000226020813},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.3598000109195709},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.3359000086784363},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.33090001344680786},{"id":"https://openalex.org/C2775924081","wikidata":"https://www.wikidata.org/wiki/Q55608371","display_name":"Control (management)","level":2,"score":0.322299987077713},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3221000134944916},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3098999857902527},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.28189998865127563},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.2702000141143799},{"id":"https://openalex.org/C77618280","wikidata":"https://www.wikidata.org/wiki/Q1155772","display_name":"Scheme (mathematics)","level":2,"score":0.2590000033378601},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.2533000111579895},{"id":"https://openalex.org/C19966478","wikidata":"https://www.wikidata.org/wiki/Q4810574","display_name":"Mobile robot","level":3,"score":0.2513999938964844}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1016/j.cose.2026.105018","is_oa":true,"landing_page_url":"https://doi.org/10.1016/j.cose.2026.105018","pdf_url":null,"source":{"id":"https://openalex.org/S12529635","display_name":"Computers & Security","issn_l":"0167-4048","issn":["0167-4048","1872-6208"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Computers & Security","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1016/j.cose.2026.105018","is_oa":true,"landing_page_url":"https://doi.org/10.1016/j.cose.2026.105018","pdf_url":null,"source":{"id":"https://openalex.org/S12529635","display_name":"Computers & Security","issn_l":"0167-4048","issn":["0167-4048","1872-6208"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Computers & Security","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320322676","display_name":"University of Waterloo","ror":"https://ror.org/01aff2v68"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":17,"referenced_works":["https://openalex.org/W1567366855","https://openalex.org/W2012210084","https://openalex.org/W2027177092","https://openalex.org/W2096118443","https://openalex.org/W2272516773","https://openalex.org/W2779790787","https://openalex.org/W2892381525","https://openalex.org/W2963704216","https://openalex.org/W2967079395","https://openalex.org/W3034481240","https://openalex.org/W3044789788","https://openalex.org/W3138205857","https://openalex.org/W3169619208","https://openalex.org/W3194176109","https://openalex.org/W4229062636","https://openalex.org/W4384948652","https://openalex.org/W4385063250"],"related_works":[],"abstract_inverted_index":{"This":[0],"study":[1],"examines":[2],"the":[3,8,18,26,96,106,110,157,169,179],"privacy":[4,175],"risks":[5],"associated":[6],"with":[7,84],"teleoperation":[9,184],"of":[10,20,109,159,171,181],"robots":[11],"controlled":[12],"via":[13,61],"encrypted":[14],"network":[15,22],"communications.":[16],"From":[17],"perspective":[19],"a":[21,49,57,115,151],"eavesdropper,":[23],"we":[24,113,122,155],"explore":[25],"potential":[27],"to":[28,55,93],"infer":[29],"sensitive":[30],"robotic":[31,59,183],"actions":[32,83],"by":[33,139,149],"analyzing":[34],"traffic":[35,74,152],"metadata,":[36],"such":[37],"as":[38],"packet":[39],"timing,":[40],"size,":[41],"and":[42,66,128,177],"direction.":[43],"We":[44],"investigate":[45],"this":[46],"threat":[47],"using":[48,87],"smartphone\u2019s":[50],"Inertial":[51],"Measurement":[52],"Unit":[53],"(IMU)":[54],"control":[56,132],"collaborative":[58],"arm":[60],"three":[62],"joint-level":[63],"modalities\u2014position,":[64],"velocity,":[65],"torque\u2014to":[67],"perform":[68],"four":[69],"distinct":[70],"actions.":[71],"First,":[72],"empirical":[73,102,140],"analysis":[75],"demonstrates":[76],"that":[77,130],"an":[78],"adversary":[79],"can":[80],"identify":[81],"robot":[82],"high":[85],"accuracy":[86,126],"standard":[88,160],"machine":[89],"learning":[90],"classifiers.":[91],"Second,":[92],"determine":[94],"whether":[95],"remaining":[97],"classification":[98],"errors":[99],"stem":[100],"from":[101],"model":[103],"limitations":[104,158],"or":[105],"structural":[107,164],"constraints":[108],"physical":[111],"protocols,":[112],"apply":[114],"classifier-agnostic":[116],"information-theoretic":[117,172],"evaluation.":[118],"Using":[119],"mutual":[120],"information,":[121],"derive":[123],"Bayes":[124],"optimal":[125],"bounds":[127,173],"show":[129],"torque":[131],"leaks":[133],"more":[134],"deterministic":[135],"information":[136],"than":[137],"suggested":[138],"models,":[141],"while":[142],"velocity":[143],"inherently":[144],"exposes":[145],"less":[146],"information.":[147],"Third,":[148],"prototyping":[150],"padding":[153],"defense,":[154],"evaluate":[156],"obfuscation":[161],"against":[162],"these":[163],"leakages.":[165],"Our":[166],"findings":[167],"highlight":[168],"necessity":[170],"in":[174],"research":[176],"inform":[178],"design":[180],"secure":[182],"APIs.":[185]},"counts_by_year":[],"updated_date":"2026-06-20T20:08:15.867695","created_date":"2026-06-12T00:00:00"}