I am currently doing a proof-of-concept to remotely access a robotic arm at a client site through the internet. I got it working, using x11vnc to connect to the robot over the Local network but now I have to look into the security considerations to access it over the internet.

Firstly, a Firewall, limited to only accept my work places current IP address and only for port 22 (SSH and SFTP) and 4900 (VNC)

Secondly, an SSL certificate for the VNC and SSH(?)

Thirdly, your standard password protection

Would this be enough to make the robot secure?

Just in case this is relevant, the robot runs on debian and I can't adjust any modem settings myself, so it will have to be done on the robot.

  • SSH has its own RSA/other keys, not SSL, but the idea is the same. I assume you are referring to client-provided certs, not server provided? Commented May 30, 2018 at 7:13
  • @someonesomewhere Im not too sure about the ssl and which direction its checking in. I was looking at the x11vnc page on ssl and i think its for the server so the client knows if they are being man in the middled. Do you have a link on how to check the client certificate?
    – Shadowzee
    Commented May 30, 2018 at 7:17
  • 1
    @Shadowzee: let me rephrase my comment: you ask if it is enough security but don't specify any security requirements. Without knowing these requirements one cannot decide if your idea fits the requirements. Thus, please add the requirements to your question (and not in a comment). Commented May 30, 2018 at 7:29
  • 2
    Adding to @SteffenUllrich's comment just now, whenever you find yourself asking is this secure? you have to specify against what? because, frankly, what you're protecting against has huge implications on the security measures needed. A part of the answer to that is also what are the consequences of a breach? Once you have specified those, we have a fighting chance of being able to work out whether the specified security measures are likely to be sufficient; or rather, see if there are any gaping holes in plain view somewhere.
    – user
    Commented May 30, 2018 at 7:32
  • 1
    @Shadowzee: if you want to secure something you need to have some idea of what kind of attacker you imagine. This is is often related to how valuable the resources are which you need to protect. And often there are also existing security measures which prevent some attacks already so you need to take these into account to. Securing something is essentially risk management - the first step is that you know your risks. Only then you can try to reduce the risk (using security measures, insurance...) until you have some low risk left which you are willing to accept. Commented May 30, 2018 at 8:05


Browse other questions tagged .