--- title: Canonical takes leadership role in security for ROS description: Canonical is committed to the future of robotics, as proven a short time ago when we joined the Technical Steering Committee of the second version of the Robot Operating System (ROS 2). We’re also dedicated to building a foundation of enterprise-grade, industry leading security practices within Ubuntu, so we’re excited to join both of the […] url: https://canonical.com/blog/canonical-takes-leadership-role-in-security-for-ros?format=md --- 1. [Blog](https://canonical.com/blog) 2. Article --- [joemcmanus](https://canonical.com/blog/author/joemcmanus "More about joemcmanus") 26 February 2020 # Canonical takes leadership role in security for ROS [robotics](https://canonical.com/blog/tag/robotics) [ROS](https://canonical.com/blog/tag/ros) [ROS2](https://canonical.com/blog/tag/ros2) --- Share the article Canonical is committed to the future of robotics, as proven a short time ago when we [joined the Technical Steering Committee](https://ubuntu.com/blog/canonical-joins-the-ros-2-technical-steering-committee) of the second version of the Robot Operating System (ROS 2). We’re also dedicated to building a foundation of enterprise-grade, industry leading security practices within Ubuntu, so we’re excited to join both of these strengths with our own Joe McManus taking the helm of the [ROS 2 Security Working Group](http://wiki.ros.org/ROS2/WorkingGroups/Security). We believe robots based on Linux are cheaper to develop, more flexible, faster to market, easier to manage, and more secure. While ROS began as an academic project over a decade ago, it has grown to become the most popular middleware for creating Linux-powered robots. It has harnessed the power of open source, allowing for many of the complex problems faced by robotics to be solved through collaboration. The ROS developer community has continued to grow, and ROS now enjoys an increasing amount of commercial use and [supported robots](https://robots.ros.org/). In response, the ROS community has completely overhauled the ROS codebase and started distributing ROS 2. ## The promise of ROS 2 ROS 2 maintains the flexibility of ROS 1 while adding technology critical to enabling security at its very core, technology which is largely transparent to ROS developers. We detailed how this works in a [previous post](https://ubuntu.com/blog/what-is-sros-2). Some of the ROS security related work being spearheaded by Canonical includes: * Creating a Node Interface Definition Language which describes how each node is configured and how it communicates with other nodes. This definition language will allow ROS developers to define access controls at design-time, which can be enforced and monitored at run-time. Eventually, it will make enabling ROS 2 security features as simple as flipping a switch. * Scanning the ROS code repositories with [Coverity](https://scan.coverity.com/) to identify source code defects and vulnerabilities. * Drafting a vulnerability disclosure policy for ROS. * Building a Capture-the-Flag scenario as an engaging way to introduce security red-team players to robotics security while also conducting dynamic application security testing of the ROS code base. ## Enabling the secure future of robotics We’re continually excited by the ingenuity of this particular open-source community, and we look forward to continuing to mature the security features within ROS 2. We’re convinced it will develop into an ecosystem where security is as easy as a flip of a switch. Want to get involved? Visit to be notified of our monthly meetings. [Get in touch Interested in running Ubuntu in your organization?](https://ubuntu.com/about/contact-us/form) ## Sign up for our newsletter Get the latest Canonical news and updates in your inbox. Work email: \*I agree to receive information about Canonical's products and services. By submitting this form, I confirm that I have read and agree to [Canonical's Privacy Policy](https://canonical.com/legal/dataprivacy). Sign up ## Share on --- ## Related posts [### Extending ROS Noetic Support with ESM-Enabled Content Snaps](https://canonical.com/blog/extending-ros-noetic-support-with-esm-enabled-content-snaps) Canonical has now extended its ESM (Expanded Security Maintenance) for ROS coverage to ROS Noetic content-sharing snaps. With ESM for ROS now available in both deb and snap... [Florencia Cabral Berenfus](https://canonical.com/blog/author/flor-cabral) 17 December 2025 [### Discover your fully open source robotics observability at ROSCon 2025](https://canonical.com/blog/roscon-2025) Another year, another ROSCon! This year we’re heading to Singapore, and Canonical is once again thrilled to sponsor this important community event. Just like last year in... [Gabriel Aguiar Noury](https://canonical.com/blog/author/g-aguiar-noury) 22 October 2025 [### Canonical is now a platinum member in the Open Source Robotics Alliance](https://canonical.com/blog/osra-membership) Ubuntu is the home of ROS. The very first ROS distribution, Box Turtle, launched on Ubuntu 8.04 LTS, Hardy Heron, and since then, Ubuntu and ROS have grown hand in hand. With... [Gabriel Aguiar Noury](https://canonical.com/blog/author/g-aguiar-noury) 20 August 2025 [### ROS Noetic is EOL – take action to maintain fleet security](https://canonical.com/blog/ros-noetic-is-eol-take-action-to-maintain-fleet-security) As of May 2025, the Robot Operating System (ROS) Noetic Ninjemys officially reached its end of life (EOL). First released in 2020 as the final ROS (1) distribution, ROS Noetic... [Florencia Cabral Berenfus](https://canonical.com/blog/author/flor-cabral) 8 August 2025