A Model-Based Approach to Security Assessment of Robotic Systems in Healthcare: The Case of a Quadruped Robot

Healthcare environments such as rehabilitation centres are increasingly adopting robotic systems to support human caregivers, freeing staff for higher-value clinical work. However, deploying a robot in a clinical setting introduces security risks that must be assessed before use, and small facilities rarely have access to the specialised expertise or budget needed for a full cybersecurity audit. We propose a model-based approach that guides non-experts through a systematic security assessment, combining assurance case templates to argue the security of the system with attack trees to elicit threats against it, using system models throughout to help non-experts identify relevant security concerns. We further integrate a large language model into this process to assist non-experts in identifying realistic threats. We demonstrate the approach on a Unitree Go2 Air robot dog deployed in a rehabilitation centre use case, showing that the method produces a structured security analysis applicable to resource-constrained healthcare settings. This dataset contains the full models described in this study