Penetration testing of OPC as part of process control systems

• We have performed penetration testing on OPC, which is a central component in process control systems on oil installations. We have shown how a malicious user with different privileges - outside the network, access to the signalling path and physical access to the OPC server - can fairly easily compromise the integrity, availability and confidentiality of the system. Our tentative tests demonstrate that full-scale penetration testing of process control systems in offshore installations is necessary in order to sensitise the oil and gas industry to the evolving threats.

Ämnesord

TEKNIK OCH TEKNOLOGIER  -- Elektroteknik och elektronik -- Reglerteknik (hsv//swe)

ENGINEERING AND TECHNOLOGY  -- Electrical Engineering, Electronic Engineering, Information Engineering -- Control Engineering (hsv//eng)

Nyckelord

Information security

OPC

Penetration testing

Process control

Control systems

Control theory

Gas industry

Identification (control systems)

Liquefied petroleum gas

Offshore structures

Production control

Quality control

Reliability

Ubiquitous computing

Central component

In-process control

International conferences

Offshore installations

Oil and Gas Industry

Oil installations

OPC server

Physical access

Process Control Systems

Ubiquitous intelligence

Publikations- och innehållstyp

ref (ämneskategori)

kon (ämneskategori)