Penetration Testing of OPC as part of Process Control Systems
Chapter
View/ Open
Date
2008Metadata
Show full item recordCollections
- Publikasjoner fra CRIStin - SINTEF AS [5583]
- SINTEF Digital [2379]
Original version
Proceedings of the 5th International Conference on Ubiquotous Intelligence and ComputingAbstract
We have performed penetration testing on OPC, which is a central component in process control systems on oil installations. We have shown how a malicious user with different privileges – outside the network, access to the signalling path and physical access to the OPC server – can fairly easily compromise the integrity, availability and confidentiality of the system. Our tentative tests demonstrate that full-scale penetration testing of process control systems in offshore installations is necessary in order to sensitise the oil and gas industry to the evolving threats. Penetration Testing of OPC as part of Process Control Systems