Penetration Testing of OPC as part of Process Control Systems
Chapter
Permanent lenke
http://hdl.handle.net/11250/2430454Utgivelsesdato
2008Metadata
Vis full innførselSamlinger
- Publikasjoner fra CRIStin - SINTEF AS [5801]
- SINTEF Digital [2501]
Originalversjon
Proceedings of the 5th International Conference on Ubiquotous Intelligence and ComputingSammendrag
We have performed penetration testing on OPC, which is a central component in process control systems on oil installations. We have shown how a malicious user with different privileges – outside the network, access to the signalling path and physical access to the OPC server – can fairly easily compromise the integrity, availability and confidentiality of the system. Our tentative tests demonstrate that full-scale penetration testing of process control systems in offshore installations is necessary in order to sensitise the oil and gas industry to the evolving threats. Penetration Testing of OPC as part of Process Control Systems