To main content

Penetration Testing of OPC as part of Process Control Systems

Abstract

We have performed penetration testing on OPC, which is a central component in process control systems on oil installations. We have shown how a malicious user with different privileges – outside the network, access to the signalling path and physical access to the OPC server – can fairly easily compromise the integrity, availability and confidentiality of the system. Our tentative tests demonstrate that full-scale penetration testing of process control systems in offshore installations is necessary in order to sensitise the oil and gas industry to the evolving threats.
Read the publication

Category

Academic chapter/article/Conference paper

Language

English

Author(s)

  • Maria Bartnes

Affiliation

  • SINTEF Digital / Software Engineering, Safety and Security

Year

2008

Publisher

Springer

Book

Proceedings of the 5th International Conference on Ubiquotous Intelligence and Computing

Issue

5061

ISBN

9783540692928

Page(s)

271 - 283

View this publication at Cristin