Change search
CiteExportLink to record
Permanent link

Direct link
Cite
Citation style
  • apa
  • harvard1
  • ieee
  • modern-language-association-8th-edition
  • vancouver
  • Other style
More styles
Language
  • de-DE
  • en-GB
  • en-US
  • fi-FI
  • nn-NO
  • nn-NB
  • sv-SE
  • Other locale
More languages
Output format
  • html
  • text
  • asciidoc
  • rtf
Penetration testing of OPC as part of process control systems
KTH, School of Electrical Engineering (EES), Industrial Information and Control Systems.
KTH, School of Electrical Engineering (EES), Industrial Information and Control Systems.
Show others and affiliations
2008 (English)Conference paper, Published paper (Refereed)
Abstract [en]

We have performed penetration testing on OPC, which is a central component in process control systems on oil installations. We have shown how a malicious user with different privileges - outside the network, access to the signalling path and physical access to the OPC server - can fairly easily compromise the integrity, availability and confidentiality of the system. Our tentative tests demonstrate that full-scale penetration testing of process control systems in offshore installations is necessary in order to sensitise the oil and gas industry to the evolving threats.

Place, publisher, year, edition, pages
2008. 271-283 p.
Series
Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics), ISSN 0302-9743
Keyword [en]
Information security, OPC, Penetration testing, Process control, Control systems, Control theory, Gas industry, Identification (control systems), Liquefied petroleum gas, Offshore structures, Production control, Quality control, Reliability, Ubiquitous computing, Central component, In-process control, International conferences, Offshore installations, Oil and Gas Industry, Oil installations, OPC server, Physical access, Process Control Systems, Ubiquitous intelligence
National Category
Control Engineering
Identifiers
URN: urn:nbn:se:kth:diva-154444DOI: 10.1007/978-3-540-69293-5_22ISI: 000257237300022Scopus ID: 2-s2.0-48249152968ISBN: 3540692924 (print)ISBN: 9783540692928 (print)OAI: oai:DiVA.org:kth-154444DiVA: diva2:758552
Conference
5th International Conference on Ubiquitous Intelligence and Computing, UIC 2008, 23-25 June 2008, Oslo, Norway
Note

QC 20141027

Available from: 2014-10-27 Created: 2014-10-20 Last updated: 2017-03-30Bibliographically approved

Open Access in DiVA

No full text

Other links

Publisher's full textScopus

Search in DiVA

By author/editor
Cheah, Zi BinFaruk, A. B. M. Omar
By organisation
Industrial Information and Control Systems
Control Engineering

Search outside of DiVA

GoogleGoogle Scholar

doi
isbn
urn-nbn

Altmetric score

doi
isbn
urn-nbn
Total: 37 hits
CiteExportLink to record
Permanent link

Direct link
Cite
Citation style
  • apa
  • harvard1
  • ieee
  • modern-language-association-8th-edition
  • vancouver
  • Other style
More styles
Language
  • de-DE
  • en-GB
  • en-US
  • fi-FI
  • nn-NO
  • nn-NB
  • sv-SE
  • Other locale
More languages
Output format
  • html
  • text
  • asciidoc
  • rtf