Change search
ReferencesLink to record
Permanent link

Direct link
Penetration testing of OPC as part of process control systems
KTH, School of Electrical Engineering (EES), Industrial Information and Control Systems.
KTH, School of Electrical Engineering (EES), Industrial Information and Control Systems.
Show others and affiliations
2008 (English)Conference paper (Refereed)
Abstract [en]

We have performed penetration testing on OPC, which is a central component in process control systems on oil installations. We have shown how a malicious user with different privileges - outside the network, access to the signalling path and physical access to the OPC server - can fairly easily compromise the integrity, availability and confidentiality of the system. Our tentative tests demonstrate that full-scale penetration testing of process control systems in offshore installations is necessary in order to sensitise the oil and gas industry to the evolving threats.

Place, publisher, year, edition, pages
2008. 271-283 p.
, Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics), ISSN 03029743
Keyword [en]
Information security, OPC, Penetration testing, Process control, Control systems, Control theory, Gas industry, Identification (control systems), Liquefied petroleum gas, Offshore structures, Production control, Quality control, Reliability, Ubiquitous computing, Central component, In-process control, International conferences, Offshore installations, Oil and Gas Industry, Oil installations, OPC server, Physical access, Process Control Systems, Ubiquitous intelligence
National Category
Control Engineering
URN: urn:nbn:se:kth:diva-154444DOI: 10.1007/978-3-540-69293-5_22ISI: 000257237300022ScopusID: 2-s2.0-48249152968ISBN: 3540692924ISBN: 9783540692928OAI: diva2:758552
5th International Conference on Ubiquitous Intelligence and Computing, UIC 2008, 23-25 June 2008, Oslo, Norway

QC 20141027

Available from: 2014-10-27 Created: 2014-10-20 Last updated: 2014-10-27Bibliographically approved

Open Access in DiVA

No full text

Other links

Publisher's full textScopus

Search in DiVA

By author/editor
Cheah, Zi BinFaruk, A. B. M. Omar
By organisation
Industrial Information and Control Systems
Control Engineering

Search outside of DiVA

GoogleGoogle Scholar
The number of downloads is the sum of all downloads of full texts. It may include eg previous versions that are now no longer available

Altmetric score

Total: 34 hits
ReferencesLink to record
Permanent link

Direct link