Research on OPC UA security

Huang, Renjie; Feng, Lin; Pan, Dongbo

doi:10.1109/iciea.2010.5514836

Cited by 24 publications

(7 citation statements)

References 5 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Based on previous work (Huang et al , 2010; Schleipen et al , 2015; Wu et al , 2015; Jung et al , 2017), we compare the security features and capabilities of a typical OPC UA architecture with our blockchain-based architecture in Table I. The added value of our blockchain-based implementation is that it allows for greater transparency and auditing of all processes for the customer, whereas access by external parties to machines and devices of a factory is typically restricted.…”

Section: Discussionmentioning

confidence: 99%

Trustworthy data-driven networked production for customer-centric plants

Preuveneers

Joosen

Ilie‐Zudor

2017

IMDS

View full text Add to dashboard Cite

Purpose: Industry 4.0 envisions a future of networked production where interconnected machines and busi-5 ness processes running in the cloud will communicate with one another to optimize production and enable more efficient and sustainable individualized/mass manufacturing. However, the openness and process transparency of networked production in hyperconnected manufacturing enterprises pose severe cyber-security threats and information security challenges that need to be dealt with. 10Design/methodology/approach: This paper presents a distributed trust model and middleware for collaborative and decentralized access control to guarantee data transparency, integrity, authenticity, and authorization of dataflow-oriented Industry 4.0 processes. Findings:The results of a performance study indicate that private blockchains are capable of securing 15IoT-enabled dataflow-oriented networked production processes across the trust boundaries of the Industry 4.0 manufacturing enterprise.Originality/value: This paper contributes a decentralized identity and relationship management for users, sensors, actuators, gateways and cloud services to support processes that cross the trust boundaries of the 20 manufacturing enterprise, while offering protection against malicious adversaries gaining unauthorized access to systems, services and information.

show abstract

Section: Discussionmentioning

confidence: 99%

Trustworthy data-driven networked production for customer-centric plants

Preuveneers

Joosen

Ilie‐Zudor

2017

IMDS

View full text Add to dashboard Cite

show abstract

“…OPC UA incorporates approaches for security measurements [10]. The specific security risks in OPC UA including different types of attackers and the security modes are analyzed in [7].…”

Section: Related Workmentioning

confidence: 99%

Simulating and Detecting Attacks of Untrusted Clients in OPC UA Networks

Neu

Schiering

Zorzo

2019

Proceedings of the Third Central European Cybersecurity Conference

View full text Add to dashboard Cite

The usage of machine to machine communication and Industrial Internet of Things is increasing nowadays, in particular in industry environments. Devices with low hardware capabilities may e.g. be used for sensing data, for example, on an industrial network. Specific protocols and frameworks were being developed for these use cases. One such framework is OPC UA, which allows signed and encrypted communication and therefore addresses already important security requirements. However, an attacker may also be able to encrypt malicious packets so that it may bypass security systems and/or empower the attack, as encrypted packets typically need more hardware consumption to be handled. In this paper the focus is on Denial of Service attacks in OPC UA networks. An analysis of possible Denial of Service attacks is presented and an approach to detect such attacks is implemented in the context of a simulation scenario. Our evaluations show how such attacks may affect server CPU consumption and could be very powerful when a large number of devices is compromised.

show abstract

“…b) Security of industrial protocols: In the area of industrial protocols, various research and studies recently have been proposing the use of the "OPC Unified Architecture" (OPC UA) protocol and discussed its advantages. First security analysis and measures for OPC UA have been discussed by [22], who also addressed security objectives at different levels. On the communication layer, secured channels are defined for confidentiality, integrity, while on the application layer, sessions take care of user authorization and authentication -parts of these security concepts were later integrated into the security model of the OPC UA specification [23].…”

Section: Related Workmentioning

confidence: 99%

Application Study of Hardware-Based Security for Future Industrial IoT

Matischek

Bara

2019

2019 22nd Euromicro Conference on Digital System Design (DSD)

View full text Add to dashboard Cite

The stepwise evolution of conventional production facilities into future Smart Factory or Industrial IoT paradigms entails special requirements on future industrial devices and communication networks. Due to the considerably increasing demand of interconnected devices-for internal and even external remote access-various security measures of future industrial equipment must be improved. Therefore, this paper presents an application-and feasibility study of secured communication between today's and future stationary industrial devices-based on the upcoming OPC UA protocol and partially enhanced with hardware-based security.

show abstract

Research on OPC UA security

Cited by 24 publications

References 5 publications

Trustworthy data-driven networked production for customer-centric plants

Trustworthy data-driven networked production for customer-centric plants

Simulating and Detecting Attacks of Untrusted Clients in OPC UA Networks

Application Study of Hardware-Based Security for Future Industrial IoT

Contact Info

Product

Resources

About