SCADA, OPC, and You

["Paul Ferguson" <fergdawg () netzero net>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

I've been following developments (for lack of a better term) in
SCADA systems security for a while now, and I have to tell you:

Some of these systems scare the bejesus out me, thinking that
they may actually be connected to the Internet in any way, shape
or form -- even via VPN.

First, this:

http://www.digitalbond.com/index.php/2007/08/13/opc-vendor-security-limitat
ion/

And secondly, this description from the OPC Foundation:

[snip]


OPC is a series of standards specifications. The first standard (originally
called simply the OPC Specification and now called the  Data Access
Specification) resulted from the collaboration of a number of leading
worldwide automation suppliers working in cooperation with Microsoft.
Originally based on Microsoft's OLE COM (component object model) and DCOM
(distributed component object model) technologies, the specification
defined a standard set of objects, interfaces and methods for use in
process control and manufacturing automation applications to facilitate
interoperability. The COM/DCOM technologies provided the framework for
software products to be developed. There are now hundreds of OPC Data
Access servers and clients.

[snip]

More:
http://www.opcfoundation.org/Default.aspx/01_about/01_whatis.asp?MID=AboutO
PC

Enjoy. Or not.

- - ferg

-----BEGIN PGP SIGNATURE-----
Version: PGP Desktop 9.6.2 (Build 2014)

wj8DBQFGwLkGq1pz9mNUZTMRAqR0AJ9l2SlA/cOwvfnhjtDbuu6ru9Lq2QCfT0TV
uKJB30aBJ/KOkIjN5VBs1t4=
=9SUO
-----END PGP SIGNATURE-----


--
"Fergie", a.k.a. Paul Ferguson
 Engineering Architecture for the Internet
 fergdawg(at)netzero.net
 ferg's tech blog: http://fergdawg.blogspot.com/


_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.