Article in: EngineerIT Magazine, January 2012
OPC, originally called OLE for process control, is used extensively in control systems to provide interoperability between devices and software from different vendors.
In this article, Gary Friend of Extech Safety Systems provides a summary of the security issues related to OPC, and shows how an OPC enforcer can be used to protect OPC servers and clients.
May 11, 2011
Eric Byres (CTO, Tofino Security)
Darek Kominek (Manager, OPC Marketing, MatrikonOPC)
Tom Burke (OPC Foundation President)
Date: Wednesday, May 11, 2011
Time: 11:00 a.m. - 12:00 p.m. (GMT -04:00)
Topic: OPC Security you can Bank on - in a Post-Stuxnet World
News coverage following the release of the White Paper "Effective OPC Security for Control Systems" by Eric Byres and Darek Kominek.
For the past decade, industrial control systems administrators and engineers wanted to believe that ‘air gaps’ or ‘security by obscurity’ would keep them safe from security threats. Those days are over - recent security incidents such as the Stuxnet worm are a loud wakeup call for the industrial automation industry.
This White Paper explains the security advantages of limiting network interfaces and protocols, and recommends using OPC as a communications standard because of its ease of use and its widespread deployment.
It goes on to discuss how different defensive layers can be employed to provide high security when using OPC technology. The paper also outlines a simple and cost effective way to secure OPC that can be deployed in almost any industrial facility.
|A Tofino-based product, the Triconex® / Tofino™ OPC Firewall, has been recognized as a product and technology that made a significant contribution to the process industries for 2010.|
Stuxnet is a computer worm designed to target one or more industrial systems that use Siemens PLCs. However, it is aggressive on all networks and can negatively affect any control system.
Stuxnet spreads rapidly using Local Area Network communications and one of the most effective ways to prevent this type of distribution is to make use of zone-based defenses.
This Application Note describes how to divide the control network into security zones and how to use the Tofino Industrial Security Solution to prevent the spread of the Stuxnet worm.
New Tofino® OPC Enforcer technology secures any system using classic OPC, the world’s most widely used industrial integration protocol.
New Tofino® OPC Enforcer technology secures any system using classic OPC, the world’s most widely used industrial integration protocol....
News coverage following the release of the Tofino OPC Enforcer.
Belden releases new Plug-n-Protect OPC firewall to provide robust cyber security for automation facilities
Belden has recently introduced version 1.6.0 of its Hirschmann™ EAGLE20 Tofino industrial network security system, including the new EAGLE20 Tofino OPC Enforcer Loadable Software Module (LSM). Developed by Tofino Security for Hirschmann™, the OPC Enforcer locks down any system using the widely installed OPC Classic protocol, providing superior security over what can be achieved with conventional firewall solutions.