Fieldbus & Industrial Networking


Best practices for securing OPC Classic applications

March 2022 Fieldbus & Industrial Networking

OPC Classic applications are often deployed with minimal security hardening implemented on them, due to the difficulties experienced in establishing and maintaining OPC Classic connectivity in more locked-down environments. Whatever security is employed, it is subject to changing conditions, requiring it to be periodically adjusted.

While OPC applications are often kept safe by relying on the layers of security implemented within the infrastructure they operate in, this should not be relied on as the only line of defence. With cybersecurity threats to industrial control systems growing daily, the time for hardening OPC Classic-based data infrastructure is now.

Matrikon’s new ‘Best Practices for Securing OPC Classic Applications’ whitepaper offers concrete security recommendations to enable IT and OT professionals to better secure OPC Classic-based data infrastructure. These recommendations can be used to help prevent unauthorised users and bad actors from compromising the confidentiality, integrity and availability of OPC Classic systems.

The following serves as a teaser of what’s covered in the full whitepaper:

OPC Classic (OPC) applications are used globally as a key connectivity standard for process control systems. This makes them an attractive target for bad actors attempting unauthorised access, or worse, to these systems. Securing OPC communications provides protection from unauthorised users seeking to access or corrupt data from process control systems, or interfere with the availability of process control systems data or devices.

All OPC applications are built on the Microsoft Component Object Model (COM) infrastructure and are therefore considered COM components. As such, they can only run on a Windows platform. The Distributed Component Object Model (DCOM) extends COM functionality to multi-user and network communication scenarios. All COM objects are constrained by the Windows DCOM security framework.

Besides DCOM security mechanisms, a COM client’s ability to connect to servers is also affected by firewalls, local security policies (LSP), Group Policy Objects (GPO), authentication requirements and application identities. In short, anything that affects security on a Windows platform can potentially affect OPC connectivity and communication.

The full ‘Best Practices for Securing OPC Classic Applications’ whitepaper can be accessed at www.instrumentation.co.za/papers/22ICMar31.pdf


Credit(s)



Share this article:
Share via emailShare via LinkedInPrint this page

Further reading:

EtherCAT interoperability removes industrial networking barriers
Fieldbus & Industrial Networking
Selecting the right communication technology is one of the most important decisions engineers make, and interoperability helps with that decision. Key development tools and standards ensure interoperability among many EtherCAT devices and manufacturers.

Read more...
Condition monitoring to go
Turck Banner Southern Africa Fieldbus & Industrial Networking
Anyone who wants to efficiently monitor the climate in control cabinets will find a comprehensive range of control cabinet monitors for the DIN rail in Turck Banner’s cabinet condition monitoring family.

Read more...
Affordable building management system product range
Fieldbus & Industrial Networking
Schneider Electric has unveiled its EasyLogic Building Management System range, designed for basic building architectures, to the local marketplace. This is a complete and cost-effective range of field controllers and sensors that are both easy to install and scalable.

Read more...
Flexible EtherCAT communication interface for DALI-2
Beckhoff Automation Fieldbus & Industrial Networking
The EL6821 EtherCAT Terminal from Beckhoff allows up to 64 DALI/DALI-2 slaves and 64 DALI-2 input devices to be connected. The TwinCAT 3 System Manager makes it easy to configure and parameterise DALI devices flexibly.

Read more...
EtherCAT-based control technology for building automation
Beckhoff Automation Fieldbus & Industrial Networking
Modern non-residential buildings place many high demands on building automation. This can be optimally implemented with EtherCAT-based control technology from Beckhoff, which provides an efficient central automation architecture thanks to ultra-fast data communication.

Read more...
PC-based control for university studies
Beckhoff Automation Fieldbus & Industrial Networking
The IDEA box developed at Heilbronn University of Applied Sciences is designed to introduce students to the topic of Industry 4.0 in a simple and practical way. At the core of the corresponding demo case is PC-based control from Beckhoff.

Read more...
A new standard in high-speed Ethernet communication
Fieldbus & Industrial Networking
The TXMC897 module from TEWS Technologies supports a range of Ethernet standards and speeds, making it suitable for diverse applications, including the defence, industrial, and IIoT markets.

Read more...
Data-driven battery production
Turck Banner Southern Africa Fieldbus & Industrial Networking
The availability of high-performance batteries at moderate prices is one of the most important factors for the success of electromobility. As a long-standing automation partner to the automotive industry, Turck Banner supports the major battery manufacturers with its know-how.

Read more...
Bring critical temperature data to your condition monitoring system
Turck Banner Southern Africa Fieldbus & Industrial Networking
Data conversion just got easier. Turck Banner converters are compact, simple add-ons that seamlessly fit into your factory applications. You can take various types of signals such as discrete, analogue and many others, and convert them to protocols like IO-link, PICK-IQ, PWM/PFM, and Modbus.

Read more...
Case History 190: Measurement problem ruins level control.
Michael Brown Control Engineering Editor's Choice Fieldbus & Industrial Networking
The widely held belief in many plants that tuning will solve all base layer control problems is completely fallacious. Bad tuning is generally not the main reason for loops to perform badly. It is important when performing optimisation that all elements in a loop are considered, in addition to the control strategy, before even thinking of tuning.

Read more...