OPC Classic applications are often deployed with minimal security hardening implemented on them, due to the difficulties experienced in establishing and maintaining OPC Classic connectivity in more locked-down environments. Whatever security is employed, it is subject to changing conditions, requiring it to be periodically adjusted.
While OPC applications are often kept safe by relying on the layers of security implemented within the infrastructure they operate in, this should not be relied on as the only line of defence. With cybersecurity threats to industrial control systems growing daily, the time for hardening OPC Classic-based data infrastructure is now.
Matrikon’s new ‘Best Practices for Securing OPC Classic Applications’ whitepaper offers concrete security recommendations to enable IT and OT professionals to better secure OPC Classic-based data infrastructure. These recommendations can be used to help prevent unauthorised users and bad actors from compromising the confidentiality, integrity and availability of OPC Classic systems.
The following serves as a teaser of what’s covered in the full whitepaper:
OPC Classic (OPC) applications are used globally as a key connectivity standard for process control systems. This makes them an attractive target for bad actors attempting unauthorised access, or worse, to these systems. Securing OPC communications provides protection from unauthorised users seeking to access or corrupt data from process control systems, or interfere with the availability of process control systems data or devices.
All OPC applications are built on the Microsoft Component Object Model (COM) infrastructure and are therefore considered COM components. As such, they can only run on a Windows platform. The Distributed Component Object Model (DCOM) extends COM functionality to multi-user and network communication scenarios. All COM objects are constrained by the Windows DCOM security framework.
Besides DCOM security mechanisms, a COM client’s ability to connect to servers is also affected by firewalls, local security policies (LSP), Group Policy Objects (GPO), authentication requirements and application identities. In short, anything that affects security on a Windows platform can potentially affect OPC connectivity and communication.
Remote I/O modules provide flexible options for distributed applications
Fieldbus & Industrial Networking
Dinkle International is now stocking the iO-GRID NEMO industrial-grade remote input/output modules, offering support for five leading industrial Ethernet protocols and a range of discrete channel configurations for distributed automation applications.
Read more...Daudin expands fieldbus modular remote I/O series
Fieldbus & Industrial Networking
: The Dinkle iO-GRID X modular remote I/O family is now available, offering fieldbus coupler modules for major industrial Ethernet protocols, and over 20 types of I/O modules to help integrators and equipment builders create flexible, efficient control systems.
Read more...Siemens and HighByte partner to scale industrial AI Siemens South Africa
IT in Manufacturing Fieldbus & Industrial Networking
Siemens is expanding its Industrial Edge ecosystem through a partnership with HighByte, enabling customers to connect, contextualise and transform data from operational technology and information technology sources to build AI models and applications at scale.
Read more...Automotive Ethernet media converter
Fieldbus & Industrial Networking
HMS Networks has introduced its first automotive ethernet product under the PEAK brand. The PAE-Media Converter is a compact device designed to connect automotive Ethernet (100BASE-T1 or 1000BASE-T1) with standard Ethernet (100BASE-TX or 1000BASE-T) networks.
Read more...3D electrical systems design workflow for electromechanical innovation Siemens South Africa
Fieldbus & Industrial Networking IT in Manufacturing
Siemens has announced new 3D electrical design capabilities within its Capital software, enabling electrical and mechanical engineers to work concurrently in a shared 3D environment to reduce late-stage design changes and accelerate time to market for complex electromechanical products.
Read more...Long-distance signal delivery is critical to rail safety Omniflex Remote Monitoring Specialists
Fieldbus & Industrial Networking
A remote monitoring specialist explains why fibre optic technology is increasingly replacing copper cabling in safety-critical railway signalling systems.
Read more...Building efficiency into cement production with SCADA and IIoT Adroit Technologies
Fieldbus & Industrial Networking
For decades, Adroit Technologies has worked alongside leading cement producers, helping them gain greater visibility into their operations through advanced SCADA and IIoT solutions.
Read more...Loop signature Part 2-5: Interactive control systems Michael Brown Control Engineering
Fieldbus & Industrial Networking
Feedforward control was explained in the previous loop signature articles. One of the examples used was feedforward control of load changes on a heat exchanger when variations occurred in the flow of the process fluid through the exchanger.
Read more...Integrated automation systems in poultry feed production Adroit Technologies
Fieldbus & Industrial Networking
South Africa’s poultry industry is increasingly turning to advanced automation systems to optimise operations. Working in partnership with Adroit Technologies, leading poultry supplier Sovereign implemented the Mitsubishi Adroit Process Suite across a key feed production facility, creating a scalable, integrated system capable of supporting both current operations and future expansion.
While every effort has been made to ensure the accuracy of the information contained herein, the publisher and its agents cannot be held responsible for any errors contained, or any loss incurred as a result. Articles published do not necessarily reflect the views of the publishers. The editor reserves the right to alter or cut copy. Articles submitted are deemed to have been cleared for publication. Advertisements and company contact details are published as provided by the advertiser. Technews Publishing (Pty) Ltd cannot be held responsible for the accuracy or veracity of supplied material.
printer friendly version