Fieldbus & Industrial Networking


Best practices for securing OPC Classic applications

March 2022 Fieldbus & Industrial Networking

OPC Classic applications are often deployed with minimal security hardening implemented on them, due to the difficulties experienced in establishing and maintaining OPC Classic connectivity in more locked-down environments. Whatever security is employed, it is subject to changing conditions, requiring it to be periodically adjusted.

While OPC applications are often kept safe by relying on the layers of security implemented within the infrastructure they operate in, this should not be relied on as the only line of defence. With cybersecurity threats to industrial control systems growing daily, the time for hardening OPC Classic-based data infrastructure is now.

Matrikon’s new ‘Best Practices for Securing OPC Classic Applications’ whitepaper offers concrete security recommendations to enable IT and OT professionals to better secure OPC Classic-based data infrastructure. These recommendations can be used to help prevent unauthorised users and bad actors from compromising the confidentiality, integrity and availability of OPC Classic systems.

The following serves as a teaser of what’s covered in the full whitepaper:

OPC Classic (OPC) applications are used globally as a key connectivity standard for process control systems. This makes them an attractive target for bad actors attempting unauthorised access, or worse, to these systems. Securing OPC communications provides protection from unauthorised users seeking to access or corrupt data from process control systems, or interfere with the availability of process control systems data or devices.

All OPC applications are built on the Microsoft Component Object Model (COM) infrastructure and are therefore considered COM components. As such, they can only run on a Windows platform. The Distributed Component Object Model (DCOM) extends COM functionality to multi-user and network communication scenarios. All COM objects are constrained by the Windows DCOM security framework.

Besides DCOM security mechanisms, a COM client’s ability to connect to servers is also affected by firewalls, local security policies (LSP), Group Policy Objects (GPO), authentication requirements and application identities. In short, anything that affects security on a Windows platform can potentially affect OPC connectivity and communication.

The full ‘Best Practices for Securing OPC Classic Applications’ whitepaper can be accessed at www.instrumentation.co.za/papers/22ICMar31.pdf


Credit(s)



Share this article:
Share via emailShare via LinkedInPrint this page

Further reading:

XPlanar aids innovation in laser processing
Beckhoff Automation Fieldbus & Industrial Networking
Aalborg University is among the first in the world to test Beckhoff’s XPlanar intelligent transport system in advanced laser processes, opening the door to faster, tool-free production of metal parts.

Read more...
Belden expands edge computing portfolio with ProLinx Edge Gateway
Fieldbus & Industrial Networking
Belden has released the ProSoft Technology ELX3 ProLinx Edge Gateway, combining operational technology protocol conversion with Docker-based edge application hosting on a single ruggedised hardware platform for deployment in harsh industrial environments.

Read more...
Anybus Communicators are CRA-ready
Industrial Data Xchange (IDX) Fieldbus & Industrial Networking
HMS Networks has upgraded its Anybus Communicator range to meet new EU cybersecurity rules, giving industrial manufacturers and integrators an easier path to compliance.

Read more...
Flotation system modernisation for a gold processing and mineral recovery plant.
Moore Process Controls System Integration & Control Systems Design
Moore Process Controls has successfully modernised a gold processing plant's flotation control system, replacing obsolete I/O hardware with Schneider Electric's latest M580 X80 platform.

Read more...
Remote I/O modules provide flexible options for distributed applications
Fieldbus & Industrial Networking
Dinkle International is now stocking the iO-GRID NEMO industrial-grade remote input/output modules, offering support for five leading industrial Ethernet protocols and a range of discrete channel configurations for distributed automation applications.

Read more...
Local energy solutions rewiring resilience across Africa
News Fieldbus & Industrial Networking
Engineers across Africa are developing practical, scalable energy and mobility solutions supported by the Africa Prize for Engineering Innovation.

Read more...
Daudin expands fieldbus modular remote I/O series
Fieldbus & Industrial Networking
: The Dinkle iO-GRID X modular remote I/O family is now available, offering fieldbus coupler modules for major industrial Ethernet protocols, and over 20 types of I/O modules to help integrators and equipment builders create flexible, efficient control systems.

Read more...
Siemens and HighByte partner to scale industrial AI
Siemens South Africa IT in Manufacturing Fieldbus & Industrial Networking
Siemens is expanding its Industrial Edge ecosystem through a partnership with HighByte, enabling customers to connect, contextualise and transform data from operational technology and information technology sources to build AI models and applications at scale.

Read more...
Automotive Ethernet media converter
Fieldbus & Industrial Networking
HMS Networks has introduced its first automotive ethernet product under the PEAK brand. The PAE-Media Converter is a compact device designed to connect automotive Ethernet (100BASE-T1 or 1000BASE-T1) with standard Ethernet (100BASE-TX or 1000BASE-T) networks.

Read more...
3D electrical systems design workflow for electromechanical innovation
Siemens South Africa Fieldbus & Industrial Networking IT in Manufacturing
Siemens has announced new 3D electrical design capabilities within its Capital software, enabling electrical and mechanical engineers to work concurrently in a shared 3D environment to reduce late-stage design changes and accelerate time to market for complex electromechanical products.

Read more...









While every effort has been made to ensure the accuracy of the information contained herein, the publisher and its agents cannot be held responsible for any errors contained, or any loss incurred as a result. Articles published do not necessarily reflect the views of the publishers. The editor reserves the right to alter or cut copy. Articles submitted are deemed to have been cleared for publication. Advertisements and company contact details are published as provided by the advertiser. Technews Publishing (Pty) Ltd cannot be held responsible for the accuracy or veracity of supplied material.




© Technews Publishing (Pty) Ltd | All Rights Reserved