OT-Security
BSI updates security analysis on OPC UA
In its study "Security analysis on OPC UA", the BSI evaluates the specified and implemented security functions of OPC UA. Among other things, the focus was on the search for security vulnerabilities.
The BSI has commissioned the Fraunhofer Institutes for Optronics, System Technologies and Image Exploitation (IOSB), for Mechatronics Design Engineering (IEM) and for Communication, Information Processing and Ergonomics (FKIE) to review the security functions in the OPC UA specification. The study provides companies with an overview of the protocol's security functions.
Effectiveness of the OPC UA protection measures: Limited protection means that the possibilities of an attacker are restricted, but this type of attack is not prevented.
© BSIThe result of the study "Security analysis of OPC UA (Open Platform Communications - Unified Architecture)" confirms that OPC UA does not contain any systematic security vulnerabilities. In addition, a selected reference implementation of the OPC Foundation was tested with regard to the implementation of these security functionalities.
You can download the BSI security analysis here:
You might also be interested in
Happy Birthday OPC UA!
On November 3, 2003, the OPC Foundation held its first meeting to begin defining OPC UA. 20 years later, President Stefan Hoppe draws a conclusion and provides an outlook for the coming years.
read more...Digital Twin Consortium / OPC Foundation
The digital twin in production
The Digital Twin Consortium (DTC) and the OPC Foundation have now announced a collaboration to accelerate the development and adoption of digital twin technologies.
read more...Faeser wants to amend the Basic Law
Federal government to ensure cyber security
If the Federal Chancellor needs a secure line to speak to NATO allies via video, he has to travel to the Ministry of Defense to do so. This is just one example of the many unfinished tasks when it comes to cyber security.
read more...Not against, but with MQTT!
MQTT is an established protocol for edge/cloud communication. However, the OPC Foundation also wants to use OPC UA not only in the field, but also for edge/cloud communication. Their appeal: Avoid a proliferation of MQTT assignments with OPC UA!
read more...Cisco 'Security Outcomes Study
German IT security outdated
Almost half of the security technologies used in German companies are outdated and poorly prepared for cyber incidents. This is the result of the 'Security Outcomes Study' by Cisco.
read more...OPC UA specification for screwdriving technology
In order to promote interoperable communication in the integrated assembly solutions industry, the VDMA Robotics + Automation Association has published the first OPC UA specification for the industry.
read more...Multi-vendor demo celebrates its premiere
Three years after its launch, the OPC Foundation's Field Level Communications (FLC) initiative has now completed the second release candidate - a multi-vendor installation demonstrates the progress made.
read more...From TSN testbed to convertible production
With the TSN Testbed, the ISW in Stuttgart is supporting the establishment of a deterministic and open network standard in production facilities. Florian Frick describes the status quo.
read more..."Practical suitability has been achieved!"
About five years ago, B&R was one of the co-initiators of the "Shapers" - in other words, a supporter of the TSN movement for the industry from the very beginning. What has happened since then in terms of TSN at B&R? Elmar Zimmerling...
read more...