This report is the second of three white papers outlining the findings from a study on OPC security conducted by Byres Research, Digital Bond and the British Columbia Institute of Technology. The objective of this study was to create a series of simple, authoritative white papers that summarized current good practices for securing OPC client and server applications running on Windows-based hosts. The full study is divided into three Good Practice Guides for Securing OPC as follows:
OPC Security White Paper #1 - Understanding OPC and How it is Used: An introduction to what OPC is, what are its basic components and how is it actually deployed in the real world.
OPC Security White Paper #2 - OPC Exposed: What are the risks and vulnerabilities incurred in deploying OPC in a control environment?
OPC Security White Paper #3 - Hardening Guidelines for OPC Hosts: How can a server or workstation running OPC be secured in a simple and effective manner?
All three white papers are intended to be read and understood by IT administrators and control systems technicians who have no formal background in either Windows programming or security analysis.