Exploiting OPC-UA in Every Possible Way: Practical Attacks Against Modern OPC-UA Architectures

OPC-UA is the most popular protocol today in ICS/SCADA and IoT environments for data exchanges from sensors to on-premises or cloud applications. OPC-UA is therefore the bridge between different OT trust zones and a crown jewel for attacks attempting to break security zones and crossover from the industrial to corporate networks. For the past two years, we have been researching dozens of OPC-UA protocol stack implementations being used in millions of industrial products. We focused on two main attack vectors: attacking OPC-UA servers and protocol gateways, and attacking OPC-UA clients.... By: Sharon Brizinov , Noam Moshe Full Abstract and Presentation Materials: #exploiting-opc-ua-in-every-possible-way-practical-attacks-against-modern-opc-ua-architectures-31535