评估OPC UA部署的安全性
Assessing the Security of OPC UA Deployments
摘要：
为了满足工业部署日益增长的安全需求，OPC UA是首批明确考虑安全性设计的工业协议之一。但是，安全地部署它需要对广泛的选项进行全面配置。因此，有必要评估OPC UA部署及其配置的安全性，以确保安全操作，最重要的是工业流程的机密性和完整性。在这项工作中，我们提出了流行的Metasploit框架的扩展，以减轻基于网络的OPC UA部署的安全评估。为此，我们讨论了发现OPC UA服务器、测试其身份验证、获取其配置以及检查漏洞的方法。最终，我们的工作使运营商能够验证其系统的（安全）配置并识别潜在的攻击向量。
英文摘要：
To address the increasing security demands of industrial deployments, OPC UA is one of the first industrial protocols explicitly designed with security in mind. However, deploying it securely requires a thorough configuration of a wide range of options. Thus, assessing the security of OPC UA deployments and their configuration is necessary to ensure secure operation, most importantly confidentiality and integrity of industrial processes. In this work, we present extensions to the popular Metasploit Framework to ease network-based security assessments of OPC UA deployments. To this end, we discuss methods to discover OPC UA servers, test their authentication, obtain their configuration, and check for vulnerabilities. Ultimately, our work enables operators to verify the (security) configuration of their systems and identify potential attack vectors.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
