Exploiting OPC-UA in Every Possible Way: Practical Attacks Against Modern OPC-UA Architectures

OPC-UA is the most popular protocol today in ICS/SCADA and IoT environments for data exchanges from sensors to on-premises or cloud applications. OPC-UA is therefore the bridge between different OT trust zones and a crown jewel for attacks attempting to break security zones and crossover from the industrial to corporate networks.

For the past two years, we have been researching dozens of OPC-UA protocol stack implementations being used in millions of industrial products. We focused on two main attack vectors: …

applications architectures attacks bridge cloud cloud applications data environments exploiting ics industrial iot opc popular protocol scada security sensors today trust