资源描述:
《OPC security white paper.pdf》由会员上传分享,免费在线阅读,更多相关内容在学术论文-天天文库。
1、OPCSecurityWhitepaper#3HardeningGuidelinesforOPCHostsintrinsicallysecurepobox178#5–7217Lantzvillerdlantzville,bcPREPAREDBY:canadav0r2h0DigitalBondoffice250.390.1333fax250.390.3899BritishColumbiaInstituteofTechnologywww.byressecurity.comByresResearchNovember13,2007DigitalBondOPCSecurityW
2、P3(Version1-3c).docsuite1301580sawgrasscorppkwysunrise,FL33323office954.315.4633www.digitalbond.comRevisionHistoryRevisionDateAuthorsDetails0.7May15,2006E.Byres,MFranz,Draftinternalreviewversion1.0May31,2006E.Byres,J.Carter,MDraftforcontrolledpublicreviewFranz1.1August31,2006E.Byres,M.F
3、ranz2ndDraftforcontrolledpublicreview1.2February9,2007E.Byres,D.Peterson3rdDraftforcontrolledpublicreview1.3June28,2007E.Byres,D.Peterson4thDraftforcontrolledpublicreview1.3aAugust31,2007E.Byres,D.Peterson5thDraftforfinalDHSreview.IncludescommentsfromtheDHSRecommendedPracticesGroup1.3bS
4、eptember9,E.Byres,D.PetersonCorrectionofminorgrammatical2007errorsandaddedfigurestoSection3.61.3cNovember13,E.Byres,D.PetersonCorrectionofminoreditorialerrors2007AcknowledgementsTheGroupforAdvancedInformationTechnology(GAIT)attheBritishColumbiaInstituteofTechnology(BCIT),DigitalBond,and
5、ByresResearchwouldliketothankallthevendorsandendusersthatgenerouslysupportedoureffortsthroughnumerousinterviewsandbyprovidinguswithdocumentsthatcouldonlybedescribedasextremelysensitive.Unfortunatelywecannotnameyouforobvioussecurityreasons,butweappreciateyourtime,trustandencouragement.Se
6、veralpeoplestoodoutintheircontributionsandadviceforthisdocumentthatwewouldliketoacknowledge.FirstareBillCotterofMSMUGandChipLeeofISA-wethankyouforallyourhelpinmakingtheusersurveyspossible.WewouldalsoliketothankRalphLangnerforprovidingthefourexamplescenariosforthisreportandlotsofusefulin
7、formationonOPCvulnerabilities.FinallywewouldliketothankEvanHandforhisvisionandsupport.Withouthim,thisprojectneverwouldhavebeenpossible.DisclaimerDeploymentorapplicationofanyoftheopinions,suggestionsorconfigurationincludedinthisreportarethesoleresponsibilityofthereaderandareoffe