No VPN Needed? Cryptographic Attacks Against the OPC UA Protocol
Discloses severe cryptographic implementation flaws in the OPC UA industrial communication standard, allowing adversaries to bypass encryption and spoof OT commands.
Summary
The OPC UA Protocol in Industrial Automation
Open Platform Communications Unified Architecture (OPC UA) is the dominant communication standard connecting industrial controllers, SCADA systems, and enterprise cloud applications, often marketed as secure enough to run without VPN isolation.
Auditing OPC UA Cryptographic Implementations
Tom Tervoort conducts an in-depth security analysis of OPC UA reference stacks, uncovering critical vulnerabilities in cryptographic handshake negotiation, digital certificate validation, and symmetric encryption padding.
Bypassing Message Authentication and Command Injection
Exploiting padding oracle flaws and key renegotiation weaknesses allows a network attacker to decrypt industrial control traffic, forge sensor telemetry, and inject unauthorized control commands into critical OT networks.
Hardening Industrial OPC UA Networks
Remediating OPC UA vulnerabilities requires vendor stack updates, enforcing strict certificate revocation checking, and maintaining network segmentation rather than relying solely on application-layer encryption.
Related talks
Creator Stage·26 min
Amp · Data
Explores how manipulating maritime rudder angle controllers to violate International Regulations for Preventing Collisions at Sea (COLREGs) causes severe disruption.
Creator Stage·21 min
Michael DeVolld · Austin Reid
Analyzes cyber-physical safety risks in integrated bridge and propulsion controls aboard commercial maritime vessels where software bugs threaten lives.
Main Stage·21 min
K Miltenberger · N Fredericksen
Examines cyber and physical attack surfaces across global maritime logistics, cargo container cranes, and automated port terminals.