Kaspersky, Claroty on OPC Security Research

On this episode of Claroty's Aperture Podcast, researchers from Claroty and Kaspersky  join to discuss security research into the OPC protocol.  OPC is a protocol stack that is used for interoperability between disparate vendor communication protocols in the ICS domain. Kaspersky's Evgeny Goncharov and Claroty's Sharon Brizinov and Uri Katz bring their respective experience researching OPC and discuss why it's a critical protocol for OT networks. In 2018, Kaspersky Lab published some of the earliest research into OPC security and disclosed 17 new vulnerabilities in the stack. This year, Claroty followed with its own research and nine vulnerabilities found in three vendor implementations of OPC. The researchers discuss the current state of OPC security, how it can improve, and what vendors should be doing to ensure they're securely implementing OPC.