Experimental Implementation of Remote Attestation over OPC UA Protocol

Arto Juhola; Markku Kylänpää

doi:10.1109/CNCIT56797.2022.00021

Experimental Implementation of Remote Attestation over OPC UA Protocol

BA6403 Cybersecurity engineering & automation

Research output: Chapter in Book/Report/Conference proceeding › Conference article in proceedings › Scientific › peer-review

1 Citation (Scopus)

Abstract

We present design alternatives and a proof-of-concept demonstration realising the inclusion of remote attestation into Open Platform Communication - Unified Architecture (OPC UA), a modern Operational Technology (OT) protocol. This aspect is not yet covered by the OPC UA set of specifications. Remote attestation is about ascertaining the integrity of the software and the configuration of the attested devices, and is considered to be essential for safeguarding critical infrastructure. Remote attestation and OPC UA concepts are briefly summarized. We discuss alternatives for realising remote attestation over OPC UA, and, based on their relative merits, select one for experimentation. Related work is also discussed. Python-based proof-of-concept implementation was realised and experimented with for unearthing relevant issues that need to be resolved for actual OPC UA remote attestation. The findings are presented and the demonstrator is available as open source software as an example how to implement remote attestation over OPC UA protocol.

Original language	English
Title of host publication	2022 International Conference on Networks, Communications and Information Technology (CNCIT)
Pages	83-88
ISBN (Electronic)	978-1-6654-5296-0
DOIs	https://doi.org/10.1109/CNCIT56797.2022.00021
Publication status	Published - 2022
MoE publication type	A4 Article in a conference publication
Event	2022 International Conference on Networks, Communications and Information Technology (CNCIT 2022) - China, Beijing, China Duration: 17 Jun 2022 → 19 Jun 2022

Conference

Conference	2022 International Conference on Networks, Communications and Information Technology (CNCIT 2022)
Country/Territory	China
City	Beijing
Period	17/06/22 → 19/06/22

Funding

The work presented here has been carried out in the Secure Collaborative Intelligent Industrial Assets (SeCoIIA) project from the European Union’s Horizon 2020 programme under grant agreement No 871967 and the ITEA project 17032 CyberFactory#1.

Keywords

OPC UA
proof-of-concept demonstration
remote attestation

Access to Document

10.1109/CNCIT56797.2022.00021

Cite this

@inproceedings{fa4f4a6c8c3046438a5f5da6a38b9945,

title = "Experimental Implementation of Remote Attestation over OPC UA Protocol",

abstract = "We present design alternatives and a proof-of-concept demonstration realising the inclusion of remote attestation into Open Platform Communication - Unified Architecture (OPC UA), a modern Operational Technology (OT) protocol. This aspect is not yet covered by the OPC UA set of specifications. Remote attestation is about ascertaining the integrity of the software and the configuration of the attested devices, and is considered to be essential for safeguarding critical infrastructure. Remote attestation and OPC UA concepts are briefly summarized. We discuss alternatives for realising remote attestation over OPC UA, and, based on their relative merits, select one for experimentation. Related work is also discussed. Python-based proof-of-concept implementation was realised and experimented with for unearthing relevant issues that need to be resolved for actual OPC UA remote attestation. The findings are presented and the demonstrator is available as open source software as an example how to implement remote attestation over OPC UA protocol.",

keywords = "OPC UA, proof-of-concept demonstration, remote attestation",

author = "Arto Juhola and Markku Kyl{\"a}np{\"a}{\"a}",

note = "Funding Information: The work presented here has been carried out in the Secure Collaborative Intelligent Industrial Assets (SeCoIIA) project from the European Union{\textquoteright}s Horizon 2020 programme under grant agreement No 871967 and the ITEA project 17032 CyberFactory#1. ; 2022 International Conference on Networks, Communications and Information Technology (CNCIT 2022) ; Conference date: 17-06-2022 Through 19-06-2022",

year = "2022",

doi = "10.1109/CNCIT56797.2022.00021",

language = "English",

isbn = "978-1-6654-5297-7",

pages = "83--88",

booktitle = "2022 International Conference on Networks, Communications and Information Technology (CNCIT)",

}

Juhola, A & Kylänpää, M 2022, Experimental Implementation of Remote Attestation over OPC UA Protocol. in 2022 International Conference on Networks, Communications and Information Technology (CNCIT). pp. 83-88, 2022 International Conference on Networks, Communications and Information Technology (CNCIT 2022), Beijing, China, 17/06/22. https://doi.org/10.1109/CNCIT56797.2022.00021

TY - GEN

T1 - Experimental Implementation of Remote Attestation over OPC UA Protocol

AU - Juhola, Arto

AU - Kylänpää, Markku

N1 - Funding Information: The work presented here has been carried out in the Secure Collaborative Intelligent Industrial Assets (SeCoIIA) project from the European Union’s Horizon 2020 programme under grant agreement No 871967 and the ITEA project 17032 CyberFactory#1.

PY - 2022

Y1 - 2022

N2 - We present design alternatives and a proof-of-concept demonstration realising the inclusion of remote attestation into Open Platform Communication - Unified Architecture (OPC UA), a modern Operational Technology (OT) protocol. This aspect is not yet covered by the OPC UA set of specifications. Remote attestation is about ascertaining the integrity of the software and the configuration of the attested devices, and is considered to be essential for safeguarding critical infrastructure. Remote attestation and OPC UA concepts are briefly summarized. We discuss alternatives for realising remote attestation over OPC UA, and, based on their relative merits, select one for experimentation. Related work is also discussed. Python-based proof-of-concept implementation was realised and experimented with for unearthing relevant issues that need to be resolved for actual OPC UA remote attestation. The findings are presented and the demonstrator is available as open source software as an example how to implement remote attestation over OPC UA protocol.

AB - We present design alternatives and a proof-of-concept demonstration realising the inclusion of remote attestation into Open Platform Communication - Unified Architecture (OPC UA), a modern Operational Technology (OT) protocol. This aspect is not yet covered by the OPC UA set of specifications. Remote attestation is about ascertaining the integrity of the software and the configuration of the attested devices, and is considered to be essential for safeguarding critical infrastructure. Remote attestation and OPC UA concepts are briefly summarized. We discuss alternatives for realising remote attestation over OPC UA, and, based on their relative merits, select one for experimentation. Related work is also discussed. Python-based proof-of-concept implementation was realised and experimented with for unearthing relevant issues that need to be resolved for actual OPC UA remote attestation. The findings are presented and the demonstrator is available as open source software as an example how to implement remote attestation over OPC UA protocol.

KW - OPC UA

KW - proof-of-concept demonstration

KW - remote attestation

UR - http://www.scopus.com/inward/record.url?scp=85139508724&partnerID=8YFLogxK

U2 - 10.1109/CNCIT56797.2022.00021

DO - 10.1109/CNCIT56797.2022.00021

M3 - Conference article in proceedings

SN - 978-1-6654-5297-7

SP - 83

EP - 88

BT - 2022 International Conference on Networks, Communications and Information Technology (CNCIT)

T2 - 2022 International Conference on Networks, Communications and Information Technology (CNCIT 2022)

Y2 - 17 June 2022 through 19 June 2022

ER -

Experimental Implementation of Remote Attestation over OPC UA Protocol

Abstract

Conference

Funding

Keywords

Access to Document

Other files and links

Fingerprint

SeCoIIA: Secure Collaborative Intelligent Industrial Assets

Cite this

Experimental Implementation of Remote Attestation over OPC UA Protocol

Abstract

Conference

Funding

Keywords

Access to Document

Other files and links

Fingerprint

Projects

SeCoIIA: Secure Collaborative Intelligent Industrial Assets

Cite this