Search

6 result(s) for CSMS

• OPC-10000-2 – OPC Unified Architecture - Part 2: Security Model
  4.4 OPC UA relationship to site security
  site security OPC UA security works within the overall Cyber Security Management System ( CSMS ) of a site. Sites often have a CSMS that addresses security policy and procedures, personnel, responsibilities ... audits, and physical security. A CSMS typically addresses threats that include those that are described in 4.3 . They also analyse the security risks and determine what security controls the site
• OPC-10000-2 – OPC Unified Architecture - Part 2: Security Model
  5.1.2.2 Message flooding
  Events should be monitored for excessive connection requests. OPC UA relies upon the site CSMS to prevent attacks such as Message flooding at protocol layers and systems that support
• OPC-10000-2 – OPC Unified Architecture - Part 2: Security Model
  5.1.12 Compromising user credentials
  user identity is out of scope for OPC UA. It is essential that the CSMS take AuthorizationServices into account. OPC UA depends upon the site CSMS to protect against other
• OPC-10000-2 – OPC Unified Architecture - Part 2: Security Model
  5.2.5 Confidentiality
  relies upon the site CSMS to protect Confidentiality on the network and system infrastructure. OPC UA relies upon the PKI ( Public Key Infrastructure ) to manage keys used for Asymmetric Encryption ... symmetric session keys. The length of the certificate chain is defined by the site CSMS (only local TrustList with self-signed Certificates or a full CA/CRL infrastructure
• OPC-10000-2 – OPC Unified Architecture - Part 2: Security Model
  5.2.6 Integrity
  other Message s including PubSub messages. OPC UA relies upon the site CSMS to protect Integrity on the network and system infrastructure. OPC UA relies upon the PKI to manage
• OPC-10000-2 – OPC Unified Architecture - Part 2: Security Model
  6.12 OAuth2, JWT and User roles
  detail. Sites should ensure that they follow the best practices defined in the site CSMS for OAuth2. If a GDS is available in the system, it could provide AuthorizationServices