http://join2-wiki.gsi.de/foswiki/pub/Main/Artwork/join2_logo100x88.png

Dataset to "Easing the Conscience with OPC UA: An Internet-Wide Study on Insecure Deployments"

Dahlmanns, Markus^RWTH* ; Lohmöller, Johannes^RWTH* ; Fink, Ina Berenice^RWTH* ; Pennekamp, Jan^RWTH* ; Wehrle, Klaus^RWTH* ; Henze, Martin^RWTH*

2020

Online
DOI: 10.18154/RWTH-2020-09197
URL: https://publications.rwth-aachen.de/record/802060/files/README.md
URL: https://publications.rwth-aachen.de/record/802060/files/hosts_public.csv.gz
URL: https://publications.rwth-aachen.de/record/802060/files/scripts.zip

Einrichtungen

1. Lehrstuhl für Informatik 4 (Kommunikation und verteilte Systeme) (121710)
2. Internet of Production (080067)
3. Fachgruppe Informatik (120000)

Projekte

1. DFG project 390621612 - EXC 2023: Internet of Production (IoP) (390621612) (390621612)

Inhaltliche Beschreibung (Schlagwörter)
industrial communication (frei) ; network security (frei) ; security configuration (frei)

Kurzfassung
This is the dataset to "Easing the Conscience with OPC UA: An Internet-Wide Study on Insecure Deployments" [In ACM Internet Measurement Conference (IMC ’20)]. It contains our weekly scanning results between 2020-02-09 and 2020-08-31 complied using our zgrab2 extensions, i.e, it contains an Internet-wide view on OPC UA deployments and their security configurations. To compile the dataset, we anonymized the output of zgrab2, i.e., we removed host and network identifiers from that dataset. More precisely, we mapped all IP addresses, fully qualified hostnames, and autonomous system IDs to numbers as well as removed certificates containing any identifiers. See the README file for more information. Using this dataset we showed that 93% of Internet-facing OPC UA deployments have problematic security configurations, e.g., missing access control (on 24% of hosts), disabled security functionality (24%), or use of deprecated cryptographic primitives (25%). Furthermore, we discover several hundred devices in multiple autonomous systems sharing the same security certificate, opening the door for impersonation attacks. Overall, with the analysis of this dataset we underpinned that secure protocols, in general, are no guarantee for secure deployments if they need to be configured correctly following regularly updated guidelines that account for basic primitives losing their security promises.

OpenAccess:
MD
CSV.GZ
ZIP
(additional files)

Dokumenttyp
Dataset

Format
online

Sprache
English

Interne Identnummern
RWTH-2020-09197
Datensatz-ID: 802060

Beteiligte Länder
Germany