Vulnerabilities’ Assessment and Mitigation Strategies for the Small Linux Server, Onion Omega2

Electronics

卷:9

Srinivas Sampalli¹  Darshana Upadhyay¹  Bernard Plourde² 

[1] Faculty of Computer Science, Dalhousie University, Halifax, NS B3H 4R2, Canada;

[2] Research & Development Department, Technology Sanstream, Ottawa, ON K2R 1C1, Canada;

关键词: SCADA;    IoT;    embedded devices;    vulnerability assessment;    webserver;    Onion Omega2;   

DOI  :  10.3390/electronics9060967

来源: DOAJ

【 摘 要 】

The merger of SCADA (supervisory control and data acquisition) and IoTs (internet of things) technologies allows end-users to monitor and control industrial components remotely. However, this transformation opens up a new set of attack vectors and unpredicted vulnerabilities in SCADA/IoT field devices. Proper identification, assessment, and verification of each SCADA/IoT component through advanced scanning and penetration testing tools in the early stage is a crucial step in risk assessment. The Omega2, a small Linux server from Onion™, is used to develop various SCADA/IoT systems and is a key component of nano power grid systems. In this paper, we report product level vulnerabilities of Onion Omega2 that we have uncovered using advanced vulnerability scanning tools. Through this research, we would like to assist vendors, asset owners, network administrators, and security professionals by creating an awareness of the vulnerabilities of Onion Omega2 and by suggesting effective mitigations and security best practices.

【 授权许可】

Unknown