The Blog (Posts by Vincent Lacroix)

First Level Security Certification (CSPN): The S2OPC Case Study

Vincent Pouzol, Vincent Lacroix — Sun, 12 May 2024 09:00:59 GMT

In October 2023, Systerel received the Security Visa from the French National Cybersecurity Agency (ANSSI) for the CSPN (First Level Security Certification) of its product: S2OPC. This achievement gives us the opportunity to focus on what the CSPN is and to provide feedback on the certification process.

Securing IIoT communications using OPC UA PubSub and Trusted Platform Modules

Olivier Gilles, Daniel Gracia-Perez, Pierre-Antoine Brameret, Vincent Lacroix — Thu, 05 Jan 2023 11:23:15 GMT

In the Industry 4.0 context, data are a valuable asset that must be protected. OPC UA PubSub enables secure and interoperable solutions, but authentication of IIoT devices remains a sensitive issue. This article presents a novel approach based on open source software, using a Trusted Platform Module to protect secrets on devices, and evaluate the security level on a predictive maintenance use case.

Use of B method for dynamic structures in S2OPC

Frédéric Badeau, Vincent Lacroix, Vincent Monfort, Laurent Voisin — Tue, 22 Jun 2021 09:57:44 GMT

The software B method has so far been mainly used in the industrial world to develop safety critical software with very basic memory management limited to arrays of fixed size defined at compilation time.

We present here an alternative approach for modelling software based on a more classic memory management with dynamically allocated complex data structures accessed through pointers.