- Published on Wednesday, 30 January 2013 12:16
- Written by Roberta Murray
The industry's control systems are full of unpatched vulnerabilities to the Internet, new findings show.
As a highly critical sector, the oil and gas infrastructure should be one of the most secure, both physically and digitally. This is not the case, according to new research.
A multi-billion dollar industry, trading one of the most valuable commodities on the market, is connecting its industrial control systems full of unpatched vulnerabilities to the Internet, where cybercriminals roam in all impunity, findings by ABI Research have concluded.
These systems are poorly protected against cyber threats – at best, they are secured with IT solutions which are ill-adapted to legacy control systems such as SCADA.
Senior cybersecurity analyst Michela Menting, comments: "The lack of appropriate security has already allowed a number of destructive cyber-attacks to lay waste to some of the most high-profile companies in the industry
"From Night Dragon to Shamoon, oil and gas companies have been the victims of sophisticated cyber threats since 2009. Many of these attacks have caused significant financial damages – and yet the industry is painstakingly slow in deploying proper cybersecurity measures adapted to the infrastructure."
This lax approach is not only careless, it can be dangerous, says ABI. Illegal interception and modification of commands to pipelines could cause massive environmental disasters or even life-threatening situations. The terrorist threat is just as real online as it is in the physical world.
Inevitably, as the number of cyber-attacks increase in the coming year, realization of the financial implications of persistent cyber threats will boost cybersecurity spending in this field during the forecasted period. Spending is set to pick up considerably from 2014 onwards.
ABI Research calculates that cybersecurity spending on the oil & gas critical infrastructure will reach $1.87 billion by 2018. This includes spending on IT networks, industrial control systems and data security; counter measures; and policies and procedures.
Offshore Technology International Vol:2 2013
Latest on Offshore Technology International
- Tullow Oil plc shares slide as it plugs and abandons Ethiopian well
- Salamander Energy plc posts operational update on West Kerendan-1 and Sungai Lahei
- Premier Oil plc shares down as it withdraws from Block L10A offshore Kenya
- Max Petroleum Plc announces successful appraisal well at Sagiz West
- Kibo Mining plc re-takes full ownership of Tanzanian nickel scheme
- Woodside Petroleum Limited awarded exploration permits in New Zealand
- Onshore oil and gas industry welcomes new fiscal regime
- Drax Group plc shares surge 59p as Government sets subsidy renewable energy project prices
- Exillon Energy plc's second largest shareholder to possibly make takeover offer
- Water UK and UKOOG aim to minimise impact of shale gas development on UK water resources
- New UK wind energy record
- Rio Tinto plc reveals plans to pay down debt and boost returns to shareholders
- Offshore oil and gas: Driving private equity investment
- BP plc expects a surge in Deepwater Horizon compensation claims
- Xcite Energy Limited sinks in early morning trade as talks with farm-out partners continue