- Published on Wednesday, 30 January 2013 12:16
- Written by Roberta Murray
The industry's control systems are full of unpatched vulnerabilities to the Internet, new findings show.
As a highly critical sector, the oil and gas infrastructure should be one of the most secure, both physically and digitally. This is not the case, according to new research.
A multi-billion dollar industry, trading one of the most valuable commodities on the market, is connecting its industrial control systems full of unpatched vulnerabilities to the Internet, where cybercriminals roam in all impunity, findings by ABI Research have concluded.
These systems are poorly protected against cyber threats – at best, they are secured with IT solutions which are ill-adapted to legacy control systems such as SCADA.
Senior cybersecurity analyst Michela Menting, comments: "The lack of appropriate security has already allowed a number of destructive cyber-attacks to lay waste to some of the most high-profile companies in the industry
"From Night Dragon to Shamoon, oil and gas companies have been the victims of sophisticated cyber threats since 2009. Many of these attacks have caused significant financial damages – and yet the industry is painstakingly slow in deploying proper cybersecurity measures adapted to the infrastructure."
This lax approach is not only careless, it can be dangerous, says ABI. Illegal interception and modification of commands to pipelines could cause massive environmental disasters or even life-threatening situations. The terrorist threat is just as real online as it is in the physical world.
Inevitably, as the number of cyber-attacks increase in the coming year, realization of the financial implications of persistent cyber threats will boost cybersecurity spending in this field during the forecasted period. Spending is set to pick up considerably from 2014 onwards.
ABI Research calculates that cybersecurity spending on the oil & gas critical infrastructure will reach $1.87 billion by 2018. This includes spending on IT networks, industrial control systems and data security; counter measures; and policies and procedures.
Offshore Technology International Vol:2 2013
Latest on Offshore Technology International
- Genel Energy plc shares jump to record high on positive Kurdistan news
- Glencore Xstrata plc shares rise as it reports plans to restart Pasar production
- Nominations open for the 2014 Safety Awards
- Severn Trent plc suffers broker downgrade
- 2013 finishes with record-breaking month for wind energy
- Centamin plc shares rise as company beats full-year production guidance
- Royal Dutch Shell plc saves $600m on Repsol LNG deal
- Ophir Energy plc shares up as it farms out Gabon assets
- BHP Billiton plc ceases mining at Perseverance Underground due to safety concerns
- Barclays plc asks US judge to block electricity market manipulation fine
- New research on wind energy acoustics published
- UBS AG gives BG Group plc a "Buy" rating - rates it top pick in European oil and gas industry
- Botswana Diamonds plc share price plummets despite fundraising report
- Gas sector will create thousands of jobs for Brits down under
- John Wood Group plc shares hit 12 month low after profit warnings