- Published on Wednesday, 30 January 2013 12:16
- Written by Roberta Murray
The industry's control systems are full of unpatched vulnerabilities to the Internet, new findings show.
As a highly critical sector, the oil and gas infrastructure should be one of the most secure, both physically and digitally. This is not the case, according to new research.
A multi-billion dollar industry, trading one of the most valuable commodities on the market, is connecting its industrial control systems full of unpatched vulnerabilities to the Internet, where cybercriminals roam in all impunity, findings by ABI Research have concluded.
These systems are poorly protected against cyber threats – at best, they are secured with IT solutions which are ill-adapted to legacy control systems such as SCADA.
Senior cybersecurity analyst Michela Menting, comments: "The lack of appropriate security has already allowed a number of destructive cyber-attacks to lay waste to some of the most high-profile companies in the industry
"From Night Dragon to Shamoon, oil and gas companies have been the victims of sophisticated cyber threats since 2009. Many of these attacks have caused significant financial damages – and yet the industry is painstakingly slow in deploying proper cybersecurity measures adapted to the infrastructure."
This lax approach is not only careless, it can be dangerous, says ABI. Illegal interception and modification of commands to pipelines could cause massive environmental disasters or even life-threatening situations. The terrorist threat is just as real online as it is in the physical world.
Inevitably, as the number of cyber-attacks increase in the coming year, realization of the financial implications of persistent cyber threats will boost cybersecurity spending in this field during the forecasted period. Spending is set to pick up considerably from 2014 onwards.
ABI Research calculates that cybersecurity spending on the oil & gas critical infrastructure will reach $1.87 billion by 2018. This includes spending on IT networks, industrial control systems and data security; counter measures; and policies and procedures.
Offshore Technology International Vol:1 2014
Latest on Offshore Technology International
- Halliburton buys Baker Hughes for US$34.6bn
- Coal find under Firth of Forth first step to UK’s first Underground Coal Gasification plant
- Andy Samuel to lead the UK’s new Oil & Gas Authority
- Chinese oil demand hits 15-month high
- Total chairman and CEO dies in plane crash
- UK Offshore Safety Directive Regulator launched
- WGK awarded FEED contract by Shell for world-first CCS pipeline
- Statoil’s president and CEO leaves to lead BG Group
- Research project launched into risks from offshore CO2 pipelines
- Centralising environmental data for UK waters
- North Sea oil giants speak out against Scottish independence
- Statoil and DNV GL to drive standardisation of subsea factory interfaces
- NADL acquires ‘significant portion’ of Rosneft land drilling rigs
- Azilat moves into Brazilian waters
- Cameron sells Centrifugal Compression business to Ingersoll Rand