- Published on Wednesday, 30 January 2013 12:16
- Written by Roberta Murray
The industry's control systems are full of unpatched vulnerabilities to the Internet, new findings show.
As a highly critical sector, the oil and gas infrastructure should be one of the most secure, both physically and digitally. This is not the case, according to new research.
A multi-billion dollar industry, trading one of the most valuable commodities on the market, is connecting its industrial control systems full of unpatched vulnerabilities to the Internet, where cybercriminals roam in all impunity, findings by ABI Research have concluded.
These systems are poorly protected against cyber threats – at best, they are secured with IT solutions which are ill-adapted to legacy control systems such as SCADA.
Senior cybersecurity analyst Michela Menting, comments: "The lack of appropriate security has already allowed a number of destructive cyber-attacks to lay waste to some of the most high-profile companies in the industry
"From Night Dragon to Shamoon, oil and gas companies have been the victims of sophisticated cyber threats since 2009. Many of these attacks have caused significant financial damages – and yet the industry is painstakingly slow in deploying proper cybersecurity measures adapted to the infrastructure."
This lax approach is not only careless, it can be dangerous, says ABI. Illegal interception and modification of commands to pipelines could cause massive environmental disasters or even life-threatening situations. The terrorist threat is just as real online as it is in the physical world.
Inevitably, as the number of cyber-attacks increase in the coming year, realization of the financial implications of persistent cyber threats will boost cybersecurity spending in this field during the forecasted period. Spending is set to pick up considerably from 2014 onwards.
ABI Research calculates that cybersecurity spending on the oil & gas critical infrastructure will reach $1.87 billion by 2018. This includes spending on IT networks, industrial control systems and data security; counter measures; and policies and procedures.
Offshore Technology International vol:1 2013
Latest on Offshore Technology International
- Petrobras awards Technip a flexible pipe supply contract
- Total SA finalizes acquisition of Bokhtar PSC Area interest in Tajikistan
- Statoil ASA makes another oil find offshore Newfoundland
- UK renewable generation offers significant opportunities for investors
- Royal Dutch Shell plc may have used sabotage claims to avoid Nigeria oil spills blame
- Aker Solutions delivers Åsgard template to Statoil ASA
- Max Petroleum plc provides SAGW-4 appraisal well update
- Lamprell plc shares move up as it streamlines its lenders in new refinancing agreement
- Offshore hydrocarbon releases reach record low – but number of major releases rise
- Tullow Oil plc receives judgment in its favour in proceedings against Heritage Oil plc
- Chevron Corporation confirms first cargo from Angola LNG
- Energy saving measures could boost house prices
- £1.3m boost for three clean energy entrepreneurs
- BG Group plc awards £110m North Sea contract extension to Amec plc
- Review of UK offshore oil and gas recovery