National

The oil and gas industry must take cybersecurity seriously

Though the threat of cyber-attacks is pertinent for all sectors, it remains particularly dangerous for the oil, gas and petrochemical sector. First, there is the fact transactions made within the industry involve highly sensitive information, often pertaining to potential new sites and end-user consumption. Second, there is the endemic threat that relates to the very nature and relevance of the industry in geopolitical terms.

Given the wealth and, in turn, power that comes with oil and gas reserves, refineries have long been prime targets for terrorist groups: their capture has been a dominant feature of ISIS’ strategy. Consequently, the industry has been more proactive than others in terms of bolstering its cybersecurity. That said, many companies are still only at the start of a long road, particularly as hackers continue to find increasingly sophisticated ways to infiltrate even the most prepared victims’ systems.

Double trouble

There are obvious physical dangers inherent in the oil and gas sector, but the process of digitalisation raises a whole new type of threat. This is because processes and data become vulnerable to external forces as corporations digitally connect their industrial components.

“A major trend in oil and gas technology is the application of automation and machine learning to address the cybersecurity skill and manpower shortfall in the energy industry. However, as more connected devices move into the sector, so do the opportunities for more risk”, said Edgard Capdevielle, CEO of cybersecurity firm Nozomi Networks.

Artificial intelligence and machine learning can help organisations detect threats through the scrutiny of networks in real time, allowing them to flag any variances from ordinary baseline behaviour

A further issue is the tendency for oil and gas firms to use third parties for their operational technology (OT) management, which means they often have insufficient OT-specific knowledge of their equipment. “As a result, they have less control of the infrastructure and its security”, Capdevielle explained. “Historically, oil and gas companies have focused on strengthening IT security and isolating OT from IT. Today, that approach is no longer enough as the Industrial Internet of Things (IIoT) makes it possible for cyber-attacks to go straight to OT subsystems.”

As Capdevielle explained, operations, productivity and employee safety can all be affected by cyber-incidents. And, while planned assaults are the biggest threat facing the industry (as evidenced by recent attacks on the Ukrainian power grid), unintentional incidents are also perilous. For example, infected USB drives or third-party laptops can accidentally introduce malware, while device traffic storms are also dangerous. Unfortunately, such incidents increase apace as IIoT devices migrate to OT environments that are traditionally siloed. “Expect these cyber-attacks to grow in frequency and sophistication”, warned Capdevielle.

Winds of change

Although this combination of threats has created a challenging environment for the sector, new equipment has begun to incorporate far more sophisticated security software to give firms greater protection.

“Newer technologies use advanced visibility tools; technologies that document and visualise systems and detect intrusion”, Capdevielle said. “This means that there is good security hygiene – something that current practices lack.

“Control system traffic is predictable, so, by establishing a baseline of network communications and conducting active monitoring for anomalies, anything that detracts from expected behavioural patterns is identified as malicious.”

What’s more, artificial intelligence and machine learning can help organisations detect threats through the scrutiny of networks in real time, allowing them to flag any variances from ordinary baseline behaviour. “They also speed up the investigation of incidents, allowing firms to contain attacks before significant damage can occur, without needing to add additional staffing”, Capdevielle added. This new technology is giving firms in the oil, gas and petrochemical sector more than a fighting chance – it’s fundamentally changing the game. Hackers will always innovate, but for now the future looks hopeful for the industry.

SOURCE: The New Economy

About Oklahoma Minerals Founder GIB KNIGHT

Gib Knight is a private oil and gas investor and consultant, providing clients advanced analytics and building innovative visual business intelligence solutions to visualize the results, across a broad spectrum of regulatory filings and production data in Oklahoma and Texas. He is the founder of OklahomaMinerals.com, an online resource designed for mineral owners in Oklahoma.

Comments

The crossroads of energy information for minerals owners in Oklahoma. Where you can: See recent prices of mineral and lease transactions. Receive an offer to lease or buy your minerals.

Find relevant news stories on the most active areas, including the Scoop and Stack Plays.

Data Powered by Oseberg

Today’s E&P world is rapidly shifting towards data-driven decision making, but those decisions are only as good as the data behind them. Access Oseberg's deep, accurate, and detailed pool of insight-rich industry data with our powerful analytical and search tools and get the clearest picture of what's happening as soon as it happens.

Disclaimer

This web site is maintained solely for the personal use of our visitors. Although we at Oklahoma Minerals have made all reasonable efforts to provide accurate information, we cannot guarantee the completeness, timeliness or accuracy of the information contained herein. Nothing in this web site contains investment advice. Any decisions based upon the information contained in this web site are the sole responsibility of the user.

Copyright © 2020 OklahomaMinerals.com

To Top
Oil titans mulling arctic drilling targeted by activist groupsFull Story