Oil companies hit by cyber attacks

FBI says three major U.S. oil producers got hacked. This time it's IT networks, but could manufacturing be a next step?

01/28/2010


Recently the FBI told three U.S. oil companies that they'd been hacked. Marathon, ExxonMobil, and ConocoPhillips had their IT systems violated and proprietary information was being siphoned out. Some apparently was going to China. Most of the information involved exploration and oil discovery efforts.

The Christian Science Monitor goes into more detail on the story, including descriptions of the "phishing" and "spear phishing" techniques the infiltrators used to gain access. It also says that the companies didn't understand the depth of the attacks until the FBI filled them in.

While the hackers seemed to stay in what we would consider to be IT networks, those places can be the jumping-off point for attacks on SCADA and plant control systems. Moving into the next part of the network is much easier when the hackers are working from an established beach head. This also reminds us why it is so important to have appropriate barriers installed at all the points where manufacturing and IT systems interface.

You can find many cyber security resources at Control Engineering's Website, including a podcast with Ed Skoudis who was interviewed in the Christian Science Monitor story.

See the whole podcast catalog .

Read the Control Engineering industrial control system cyber security blog .

Read Applying Security Defense-in-Depth .

 

-Peter Welander, process industries editor, PWelander@cfemedia.com
Control Engineering Process & Advanced Control Monthly eNewsletter
Register here to select your choice of free eNewsletters .





No comments
The Engineers' Choice Awards highlight some of the best new control, instrumentation and automation products as chosen by...
The System Integrator Giants program lists the top 100 system integrators among companies listed in CFE Media's Global System Integrator Database.
The Engineering Leaders Under 40 program identifies and gives recognition to young engineers who...
This eGuide illustrates solutions, applications and benefits of machine vision systems.
Learn how to increase device reliability in harsh environments and decrease unplanned system downtime.
This eGuide contains a series of articles and videos that considers theoretical and practical; immediate needs and a look into the future.
Intelligent, efficient PLC programming: Cost-saving programming languages are available now; Automation system upgrades; Help from the cloud; Improving flow control; System integration tips
Smarter machines require smarter systems; Fixing PID, part 3; Process safety; Hardware and software integration; Legalities: Integrated lean project delivery
Choosing controllers: PLCs, PACs, IPCs, DCS? What's best for your application?; Wireless trends; Design, integration; Manufacturing Day; Product Exclusive
PLCs, robots, and the quest for a single controller; how OEE is key to automation solutions.
This article collection contains several articles on improving the use of PID.
Learn how Industry 4.0 adds supply chain efficiency, optimizes pricing, improves quality, and more.

Find and connect with the most suitable service provider for your unique application. Start searching the Global System Integrator Database Now!

Special report: U.S. natural gas; LNG transport technologies evolve to meet market demand; Understanding new methane regulations; Predictive maintenance for gas pipeline compressors
Cyber security cost-efficient for industrial control systems; Extracting full value from operational data; Managing cyber security risks
Drilling for Big Data: Managing the flow of information; Big data drilldown series: Challenge and opportunity; OT to IT: Creating a circle of improvement; Industry loses best workers, again