Oil companies hit by cyber attacks

FBI says three major U.S. oil producers got hacked. This time it's IT networks, but could manufacturing be a next step?

01/28/2010


Recently the FBI told three U.S. oil companies that they'd been hacked. Marathon, ExxonMobil, and ConocoPhillips had their IT systems violated and proprietary information was being siphoned out. Some apparently was going to China. Most of the information involved exploration and oil discovery efforts.

The Christian Science Monitor goes into more detail on the story, including descriptions of the "phishing" and "spear phishing" techniques the infiltrators used to gain access. It also says that the companies didn't understand the depth of the attacks until the FBI filled them in.

While the hackers seemed to stay in what we would consider to be IT networks, those places can be the jumping-off point for attacks on SCADA and plant control systems. Moving into the next part of the network is much easier when the hackers are working from an established beach head. This also reminds us why it is so important to have appropriate barriers installed at all the points where manufacturing and IT systems interface.

You can find many cyber security resources at Control Engineering's Website, including a podcast with Ed Skoudis who was interviewed in the Christian Science Monitor story.

See the whole podcast catalog .

Read the Control Engineering industrial control system cyber security blog .

Read Applying Security Defense-in-Depth .

 

-Peter Welander, process industries editor, PWelander@cfemedia.com
Control Engineering Process & Advanced Control Monthly eNewsletter
Register here to select your choice of free eNewsletters .





No comments
The Engineers' Choice Awards highlight some of the best new control, instrumentation and automation products as chosen by...
The System Integrator Giants program lists the top 100 system integrators among companies listed in CFE Media's Global System Integrator Database.
The Engineering Leaders Under 40 program identifies and gives recognition to young engineers who...
This eGuide illustrates solutions, applications and benefits of machine vision systems.
Learn how to increase device reliability in harsh environments and decrease unplanned system downtime.
This eGuide contains a series of articles and videos that considers theoretical and practical; immediate needs and a look into the future.
Salary and career survey: Benchmarks and advice; Designing controls; Remote data collection, historians; Control valve advances; Hannover Messe; Control Engineering International
System integration: Best practices and technologies to help; Virtualization virtues; Cyber security advice; Motor system efficiency, savings; Product exclusives; Road to Hannover
Collaborative robotics: How to improve safety, return on investment; Industrial Internet of Things, Industrie 4.0: World views; High-performance HMI, Information Integration: OPC and OMG
This article collection contains several articles on the Industrial Internet of Things (IIoT) and how it is transforming manufacturing.
PLCs, robots, and the quest for a single controller; how OEE is key to automation solutions.

Find and connect with the most suitable service provider for your unique application. Start searching the Global System Integrator Database Now!

Getting to the bottom of subsea repairs: Older pipelines need more attention, and operators need a repair strategy; OTC preview; Offshore production difficult - and crucial
Digital oilfields: Integrated HMI/SCADA systems enable smarter data acquisition; Real-world impact of simulation; Electric actuator technology prospers in production fields
Special report: U.S. natural gas; LNG transport technologies evolve to meet market demand; Understanding new methane regulations; Predictive maintenance for gas pipeline compressors
click me