Addressing and Managing Cyber Security Risks and Exposures in Process Control

CATEGORY: CYBER SECURITY
SPE Intelligent Energy Conference & Exhibition, 1-3 April 2014, Utrecht, The Netherlands DOIhttp://dx.doi.org/10.2118/167912-MSISBN978-1-61399-306-4
Addressing and Managing Cyber Security Risks and Exposures in Process Control
Darrell R. Pitzer and Ana M. Girdner
ExxonMobil Production Company
Abstract
Management of cyber security risks and exposures in the industrial process control environment is important for the operational safety, security, and reliability of the infrastructure in the oil & gas industry. The number and complexity of cyber security intrusions and malware infections has increased exponentially. In 2010, the entire threat landscape changed with the appearance of Stuxnet, which demonstrated that targeted attacks to control systems were not only possible, but extremely likely and difficult to defend. This has prompted the industrial and commercial sectors to develop and continuously improve cyber security policies, programs, and procedures to address and manage the risks and exposures associated with these threats. Similarly, government sectors have launched programs, enacted cyber security laws, and developed policies, procedures, and standards to address the steadily increasing threats and vulnerabilities in the industrial control systems area.
The connected, digital oilfield must include comprehensive and robust controls to protect against these risks and exposures. Authors offer insight into cyber security programs and countermeasures, and explain an approach to cyber security in the industrial process control environment.
Full Text Source (Subscription or Fee): https://www.onepetro.org/conference-paper/SPE-167912-MS