scada john f. lipka usa security lead encana oil & gas (usa) inc

SCADA

John F. LipkaUSA Security LeadEncana Oil & Gas (USA) Inc

Acronym - SCADA• What does SCADA stand for?

Supervisory Control And Data AcquisitionTechnologies used to control and collect data from

remote locations.

SCADA in the Natural Gas Industry

• SCADA is used to bring oil and gas production volumes from the field to the office for accounting, control, marketing, measurement and monitoring purposes.

Before SCADA in the Natural Gas Industry

• Grease books and notes

• Manual entry - Excel

• Phone in or radio in information

• No monitoring or control ability

• More window time

• No callouts for any kind of alarms

SCADA - Overview

Control Room

SCADA Host

Radio

Flow Computer (RTU)

Radio

Central LocationEquipment

CommunicationsEquipment

Remote Location Equipment

Corporate Accounting, Security, Operations

Field Site

SCADA - Field Hardware

SCADA Hardware

Remote Location Equipment

• Measure and control the process.

Communications Equipment

RADIO

Satellite

Cell Modem

Weather Balloon and

Radio

Communications

• Communications is the backbone for SCADA.

SCADA – HMI’s

• Monitor and interact with the data• CygNet – Human Machine Interface

SCADA - HMI

SCADA – HMI’s

Camera’s

Summary • Used for monitoring and/or control

Regional ONG Control Centers vs. Remote Access

• Provides faster response and data for timely decision making

• Better decisions with more information• Communication is the heart of a SCADA system

900Mhz Radios Spread Spectrum, freq hops w/in a band based on a algorithm

• Focus is on I &M

• Security Concerns

Consolidation of above ground field assetsupstream and midstream

I&M Technicians “keys to the codes”Lease Operators aka Pumpers routeAccess to Company Intranet via public portal

firewall (firewall attack SOP)Local Safeguards in Place (limit production will

shut in the well, pipeline)

• Security Concerns

By design- react to high pressure, loss of production situations implemented locally

There are limitations i.e., “false positive events”

Spread spectrum inherently has more security built in to it (harder to steal)

ONG movement into CNG, LNG, GTL stations, terminals, processing

• Cyber Crime, Issues, Threats

Phishing

get an employee to do some thing or a piece of propriety information (personal or company)

FCI- China

technologies, AP, source code, new plays

Tool to advance criminal activity

counterfeit royalty checks, MF, WF violations

FBI InfraGard

• Questions?