Panel Builder System Integrator

Suncor Plant

December 11, 2017

Data theft from high-profile hacks against companies like Uber and Equifax can cost consumers thousands of dollars but resource companies worry about millions in damage, along with potential injuries and death, if their technology is compromised.

The thought of a multi-tonne piece of equipment running amok or shutting down at a critical time in the resource gathering process is a nightmare scenario for chief information and security officers in the oilpatch and other resource-rich regions of Canada.

Cybercriminals are betting the company whose gear no longer obeys instructions would be willing to pay dearly to avoid such a situation.

 

"It's no longer a bunch a pimple-faced kids in mommy and daddy's basement — it's organized crime," said Daniel Tobok, CEO and co-owner of Toronto-based Cytelligence, who says his company investigates 40 data breach attacks on private Canadian companies every month, often tracing the attacks to foreign hackers.

"It's theft of intellectual property, it's espionage, but it all comes down to money as a motivation."

 

He estimates the attacks cost Canada $3 billion to $5 billion per year in proceeds to criminals, adding one Calgary energy company was forced to pay $200,000 in ransom three years ago to regain control of its corrupted digital production systems.

The rise of the so-called "Internet of Things" — in which machines communicate autonomously with each other — means companies are increasingly employing automation and remote control to drive bulldozers, diggers and heavy trucks, or control drilling and processing equipment. Such automation delivers labour savings but also presents more targets for hackers, making the overall system more vulnerable to cyberattacks.

"Somebody could actually die," said Tobok.

In a recent report, accounting firm EY said the cybersecurity risk to mining companies had jumped to third in 2017-18, from ninth the year before, on a top-10 worst risk list because the "attack surface" is getting larger as connected IT and operational devices in a typical mine or ore transport system grow into the thousands.

Executives agree the threat is real but insist they can keep hackers at bay with multiple automatic and manual shut-down systems, firewalls, strictly limited internet connections and ongoing employee training.

Kevin Neveu, CEO of Precision Drilling Corp., the largest Canadian driller which also operates in the United States, said the company has never had a successful "intrusion" although it detects unsuccessful attempts "almost daily."

"We're certainly concerned that someone could hack into a drilling rig," he said.

"We're running 20 rigs that have automation systems on them that actually control the rigs through software and tell it to go up and down, tell it to go to higher pressure or lower pressure. That software potentially could be hacked."

He said the company has "intrusion-sensing systems" that are designed to trigger a fail-safe shutdown. The drilling crew can also shut off the rig manually and it's possible to override the automated system and continue working without it, he said.

Steve Laut, CEO of Canadian Natural Resources Ltd., said he doesn't want to "advertise" what the company is doing in cybersecurity but noted it has a robust plan with "four or five levels of security," adding its major heavy oil production plants aren't connected to the internet.

"We're like any other corporation out there, we get attacked all the time," he said. "Most of it bounces off our firewalls."

 

Potash Corporation of Saskatchewan Inc. uses continuous boring machines that can mine up to 900 tonnes of ore per hour.

It wouldn't comment for this article but warns in its annual report that cyberattacks could result in "personal injury" to employees, contractors or the public as well as computer viruses, property damage, disruptions to operations and loss of data or confidentiality.

Michael Murphy, country manager for Citrix Canada, which provides remote access for customers to applications and data, said data security is more difficult to ensure these days because the number of access points is multiplying.

Employees, third-party partners and contractors want to use their own devices to access company systems and data, each presenting a possible entry point for a cyberattack.

"I'm sure what keeps the chief information and security officers up at night is, 'How do I make sure that the software-defined perimeter continues to be very secure but also accessible?"' he said.

"You can make something very secure but it doesn't necessarily make it very productive. It has to be easy to use and very secure at the same time. The complexity of what a company has to manage today is mind-boggling."

By: Dan Healey

Source:  https://www.theglobeandmail.com/report-on-business/industry-news/energy-and-resources/cyberattacks-pose-serious-threat-to-canadas-automated-resource-firms/article37087705/

Peers & Profiles

  • Prev
Germain Lamonde, President and founder of EXFO, is this year’s EY Entrepreneur Of The ...
  In a recent sit-down Electrical Industry Canada was able to learn a little ...
  Few industrial innovations have weathered the years as well as heavy duty connectors. ...
As our population grows and consumers continue to rely on technology for both essentials and ...
  Engineers play a key role in the advancement of our infrastructure and the development ...
  Kymera Systems is located in Leduc, Alberta and provides scalable IIoT solutions and the ...
  JAE Automation is proof positive that a cutting-edge, high-tech company can work with ...
  Nivek Automatisation is a forward-thinking company focused on providing advanced ...
Recently Panel Builder & Systems Integrator was invited to Rittal Canada’s Head ...
  New Electric first opened its doors in 1970, in Burlington, Ontario. The electrical ...

 Littelfuse to Host Webinar on Arc-Flash Protection

 

PBSI Littelfuse logo seminar 400Littelfuse, Inc., a global manufacturer of technologies in circuit protection and power control, invites plant engineers, facility managers, and maintenance professionals to join our special arc-flash webinar on how to cost-effectively protect against catastrophic arc-flash events. The webinar will take place on Tuesday, February 26, 2019 from 1:00 PM to 2:00 PM Central Standard Time.

Attendees will learn:
• Methods available to help identify the risk of arc flash within your system
• How to choose the right arc-flash mitigation solutions to extend the life of your equipment
• Ways to increase working safely beyond the essential Personal Protective Equipment (PPE) suit
• A real-life example of how a few thousand-dollar investment helped a customer avoid an $800,000 catastrophic arc-flash event

The webinar is free, and attendees will have an opportunity to ask questions in a live Q&A session after the presentation. To sign up, visit the arc-flash webinar registration page.

Read More

 


 Like many cyclical industries, mining is reviving, driven by steady global economic growth and an increasing demand for materials to support new technologies like electric vehicles, renewable energy and mobile devices. Despite the optimism, the industry still faces major operational challenges including process efficiencies, cost control, worker health and safety, and skills gaps. To address these challenges, Rockwell Automation introduced The Connected Mine, leveraging the latest enabling and digital technologies.

Utilizing advanced analytics, The Connected Mine helps mining companies collect and aggregate data to gain end-to-end visibility into their operations and make informed business decisions to improve mining operations.

Read More

Latest Articles

  • Prev
There is still a major discrepancy between digitization on the one hand and data security on the ...
If you produce industrial control panels (ICPs) for installation in the U.S. and/or Canada, you ...
Synchro, Rittal and Proax churn out a unique, complete cabling project in record ...
There are many requirements to meet when specifying transformers, such as basic performance ...
Wi-Fi network planning and deployment can be a daunting task for most business operators. Network ...
  Removable USB media devices such as flash drives are commonplace and convenient when it ...
 For today’s manufacturers, a flexible plant floor is a business imperative. As product ...

 

Cybertech developed the Process Control and Safety Instrumented System Auditor to identify high-risk misalignments between plant process control and safety systems – and provide sufficient guidance to each plant system owner to resolve material issues.

Computerized data analytics are effective in mining the big data found in a typical process facility. The Cybertech System Auditor accepts native data from plant systems, cleans up and standardizes the data with purpose-built C# data mining applications and SQL data manipulation. Tiered SQL views minimize data duplication and facilitate automatic updates when base native data changes (e.g. after a system owner advises that they have resolved identified issues).

Read More

Coming Soon: The new EPLAN Pro Panel, Version 2.8, Virtual control cabinet engineering – fully matured

The new EPLAN Pro Panel, Version 2.8 is making its first big appearance at the SPS IPC Drives. The software for virtual 3D control cabinet engineering is characterised by its expanded flexibility, surprising users with a brand new 4K-capable user interface. It’s also causing decision-makers to sit up and take notice: during live, joint presentations in Nuremberg, EPLAN and Rittal will be introducing a whole series of innovations in the context of control cabinet engineering.

These include complementary software solutions for engineering and preplanning operations, innovative system technology for housings, power distribution and climate-control systems, automation technologies, and digital assistance systems for integrated automation of manufacturing processes. EPLAN and Rittal are thereby positioning themselves as solutions providers offering integrated solutions for optimising processes in control cabinet engineering: combined machine/hardware and software solutions, product-accompanying data and comprehensive on-site process integration services for customers.

Read More: < ...

Product News

  • Prev
Orion Fans has expanded its family of Electronically Commutated (EC) fans to include spark proof ...
Orion Fans has designed a series of specialty air filters for equipment where permanent, cleanable ...
Orion Fans has expanded its AC motorized impeller product offering with 14 new IP55-rated models ...
The G2 Flat is a miniature photoelectric sensor for use in particularly compact plants and robotics ...
  SICK is now offering a line of inductive sensors that are not the least bit bothered by ...
FLIR Systems, Inc. has launched the FLIR T840, a new thermal camera in the high-performance ...
RAFI's E-BOX, a particularly slim housing for one or two RAFIX 22 FS+ control devices, is now ...
RAFI USA has expanded its low-profile, modular control component family that sets the industry ...
  RAFI USA has developed a compact pushbutton and E-Stop switch family with a rugged ...
Emergency Stop switches (E-Stop) with new Active/Inactive lighted options from RAFI.   ...
Kerrwil Publications

538 Elizabeth Street, Midland,Ontario, Canada L4R2A3 +1 705 527 7666
©2019 All rights reserved

Use of this Site constitutes acceptance of our Privacy Policy (effective 1.1.2016)
The material on this site may not be reproduced, distributed, transmitted, cached or otherwise used, except with the prior written permission of Kerrwil