Cyberattack Forces a Shutdown of a Top U.S. Pipeline Operator

[cayugafalls]

16. That is not how it works. I worked on control systems and complex systems,

like pipeline distribution networks have a very complex set of computer controls, checks and valves that need monitoring and controlling and all of it is done via software running on programmable controllers. There is no way to manage the amount of valves and controls manually, it has to be done with computers and they have to be networked.

These controllers are critical in making sure that valves open when they are supposed to and therefore any hack related to infiltrating the systems in place would necessitate bringing down the entire system until security could be guaranteed so that a valve that controls say an emergency pressure release valve does not open when an undesired presence of fuel could mean an environmental disaster.

We do not know how the hackers gamed the system. Most likely they exploited a vulnerability in the firewall and an email got through that should not have.

That is why training your employees to not click on links in emails is critical and there needs to be quarterly security audits in all critical infrastructure facilities. Until that happens, systems are vulnerable.