Energy Infrastructure Security: Pipelines

As a target for terrorists, major pipelines offer the possibility of inflicting death and destruction as well as creating related economic repercussions.

The US, British, and Canadian governments all have active programs and policies for protecting these vital transportation infrastructure resources. In the US, the assignment for security of pipelines has been assigned to the Transportation Safety Administration under the Department of Homeland Security. The TSA has set forth a series of guidelines and recommendations for securing pipelines, including the SCADA systems used to monitor and control them.

Under these guidelines, a vulnerability assessment is recommended in order to identify potential points of weakness that could be exploited, followed by the establishment of a security management program that addresses these weaknesses and maintains a periodic review of the overall security status. Part of such a program will be the implementation of technical, physical, and administrative/procedural “countermeasures” that address the identified vulnerabilities.

Another key factor in such a program is employee education and training. This report amplifies these basic points and is intended to aid pipeline owners and operators in making a SCADA vulnerability assessment and identifying and implementing appropriate countermeasures.

Pipeline Industry and Infrastructure Overview

Threats, Risk, Vulnerabilities and Consequences

Cyber Threats and Attack Methods

Approaches for System reconaissance

Countermeasures

DOE’S “21 STEPS TO SECURE A SCADA SYSTEM

2009
Author: William (Tim) Shaw