SCADA

1
SCADA
John F. Lipka USA Security Lead Encana Oil Gas
(USA) Inc
2
Acronym - SCADA

• What does SCADA stand for?
• Supervisory Control And Data Acquisition
• Technologies used to control and collect data
  from remote locations.

3
SCADA in the Natural Gas Industry

• SCADA is used to bring oil and gas production
  volumes from the field to the office for
  accounting, control, marketing, measurement and
  monitoring purposes.

4
Before SCADA in the Natural Gas Industry

• Grease books and notes
• Manual entry - Excel
• Phone in or radio in information
• No monitoring or control ability
• More window time
• No callouts for any kind of alarms

5
SCADA - Overview
6
Field Site
7
SCADA - Field Hardware
8
SCADA Hardware
9
Remote Location Equipment

• Measure and control the process.

10
Communications Equipment
Satellite
Weather Balloon and Radio
Cell Modem
RADIO
11
Communications

• Communications is the backbone for SCADA.

12
SCADA HMIs

• Monitor and interact with the data
• CygNet Human Machine Interface

13
SCADA - HMI
14
SCADA HMIs
15
Cameras
16
Summary

• Used for monitoring and/or control
• Regional ONG Control Centers vs. Remote Access
• Provides faster response and data for timely
  decision making
• Better decisions with more information
• Communication is the heart of a SCADA system
  900Mhz Radios Spread Spectrum, freq hops w/in a
  band based on a algorithm
• Focus is on I M

17

• Security Concerns
• Consolidation of above ground field assets
• upstream and midstream
• IM Technicians keys to the codes
• Lease Operators aka Pumpers route
• Access to Company Intranet via public portal
• firewall (firewall attack SOP)
• Local Safeguards in Place (limit production will
  shut in the well, pipeline)

18

• Security Concerns
• By design- react to high pressure, loss of
  production situations implemented locally
• There are limitations i.e., false positive
  events
• Spread spectrum inherently has more security
  built in to it (harder to steal)
• ONG movement into CNG, LNG, GTL stations,
  terminals, processing

19

• Cyber Crime, Issues, Threats
• Phishing
• get an employee to do some thing or a piece of
  propriety information (personal or company)
• FCI- China
• technologies, AP, source code, new plays
• Tool to advance criminal activity
• counterfeit royalty checks, MF, WF violations
• FBI InfraGard

20

• Questions?