If you do not take care of the information security system at an oil and gas enterprise in time, both networks, both corporate and technological, are at risk. Industrial Internet of Things solutions and automated process control systems APCS , which include supervisory control and data acquisition SCADA systems, industrial controllers, automatic blocking systems, relay protection terminals, etc., are connected to the technological segment of the network.
In fact, the industrial network is not always isolated from the corporate network or is not completely isolated it is remotely accessed from individual computers. An attacker can get to it by Whatsapp Mobile Number List using vulnerabilities found in the process of scanning an information system, or by hacking into a corporate network and connecting to it. Correct network segmentation and the absence of control channels from the corporate segment will already significantly complicate the attack.
Viruses will remain walking in the corporate network. Perhaps this way it will be possible to prevent a targeted attack on critical information infrastructure CII by catching the virus in the sandbox . However, isolating network segments is not enough, not to mention that it is becoming increasingly difficult to do so. As soon as the device gains access to the Internet, all collected data is automatically transferred to the attackers' servers from the hidden section of the storage medium.