Network

CYBER SECURIT Y T he deployment of Stuxnet is just one example of a cyber-attack. A malicious computer worm allegedly developed by the US and Israel, Stuxnet caused substantial damage to Iran's nuclear programme in 2010, leading to the decommissioning of up to 1,000 centrifuges, around a fi-h of the centrifuges at Iran's Natanz nuclear plant. Stuxnet hasn't been the only major cyber- attack to hit organisations in the Middle East. In 2012, natural gas and petroleum company Saudi Aramco was struck by the Shamoon computer virus, which compromised thou - sands of computers at the firm. The virus wiped out spreadsheets, emails and files on corporate PCs, replacing them with the image of a burning US flag. RasGas, a liquified natu- ral gas producer in Qatar, was also attacked by Shamoon that summer. The energy sector in Europe has also been targeted. In December 2015, what is thought to be the first successful disruption to electricity supply due to a cyber-attack took place in the Ukraine, where hackers were able to success - fully compromise information systems at three energy distribution companies, temporarily disrupting energy supplies to consumers. A year-and-a-half later, the power of hackers to disrupt public sector systems was demonstrated in May 2017 by the WannaCry cyber-attack, which cost the NHS £92 million. Ransomware that targeted computers running Microso- Windows by encrypting data and demanding payments in the Bitcoin currency, WannaCry crippled computers in hospitals and GP surgeries across Britain. The vulnera - bility of western organisations to ransomware attacks was further illustrated by the subse- quent Petya attack, which afflicted a number of large companies in various sectors of the economy in Europe and the US, including WPP, legal company DLA Piper and shipping firm Maersk in June 2017. The vulnerability of networks In this context, Britain's energy sector remains a target for hackers, whether they are state-sponsored or operating as part of organised criminal groups. "Heightened geopolitical tensions have resulted in more countries looking to demonstrate their of - fensive cyber capabilities," explains Ollie Whitehouse, global chief technical officer at cyber security and risk mitigation expert NCC Group. "The UK's energy infrastructure is a prime target for these groups because of its ubiquity in every area of our lives." Dis- rupting these systems is "a way of exerting power far beyond any military capability," NETWORK / 24 / FEBRUARY 2019 The increasing threat of cyber-attacks There is no doubt that cyber- attacks on energy companies and infrastructure have increased in scope and severity over the past decade. Ben Hargreaves provides an overview of this important subject area and looks at what can be done to keep energy networks secure.

• Cover