Security system and method for pressure control equipment
A drilling system includes a surface system comprising a control panel. The drilling system further includes a pressure control equipment configured to be operatively coupled to the control panel, wherein the control panel comprises at least one intrusion prevention system (IPS) enabled device configured to provide for one or more IPS functions.
1. A method of security enhancing a drilling system, the method comprising:
deriving one or more threat agents;
deriving a vulnerability for a control panel system included in a drilling system based on the one or more threat agents, wherein the control panel system is configured to be communicatively coupled to a pressure control equipment;
deriving an adverse impact of the vulnerability;
deriving an organizational risk based on the adverse impact; and
providing at least one intrusion prevention system (IPS) enabled device in the control panel system, wherein the at least one IPS enabled device is configured to provide for one or more IPS functions based on the adverse impact of the vulnerability, based on the organizational risk, or a combination thereof,
wherein providing the at least one IPS enabled device comprises upgrading an existing control panel device of the at least one IPS enabled device in situ by upgrading an operating system of the control panel device, and by adding an application whitelist that lists applications that are allowed to execute in the control panel device,
wherein the at least one IPS enabled device is configured to execute a secure operating system configured to provide secure compartmentalization to isolate certain processes from each other, provide encrypted data storage and retrieval, provide encrypted data transmission, provide memory leak prevention, provide internet protocol (IP) address leak prevention, provide domain name server (DNS) leak prevention, or a combination thereof, and
wherein the at least one IPS enabled device further comprises a computing system, a firewall, a network switch, a programmable logic controller (PLC), an input/output system, or a combination thereof.
2. The method of claim 1 , wherein the one or more IPS functions comprise applying a rule to specify which application is allowed to execute on the at least one IPS enabled device.
3. The method of claim 1 , wherein the control panel system comprises at least one selected from the group consisting of: a tool pusher control panel (TCP); a driller control panel (DCP); a supervisor control panel (SCP); a hydraulic pressure unit (HPU)/diverter control panel; and a communications panel.
4. The method of claim 1 , wherein the pressure control equipment comprises a blowout preventer.
5. The method of claim 1 , further comprising: testing the control panel system after the step of providing the at least one IPS enabled device in the control panel system.
6. The method of claim 5 , further comprising: wherein the step of testing comprises at least one selected from the group consisting of: penetration testing; social engineering testing; and cyber security testing.