Security and Independence of Process Safety and Control Systems in the Petroleum Industry
Open accessAbstract
The developments of reduced manning on offshore facilities and increased information transfer from offshore to land continue and may also be a prerequisite for the future survival of the oil and gas industry. A general requirement from the operators has emerged in that all relevant information from offshore-located systems should be made available so that it can be analysed on land. This represents a challenge to safety in avoiding negative impacts and potential accidents for these facilities. The layered Purdue model, which helps protect OT systems from unwanted influences through network segregation, is undermined by the many new connections arising between the OT systems and the surroundings. Each individual connection is not necessarily a problem; however, in aggregate, they add to the overall complexity and attack surface thereby exposing the OT systems to increased cyber risk. Since the OT systems are critical to controlling physical processes, the added connections represent a challenge not only to security but also to safety.
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Integrity signals
Registry
Cites
Statistics
Claims the paper makes
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
Complete separation in a modern IIoT environment is not possible.
“However, complete separation in a modern IIoT environment is not possible [76].”
From Mapping of Industrial IoT to IEC 62443 Standards (2025) · cites this paper as [76]
Self-check
Percentages, sums and reported differences re-computed from the paper’s own numbers.
The self-check needs the paper’s full text.
Cites
Rose, S., Borchert, O., Mitchell, S., & Connelly, S. (2020) · doi:10.6028/nist.sp.800-207 · Cited by 1,174 · see citing works
The Purdue enterprise reference architecture
Williams, T. J. (1994) · Computers in Industry · doi:10.1016/0166-3615(94)90017-5 · Cited by 632 · see citing works
Rausand, M. (2011) · Wiley eBooks · doi:10.1002/9781118281116 · Cited by 489 · see citing works
Recommendation for block cipher modes of operation :
Dworkin, M. J. (2007) · doi:10.6028/nist.sp.800-38d · Cited by 463 · cited 1× · see citing works
“In recent years, however, the IT industry has had to accept that such guarantees can only be given if one of the more closely defined protocols for authenticated encryption is used, such as AES-GCM [29] or AES-CCM [30].”
BackgroundThe impact of quantum computing on present cryptography
Mavroeidis, V., Vishi, K., D., M., & Jøsang, A. (2018) · International Journal of Advanced Computer Science and Applications · doi:10.14569/ijacsa.2018.090354 · Cited by 361 · see citing works
Whiting, D., Housley, R., & Ferguson, N. (2003) · doi:10.17487/rfc3610 · Cited by 329 · see citing works
Oil and gas 4.0 era: a systematic review and outlook
Lu, H., Guo, L., Azimi, M., & Huang, K. (2019) · Computers in Industry · doi:10.1016/j.compind.2019.06.007 · Cited by 312 · see citing works
Wagner, C., Grothoff, J., Epple, U., Drath, R., Malakuti, S., Grüner, S., Hoffmeister, M., & Zimermann, P. (2017) · IEEE International Conference on Emerging Technologies and Factory Automation · doi:10.1109/etfa.2017.8247583 · Cited by 178 · see citing works
A pump for rapid, reliable, secure communication
Kang, M. H., & Moskowitz, I. S. (1993) · Proceedings of the ACM Conference on Computer and Communications Security · doi:10.1145/168588.168604 · Cited by 142 · see citing works
A framework for incident response management in the petroleum industry
Jaatun, M. G., Albrechtsen, E., Line, M. B., Tøndel, I. A., & Longva, O. H. (2009) · International Journal of Critical Infrastructure Protection · doi:10.1016/j.ijcip.2009.02.004 · Cited by 57 · see citing works
Self-citationThe Design of a Secure Internet Gateway.
Cheswick, B. (1990) · Cited by 44 · see citing works
Zero-Trust Principles for Legacy Components: 12 Rules for Legacy Devices: An Antidote to Chaos
Køien, G. M. (2021) · Wireless Personal Communications · doi:10.1007/s11277-021-09055-1 · Cited by 24 · see citing works
Secure data export and auditing using data diodes
Jones, D. W., & Bowersox, T. C. (2006) · Conference on Electronic voting technology/workshop on trustworthy elections · Cited by 17 · see citing works
Secure remote access to autonomous safety systems: A good practice approach
Jaatun, M. G., Line, M. B., & Grøtan, T. O. (2009) · International Journal of Autonomous and Adaptive Communications Systems · doi:10.1504/ijaacs.2009.026788 · Cited by 10 · see citing works
Self-citationMore issues with layer of protection analysis—From the originators
Bridges, W., & Dowell, A. M. (2021) · Process Safety Progress · doi:10.1002/prs.12295 · Cited by 3 · see citing works
Flagged first, then by citations
Cited by
Sorted by citations
Mapping of Industrial IoT to IEC 62443 Standards
Cindrić, I., Jurčević, M., & Hadjina, T. (2025) · Sensors · doi:10.3390/s25030728 · Cited by 29 · see citing works
“However, complete separation in a modern IIoT environment is not possible [76].”
Cross-Domain Solutions (CDS): A Comprehensive Survey
Sundaravarathan, V., Alqalaf, H., Siddiqui, A., Kim, K., Lee, S., Martin Reisslein, B., Thyagaturu, A. S., Ross, N., Howard, J., & Tayal, S. (2024) · IEEE Access · doi:10.1109/access.2024.3483659 · Cited by 12 · see citing works
Developing a large language model for oil- and gas-related rock mechanics: Progress and challenges
Lin, B., Jin, Y., Cao, Q., Meng, H., Pang, H., & Wei, S. (2025) · Natural Gas Industry B · doi:10.1016/j.ngib.2025.03.007 · Cited by 11 · see citing works
A Survey on Cybersecurity Barrier Management in Process Control Environments
Øien, K., Hauge, S., Jaatun, M. G., Flå, L. H., & Bodsberg, L. (2022) · IEEE International Conference on Cloud Computing Technology and Science · doi:10.1109/cloudcom55334.2022.00026 · Cited by 5 · see citing works
Self-citationA Literature Review on Industry 4.0 and Its Technologies
Alaref, E. (2025) · IntechOpen eBooks · doi:10.5772/intechopen.1012837 · Cited by 2 · see citing works
Study on the adsorption of volatile gasoline components via HKUST‐1: Isobutylene as a model compound
Sun, K., Li, X., Yuan, Y., Wang, Y., Chen, Y., Zhu, Y., & Lu, J. (2023) · Asia-Pacific Journal of Chemical Engineering · doi:10.1002/apj.2979 · Cited by 2 · see citing works
Rethinking Independence in Safety Systems
Gnanasekaran, V., Grøtan, T. O., Bartnes, M., & Heegaard, P. E. (2024) · Springer proceedings in complexity · doi:10.1007/978-981-99-6974-6_9 · Cited by 1 · see citing works
Exploring the Need for a CERT for the Norwegian Construction Sector
Skytterholm, A. N., & Jaatun, M. G. (2023) · Springer proceedings in complexity · doi:10.1007/978-981-19-6414-5_4
Self-citationFlå, L. H., Thieme, C. A., Jaatun, M. G., & Hanssen, G. K. (2025) · Lecture notes in computer science · doi:10.1007/978-3-031-82349-7_27
Self-citationResearch on Safety Management and Control of Power Operation Sites Based on YOLOv Algorithm
Niu, Z., Wang, C., Li, L. M., & Wang, Z. (2025) · International Conference on Artificial Intelligence, Electrical and Electronic Engineering (AI3E) · doi:10.1109/ai3e69313.2025.00097
- Authors
- Onshus, T., Bodsberg, L., Hauge, S., Jaatun, M. G., Lundteigen, M. A., Myklebust, T., Ottermo, M. V., Petersen, S., & Wille, E.
- Affiliations
- Norwegian University of Science and Technology (NO)
- SINTEF Digital (NO)
- SINTEF (NO)
- Corresponding author
- Bodsberg, Lars
- Venue
- Journal of Cybersecurity and Privacy
- Publisher
- MDPI AG
- Published
- 2022-02-12
- Volume
- 2
- Issue
- 1
- Pages
- 20-41
- ISSN
- 2624-800X (ISSN-L)
- OpenAlex
- W4229074755
- Cited by
- 10
- References
- 15
- Citations by year
- 2025: 5 · 2024: 2 · 2023: 2 · 2022: 1
- FWCI
- 2.48
- Type
- journal article
- Language
- en
- Open access
- gold
- doi.org
- Licence
- Locations
- Journal of Cybersecurity and Privacy (publishedVersion, cc-by)
- DOAJ (DOAJ: Directory of Open Access Journals) (submittedVersion, cc-by-sa)
- NORA - Norwegian Open Research Archives (submittedVersion, cc-by)
- Topics
- Physical Sciences › Computer Science › Information Systems › Information and Cyber Security
- Physical Sciences › Engineering › Control and Systems Engineering › Smart Grid Security and Resilience
- Social Sciences › Decision Sciences › Statistics, Probability and Uncertainty › Risk and Safety Analysis
- Keywords
- process safety, control systems, oil and gas industry, offshore installations, industrial control systems, cybersecurity risks, Purdue model, network segregation, attack surface, information transmission, reduced manning
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
