Ensuring network security for energy infrastructure

At the conference "Energy security for green transformation in the digital era" on October 23 in Hanoi, Lieutenant Colonel Trieu Manh Tung, Deputy Director of Cyber ​​Security Department (A05) - Ministry of Public Security, said that energy infrastructure is one of the especially important infrastructures, which can become a target in conflicts. If the energy system is paralyzed, many other systems can also be affected, from communications to control, monitoring and operations.

According to Mr. Tung, the risk of cyber attacks on critical infrastructure is no longer a theoretical issue. He also noted that information technology (IT) systems, industrial operating technology (OT) and operational data need to be protected according to their own characteristics, from investment, design to operation organization.

In his presentation on protecting the information technology system of the energy industry, Mr. Nguyen Trung Nghia, cybersecurity consultant at Vietnam National Cyber ​​Security Technology Joint Stock Company NCS, pointed out many challenges in protecting the system. Factories must maintain continuous operation, so it is difficult to stop for patching or inspection; Equipment has many generations, from many suppliers; As systems become increasingly complex, there are also maintenance contractor access channels.

Energy infrastructure is also often dispersed across multiple facilities, with network areas requiring isolation. Deploying network security solutions must therefore take into account actual operating conditions, avoiding inspection or troubleshooting activities that affect the industrial system.

According to NCS's proposal, businesses need to build a list of technology assets, identify connections and changes in the system, and partition the network, control remote access rights and monitor for unusual signs. Server and workstation protection solutions need to be combined with operational behavior monitoring to detect malicious code and unauthorized changes in industrial controller configuration.

In addition to cyber risks, energy security is also affected by climate change, natural disasters, market fluctuations and dependence on fuel and equipment supply chains. Dr. Nguyen Huy Hoach, Vietnam Energy Association, said that the requirement for the energy system is not only to ensure sufficient supply, but also to maintain stable operation, control costs and be able to recover when problems occur.

Experts also mentioned the possibility of applying artificial intelligence to optimize energy use and support emissions management. However, operational data needs to ensure integrity, because erroneous data can lead to errors in forecasting, dispatching, and decisions supported by AI systems.

Mr. Vu Duy Hien, representative of the National Cyber ​​Security Association, emphasized the close relationship between energy, digital technology and cyber security. According to him, as energy systems increasingly depend on data and control technology, cybersecurity protection must become an integral part of ensuring national energy security.

Mr. Hien proposed three key directions: shifting from passive protection to proactive risk management and improving resilience; Strengthen coordination between management agencies, energy businesses and specialized organizations; Associate the application of new technology with security, safety and sustainable development requirements.

Luu Quy