10 control systems infected by viruses / Manufacturing sector vulnerable, ministry says

The Yomiuri Shimbun

At least 10 control systems managing production lines at vehicle and chemical plants had been infected with computer viruses by last March, forcing some of them to temporarily suspend operations, according to an investigation by the economy ministry.

This is the first time such serious damage has been reported in control systems, which are generally considered less vulnerable to cyber-attacks because they are isolated from external networks.

Cyber-attacks targeting control systems are increasing overseas.

The Economy, Trade and Industry Ministry plans to establish two new organizations to beef up and scrutinize the security of such systems by spring 2013.

In 2009 and 2011, the ministry surveyed about 330 companies, including manufacturers, about cyber-attacks.

The investigation revealed that 50 computers controlling manufacturing lines at a vehicle factory were infected with a virus in December 2008.

At another car factory, about 100 computers had been infected, and a virus paralyzed the control systems at a petrochemical plant.

These factories were forced to temporarily suspend operations, some for several days.

In January 2009, the central processing unit for manufacturing lines at a semiconductor factory in the Chubu region started malfunctioning.

According to sources, the factory had to shut down more than 1,000 CPUs to check for infection after a virus was detected. Production at the plant was seriously affected.

It is believed viruses infected the networks by gaining access through USB memory sticks brought in by workers installing or maintaining computer terminals.

From there, the viruses spread throughout the factory's systems.

These cases likely were not intentional infections.

But in other countries, cyber-attacks targeting control systems are increasing.

In 2010, some computers at Iran's Bushehr nuclear power plant were infected with a virus.

According to the economy ministry, the control system at a wastewater treatment plant in Australia malfunctioned for about three months in 2000 due to unauthorized computer access by a former employee.

Besides factories, control systems manage important infrastructure such as water and gas networks.

If these systems are attacked, basic utility services and economic activities could be affected.

The ministry plans to fortify the nation's defenses against possible attacks on these vital systems.

The ministry intends to establish a "control system security center," a private sector-led body to review and certify the security of control systems, in Miyagi Prefecture.

The new entity will check companies' control systems, and certify they are clean if no virus is detected.

It also plans to to establish a "control system incident center" in autumn, which will provide an emergency response to a virus infection and investigate its cause.