U.S. Plans to Tighten Nuclear Power Plant Security

CDMA_Demo writes "The 103 nuclear reactors running in USA can voluntarily agree to follow a new 15 page update to a 1996 regulatory guide. The update notes possibility of "unauthorized, undesirable, and unsafe intrusions", and recommends measures aginst such activities. It also recommends such facilities to be cut off from external networks: "Remote access...[that may pose a potential security risk]...should not be implemented". The Slammer worm in 2001 managed to bring down the network at Ohio's David-Besse nuclear plant and concerns kept growing at the United Nations' International Atomic Energy Agency (IAEA)."

Away from External Networks

You know you got owned when someone cracked your power plant and the fuel rods spell "owned" in binary.

Volunteering...

The fact that it's voluntary makes me a bit nervous. The fact that the suppliment was this long in coming makes me even more nervous.

Re:Volunteering...

What exactly was wrong with the reactor design with Chernobyl?

• No containment (outer shell): once the reactor itself is burst, the radioactive material is out in the open, whereas in western designs, there is still an outer shell.
• Unsafe RBMK [globalsecurity.org] design, which has a huge positive void coefficient [wikipedia.org], i.e. it is (mis)designed in such a way that when the cooling water in the primary circuit starts boiling, the nuclear reaction accelerates... with predictable consequences. Most western designs have a slightly negative void coefficient (boiling water leads to slowdown of reaction), which makes the design intrinsically safer.

An anecdote.

My uncle is a security guard at a nuclear power plant. He is 59 years old and his occupation before nuclear powerlant security guard was truck driver. He is the most honest and trusworthy man you will ever meet, but he is 59 years old and had a triple bypass last year.

Delta Force operators come on an occasional announced, i.e. they know they're coming, basis to try to infiltrate. Supposedly they have succeeded every time.

You gotta be kidding me.

This, the week after a similar weakness* is shown on 24?

Remember to always question policy this way: WWJBD? What Would Jack Bauer Do?

That is all.

* Yes I know, it's TV.

Wouldn't you think...

That MAYBE, they would've done this, oh I don't know, say in October of 2001?

But silly me, what do I know about national security. Here I still think it's better to make less enemies than more.

Re:Wouldn't you think...

But silly me, what do I know about national security. Here I still think it's better to make less enemies than more.

Exactly. You know nothing of national security.

You see, what you are supposed to do is piss off most of the world, and when they start coming after you, ignore it. After you've been hit a couple times, declare your patriotism and implement strict new laws which ironically only limit the legal citizens in your country. Then to top it off, you enact a few meaningless laws which limit people's mobility but makes the dumbest 51% of the population feel more secure.

After that, declare the war "won" and go about your way. It's time to piss off more countries my friend...

Monday Night on Fox

And this, just in time to coincide with a current plot point / terrorist threat in 24 [fox.com]!

Don't get any big ideas, the government has got us covered.

I'd like to say

I'm for this.

Slammer?

Would someone like to explain to me why the systems (assumingly CRITICAL systems) at a NUCLEAR POWER PLANT are connected to the Internet (and therefor exposed for Slammer) at all? I would think that you would want such stuff to be isolated so that nothing like that could happen. I mean, if you MUST get some data out to the outside world, connect two computers by serial cable. One is connected to the 'net and can only recieve data, the other is connected to the internal network and can only send data. That way NOTHING can get into the system.

That would be common sense, wouldn't it? I'm not trained in network security, but why would controll systems need to be connected to the 'net?

PS: I'm ignoring the obvious "Why are you running Windows and not some ultra-hard OpenBSD or RTOS or something".

Re:Slammer?

Would someone like to explain to me why the systems (assumingly CRITICAL systems) at a NUCLEAR POWER PLANT are connected to the Internet

They aren't. Just like the critical systems for life support aren't. Just like the Ballistic Missile Early Warning System isn't. There are, however, obviously people at the DOD, hospitals, and even nuclear power plants who do the same kind of tedious work done in other places (spreadsheets, memos, powerpoint presentations) and THEIR computers are often connected to the internet. Honestly, I understand why the media likes to make it sound liike the power plant control system crashed because of a virus, but I don't understand why so many people swallow the intimations of the inflamatory headlines.

Windows + Nuclear Reactor = Scarey

So if the US is using Windows for any of its production servers in the Nucelar Power Plants I find that a little scarey. The Doco appears to be a draft also at this time.

Re:Windows + Nuclear Reactor = Scarey

...in the Nucelar Power Plants...

You can't say nuclear That really scares me Sometimes a brain can Come in quite handy.

Well, yeah.

Regardless of what OS you run mission-critical systems on (though I would in this instance strongly advise against Windows), there really is no reason whatsoever to open it up to an external network. None at all. Physical attack is bad enough, you don't need to leave another door open.

Slightly offtopic but ..

Not trying to troll but I didn't know US had *that* many nuclear reactors. Not to mention the world's largest pile of nuclear material(in form of weapons which are *theoretically* supposed to be never used).

So despite all this potential for generating more than enough energy for decades to come... why bother resorting to all kind of foreign policy antics to obtain the tradional heavily polluting energy sources ?

Re:Slightly offtopic but ..

In the US, after the three mile island incident in 1979, all unapproved reactor orders were cancelled, and no new orders were made. Some reactors that had already been approved prior to the incident didn't come online until the mid 90's. If these orders had not been cancelled and new orders were being put in, we would probably have 2-3 times this number of reactors (Nixon wanted 1000 by the year 2000, BUT before the accident new orders had already began to slow because with all the regulations and the oil crisis ending nuclear power became very expensive compared to oil). Unfortunately, nuclear was never cheap enough to challenge coal, which the US has plenty of.

My home state of Maine became the site of the first complete decomissioning of a large commercial reactor. The plant became operational in '72 ( and it had to survive a referendum to close it in '80, '82, and '87). In '95 it was shutdown many months for repairs and they discovered cracks in the steam generator tubes. The plant opened back up for less than a year I believe, they evaluated the cost to refit the plant and they decided they would have a hard time making back the investment in refitting the plant, so they shut it down permanently. They had originally intended to operate the plant at least until 2020 or 2030. Part of the huge cost was the fact that they need to store the waste onsite. Now all that is left of the plant is a semi-permanent high-level waste storage facility on a few acre footprint. Several hundred acres of the plants land are already being developed on. Several hundred more are a peninsula where the waste storage is located and the gated access make it less attractive for commercial development.

Bush wants to have a new reactor running in the US in the next 10 years. This will be the first approved since '79 and the first to come online since the mid 90's.

The conversation that started it all...

What follows is the transcript of a conversation that took place between a top US defense official and his wife after watching this week's episode of Fox's popular drama 24.

Wife: It's a good thing the real nuclear power plants don't allow remote access! Man what fanciful terror alert situation will those 24 writers think of next?

Official: Uh...

Re:The conversation that started it all...

Jack Bauer said there were 104...

OMFG, one of our reactors is MISSING!!!!

External Networks?

The Slammer worm in 2001 managed to bring down the network at Ohio's David-Besse nuclear plant and concerns kept growing at the United Nations' International Atomic Energy Agency (IAEA).

Umm, why the hell would a self-contained/self-sustaining system need to be connected to an external network in the first place?

Sorry, you work at a Nuclear Power Plant? Check your frelling AOL/Yahoo/Hotmail e-mail on your own damn computer, on your own damn time.

Oh well...

I once was able to tour the nuclear power plant [consumersenergy.com] in Charlevoix, MI, before they decommissioned. I was a little fella at the time.

Looks like that kind of educational oppertunity won't be happening as frequently, now. IIRC, that was the first tour they'd given since the plant was opened. That gives you a sense of perspective as to how common such oppertunities are.

Though other plants may perhaps hold more frequent tours, I doubt few outsiders will get to see the turbines and dynamos of an operational plant.

Re:Oh well...

I was given the rare opportunity to tour a reasearch reactor up in Sacramento, CA... it was used primarily to test aircraft parts by bombarding them with radioactive particles, to see how they would put up with the stresses of the upper atmosphere. Since it was a lower power reactor, we could do some crazy things like:

• Walk into the reactor chamber
• Look down into the core (it was glowing blue, by the way)
• Reach out and jangle the control rods
• Dip our feet in the blue-glowing water.

Pretty freaking cool, imo.

let me just say..

DUUURRR!!!

Sucks for Homer

I guess he won't be able to work from home in his muumuu.

15 pages in 4 years = ~4 pages per year

Seriously, it took them almost 4 years since 9/11 to come up with this?

Windows and Nuclear??

Why the heck are they running windows on nuclear power plants! "I just got the Blue Screen of Death." "Well, there went Texas!"

A little typo

That'd be Davis-Besse. [doe.gov]

Retaliation?

This have anything to do with today's release of radioactives in FL?

You can feel safe

You can feel safe, knowing that your government plans to make nuclear power plants less vulnerable against attacks from the Internet.

It's like they were planning to find weapons of mass destruction in Iraq, or they were trying to catch Osama Bin Laden in Afghanistan. Another example of ineffectivity and paralyzed work, three years after a serious security incident...

Weakest Link

Increased Security at Nuclear Power Plants is all well and good but I for one would like to see increased security in the following areas as well or instead

1) All US international shipping ports: plenty of room for trouble there (the Sum of All Fears, anyone?)
2) Water/Sewage treatment plants: one of the best ways to spread pathogens (or scare a whole lot or ppl)
3) Major Power line junctions to help prevent another power outage like the one we had thew hit most of the Northeast in 2003 (thanks, Ohio!)
4) the Coast Guard.

Nukes catch poeple's attention and imagination, but there's penty of room for trouble elsewhere that is just as potentially damadging.

my 2 cents.

This is not a suprise after latest net nuke attack

I was just watching a 24 hour news update, and apparently the internet boradcast of the execution of a US Secretary Heller was a coverup for an attack on a US nuclear base firewall.

This all in an attempt to use a remote control system developed for nuclear installations in case of a radiation leak or disaster.

It's no suprise... not like there wasn't a nuke detonated in the desert all those years ago. About time they wake up.

Infection

Nuclear powerplant meltdown after lexus drive-by bluetooth infection.

In other news

This Man [jeffpinard.com] has been fired...

The Only Concerns at IAEA

"concerns kept growing at the United Nations' International Atomic Energy Agency (IAEA)"

are that Bush still wants to get rid of ElBaradei in order to pull off another pile of bullshit about Iran's "WMDs".

Fortunately the rest of the world - including the "Bush poodle" Blair - aren't going along with it.

Let's hope it wasn't Java in 2001

(Sorry for lowercase. Slashdot rejects original capitalization as "lameness" and "yelling.")

16. note on java support. the product may
contain support for programs written in java.
java technology is not fault tolerant and is
not designed, manufactured, or intended for
use or resale as online control equipment in
hazardous environments requiring fail-safe
performance, such as in the operation of
nuclear facilities, aircraft navigation or
communication systems, air traffic control,
direct life support machines, or weapons
systems, in which the failure of java
technology could lead directly to death,
personal injury, or severe physical or
environmental damage.

Easier the first time around

As with many other things, why not just build the damn things more securely to begin with. There's videos of mockup plants absorbing a fighter jet impact. It seems to me though they've done less to protect the plants from physical attack from ground level. Though I'm sure, the government has hidden such secrets well from the public if there are other 'measures'. Frankly, I don't care to know.

I don't much care if a local gun store is built like Fort Nox. I do expect nuclear facilities, chemical, explosive, and military facilities to be though - considering the larger number of population at threat.

I think TFA is slashdotted now and I can't get it. However, why not build more rigourous National secuirty standards before the plants are builts (again, I suspect they are, but given the lives at stake .. more is probably better).

Also, why so long after 9/11? Is it just to cover the threat flavour of the month or does it take 4 years of oversight of the overseers to see what is missing?

Remote access

Without remote access, how will I install those cool Internet Explorer toolbars?

Windows + Bypassed Firewall = don't connect it ??

From TFA:

The T1 line, investigators later found, was one of multiple ingresses into Davis-Besse's business network that completely bypassed the plant's firewall, which was programmed to block the port Slammer used to spread.

To me, the lesson to be learned would be that you do not completely bypass a firewall for windows' boxes doing critical work.

The govt. suggests completely cutting them off from the outside world?? Why not instead suggest that they enforce the firewall, and perhaps consider other OSes?

Even with no external network connection, I'd think they'd still have an internal LAN, yes? One infected usb-key or floppy could then have the same outcome?

I worked at a Nuclear Power Plant

I even worked in IT. Here is how it works (at least at the one I worked at): all of the software that actually runs the plant is over 25 years old (and therefore does not run Windows). It runs some obscure custom shit, not that obscurity is efficient at security, but I guess it kinda helps. Yes, the computers used by the Secretaries, the Maintenance staff, the Managers, etc. all run Windows. The servers ran Red Had 7.3. This is all fluff. If this breaks or gets corrupted one of two things happens to the reactor: 1. Nothing or 2. Nothing. There are two ways the the system is electrically connected to the outside world, and both of them are through high voltage power lines, which cannot really be used to send data in to break things. If you want to break something, you need to physically be there to do it.

If you work in a nuclear power plant, you are going to continue to do everything you can think of to make it even harder for someone to sabotage the place. Physically, this includes multiple walls, gates, barricades, guns, and more to protect the containments. From a procedural standpoint, this means anyone who wants to get on-site gets ran through a database to check your history, after getting an employee escort. Anyone who wants to get into the protected area gets personally approved after a more in depth background check, and a heck of a lot of red tape.

If you are just Joe Public (no offense), you have a much higher chance of dying in a car accident so I wouldn't worry about this.

And No, I didn't RTFA, but I figured as long as my comment was more useful than the rest of them (read: references to 24), I figured this comment would be helpful.

physical security?

unauthorized, undesirable, and unsafe intrusions...

This is anecdotal, but minorly noteworthy - My mom used to work for the company that owned and operated Three Mile Island - the (physical) security was intense: the perimeter was ringed by towers manned by security offers with rifles and a 'no warning shot' policy - you approached the perimeter from an undesignated direction and you got shot, period.

I still have one of the security force's hats, says "TMI Rapid Response Team" and has a crosshairs in the middle.

Triv

Hey, you- what are you doing?!!

Is that a fuel rod in your pocket or are you just happy to see me?

24

Is this new security standard a result of the plot on the TV show "24" of terrorists involves the theft of a remote controlling device that grants the terrorists access to all domestic nuclear power plants?

David-Besse

I know this is Slashdot, so accuracy isn't exactly priority one... but the plant in Ohio affected by the Slammer worm is Davis-Besse, not David.

D'oh

Simpson, you're fired!

NRC's comments

Nuclear Regulatory Commission [nrc.gov]comments can be found here. [nrc.gov]

This hardware is ancient, hardwired, and low tech. Suppliers are most likely limited to GE, Westinghouse and Combustion Engineering.

The side benefit is that the engineers would have to get out of their chairs and go walk their systems down. If they didn't get lost...those plants are huge.

Security at nuclear power plants???

Ummmm.....
Ya' think?!

I hate to bring out a sticky point but....

Shouldn't the US Gov't have thought of this over three and a half fucking years ago?!? Hello? Anybody home? Bueller?

God help us because the nation is run by total mindless clusterfucks and assclowns! Glad that at least I didn't vote for them, at least. Just a different bunch of nimrods and dipshits, that's all. (end of rant)

Don't forget physical access.

a year or two ago, myself and 150 members of Greenpeace UK staged a protest at sizewell B nuclear power station, of the 150 of us, approx 80 got inside, and some even climbed up onto the reactor itself. We achieved this despite having some people in their seventeis, and some of us dressed in large latex homer simpson outfits. The technology we used was 2 step ladders and some carpet.
The total physical security to prevent this (peaceful) demonstration was 2 blokes with helmets and no guns whatsoever. (this is in the UK). This was in borad daylight, and as we entered the site, someone walked into the reception building and told them.
This was a peaceful demo.
If we had been terrorists, at night with knives or silenced pistols, we would have been in the control room with a backpack full of semtex within 10 minutes.
There is ZERO security around UK nuclear facilities. Even after our demo and they said they'd beef security, greenpeace did a similar demo at the SAME SITE a month later and got in again no problem.

Easy fix!

Just build decoy cooling towers everywhere.

Imagine the look on the terrorists faces after they attack a "nucuuler plant" that turns out to be a fake cooling tower over the local Waffle House.

Hash browns!

Asimov's warning comes true

In the "Foundation and empire" Asimov depicts the de clining Galactic Empire, where they decide to restrict use of nuclear energy when there was a shortage of competent techincans. Not to rise salaries, not to start education programs - just close down some nuclear plants and leave surroundings without energy.

Idea to cut the nuclear plants from external networks looks quite simular.

Circumstances

Just before sweeping through Slashdot, I read this "IRANIAN SOURCE REPORTS PLOT TO ATTACK U.S. NUKE WASHINGTON [MENL] -- Congress has been pressing the U.S. intelligence community to investigate claims by an Iranian defector that Teheran planned to crash an airliner into a nuclear reactor in the United States." http://www.menewsline.com/stories/2005/january/01_ 27_2.html

Shit, It's harder for terrorists to get nukes?

That's bad 'cause, it'll make it harder for them to nuke US. Too bad, I was hoping the world would be a slightly better place.

Re:Sneaking out with rods

Please google for the string "dirty bomb".

Re:Sneaking out with rods-ROLFLOL!!

From a sidebar in the January issure of Forbes magazine.

1. Terrorists storm a reactor and try to steal uranium or plutonium to make bombs.

Not likely. Assuming attackers could shoot their way past the beefed-up phalanx of armed guards, traffic barriers and guard towers that now surround every nuclear plant, they'd still have to fight their way into the reactor building through multiple levels of remote-activated blast doors--where access requires the right key card and palm print--to get to the spent-fuel pond, says Michael Wallace, president of Constellation Energy's generation group, which operates five nuclear reactors. The pond is where highly radioactive used fuel sits in 14-foot-long stainless steel assemblies cooling under 40 feet of water. Terrorists couldn't just grab this stuff and run because, unshielded, it gives off a lethal dose of radiation in less than a minute. To avoid exposure, terrorists would have to force workers to use a giant crane inside the reactor to load the assemblies into huge transfer casks, then open the mammoth doors of the reactor building and use another crane to lift the cask onto a waiting truck--all the while being shot at by the National Guard.

And While we are at it, How about crashing a plane into the reactor?

2. Terrorists crash a plane into a reactor, leading to overheating and a meltdown.

Even less likely. Assume that terrorists could get past tightened airport security and fight off passengers to get through new, improved cockpit doors and take control of a plane. Even then they'd have to crash the jet directly into a reactor to have any chance of breaking containment. In 2002 the Electric Power Research Institute performed a $1 million computer simulation to assess such a risk. Conclusion: A direct hit from a 450,000-pound Boeing 767 flying low to the ground at 350mph would ruin a plant's ability to make electricity but not break the reactor's cement shield. Reason: A reactor, smaller in profile than the Pentagon or World Trade Center, would not absorb the full force of the plane's impact. And, for all the force behind it, a plane, built of aluminum and titanium, has far less mass than the 20-foot-thick steel-and-concrete sarcophagus enclosing a nuclear reactor. It would be like dropping a watermelon on a fire hydrant from 100 feet.

Subscription required: Stopping the Bad Guys [forbes.com]