Important considerations about the 2020 Cyberattack and Nuclear Power Plants

6 Things to Know about the 2020 Cyberattack and Nuclear Power Plants, https://www.ucsusa.org/?_ga=2.33422906.56524403.1608530745-1569294116.1608530745, ED LYMAN, DIRECTOR OF NUCLEAR POWER SAFETY, CLIMATE & ENERGY | DECEMBER 18, 2020 News reports over the last day indicate that a massive and devastating cyberattack on US government agencies and private companies in the United States and abroad has occurred, and UCS will be watching as this news develops. While the scope of the cyberattack is still far from clear, here are some facts to consider regarding how the hack may have impacted US nuclear energy infrastructure.

So far there have been no reports that the Nuclear Regulatory Commission (NRC), the agency that oversees the safety and security of US nuclear power plants, or any nuclear plants themselves, have been affected. The NRC once had a contract with SolarWinds, whose Orion software has been identified as a major vector of the attack, but apparently terminated it in 2011. However, the US Cybersecurity and Infrastructure Agency reported that Orion was not the only attack vector.
1. Fortunately, it is highly unlikely that malevolent actors today could directly cause a severe accident at a US nuclear power plant because the instrumentation and control systems for the most important safety systems are primarily analog (non-digital) relics of the era decades ago when these plants were built.
2. Even so, nuclear plants do have many digital systems that must be protected because they may have an indirect impact on plant safety—for example, the communication systems used by security officers. The NRC requires nuclear plant owners to protect such critical digital systems from cyberattack. In particular, there must be separation between a nuclear plant’s business systems, which are connected to the Internet, and any digital systems involved in reactor operations.
3. Still, access to the business systems could be very useful to adversaries—for instance, they could obtain data revealing personal information about plant personnel and use it for blackmail. Moreover, even isolated systems need software updates, so if sophisticated malware is not detected by the scans a nuclear plant uses before loading updates on those systems, they could also become infected.
4. The Nuclear Energy Institute, the industry’s chief lobbying group, has been fighting for years to reduce the scope of digital systems that plant owners have to protect under the NRC’s rules, including those that might protect against reactor shutdowns that could cause grid failures. The attack underway is a stark reminder that cybersecurity defenses at critical infrastructure facilities such as nuclear plants should be strengthened, not weakened.
5. The NRC has still not yet completed its first round of inspections to confirm full compliance of nuclear plants with its cybersecurity rule, which was instituted more than ten years ago.

December 20, 2020 - Posted by Christina MacPherson | safety, USA

No comments yet.

Leave a Reply Cancel reply

Enter your comment here...

Fill in your details below or click an icon to log in:

Email (required) (Address never made public)

Name (required)

Website

You are commenting using your WordPress.com account. ( Log Out / Change )

You are commenting using your Google account. ( Log Out / Change )

You are commenting using your Twitter account. ( Log Out / Change )

You are commenting using your Facebook account. ( Log Out / Change )

Cancel

Connecting to %s

This site uses Akismet to reduce spam. Learn how your comment data is processed.

« Previous | Next »

Archives
- April 2021 (83)
- March 2021 (283)
- February 2021 (271)
- January 2021 (278)
- December 2020 (230)
- November 2020 (297)
- October 2020 (392)
- September 2020 (349)
- August 2020 (351)
- July 2020 (280)
- June 2020 (293)
- May 2020 (251)
Categories
- 1
  - Arclight's Vision
- 1 NUCLEAR ISSUES
  - business and costs
    - employment
    - marketing
  - climate change
  - culture and arts
  - ENERGY
    - renewable
      - decentralised
      - energy storage
  - environment
    - oceans
    - water
  - health
    - children
    - psychology – mental health
    - radiation
    - social effects
    - women
  - history
  - indigenous issues
  - Legal
    - deaths by radiation
    - legal
  - marketing of nuclear
  - media
    - investigative journalism
    - Wikileaks
  - opposition to nuclear
  - PERSONAL STORIES
  - politics
    - psychology and culture
      - Trump – personality
    - public opinion
    - USA elections 2016
  - politics international
  - Religion and ethics
  - safety
    - incidents
  - secrets,lies and civil liberties
    - civil liberties
  - spinbuster
    - Education
  - technology
    - reprocessing
    - Small Modular Nuclear Reactors
    - space travel
  - Uranium
  - wastes
    - – plutonium
    - decommission reactor
  - weapons and war
    - depleted uranium
  - Women
- 2 WORLD
  - ANTARCTICA
  - ARCTIC
  - ASIA
    - Burma
    - China
    - India
    - Indonesia
    - Japan
    - Malaysia
    - Mongolia
    - North Korea
    - Pakistan
    - South Korea
    - Taiwan
    - Turkey
    - Vietnam
  - EUROPE
    - Belarus
    - Bulgaria
    - Denmark
    - Finland
    - France
    - Germany
    - Greece
    - Ireland
    - Italy
    - Kazakhstan
    - Kyrgyzstan
    - Russia
    - Spain
    - Sweden
    - Switzerland
    - UK
    - Ukraine
  - MIDDLE EAST
    - Afghanistan
    - Egypt
    - Gaza
    - Iran
    - Iraq
    - Israel
    - Jordan
    - Libya
    - Saudi Arabia
    - Syria
    - Turkey
    - United Arab Emirates
  - NORTH AMERICA
    - Canada
    - USA
      - election USA 2020
  - OCEANIA
    - New Zealand
    - Philippines
  - SOUTH AMERICA
    - Brazil
- ACTION
- AFRICA
  - Kenya
  - Malawi
  - Mali
  - Namibia
  - Niger
  - Nigeria
  - Somalia
  - South Africa
- AUSTRALIA
- Christina's notes
- Christina's themes
- culture and arts
- Fukushima 2017
- Fukushima 2018
- fukushima 2019
- Fukushima 2020
- Fukushima 2021
- general
- global warming
- Humour (God we need it)
- Nuclear
- RARE EARTHS
  - thorium
- Reference
- resources – print
- Resources -audiovicual
- World
- World Nuclear
- YouTube
RSS
Entries RSS
Comments RSS

nuclear-news

The News That Matters about the Nuclear Industry Fukushima Chernobyl Mayak Three Mile Island Atomic Testing Radiation Isotope