U.S. Plans to Tighten Nuclear Power Plant Security
CDMA_Demo writes "The 103 nuclear reactors running in USA can voluntarily agree to follow a new 15 page update to a 1996 regulatory guide. The update notes possibility of "unauthorized, undesirable, and unsafe intrusions", and recommends measures aginst such activities. It also recommends such facilities to be cut off from external networks: "Remote access...[that may pose a potential security risk]...should not be implemented". The Slammer worm in 2001 managed to bring down the network at Ohio's David-Besse nuclear plant and concerns kept growing at the United Nations' International Atomic Energy Agency (IAEA)."
My home state of Maine became the site of the first complete decomissioning of a large commercial reactor. The plant became operational in '72 ( and it had to survive a referendum to close it in '80, '82, and '87). In '95 it was shutdown many months for repairs and they discovered cracks in the steam generator tubes. The plant opened back up for less than a year I believe, they evaluated the cost to refit the plant and they decided they would have a hard time making back the investment in refitting the plant, so they shut it down permanently. They had originally intended to operate the plant at least until 2020 or 2030. Part of the huge cost was the fact that they need to store the waste onsite. Now all that is left of the plant is a semi-permanent high-level waste storage facility on a few acre footprint. Several hundred acres of the plants land are already being developed on. Several hundred more are a peninsula where the waste storage is located and the gated access make it less attractive for commercial development.
Bush wants to have a new reactor running in the US in the next 10 years. This will be the first approved since '79 and the first to come online since the mid 90's.
I even worked in IT. Here is how it works (at least at the one I worked at): all of the software that actually runs the plant is over 25 years old (and therefore does not run Windows). It runs some obscure custom shit, not that obscurity is efficient at security, but I guess it kinda helps. Yes, the computers used by the Secretaries, the Maintenance staff, the Managers, etc. all run Windows. The servers ran Red Had 7.3. This is all fluff. If this breaks or gets corrupted one of two things happens to the reactor: 1. Nothing or 2. Nothing. There are two ways the the system is electrically connected to the outside world, and both of them are through high voltage power lines, which cannot really be used to send data in to break things. If you want to break something, you need to physically be there to do it.
If you work in a nuclear power plant, you are going to continue to do everything you can think of to make it even harder for someone to sabotage the place. Physically, this includes multiple walls, gates, barricades, guns, and more to protect the containments. From a procedural standpoint, this means anyone who wants to get on-site gets ran through a database to check your history, after getting an employee escort. Anyone who wants to get into the protected area gets personally approved after a more in depth background check, and a heck of a lot of red tape.
If you are just Joe Public (no offense), you have a much higher chance of dying in a car accident so I wouldn't worry about this.
And No, I didn't RTFA, but I figured as long as my comment was more useful than the rest of them (read: references to 24), I figured this comment would be helpful.