atw 2018-05v6

• Short-link
• Link
• Embed

<strong>atw</strong> Vol. 63 (<strong>2018</strong>) | Issue 5 ı May 284 CALENDAR Calendar <strong>2018</strong> 08.05.-10.05.<strong>2018</strong> 29 th Conference of the Nuclear Societies in Israel. Herzliya, Israel. Israel Nuclear Society and Israel Society for Radiation Protection, ins-conference.com 13.05.-19.05.<strong>2018</strong> BEPU-<strong>2018</strong> – ANS International Conference on Best-Estimate Plus Uncertainties Methods. Lucca, Italy, NINE – Nuclear and INdustrial Engineering S.r.l., ANS, IAEA, NEA, www.nineeng.com/bepu/ 13.05.-18.05.<strong>2018</strong> RadChem <strong>2018</strong> – 18 th Radiochemical Conference. Marianske Lazne, Czech Republic, www.radchem.cz 14.05.-16.05.<strong>2018</strong> ATOMEXPO <strong>2018</strong>. Sochi, Russia, atomexpo.ru 15.05.-17.05.<strong>2018</strong> 11 th International Conference on the Transport, Storage, and Disposal of Radioactive Materials. London, United Kingdom, Nuclear Institute, www.nuclearinst.com 20.05.-23.05.<strong>2018</strong> 5 th Asian and Oceanic IRPA Regional Congress on Radiation Protection – AOCRP5. Melbourne, Australia, Australian Radiation Protection Society (ARPS) and International Radiation Protection Association (IRPA), www.aocrp-5.org 23.05.-25.05.<strong>2018</strong> 15 th International Conference of Young Scientists on Energy Issues. Kaunas, Lithuania, Lithuanian Energy Institute in partnership with Nuclear Society of Lithuania, cyseni.com/ 29.05.-30.05.<strong>2018</strong> 49 th Annual Meeting on Nuclear Technology AMNT <strong>2018</strong> | 49. Jahrestagung Kerntechnik. Berlin, Germany, DAtF and KTG, www.nucleartech-meeting.com – See you there! 03.06.-07.06.<strong>2018</strong> 38 th CNS Annual Conference and 42nd CNS-CNA Student Conference. Saskotoon, SK, Canada, Canadian Nuclear Society CNS, www.cns-snc.ca 03.06.-06.06.<strong>2018</strong> HND<strong>2018</strong> 12 th International Conference of the Croatian Nuclear Society. Zadar, Croatia, Croatian Nuclear Society, www.nuklearno-drustvo.hr 04.06.-05.06.<strong>2018</strong> 13 th European Nuclear Energy Forum. Bratislava, Slova Republic, European Commission, ec.europa.eu 04.06.-07.06.<strong>2018</strong> 10 th Symposium on CBRNE Threats. Rovaniemi, Finland, Finnish Nuclear Society, ats-fns.fi 04.06.-08.06.<strong>2018</strong> 5 th European IRPA Congress – Encouraging Sustainability in Radiation Protection. The Hague, The Netherlands, Dutch Society for Radiation Protection (NVS), local organiser, irpa<strong>2018</strong>europe.com 04.06.-05.06.<strong>2018</strong> eurelectric Power Summit <strong>2018</strong> – “Watt’s Next? New Players, Products and Peers”. Ljubljana, Slovenia, eurelectric, www.eurelectric.org 06.06.-08.06.<strong>2018</strong> 2 nd Workshop on Safety of Extended Dry Storage of Spent Nuclear Fuel. Garching near Munich, Germany, GRS, www.grs.de 06.06.-07.06.<strong>2018</strong> <strong>2018</strong> Decommissioning Strategy Forum. Nashville, TN, U.S.A. go.exchangemonitor.com 14.06.-15.06.<strong>2018</strong> Kernkraftwerk Rheinsberg – Zukunft eines kulturellen Erbes. Kernkraftwerk Rheinsberg, Germany, EWN GmbH, Stadtgeschichte Rheinsberg e.V., stadtgeschichte.rheinsberg@gmail.com, www.ewn-gmbh.net 18.06.-19.06.<strong>2018</strong> Decom<strong>2018</strong>. London, United Kingdom, Nuclear Industry Association (NIA), decom<strong>2018</strong>.co.uk 25.06.-26.06.<strong>2018</strong> index<strong>2018</strong> – International Nuclear Digital Experience. Paris, France, Société Française d’Energie Nucléaire, www.sfen.org, www.sfen-index<strong>2018</strong>.org 27.06.-29.06.<strong>2018</strong> EEM – <strong>2018</strong> 15 th International Conference on the European Energy Market. Lodz, Poland, Lodz University of Technology, Institute of Electrical Power Engineering, Association of Polish Electrical Engineers (SEP), www.eem18.eu 24.06.-30.06.<strong>2018</strong> ANNETTE Summer School on Nuclear Technology, Nuclear Waste Management and Radiation Protection. Turku, Finland, Advanced Networking for Nuclear Education, Training and Transfer of Expertise, annettesummerschool.org, www.enen.eu 29.07.-02.08.<strong>2018</strong> International Nuclear Physics Conference 2019. Glasgow, United Kingdom, www.iop.org 22.08.-31.08.<strong>2018</strong> Frédéric Joliot/Otto Hahn (FJOH) Summer School FJOH-<strong>2018</strong> – Maximizing the Benefits of Experiments for the Simulation, Design and Analysis of Reactors. Aix-en-Provence, France, Nuclear Energy Division of Commissariat à l’énergie atomique et aux énergies alternatives (CEA) and Karlsruher Institut für Technologie (KIT), www.fjohss.eu 28.08.-31.08.<strong>2018</strong> TINCE <strong>2018</strong> – Technological Innovations in Nuclear Civil Engineering. Paris Saclay, France, Société Française d’Energie Nucléaire, www.sfen.org, www.sfen-tince<strong>2018</strong>.org 03.09.-06.09.<strong>2018</strong> Jahrestagung des Fachverbandes Strahlenschutz. Dresden, Germany, Fachverband für Strahlenschutz e.V., www.fs-ev.org 05.09.-07.09.<strong>2018</strong> World Nuclear Association Symposium <strong>2018</strong>. London, United Kingdom, World Nuclear Association (WNA), www.world-nuclear.org 09.09.-14.09.<strong>2018</strong> 21 st International Conference on Water Chemistry in Nuclear Reactor Systems. San Francisco, CA, USA, EPRI – Electric Power Research Institute, www.epri.com 17.09.-21.09.<strong>2018</strong> 62 nd IAEA General Conference. Vienna, Austria. International Atomic Energy Agency (IAEA), www.iaea.org 17.09.-20.09.<strong>2018</strong> FONTEVRAUD 9. Avignon, France, Société Française d’Energie Nucléaire (SFEN), www.sfen-fontevraud9.org 17.09.-19.09.<strong>2018</strong> 4 th International Conference on Physics and Technology of Reactors and Applications – PHYTRA4. Marrakech, Morocco, Moroccan Association for Nuclear Engineering and Reactor Technology (GMTR), National Center for Energy, Sciences and Nuclear Techniques (CNESTEN) and Moroccan Agency for Nuclear and Radiological Safety and Security (AMSSNuR), phytra4.gmtr.ma 26.09.-28.09.<strong>2018</strong> 44 th Annual Meeting of the Spanish Nuclear Society. Avila, Spain, Sociedad Nuclear Española, www.sne.es 30,.09.-05.10.<strong>2018</strong> 14 th Pacific Basin Nuclear Conference (PBNC). San Francisco, CA, USA, pbnc.ans.org/ 30.09.-04.10.<strong>2018</strong> TopFuel <strong>2018</strong>. Prague, Czech Republic, European Nuclear Society (ENS), American Nuclear Society (ANS). Atomic Energy Society of Japan, Chinese Nuclear Society and Korean Nuclear Society, www.euronuclear.org 01.10.-05.10.<strong>2018</strong> 3 rd European Radiological Protection Research Week ERPW. Rovinj, Croatia, ALLIANCE, EURADOS, EURAMED, MELODI and NERIS, www.erpw<strong>2018</strong>.com 02.10.-04.10.<strong>2018</strong> 7 th EU Nuclear Power Plant Simulation ENPPS Forum. Birmingham, United Kingdom, Nuclear Training & Simulation Group, www.enpps.tech 14.10.-18.10.<strong>2018</strong> 12 th International Topical Meeting on Nuclear Reactor Thermal-Hydraulics, Operation and Safety – NUTHOS-12. Qingdao, China, Elsevier, www.nuthos-12.org 14.10.-18.10.<strong>2018</strong> NuMat <strong>2018</strong>. Seattle, United States, www.elsevier.com 16.10.-17.10.<strong>2018</strong> 4 th GIF Symposium at the 8th edition of Atoms for the Future. Paris, France, www.gen-4.org 22.10.-24.10.<strong>2018</strong> DEM <strong>2018</strong> Dismantling Challenges: Industrial Reality, Prospects and Feedback Experience. Paris Saclay, France, Société Française d’Energie Nucléaire, www.sfen.org, www.sfen-dem<strong>2018</strong>.org 24.10.-26.10.<strong>2018</strong> NUWCEM <strong>2018</strong> Cement-based Materials for Nuclear Waste. Avignon, France, French Commission for Atomic and Alternative Energies and Société Française d’Energie Nucléaire, www.sfen-nuwcem<strong>2018</strong>.org 24.10.-25.10.<strong>2018</strong> Chemistry in Power Plant. Magdeburg, Germany, VGB PowerTech e.V., www.vgb.org 05.11.-08.11.<strong>2018</strong> International Conference on Nuclear Decom missioning – ICOND <strong>2018</strong>. Aachen, Eurogress, Germany, achen Institute for Nuclear Training GmbH, www.icond.de 06.11-08.11.<strong>2018</strong> G4SR-1 1 st International Conference on Generation IV and Small Reactors. Ottawa, Ontario, Canada. Canadian Nuclear Society (CNS), and Canadian Nuclear Laboratories (CNL), www.g4sr.org 03.12.-14.12.<strong>2018</strong> United Nations, Conference of the Parties – COP24. Katowice, Poland, United Nations Framework Convention on Climate Change – UNFCCC, www.cop24.katowice.eu 2019 07.05.-08.05.2019 50 th Annual Meeting on Nuclear Technology AMNT 2019 | 50. Jahrestagung Kerntechnik. Berlin, Germany, DAtF and KTG, www.nucleartech-meeting.com Calendar

<strong>atw</strong> Vol. 63 (<strong>2018</strong>) | Issue 5 ı May Detective Application Security Controls for Nuclear Safety Deeksha Gupta, Karl Waedt and Yuan Gao The current Draft Nuclear IEC 63096 New Work Item Proposal (NWIP), a new downstream standard of IEC 62645, distinguishes between preventive, detective and corrective security controls. The focus of this paper is on resilient detective cybersecurity controls that are needed especially for high security degrees in the context of Advanced Persistent Threats (APTs). The Stuxnet malware demonstrates that sophisticated attacks on physical processes can make use of both, the manipulation of output signals that control the automation equipment in parallel with manipulations of the graphical process feedback information displayed to users. In the international IAEA coordinated research proposal CRP J02008 several project partners investigate (as one of the objectives) the development of detective security controls that do not rely on the process control software itself. Thus, a manipulation of the process control software could still be detected by the detective security controls implemented by diverse means. Implementing detective security controls at this conceptual level requires knowledge about selected analog and binary variables corresponding to the current state of physical processes. This knowledge (expressed as modeled specifications of expected safe transitions and value ranges) is needed in order to detect potential manipulations. In the case of Stuxnet this corresponds to detecting the high frequency speed variations of centrifuges (with the aim of physically destroying them) without regard to the ( manipulated, maliciously reassuring) information displayed to operators. This paper will address the selection of process variables, the different points at which these process variables can be acquired, the equipment used for the acquisition (e.g. additional networking equipment or enhanced embedded software), the aggregation of the variables, the detective logic and the reporting towards a Security Information and Event Management System ( SIEM). The paper will also explain how existing nuclear safety impact analyses can be leveraged by replacing the typical safety events (e.g. due to ageing or random failures) by graded targeted security attack events. The semi-formal description of the detective security controls will make use of the Application Security Control (ASC) concepts as introduced by ISO/IEC 27034-x. This approach is fully in line with Nuclear IEC 62859 that provides requirements on coordinating safety and cybersecurity. The recommendations on separating selected detective security controls from the process control software can be achieved by avoiding an increased complexity and the possibility of retroactions of security measures on safety related functionality. to physical property, computer system, information or other assets. The detective application security controls provide alternative or enhanced protection means as part of a security defense-in-depth concept. Accordingly, for a new NPP they may serve as security enhancements while for an existing NPP they may serve as an effective and cost-saving alternative, in cases where the legacy process control software cannot be easily revised to include cybersecurity specific functionality. In principle the term “Cybersecurity Control” or just “Security Control” denotes one or a set of Cyber Security countermeasures. Security Controls are applied during all lifecycle phases of the I&C-product or project [4]. In an ( initially) non safety related context several Security Controls are similar to measures that are by default implemented in safety systems. These include, e.g., the degree of requirements traceability (e.g., to avoid the intro duction of requirements on debugging functionality that may later be misused for manipulations) and requirements on testing. However, the Security Level [2, 3] of a subsystem may be increased due to results of a risk assessment [5]. This may mandate the implementation of individual security controls that have to be met only for higher safety classes [4]. IEC 62645 [8] is the top level nuclear cybersecurity standard. It defines security controls for the nuclear 285 ENVIRONMENT AND SAFETY Introduction Cybersecurity is considered as a major element of physical protection plans for nuclear facilities and it should be implemented from the initial phase of nuclear facility design [1]. In nuclear power plants (NPPs), I&C systems have evolved during the last decades from non-digital equipment and standalone environments to digital technologies and interconnected systems. Such an evolution exposes them to risks related to cyberattacks. The cyberattack can later affect the safety of the NPP. Cyberattack or digital attack is the attempt by digital means to destroy, expose, alter, disable, steal or gain unauthorized access to or make unauthorized use of an asset [2]. To minimize these risks security controls provides the countermeasures to avoid, detect, counteract | | Fig. 1. Example Plant Operation related to Security Control for a Detective System [6, 7]. Environment and Safety Detective Application Security Controls for Nuclear Safety ı Deeksha Gupta, Karl Waedt and Yuan Gao