Lead in Agenda (Tracy Rolstad) CIP-014 Background (Metcalf) Compliance Attack Methods (General) Peak RC.

Lead in Agenda (Tracy Rolstad)

• CIP-014 Background (Metcalf)• Compliance • Attack Methods (General)• Peak RC

CIP-014: How Did We Get Here?

Attack Ideas Available on the Internet1/15/2013

Attacks on Critical Infrastructure

Metcalf 4/16/2013

Arkansas 9/16/2013

3

“If someone decides to blast a transformer at its base as prepper Bryan Smith did, and the oil drains out, then the transformer either burns out catastrophically, or if the utility is lucky, a software routine notices the problem and shuts the substation (or at least the affected portion) down” (http://www.bob-owens.com/2013/01/shock-the-system/)

>120 rounds7.62x39 mm, >51,000 gallons of oil

When seconds matter cops are only minutes away…

Things that make you go Hmmm…

Mk-80 Series Bomb Facts

• 500, 1000, 2000 lb bombs (Mk 82, 83, 84)– About 50% is HE

• Not particularly large compared to a truck bomb• Cratering figures

– Mk 84 (2000 lb)• 50 ft wide by 36 ft deep

Blowing things up is easy!

http://www.nctc.gov/site/technical/bomb_threat.html

2 Severe Bldg damage or collapse3 Skin Penetrating Fragments

Station ~ 2500 ft by 1500 ft (truck bomb)

Care to Name These Events?

19 April 1995Ryder Truck: Ammonium Nitrate& Diesel…roughly 4,000 lbs of homebrew explosive$652 million in damage, 169 dead

26 February 1993Ryder Truck:  1300 to 1500 pounds of nitrate-hydrogen gasCreated a hole 98 feet wide through four levels of concrete.$500 million in damage, 6 dead15,000 ft/sec Propagation speed

Final Analysis of the Threat

• Can a bad person blow up/fault a substation?– YES!

• All at once with a truck bomb? Yes

– There are other methods equally effective• Said methods don’t go bang but do apply faults

• How do you simulate it?– 3 phase faults everywhere…just fault buses

• PRC-023 data is likely relevant• No commsdelayed clearing20 plus cycles?

– You might conclude that modeling relays is a good idea?!

Can we defeat a truck bomb?

• Of course– You make them go some where else…a game of

keep away

Love the Videos

Security on the “down low”

• https://www.youtube.com/watch?v=IEqgZ5tt_Yg

Over to Peak RC…