lead in agenda (tracy rolstad) cip-014 background (metcalf) compliance attack methods (general) peak...
TRANSCRIPT
![Page 1: Lead in Agenda (Tracy Rolstad) CIP-014 Background (Metcalf) Compliance Attack Methods (General) Peak RC](https://reader033.vdocuments.net/reader033/viewer/2022051516/56649f415503460f94c60d92/html5/thumbnails/1.jpg)
Lead in Agenda (Tracy Rolstad)
• CIP-014 Background (Metcalf)• Compliance • Attack Methods (General)• Peak RC
![Page 2: Lead in Agenda (Tracy Rolstad) CIP-014 Background (Metcalf) Compliance Attack Methods (General) Peak RC](https://reader033.vdocuments.net/reader033/viewer/2022051516/56649f415503460f94c60d92/html5/thumbnails/2.jpg)
![Page 3: Lead in Agenda (Tracy Rolstad) CIP-014 Background (Metcalf) Compliance Attack Methods (General) Peak RC](https://reader033.vdocuments.net/reader033/viewer/2022051516/56649f415503460f94c60d92/html5/thumbnails/3.jpg)
CIP-014: How Did We Get Here?
Attack Ideas Available on the Internet1/15/2013
Attacks on Critical Infrastructure
Metcalf 4/16/2013
Arkansas 9/16/2013
3
“If someone decides to blast a transformer at its base as prepper Bryan Smith did, and the oil drains out, then the transformer either burns out catastrophically, or if the utility is lucky, a software routine notices the problem and shuts the substation (or at least the affected portion) down” (http://www.bob-owens.com/2013/01/shock-the-system/)
![Page 4: Lead in Agenda (Tracy Rolstad) CIP-014 Background (Metcalf) Compliance Attack Methods (General) Peak RC](https://reader033.vdocuments.net/reader033/viewer/2022051516/56649f415503460f94c60d92/html5/thumbnails/4.jpg)
>120 rounds7.62x39 mm, >51,000 gallons of oil
When seconds matter cops are only minutes away…
![Page 5: Lead in Agenda (Tracy Rolstad) CIP-014 Background (Metcalf) Compliance Attack Methods (General) Peak RC](https://reader033.vdocuments.net/reader033/viewer/2022051516/56649f415503460f94c60d92/html5/thumbnails/5.jpg)
Things that make you go Hmmm…
![Page 6: Lead in Agenda (Tracy Rolstad) CIP-014 Background (Metcalf) Compliance Attack Methods (General) Peak RC](https://reader033.vdocuments.net/reader033/viewer/2022051516/56649f415503460f94c60d92/html5/thumbnails/6.jpg)
Mk-80 Series Bomb Facts
• 500, 1000, 2000 lb bombs (Mk 82, 83, 84)– About 50% is HE
• Not particularly large compared to a truck bomb• Cratering figures
– Mk 84 (2000 lb)• 50 ft wide by 36 ft deep
![Page 7: Lead in Agenda (Tracy Rolstad) CIP-014 Background (Metcalf) Compliance Attack Methods (General) Peak RC](https://reader033.vdocuments.net/reader033/viewer/2022051516/56649f415503460f94c60d92/html5/thumbnails/7.jpg)
Blowing things up is easy!
http://www.nctc.gov/site/technical/bomb_threat.html
2 Severe Bldg damage or collapse3 Skin Penetrating Fragments
![Page 8: Lead in Agenda (Tracy Rolstad) CIP-014 Background (Metcalf) Compliance Attack Methods (General) Peak RC](https://reader033.vdocuments.net/reader033/viewer/2022051516/56649f415503460f94c60d92/html5/thumbnails/8.jpg)
Station ~ 2500 ft by 1500 ft (truck bomb)
![Page 9: Lead in Agenda (Tracy Rolstad) CIP-014 Background (Metcalf) Compliance Attack Methods (General) Peak RC](https://reader033.vdocuments.net/reader033/viewer/2022051516/56649f415503460f94c60d92/html5/thumbnails/9.jpg)
Care to Name These Events?
19 April 1995Ryder Truck: Ammonium Nitrate& Diesel…roughly 4,000 lbs of homebrew explosive$652 million in damage, 169 dead
26 February 1993Ryder Truck: 1300 to 1500 pounds of nitrate-hydrogen gasCreated a hole 98 feet wide through four levels of concrete.$500 million in damage, 6 dead15,000 ft/sec Propagation speed
![Page 10: Lead in Agenda (Tracy Rolstad) CIP-014 Background (Metcalf) Compliance Attack Methods (General) Peak RC](https://reader033.vdocuments.net/reader033/viewer/2022051516/56649f415503460f94c60d92/html5/thumbnails/10.jpg)
Final Analysis of the Threat
• Can a bad person blow up/fault a substation?– YES!
• All at once with a truck bomb? Yes
– There are other methods equally effective• Said methods don’t go bang but do apply faults
• How do you simulate it?– 3 phase faults everywhere…just fault buses
• PRC-023 data is likely relevant• No commsdelayed clearing20 plus cycles?
– You might conclude that modeling relays is a good idea?!
![Page 11: Lead in Agenda (Tracy Rolstad) CIP-014 Background (Metcalf) Compliance Attack Methods (General) Peak RC](https://reader033.vdocuments.net/reader033/viewer/2022051516/56649f415503460f94c60d92/html5/thumbnails/11.jpg)
Can we defeat a truck bomb?
• Of course– You make them go some where else…a game of
keep away
![Page 12: Lead in Agenda (Tracy Rolstad) CIP-014 Background (Metcalf) Compliance Attack Methods (General) Peak RC](https://reader033.vdocuments.net/reader033/viewer/2022051516/56649f415503460f94c60d92/html5/thumbnails/12.jpg)
Love the Videos
![Page 13: Lead in Agenda (Tracy Rolstad) CIP-014 Background (Metcalf) Compliance Attack Methods (General) Peak RC](https://reader033.vdocuments.net/reader033/viewer/2022051516/56649f415503460f94c60d92/html5/thumbnails/13.jpg)
Security on the “down low”
• https://www.youtube.com/watch?v=IEqgZ5tt_Yg
![Page 14: Lead in Agenda (Tracy Rolstad) CIP-014 Background (Metcalf) Compliance Attack Methods (General) Peak RC](https://reader033.vdocuments.net/reader033/viewer/2022051516/56649f415503460f94c60d92/html5/thumbnails/14.jpg)
Over to Peak RC…