Network Design and Testing

Much is being written about the recent Browns Ferry "broadcast storm" event. Without judging what others are saying, I would like to posit what I believe either happened or could have happened. There is insufficient detail in the NRC Information Notice to make a definitive judgment. Talking to other experts with experience in the design of these systems, there are several possibilities. The first is an overloaded network device such as a layer 2, unmanaged switch; the second would be something generating excessive network traffic such as an errant device or an IT network scan. These events are unintentional and have been seen previously. It is unlikely the NRC's recommendation of a firewall at each variable frequency drive would not be sufficient to adequately prevent these types of incidents.


The Browns Ferry event is NOT a nuclear event, but an industrial control system cyber event. It points out the need for guidance in network design, implementation, installation qualification, and performance monitoring.  I called about 12 people over the past three days on this event. Four people responded they had seen similar events in their non-nuclear facilities. Consequently, I plan to have a 3 hour open session discussion on this subject at the August Control System Cyber Security Conference in Knoxville.

Joe Weiss

Show Comments
Hide Comments

Join the discussion

We welcome your thoughtful comments.
All comments will display your user name.

Want to participate in the discussion?

Register for free

Log in for complete access.


  • <p>One thing I find interesting is the highly disparate nature of the analysis and solution sets for this. Unfortunately, the documentation is sparse and provides only a few clues. That said, this really seems to demonstrate the need for better standards on infrastructure design. Control System vulnerability disclosure and certification will be great for future systems, but the benefit now would seem to me to be in hardening the systems that exist, with the future goals in mind. Perhaps an industry consortium or function of a group such as ISA-99 is warranted.</p>


RSS feed for comments on this page | RSS feed for all comments