Electric Co-op Today

Stuxnet and Aurora aren’t words that electric co-ops, or practically anyone else, uses in normal conversation. But they’ve been brought to the attention of co-ops, and all other electric utilities, by the nation’s bulk power watchdog in recent alerts on issues that could impact system integrity.

The bulk power system reliability watchdog has issued several recent alerts aimed at keeping power plant control rooms, other critical areas secure. (Photo By: Buretsu)

The alerts call attention to Stuxnet, a malware-spawned threat to control systems used by some utilities, and Aurora, a cyber or physical threat to vital equipment at power plants and substations.

According to the North American Electric Reliability Corporation’s September alert, the Stuxnet worm is a computer virus that exploits a previously unknown Microsoft Windows operating system vulnerability.

While there have been no reported instances of Stuxnet in the United States, versions of the operating system are widely deployed throughout the world’s critical infrastructures, including the North American bulk power system. This poses the potential for significant impact, the watchdog noted.

Little information on October’s Aurora alert, most of which was classified “For Official Use Only,” was made public. According to NERC, it contained new information regarding the nature of the threat, as well as recommended mitigation elements. It is available to utilities that NERC identified as needing it.

The recommendation requires entities to report on efforts and progress by Dec. 13, with updates every six months until mitigation is complete.

In early October, NERC issued a third alert, involving discrepancies between regulator-approved facilities designs and actual conditions in the field. It requires entities to develop a plan to identify and implement actions needed to correct their ratings and report to NERC and regional entities by Dec. 15.

Tags: Cyber Security, North American Electric Reliability Corporation