What is Aurora and why is it a risk to grid reliability

March 17, 2012

There are a number of issues about Aurora that are confusing including its name, what it does, how to detect it, and what could be vulnerable. As Aurora is still classified as "For Official Use Only", I will not go into any technical details.

There are a number of issues about Aurora that are confusing including its name, what it does, how to detect it, and what could be vulnerable. As Aurora is still classified as "For Official Use Only", I will not go into any technical details.

First, I would like to address the confusion in the name Aurora. The Aurora I am referring to is the test the Idaho National Laboratory did for DHS in 2007 that destroyed a diesel generator with the consequent CNN tape. The reason DHS performed the test was to demonstrate that a cyber attack could destroy large rotating equipment (remember this was in 2007 long before Stuxnet). This is not the same as the Chinese attack on Google also named Aurora which has caused confusion.

Aurora is a gap in the protection of the electric grid that can be caused by cyber. It is a basic physics property - an out-of-phase condition - that cannot be seen by the operator and can NOT be mitigated by any traditional IT cyber mitigation. The only means to prevent an Aurora event is by physical hardware mitigation.

Aurora was demonstrated to be able to cause damage to a diesel generator. However, Aurora can cause damage to any load connected to the grid. Yet, Aurora is not addressed by the NERC CIPs or by the nuclear industry in NEI-08-09 - a second gap in protection of the electric grid.

I believe that if the Aurora vulnerability was discovered as part of a reliability test and the disclosure made to industry through traditional reliability channels, this problem would have been addressed. Because it was called a "cyber security" problem, it was sent through the security channels and effectively indefinitely deferred. This is probably one of the most glaring examples of the discontinuity between the NERC CIPs and grid reliability.

More later.

Joe Weiss

Sponsored Recommendations

Make Effortless HMI and PLC Modifications from Anywhere

The tiny EZminiWiFi is a godsend for the plant maintenance engineers who need to make a minor modification to the HMI program or, for that matter, the PLC program. It's very easy...

The Benefits of Using American-Made Automation Products

Discover the benefits of American-made automation products, including stable pricing, faster delivery, and innovative features tailored to real-world applications. With superior...

50 Years of Automation Innovation and What to Expect Next

Over the past 50 years, the automation technology landscape has changed dramatically, but many of the underlying industry needs remain unchanged. To learn more about what’s changed...

Manufacturing Marvels Highlights Why EZAutomation Is a Force to Be Reckoned With

Watch EZAutomation's recent feature on the popular FOX Network series "Manufacturing Marvels" and discover what makes them a force to be reckoned with in industrial automation...