Nuclear Cybersecurity Education : A Collaborative, Multi-Format Approach Using the Asherah Nuclear Power Plant Simulator 2.0

Smith, Paul and Zerphy, Matthew and Berman, Gustavo and Bradbury, Matthew and Busquim e Silva, Rodney and El-Khatib, Khalil and Paulino Marques, Ricardo and Meyers, Gary and Nolan, Hayden (2026) Nuclear Cybersecurity Education : A Collaborative, Multi-Format Approach Using the Asherah Nuclear Power Plant Simulator 2.0. In: International Conference on Computer Security in the Nuclear World: Securing the Future :. International Atomic Energy Agency, AUT. (In Press)

Text (CyberCon2026 (1))
CyberCon2026_1_.pdf - Accepted Version
Available under License None.
Download (271kB)

Abstract

The expansion of digital systems in nuclear facilities has created a growing need for professionals with expertise in operational technology (OT) cybersecurity. To address this demand, multiple universities are partnering with the International Atomic Energy Agency (IAEA) to develop and deliver nuclear cybersecurity education using the Asherah Nuclear Power Plant Simulator (ANS). The latest version, ANS 2.0, is a modular, containerized environment that integrates information technology (IT) and OT systems in a representative nuclear facility context, including digital instrumentation and control (I\&C), human-machine interfaces (HMI), and Security Information and Event Management (SIEM). It enables learners to explore cyberattack scenarios, analyze network traffic, and practice incident response in a secure, hands-on setting. ANS 2.0 has been incorporated into semester-long graduate and undergraduate courses, micro-credential programs, and short workshops, serving students from nuclear engineering, computer science, information sciences, cybersecurity, and international affairs in both resident and online settings. Instructional content spans from policy and regulatory analysis to technical aspects such as attack scripting, protocol evaluation, and controller resilience design. Pre- and post-course assessments and surveys track learning outcomes and guide improvements. The paper presents an overview of ANS 2.0 and summarizes the wide range of educational initiatives it supports. Lessons learned are discussed, including findings from surveying engaged learners. The aim is to share experiences so that educational institutions in Member States can engage through the IAEA International Nuclear Security Education Network (INSEN) to develop similar programs and expand nuclear cybersecurity workforce capacity.