Autonomous Cyber Protection Architecture for Nuclear-Powered Mega Datacenters

Full report

On this page

The Convergence of Hyperscale Computation and Advanced Nuclear Generation

The global computational infrastructure is undergoing a radical paradigm shift driven by the exponential power demands of artificial intelligence (AI), machine learning cluster fabric buildouts, and the training workloads associated with generative models. These AI-native network fabrics demand backend architectures with zero packet loss and sub-microsecond tail latencies, alongside massive power consumption1. A single 800G spine switch can draw upward of 3,000 watts under full load, representing roughly three times the power envelope of comparable platforms from just five years ago1. With global datacenter capacity additions forecast to exceed 35 gigawatts (GW) of critical IT load by 2030, operators are facing an untenable tension between necessary bandwidth upgrades, rising electricity prices, and corporate sustainability commitments1. To secure continuous, carbon-free, and deterministic baseload power, hyperscale datacenter operators are increasingly integrating their operations directly with nuclear energy assets. This manifests through the acquisition of existing commercial nuclear stations and forward-looking power purchase agreements for next-generation Small Modular Reactors (SMRs) and microreactors, creating dedicated "behind-the-meter" (BTM) energy ecosystems3. Initiatives such as Amazon's acquisition of the nuclear-powered datacenter campus adjacent to the Susquehanna Steam Electric Station, Google's agreements with Kairos Power, and Green Energy Partners' developments near the Surry Nuclear Station exemplify this aggressive strategic pivot3. However, the co-location of multi-gigawatt datacenter campuses with nuclear generation assets initiates a cyber-physical convergence of unprecedented complexity and consequence. This convergence unites the highly dynamic, interconnected, and rapidly evolving environment of Information Technology (IT) data fabrics with the deterministic, inherently air-gapped, and safety-critical domain of nuclear Operational Technology (OT)1. Modern industrial systems, including next-generation reactors, are transitioning from analog controls to digital instrumentation and remote autonomous operations to improve efficiency and reduce human intervention9. This digital transformation significantly expands the attack surface. Sophisticated nation-state adversaries and advanced persistent threats (APTs) continually seek to exploit vulnerabilities at the cyber-physical interface, utilizing the interconnected IT networks as a conduit to manipulate critical physical processes in the OT environment while evading traditional security measures11. Because modern cyberattacks—such as autonomous ransomware propagation or automated living-off-the-land techniques—occur at machine speed, human-in-the-loop incident response is fundamentally inadequate to prevent catastrophic physical outcomes. The protection of nuclear-powered mega datacenters requires the deployment of autonomous, intelligent, and mathematically bounded cyber defense architectures. These systems must seamlessly blend physical network isolation, zero-trust cryptographic identities, and advanced causal machine learning to anticipate, detect, and neutralize threats before they can impact reactor safety, grid stability, or datacenter availability.

Regulatory Frameworks and the Ambiguity of Hybrid Infrastructure

The deployment of a BTM nuclear-powered datacenter exists at the intersection of overlapping and occasionally conflicting regulatory jurisdictions. The autonomous cyber protection architecture must satisfy the exacting safety and security mandates of the nuclear regulatory authority while simultaneously adhering to the reliability standards governing the bulk electric grid.

Nuclear Regulatory Commission (NRC) Directives and Defense-in-Depth

In the United States, the cybersecurity posture of nuclear facilities is primarily governed by the Nuclear Regulatory Commission (NRC) through Title 10 of the Code of Federal Regulations, Part 73.54 (10 CFR 73.54). This federal regulation requires licensees to provide high assurance that digital computer and communication systems and networks are adequately protected against cyberattacks, up to and including the Design Basis Threat (DBT)13. The regulation mandates strict protection for systems associated with Safety, Security, and Emergency Preparedness (SSEP) functions, as well as any support systems whose compromise could adversely impact these critical operations14. Digital components executing these functions are classified as Critical Digital Assets (CDAs)16. The identification, continuous assessment, and architectural protection of CDAs are the fundamental pillars of a facility's cybersecurity program. Compliance with 10 CFR 73.54 is generally achieved by adhering to the operational methodologies outlined in NRC Regulatory Guide (RG) 5.71 and the industry-developed NEI 08-09 framework, which establish comprehensive, integrated defense-in-depth protective strategies14. For advanced reactors, SMRs, and microreactors, the NRC has developed forward-looking guidance, including Draft Regulatory Guide (DG) 5075 and Draft RG 5.96. These frameworks introduce a Tiered Cybersecurity Analysis (TCA) to promote security-by-design (SeBD) principles early in the engineering lifecycle, alleviating the burden of retrofitting security controls onto legacy designs18. The defense-in-depth strategy mandated by the NRC relies heavily on boundary control and fortification, requiring that systems of higher trust (e.g., reactor protection systems) remain logically, electrically, and physically isolated from systems of lower trust (e.g., datacenter enterprise networks)10. This requires strict enforcement of a "no-read-down, no-write-up" policy regarding data flows between security levels18.

Bulk Electric System Interconnection and NERC CIP Compliance

While the NRC exclusively governs the nuclear generation asset, the datacenter's power routing infrastructure, substations, and grid interconnections often fall under the jurisdiction of the North American Electric Reliability Corporation (NERC) Critical Infrastructure Protection (CIP) standards. NERC CIP standards are mandatory regulations, overseen by the Federal Energy Regulatory Commission (FERC), designed to protect the Bulk Electric System (BES) from cyber and physical threats21. The co-location of hyperscale datacenters with proprietary nuclear assets introduces significant regulatory friction regarding the definition of the BES. NERC's criteria broadly classify facilities operating at 100 kV and above, single generators exceeding 20 MVA, or aggregated plants exceeding 75 MVA as part of the BES22. SMRs powering gigawatt-scale datacenters easily surpass these thresholds. However, if the generation asset is deployed entirely BTM for the exclusive consumption of the datacenter, operators may argue that the facility functions solely for local distribution and does not impact bulk grid reliability2. Determining whether the nuclear-powered datacenter must adhere to NERC CIP requires rigorous engineering and legal evaluations, such as the FERC Order 888 seven-factor test, to legally differentiate local distribution from transmission assets24. If the facility is deemed part of the BES, the operator must comply with a stringent suite of standards (CIP-002 through CIP-014), encompassing the establishment of Electronic Security Perimeters (ESPs), strict personnel risk assessments, supply chain security protocols, and rapid cyber incident reporting21. Misclassification can lead to severe operational risks, millions of dollars in punitive fines, and highly disruptive regulatory audits21. The autonomous protection architecture must therefore bridge these divergent regulatory philosophies. It must natively enforce the deterministic, unidirectional data flows required by the NRC to protect CDAs, while concurrently supporting the robust auditing, dynamic supply chain verification, and third-party cloud interaction controls mandated by NERC CIP18.

Deterministic Network Topologies and Physical Isolation

The core physical foundation of an autonomous cyber protection system relies on an architecture that inherently restricts lateral movement while providing the high-fidelity operational telemetry required for advanced machine learning models. The classical Purdue Enterprise Reference Architecture—which relies on implicit trust within broad horizontal network tiers—is insufficient to secure the highly interconnected nature of a nuclear-powered mega datacenter1. The architecture must transition to integrate deterministic hardware isolation for critical assets alongside dynamic Zero Trust principles for the broader industrial control system.

Unidirectional Gateways and Optical Isolation Mechanisms

To satisfy the high-assurance requirements of 10 CFR 73.54 and NEI 08-09, the boundary between the nuclear facility's safety-critical control systems (Level 0/1/2) and all external networks must be deterministically isolated. The most effective mechanism to achieve this is the deployment of unidirectional gateways, commonly known as hardware data diodes14. A data diode physically restricts data transmission to a single direction utilizing a matched pair of optical components: a transmitter (Tx) situated on the high-security side and a receiver (Rx) on the low-security side. There is no physical circuitry enabling the receiver to transmit signals backward20. This design guarantees that high-fidelity operational data, sensor telemetry, and system states can be continuously streamed out of the reactor's local area networks for analysis in the datacenter's centralized monitoring environments, while simultaneously ensuring that no inbound communication can penetrate the safety boundary5. Even if an attacker possesses zero-day exploits or compromised credential access, the laws of physics prevent lateral movement into the safety systems30. However, the integration of data diodes necessitates specialized data ingestion and reconstruction pipelines. Modern industrial protocols generally rely on two-way handshakes (e.g., TCP) for connection establishment and reliability. To navigate the optical gap, industrial data platforms must deploy proxy servers that terminate the connection on the high-security side, encapsulate the payload, push it across the gap using asynchronous, stateless protocols (e.g., UDP), and subsequently reconstruct the connection on the low-security side5. This engineering ensures that enterprise historian databases (such as FactoryTalk Historian or AVEVA PI), OPC UA servers, and MQTT brokers receive uninterrupted time-series data with meticulously preserved source timestamps, values, units, and quality flags, without violating the physical security perimeter5.

Microsegmentation and Zero Trust Identity in OT Environments

While hardware data diodes physically secure the most critical safety systems, the balance of the nuclear OT environment, the datacenter cooling infrastructure, and the microgrid control planes must adopt a Zero Trust Architecture (ZTA) as delineated by NIST SP 800-20728. Historically, OT security relied upon Virtual Local Area Networks (VLANs) and static perimeter firewalls, creating massive zones of implicit trust. Once an attacker breached the perimeter, they could navigate the internal network with minimal resistance28. Microsegmentation addresses this inherent vulnerability by replacing broad network zones with hyper-granular, policy-driven security boundaries constructed around individual workloads, applications, and specific Programmable Logic Controllers (PLCs)28. In alignment with NIST SP 800-82 Rev. 3, microsegmentation drastically limits the "blast radius" of any potential compromise27. For instance, if a specialized thermal management controller within the datacenter is compromised via a supply chain attack, microsegmentation policies ensure the controller is strictly permitted to communicate solely with its designated supervisory server over required, predefined ports. The architecture explicitly drops any attempt by the compromised device to scan the network, initiate SSH connections, or access nuclear support systems28. Implementing microsegmentation within an OT environment presents unique engineering challenges. Active vulnerability scanning—standard practice in IT environments—can easily crash legacy PLCs and Remote Terminal Units (RTUs) that lack the processing capacity to handle unexpected traffic bursts or malformed packets35. Therefore, the architecture must leverage passive asset discovery through Deep Packet Inspection (DPI) to map communication dependencies without introducing disruptive traffic35. Once accurate communication baselines are established, enforcement is deployed seamlessly at the network edge or via distributed software-defined firewalls28. To cryptographically verify the identity of the interacting components, modern facilities are adopting identity frameworks such as SPIFFE (Secure Production Identity Framework for Everyone) and SPIRE (SPIFFE Runtime Environment)37. These open-source standards provide non-human, cryptographic workload identities based on deeply verifiable attributes. By integrating SPIFFE/SPIRE, the architecture ensures that communication between the datacenter's AI orchestration layer and the microgrid's energy management system is continuously authenticated and authorized, effectively nullifying traditional credential theft, replay, and impersonation attacks37.

Substation Synchronization and Protocol-Level Vulnerabilities

The interface between the nuclear generation asset and the gigawatt-scale datacenter consumption load is managed by complex digital substations utilizing the IEC 61850 global standard40. Unlike legacy substations that relied on miles of hardwired copper point-to-point connections, modern digital substations utilize IP-based Ethernet process buses for the rapid transmission of Sampled Measured Values (SMV) and Generic Object-Oriented Substation Events (GOOSE)40. This transition drastically reduces configuration costs and improves interoperability but exposes the physical power grid to network-borne cyber threats40.

The Precision Time Protocol (IEEE 1588) and Time Synchronization Attacks

The safe and correct functioning of an IEC 61850 digital substation relies entirely on hyper-accurate, microsecond-level time synchronization across geographically dispersed Intelligent Electronic Devices (IEDs) and Merging Units40. Operations such as current differential protection depend on Kirchhoff's Current Law, which requires synchronous measurements of current entering and leaving a protected zone to detect faults46. An error in synchronization as minuscule as 100 microseconds translates to a significant phase angle shift (approximately 2 degrees in a 50/60Hz system), which manifests mathematically as a false differential current46. If this artificial differential exceeds predefined trip thresholds, the protection relays will autonomously actuate, disconnecting the nuclear plant from the datacenter and resulting in an immediate, catastrophic loss of load46. To achieve this extreme synchronization accuracy, digital substations rely on the Precision Time Protocol (PTP), formally defined as IEEE 158840. According to IEC 61850-5, merging units must achieve an accuracy of ±4 microseconds, network delays must not exceed 2 microseconds, and sampled values must maintain an accuracy better than 1 microsecond46. While highly accurate, PTP is fundamentally vulnerable to Time Synchronization Attacks (TSAs), including delay attacks, rogue master clock injections, and precise timestamp manipulation45. An internal threat actor, or an adversary who has bypassed the electronic security perimeter, can intercept and delay PTP Sync and Follow\_Up messages. By applying subtle, selective packet delays, the attacker can gradually skew the local clocks of the IEDs without triggering immediate communication failure alarms45. This allows an adversary to induce physical grid failures entirely through the manipulation of timing data, bypassing traditional payload inspection firewalls. Autonomous protection of the PTP infrastructure requires a sophisticated, dual-pronged approach. First, the network topology must deploy Trusted Supervisor Nodes (TSN) or integrated security mechanisms within the switches themselves (such as MACsec) to cryptographically authenticate PTP traffic and monitor path delays in real time45. Second, the overarching autonomous system must ingest this timing data continuously to cross-validate it against physical models, ensuring that anomalous jitter is detected and the system fails-over to atomic or satellite-derived backup clocks before protective relays are inadvertently actuated40.

The Baseboard Management Controller (BMC) Threat Vector

While grid-level protocols govern the power flow, the hardware infrastructure within the datacenter itself harbors a profound vulnerability that requires targeted autonomous defense. In hyperscale environments, the sheer volume of server hardware necessitates remote, out-of-band management. This is almost universally facilitated by the Baseboard Management Controller (BMC), a specialized, highly privileged microcontroller embedded directly onto the motherboard of the compute nodes51. The BMC operates completely autonomously from the host CPU. It possesses its own dedicated processor (often ARM or MIPS-based), memory subsystem, non-volatile storage, operating system, and network stack51. Because the BMC draws power from the motherboard's standby rails, it remains active and accessible even when the primary server is powered off or the host operating system has crashed51. The BMC provides administrators with unprecedented hardware control, including remote power cycling, BIOS configuration alterations, serial-over-LAN, hardware health monitoring, and virtual media mounting via the Intelligent Platform Management Interface (IPMI) or the modern RESTful Redfish API51. However, this absolute hardware authority transforms the BMC into a prime target for advanced persistent threats (APTs) and sophisticated supply chain attacks. If an attacker compromises a BMC, they obtain "Ring \-3" privileges—granting them complete, unmitigated control over the physical server hardware while remaining entirely invisible to the host operating system's Endpoint Detection and Response (EDR) agents or hypervisor security controls52. A compromised BMC allows an attacker to execute stealthy persistence, manipulate the boot sequence, alter firmware, or facilitate destructive ransomware deployments across the cluster35. BMC vulnerabilities are historically systemic and pervasive. Many legacy BMCs ship with default hardcoded credentials, support obsolete and easily broken encryption protocols (e.g., SSLv2/v3), and store credential databases locally in unencrypted or weakly hashed formats53. Furthermore, modern BMC interfaces are susceptible to severe application-layer attacks. For example, the recently disclosed CVE-2025-55182 (React2Shell) vulnerability exposed a critical, maximum-severity unsafe deserialization flaw in the React Server Components handling logic57. This flaw allows an attacker to inject logic that the server interprets in a privileged context, enabling unauthenticated remote code execution via a single, specially crafted HTTP request57. Within hours of disclosure, threat intelligence observed massive, automated exploitation attempts by state-nexus actors utilizing tools like Nuclei to compromise exposed interfaces57. Additionally, vulnerability researchers recently disclosed CVE-2026-55040, demonstrating a high-impact exploit chain originally developed for the Pwn2Own hacking competition that successfully targets BMC interfaces to achieve unauthenticated RCE56. To autonomously protect against BMC-level threats, the architecture must strictly enforce out-of-band network isolation. BMC interfaces must reside on dedicated, physically isolated management VLANs with no direct routing to the production data plane or the public internet, enforcing a deny-by-default access control list51. Autonomous systems must continuously monitor BMC network traffic utilizing Deep Packet Inspection (DPI) to baseline normal telemetry, API calls, and configuration commands. Any deviation—such as a BMC attempting to initiate an outbound connection, an unexpected firmware flashing event, or the detection of anomalous IPMI payloads—must trigger the immediate, automated isolation of the affected management port by the Software Defined Network (SDN) controller52. Furthermore, the industry transition toward OpenBMC—an open-source Linux Foundation collaborative project—provides a pathway for greater transparency and security. By standardizing the firmware stack, operators can deploy cryptographically signed firmware, enforce secure boot hardware roots of trust, and integrate modern authentication mechanisms like mutual TLS (mTLS) to drastically reduce the supply chain attack surface and mitigate firmware rootkits53.

Machine Learning Paradigms for Autonomous Detection

With a hardened, deterministic architectural foundation established, the facility must deploy intelligent systems capable of continuously monitoring the massive influx of telemetry to detect stealthy, cyber-physical attacks. Modern threat actors increasingly utilize "living off the land" techniques, manipulating valid operational commands to alter physical processes in ways that easily evade traditional signature-based Intrusion Detection Systems (IDS)12. The autonomous protection system must therefore rely on advanced machine learning algorithms capable of learning the highly complex, non-linear dynamics of both a nuclear reactor and a hyperscale datacenter. The evaluation and benchmarking of machine learning paradigms for nuclear cybersecurity have been rigorously executed utilizing advanced physical testbeds. Argonne National Laboratory’s Mechanisms Engineering Test Loop (METL)—an experimental facility designed to replicate the thermal-hydraulic characteristics, temperature profiles, flow measurements, and sodium handling procedures of a sodium-cooled fast reactor (SFR)—provides a highly realistic operational environment for validating these algorithms absent radiological risk11. Extensive empirical evaluations across the METL infrastructure, encompassing 300 rigorous experiments across 15 distinct attack scenarios and five severity tiers, alongside analyses of standard ICS datasets (e.g., SWaT, WADI, HAI), reveal significant variance in algorithmic efficacy based on the specific nature of the cyber-physical threat11.

1. Change Point Detection: This paradigm utilizes streaming statistical baseline learning to identify abrupt transitions in sensor data patterns. It employs adaptive statistical monitoring—tracking mean, standard deviation, and coefficient of variation—combined with CUSUM scores, window-based z-scores, and Bayesian change probabilities12. In the METL evaluations, Change Point Detection emerged as the leading statistical approach, yielding a mean Area Under the Curve (AUC) performance of 0.78511. It proved particularly adept at identifying multi-site coordinated attacks (achieving an AUC of 0.739), though it struggled with slow, precision trust decay attacks12.

2. Long Short-Term Memory (LSTM) Autoencoders: Recurrent neural networks, specifically LSTMs, are exceptionally adept at capturing the complex temporal dependencies inherent in physical processes. By training an autoencoder to reconstruct normal sequence data, the system flags sequences with high reconstruction errors as anomalous9. In METL tests utilizing a 4-layer tapering architecture (40 → 32 → 24 → 16 hidden units) processing 50-timestep sequences, LSTM models successfully identified operational anomalies, achieving a mean AUC of 0.63612.

3. Dependency Violation Analysis: This approach implements a three-analyzer ensemble including correlation analysis, Granger causality analysis with AIC/BIC-optimized lag selection, and Random Forest analysis. By monitoring the 100 most statistically significant sensor pairs with 95th percentile detection thresholds, this method achieved a mean AUC of 0.621 in the METL environment11.

4. Isolation Forest Machine Learning (IFML): IFML is an unsupervised anomaly detection technique that isolates anomalies rather than profiling normal data points. Because anomalies in highly optimized systems like nuclear reactors are "few and different," IFML excels at rapidly partitioning the data space to isolate malicious events without requiring labeled training datasets66. In digital twin simulations of the AGN-201 nuclear reactor, IFML achieved a 99% accuracy rate in determining off-normal conditions, identifying distinct reactivity alterations and operational responses with minimal computational overhead66.

Causal Digital Twins (CDTs) and Cyber-Physical Reasoning

While correlation-based deep learning algorithms (such as LSTMs and standard autoencoders) provide exceptional pattern recognition capabilities, they possess a fundamental limitation in the context of cyber-physical security: their inability to distinguish between true causality and mere statistical association49. For example, a sudden spike in reactor coolant temperature strongly correlates with an anomaly. However, a correlation-based model cannot autonomously determine whether that spike was caused by a malicious False Data Injection Attack (FDIA), a degrading physical sensor, or a legitimate load-following request generated by the datacenter's AI training cycle49. This ambiguity inevitably leads to high false-positive rates, rendering fully autonomous response highly dangerous in a nuclear context. To enable true, bounded autonomous decision-making, the protection architecture must progress from correlation to causation through the implementation of Causal Digital Twins (CDTs). A conventional digital twin provides a high-fidelity virtual replica of the physical system, continuously updated with real-time sensor data to mirror system state, often utilized for condition monitoring, simulation, and predictive maintenance67. However, standard digital twins lack the structural causal models required for robust, adversarial cybersecurity49. The CDT framework explicitly integrates causal inference theory with physics-based digital twin modeling, allowing the autonomous system to evaluate three distinct levels of causal reasoning49:

1. Association (Level 1): Observing pattern changes and statistical correlations. Example: The system observes a correlation between an open valve and increased pressure. Formally represented as the conditional probability [Figure omitted from source export]68.

2. Intervention (Level 2): Understanding the direct effect of a forced action or perturbation. Example: If the system were to force the valve closed, what would physically happen to the pressure? This utilizes the mathematical do-calculus operator [Figure omitted from source export], which simulates a randomized controlled experiment by severing all incoming causal edges to the variable being manipulated68. This completely eliminates confounding variables and spurious correlations.

3. Counterfactuals (Level 3): Retrospective analysis under altered conditions. Example: Given that the pressure spiked and the system crashed, what would have happened if the malicious control command had been blocked?

By maintaining a continuously updated causal graph of the entire nuclear-datacenter microgrid, the CDT generates physical predictions based on immutable thermodynamic, hydraulic, and electrical laws49. If an attacker injects False Data to manipulate a sensor reading while leaving the actual physical state of the pump unchanged, the CDT detects the discrepancy instantaneously because the causal mechanisms of the physical plant no longer align with the manipulated data stream48. Extensive evaluations of the CDT framework on standard ICS datasets—including the Secure Water Treatment (SWaT) testbed, the Water Distribution (WADI) testbed, and the HIL-based Augmented ICS Security (HAI) dataset—demonstrate transformative improvements in autonomous detection capabilities. The CDT framework achieved F1-scores of 0.944 ([Figure omitted from source export]) on SWaT, 0.902 ([Figure omitted from source export]) on WADI, and 0.923 ([Figure omitted from source export]) on HAI, outperforming seven baseline deep learning methods with high statistical significance ([Figure omitted from source export])49. Furthermore, the framework demonstrated physical constraint compliance of 90.8% and achieved a synthetic ground truth testing structural Hamming distance of 0.1349. More crucially for autonomous operations, by applying causal interventions to eliminate confounding variables, the framework reduced false positives by 74% and improved root-cause analysis accuracy to 78.4% (compared to just 48.7% for conventional methods)49. This causal capability provides the foundation for bounded autonomous response: when the CDT isolates an anomaly with absolute causal certainty to a specific network node or specific False Data Injection, the system can autonomously quarantine that node or discard the corrupted packets without fear of inadvertently disrupting a legitimate, physically-driven operational transient49.

Microgrid Resilience and Practical Testbed Validation

The theoretical models underpinning autonomous detection and response must be rigorously validated in physical environments before commercial deployment. National laboratories serve as the vanguard for this critical validation phase. Facilities such as the Idaho National Laboratory (INL) offer full-scale power grid test beds, critical infrastructure test ranges (CITRC), and specialized microreactor emulation environments (such as the JUMP program and the Systems Integration Laboratory (SIL)) to safely simulate cyberattacks against coupled energy systems76. INL's research into autonomous grid protection has yielded practical hardware solutions, most notably the Constrained Cyber Communication Device (C3D). Tested at the CITRC against live remote access attempts indicative of an advanced cyberattack, the C3D device autonomously reviewed and filtered commands sent to protective relay devices. It successfully identified abnormal commands and blocked them automatically, preventing the simulated attack from accessing or damaging critical power grid components78. The integration of devices like C3D alongside rapidly deployable technologies such as INL's Microgrid in a Box and the liquid-metal cooled MARVEL microreactor project demonstrates the tangible progression toward resilient, self-defending energy infrastructures76. By subjecting proposed autonomous algorithms, unidirectional data diodes, and Zero Trust microsegmentation rules to simulated cyber-physical attacks within these highly controlled environments, operators can empirically validate the resilience of their architectures76.

Human-Machine Teaming and the Execution of Bounded Autonomy

The deployment of Artificial Intelligence for the active, autonomous defense of a nuclear-powered mega datacenter introduces profound operational risks if not carefully constrained. The capability of a machine learning system to misclassify data, generate false positives, or experience an "AI hallucination" is a well-documented phenomenon that poses severe risks in safety-critical environments79. In a commercial IT datacenter, a false positive might result in a temporarily blocked IP address or a delayed workload. However, in the context of a microgrid supplying gigawatts of power from an active nuclear reactor, an AI hallucination that autonomously triggers an emergency shutdown, manipulates cooling pumps, or actuates switchyard breakers could induce severe thermal-hydraulic stress on the reactor, trigger cascading load shedding, and cause catastrophic, irreversible hardware failure across the datacenter40. To harness the machine-speed reaction time of autonomous defense while unconditionally preserving the safety envelope of the nuclear asset, the protection architecture must implement a framework of "bounded autonomy" managed through a strict, deterministic response matrix62. Bounded autonomy dictates that the authority of the AI to execute defensive actions is strictly limited by the criticality of the targeted system, the reversibility of the automated action, and the causal confidence generated by the Causal Digital Twin49.

The Tiered Autonomous Decision Matrix

The decision architecture determines the acceptable level of autonomy based on the Purdue Model / NEI 08-09 security level of the compromised asset:

1. Fully Autonomous Remediation (IT and Cloud Edge \- Levels 4/5): For network assets residing in the enterprise IT perimeter, the hypervisor management plane, or non-critical datacenter workloads, the autonomous system operates with high authority. If the deep learning ensemble detects a high-confidence indicator of compromise (e.g., an attempt to exploit the React2Shell vulnerability on an exposed server component), the system autonomously enacts microsegmentation policies to quarantine the node, revoke its SPIFFE identity, and sever its network connections28. Because the loss of a single compute node or virtual machine is easily absorbed by the datacenter's orchestration software, the risk of action is low, and the speed of machine-driven containment is prioritized.

2. Supervised Autonomy (Supervisory Control and Microgrid Level \- Levels 2/3): For systems managing the energy flow between the reactor and the datacenter, the system employs supervised autonomy. If the CDT detects anomalous behavior—such as a PTP delay attack altering IEC 61850 timing data in the digital substation—it autonomously executes non-kinetic defensive maneuvers. It may silently re-route traffic, discard malicious packets via software-defined networking rules (similar to the C3D device logic), or switch to redundant timing sources43. It prepares a highly structured mitigation plan for human review but does not actuate physical breakers, disconnect generators, or alter power generation parameters without explicit human operator authorization45.

3. Human-in-the-Loop Override (Nuclear Safety Systems \- Levels 0/1): For the Critical Digital Assets (CDAs) directly controlling the reactor core, coolant flow, reactivity control, and emergency core cooling systems, the autonomous AI system has absolutely zero authority to execute physical control changes. The NRC heavily restricts modifications to safety-related equipment, requiring rigorous engineering evaluation prior to implementation15. If an anomaly is detected deeply within the nuclear OT boundary, the autonomous system immediately severs all inbound data paths, revokes all remote engineering access, and "islands" the facility10. However, physical control of the reactor defaults entirely to human operators and the hardwired, deterministic analog/digital safety systems designed to safely shut down the reactor based on immutable physical parameters10.

This bounded approach leverages the rapid processing speed of AI to contain threats in the highly vulnerable, rapidly shifting IT and auxiliary OT spaces while relying on immutable physics and professional human judgment to manage the nuclear core, ensuring compliance with global nuclear safety standards and maintaining absolute system resilience31.

Works cited

1. Ethernet Switch Market Size, Share, Growth 2035 \- Market Research Future, https://www.marketresearchfuture.com/reports/ethernet-switch-market-4576

2. Electrotech Moneyball \- Carnegie Mellon Institute for Strategy & Technology, https://www.cmu.edu/cmist/tech-and-policy/electrotech-moneyball/index.html

3. Nuclear Innovation and Newly Emerging Disruptive Technologies: Recent Initiatives by Industry, Research Laboratories and Governments, https://www.oecd-nea.org/upload/docs/application/pdf/2025-11/nuclear\_innovation\_and\_newly\_emerging\_disruptive\_technologies\_\_recent\_initiatives\_by\_industry\_research\_laboratories\_and\_gove.pdf

4. World Energy Markets Observatory 2024 | 26th Edition \- Capgemini, https://www.capgemini.com/wp-content/uploads/2024/10/WEMO24-Outlook-and-Articles\_compressed.pdf

5. Senior OT Data Engineer @ Valar Atomics | Simplify Jobs, https://simplify.jobs/p/2eb7a9c2-81bd-4642-833b-92ad757f50a8/Senior-OT-Data-Engineer

6. Compute in America: A Policy Playbook \- IFP.org, https://ifp.org/special-compute-zones/

7. World Energy Markets Observatory 2024 | 26th Edition | Capgemini, https://www.capgemini.com/wp-content/uploads/2024/10/World-Energy-Markets-Observatory-2024\_26th-Edition.pdf

8. New US cybersecurity implementation plan for energy modernization rolled out, https://industrialcyber.co/utilities-energy-power-water-waste/new-us-cybersecurity-implementation-plan-for-energy-modernization-rolled-out/

9. Explainable Unsupervised Multi-Anomaly Detection and Temporal Localization in Nuclear Times Series Data with a Dual Attention \- arXiv, https://arxiv.org/pdf/2509.12372

10. Proposed Classifications of Remote Operations for Nuclear Reactors Based on Physical and Cybersecurity Considerations \- Sandia National Laboratories, https://www.sandia.gov/app/uploads/sites/273/2026/01/Remote-Operations-for-Advanced-Reactors-Based-on-Physical-and-Cybersecurity.pdf

11. A Comprehensive AI-Driven Cybersecurity Framework for Advanced Nuclear Reactor Control Systems \- Sandia National Laboratories, https://www.sandia.gov/app/uploads/sites/273/2026/01/AI-Driven-Cybersecurity-Framework-1.pdf

12. AI-Driven Cybersecurity Testbed for Nuclear Infrastructure: Comprehensive Evaluation Using METL Operational Data \- arXiv, https://arxiv.org/html/2512.01727v1

13. NRC 10 CFR 73.54 \- Nuclear Facility Cybersecurity \- Overview, Controls & Compliance Guide | The Art of Service, https://theartofservice.com/frameworks/nrc-10-cfr-73-54-nuclear-facility-cybersecurity

14. REGULATORY GUIDE \- National Security Archive, https://nsarchive.gwu.edu/sites/default/files/documents/2812885/Document-02-Nuclear-Regulatory-Commission.pdf

15. 10 CFR 73.54 \-- Protection of digital computer and communication systems and networks. \- eCFR, https://www.ecfr.gov/current/title-10/chapter-I/part-73/subpart-F/section-73.54

16. Risk-Informing Critical Digital Assets (CDAs) for Nuclear Power Systems \- OSTI.GOV, https://www.osti.gov/servlets/purl/1997744

17. Cybersecurity in the Nuclear Industry: US and UK Regulation and the Sellafield Case, https://www.womblebonddickinson.com/us/insights/articles-and-briefings/cybersecurity-nuclear-industry-us-and-uk-regulation-and-sellafield

18. Wireless Technologies Cybersecurity Evaluation and Testing Framework for Safety Functions \- ANS / Digital Nuclear Library, https://epubs.ans.org/download/?a=58921

19. Advanced Reactor Safeguards & Security Design of Defensive Cybersecurity Architectures for High Temperature, Gas-Cooled R \- Sandia National Laboratories, https://www.sandia.gov/app/uploads/sites/273/2024/11/Design-of-Defensive-Cybersecurity-Architectures-for-High-Temperature-Gas-Cooled-Reactors.pdf

20. Cyber security | DACS, SDD, CySEAL, H/W & S/W Design \- NSE Technology, https://www.nsetec.com/sub/cyber/cyber.html

21. What Are NERC CIP Standards and Why Are They Important for Power Utilities?, https://www.energycentral.com/intelligent-utility/post/what-are-nerc-cip-standards-and-why-are-they-important-power-utilities-UqvObSo4br24qob

22. NERC CIP standards and cloud computing \- Azure Government \- Microsoft Learn, https://learn.microsoft.com/en-us/azure/azure-government/documentation-government-overview-nerc

23. 1 UNITED STATES OF AMERICA BEFORE THE FEDERAL ENERGY REGULATORY COMMISSION ) Reliability Technical Conference ) Docket No. AD18, https://www.ferc.gov/sites/default/files/2020-08/Rathbun-Microsoft.pdf

24. Distribution vs Sub-Transmission vs BES | Interconnection Guide \- Keentel Engineering, https://keentelengineering.com/distribution-sub-transmission-bes-interconnection-guide

25. AI Power Becomes National-Defense Infrastructure: DPA Section 303, Large-Load Interconnection, and Grid Equipment Scarcity Reprice the Compute Stack \- Atlas Peak Research, https://www.atlaspeakresearch.com/report/56c3d4

26. NERC CIP: We're as far from the cloud as ever \- Energy Central, https://www.energycentral.com/intelligent-utility/post/nerc-cip-we-re-far-cloud-ever-WKa8F5voUwsCwoi

27. What is OT Cybersecurity? \- Software Toolbox, https://softwaretoolbox.com/resources/what-is-ot-cybersecurity

28. Microsegmentation in Practice: A Step-by-Step Framework for Zero Trust Security, https://thehardenedlayer.com/2026/04/09/microsegmentation-in-practice-framework-for-zero-trust/

29. What Is the Purdue Model? Definition, Level & Best Practices \- SentinelOne, https://www.sentinelone.com/cybersecurity-101/cybersecurity/what-is-the-purdue-model/

30. GE Vernova's Cybersecurity Solution, https://www.gevernova.com/gas-power/products/digital-and-controls/cybersecurity/otarmor

31. NUCLEAR REACTORS, MATERIALS, AND WASTE SECTOR CYBERDEPENDENCIES \- Public Intelligence, https://info.publicintelligence.net/OCIA-NuclearCyberdependency.pdf

32. Zero Trust for SCADA: A Practical Implementation Guide \- Merobix, https://www.merobix.com/blog/zero-trust-scada-architecture

33. Microsegm entation vs. VLAN Segmentat ion for OT: Which Prevents Lateral Movement \- TerraZone, https://terrazone.io/microsegmentation-vs-vlan-segmentation-ot-lateral-movement/

34. Towards Net Zero Resilience: A Futuristic Architectural Strategy for Cyber-Attack Defence in Industrial Control Systems (ICS) and Operational Technology (OT) \- SciOpen, https://www.sciopen.com/article/10.32604/cmc.2024.054802

35. Securing Operational Technology, ICS, and SCADA Systems \- CVEFeed.io Blog, https://blog.cvefeed.io/securing-operational-technology-ics-and-scada-systems/

36. How Can You Improve IoT Device Visibility on My Network? \- Elisity, https://www.elisity.com/blog/how-can-i-improve-iot-device-visibility-on-my-network

37. A National Cyber Defense Framework: Architecting Federated, AI-Powered, Zero-Trust Security at Scale | TechRxiv, https://www.techrxiv.org/doi/10.36227/techrxiv.175321961.11008476

38. Workload Identity and Access Management Market Research Report 2034 \- Dataintelo, https://dataintelo.com/report/workload-identity-and-access-management-market

39. Establishing Workload Identity for Zero Trust CI/CD: From Secrets to SPIFFE-Based Authentication \- arXiv, https://arxiv.org/html/2504.14760v1

40. Attacking IEC 61850 Substations by Targeting the PTP Protocol \- MDPI, https://www.mdpi.com/2079-9292/12/12/2596

41. Cyber Security Challenges in Heterogeneous ICT Infrastructures of Smart Grids \- Journal of Communications, https://www.jocm.us/uploadfile/2013/0827/20130827022712405.pdf

42. Digital Substation Challenges: IEC 61850 & Cyber Risks, https://keentelengineering.com/digital-substation-challenges-iec-61850-cybersecurity

43. Smart High Voltage Substation Based on IEC 61850 Process Bus and IEEE 1588 Time Synchronization | Request PDF \- ResearchGate, https://www.researchgate.net/publication/224189804\_Smart\_High\_Voltage\_Substation\_Based\_on\_IEC\_61850\_Process\_Bus\_and\_IEEE\_1588\_Time\_Synchronization

44. Evaluating Security Mechanisms of Substation Automation Systems \- DiVA Portal, https://www.diva-portal.org/smash/get/diva2:1801364/FULLTEXT01.pdf

45. A Security Enhancement of the Precision Time Protocol Using a Trusted Supervisor Node, https://www.mdpi.com/1424-8220/22/10/3671

46. Time Synchronization Techniques in the Modern Smart Grid: A Comprehensive Survey, https://www.mdpi.com/1996-1073/18/5/1163

47. Precision Time Protocol under Synchronization Attack \- CORE, https://core.ac.uk/download/646139420.pdf

48. Deep Learning in Cybersecurity: A Survey \- Scribd, https://www.scribd.com/document/694839578/Paper-4

49. Causal Digital Twins for Cyber-Physical Security: A Framework for Robust Anomaly Detection in Industrial Control Systems \- ResearchGate, https://www.researchgate.net/publication/396458282\_Causal\_Digital\_Twins\_for\_Cyber-Physical\_Security\_A\_Framework\_for\_Robust\_Anomaly\_Detection\_in\_Industrial\_Control\_Systems

50. Advanced Techniques for Monitoring and Detecting Cyber-Physical Attacks on IEC 61850 Smart Grid Substations, https://spectrum.library.concordia.ca/996347/1/Albarakati\_PhD\_F2025.pdf

51. What is Server BMC? Guide to Baseboard Management Controller \- Simcentric, https://www.simcentric.com/america-dedicated-server/what-is-server-bmc-guide-to-baseboard-management-controller/

52. BMC in Servers in 2026: Functions, Risks, and Hardening Best Practices \- Servermall, https://servermall.com/blog/bmc-in-the-server-features-security-and-best-practices/

53. Intelligent Platform Management Interface \- Wikipedia, https://en.wikipedia.org/wiki/Intelligent\_Platform\_Management\_Interface

54. Accessing Onboard Server Sensors for Energy Efficiency in Data Centers, https://datacenters.lbl.gov/sites/default/files/FINAL%20Accessing%20Onboard%20Server%20Data%209-20-2021%20%281%29.pdf

55. IPMI Security Vulnerabilities \- Cisco.com, https://sec.cloudapps.cisco.com/security/center/resources/ipmi\_vulnerabilities.html

56. Findings \- Support \- runZero, https://help.runzero.com/docs/em-findings/

57. React2Shell and related RSC vulnerabilities threat brief- early exploitation activity and threat actor techniques | Cloudflare Blog, https://blog.cloudflare.com/react2shell-rsc-vulnerabilities-exploitation-threat-brief/

58. Empirical Study on BMC Firmware Vulnerabilities: Root Causes and Architectural Insights \- Cloudfront.net, https://d2j16w31g89z0j.cloudfront.net/site/icoin2026/abs/W3-04.pdf

59. RunBMC: OCP hardware spec solves data center BMC pain points \- Dropbox Tech Blog, https://dropbox.tech/infrastructure/runbmc-ocp-hardware-spec-solves-data-center-bmc-pain-points

60. Low Level PC/Server Attack & Defense Timeline — By @XenoKovah of @DarkMentorLLC, https://darkmentor.com/timeline.html

61. Declarative Power Sequencing using a CPLD \- Research Collection | ETH Library, https://www.research-collection.ethz.ch/bitstreams/0330c896-865a-4f66-b027-a66667064c5e/download

62. Benchmarking Machine Learning based Detection of Cyber Attacks for Critical Infrastructure, https://www.researchgate.net/publication/358185608\_Benchmarking\_Machine\_Learning\_based\_Detection\_of\_Cyber\_Attacks\_for\_Critical\_Infrastructure

63. Akshay Dave's research works \- ResearchGate, https://www.researchgate.net/scientific-contributions/Akshay-J-Dave-2214263422

64. AI-Driven Cybersecurity Testbed for Nuclear Infrastructure: Comprehensive Evaluation Using METL Operational Data \- arXiv, https://arxiv.org/pdf/2512.01727

65. Survey of Deep Learning Approaches for Securing Industrial Control Systems: A Comparative Analysis | Request PDF \- ResearchGate, https://www.researchgate.net/publication/391998635\_Survey\_of\_Deep\_Learning\_Approaches\_for\_Securing\_Industrial\_Control\_Systems\_A\_Comparative\_Analysis

66. Autonomous anomaly detection of proliferation in the AGN-201 nuclear reactor digital twin \- OSTI.GOV, https://www.osti.gov/servlets/purl/2503491

67. Digital Twins for Clean Energy Systems: A State-of-the-Art Review of Applications, Integrated Technologies, and Key Challenges \- MDPI, https://www.mdpi.com/2071-1050/18/1/43

68. Causal Digital Twins for cyber-physical security in water systems: A framework for robust anomaly detection \- ResearchGate, https://www.researchgate.net/publication/398808814\_Causal\_Digital\_Twins\_for\_cyber-physical\_security\_in\_water\_systems\_A\_framework\_for\_robust\_anomaly\_detection

69. Digital twins as decision infrastructure: evolution, architecture, and research roadmap, https://www.tandfonline.com/doi/full/10.1080/20964471.2026.2678046

70. Digital twin: Data exploration, architecture, implementation and future \- PMC, https://pmc.ncbi.nlm.nih.gov/articles/PMC10912257/

71. Advanced manufacturing and digital twin technology for nuclear energy \- Frontiers, https://www.frontiersin.org/journals/energy-research/articles/10.3389/fenrg.2024.1339836/full

72. Advanced manufacturing and digital twin technology for nuclear energy \- ResearchGate, https://www.researchgate.net/publication/378258863\_Advanced\_manufacturing\_and\_digital\_twin\_technology\_for\_nuclear\_energy

73. Multi-step attack detection in industrial control systems using causal analysis | Request PDF, https://www.researchgate.net/publication/362269668\_Multi-step\_attack\_detection\_in\_industrial\_control\_systems\_using\_causal\_analysis

74. An AI-Driven Thermal-Fluid Testbed for Advanced Small Modular Reactors: Integration of Digital Twin and Large Language Models \- arXiv, https://arxiv.org/html/2507.06399v1

75. (PDF) Information-Theoretic Digital Twins for Stealthy Attack Detection in Industrial Control Systems: A Closed-Form KL Divergence Approach \- ResearchGate, https://www.researchgate.net/publication/401469168\_Information-Theoretic\_Digital\_Twins\_for\_Stealthy\_Attack\_Detection\_in\_Industrial\_Control\_Systems\_A\_Closed-Form\_KL\_Divergence\_Approach

76. Celebrating INL's legacy of innovation \- Idaho National Laboratory, https://inl.gov/feature-story/celebrating-inls-legacy-of-innovation/

77. Nation's First Small Modular Reactor Plant to Power Nuclear Research at Idaho National Laboratory | Department of Energy, https://www.energy.gov/ne/articles/nations-first-small-modular-reactor-plant-power-nuclear-research-idaho-national

78. Five INL innovations that are changing the world \- Idaho National Laboratory, https://inl.gov/feature-story/five-inl-innovations-that-are-changing-the-world/

79. Artificial intelligence \- Wikipedia, https://en.wikipedia.org/wiki/Artificial\_intelligence

80. Human judgement remains central to the launch of nuclear weapons. But experts say it's a matter of when, not if, artificial intelligence will get baked into the world's most dangerous systems. : r/Futurology \- Reddit, https://www.reddit.com/r/Futurology/comments/1mmfibv/nuclear\_experts\_say\_mixing\_ai\_and\_nuclear\_weapons/