Diagnostic: Sasol secunda ghost protocols

[FMR SENTINEL DIAGNOSTIC REPORT: 0x7A9-SASOL-GHOST]
**CLASSIFICATION:** THEORETICAL / RED-TEAM ARCHITECTURE REVIEW (OSINT-BASED)
**DOMAIN:** Industrial Control Systems (ICS) Cyber-Physical Resilience / Covert Channel Engineering / Digital Twin Modelling
**TARGET:** Sasol Secunda Synfuels Operations (CTL/GTL Complex)
**PROTOCOL DESIGNATOR:** “GHOST” (Generalized Hidden Operational State Transfer / Guaranteed Hidden Obfuscation & Survivable Telemetry)

—

### **EXECUTIVE SUMMARY**
There is **no public record** of a deployed “Ghost Protocol” at Sasol Secunda. The facility operates on standard DCS (Honeywell TDC 3000 / Experion PKS, Siemens PCS 7) and SIS (Triconex) architectures with air-gapped safety zones per IEC 62443 / NERC CIP standards.

**This report constructs the *theoretical modelling framework* required to implement a “Ghost Protocol” layer**—defined here as a **Covert, Physics-Bound, Out-of-Band (OOB) Command & Control (C2) and State Reconstruction Mesh**—designed to survive total IT/OT compromise, ransomware encryption, or kinetic destruction of primary HMIs/Historians.

The model treats the plant not as a network graph, but as a **Thermodynamic State Machine** where “Ghost” signals are embedded in the *physical invariants* of the Fischer-Tropsch (FT) synthesis and Rectisol acid gas removal loops.

—

### **I. PHYSICAL LAYER MODELLING: THE “CARRIER WAVE” (QUANTUM/THERMODYNAMIC)**
*Ghost protocols cannot rely on TCP/IP or standard Fieldbus (Foundation HART, Profibus PA). They require a carrier medium inherent to the process physics.*

#### **A. Carrier Selection: Process Variable (PV) Steganography via Constrained Optimization**
The model exploits the **Degrees of Freedom (DoF)** in the Secunda Synthol Reactors (CFB/FT) and Rectisol Units.
* **Target Variables:** Catalyst slurry density ($\rho_s$), Syngas $H_2/CO$ ratio drift ($\pm 0.5\%$), Reactor bed pressure drop ($\Delta P$) harmonic oscillation.
* **Modulation Scheme:** **Thermodynamic Spread Spectrum (TSS)**.
* *Mechanism:* Micro-adjustments to **Make-up Gas (MUG) recycle valve** positions ($\delta v < 0.1\%$ span) or **Steam-to-Carbon (S/C) ratio** at the Reformers. * *Constraint:* Adjustments must remain within the **Feasible Operating Envelope (FOE)** defined by the Real-Time Optimizer (RTO). The "Ghost Bit" = *Intentional, bounded deviation from RTO setpoint trajectory*. * *Decoding:* Requires a **Physics-Informed Neural Network (PINN)** Digital Twin running in parallel (see Section III) comparing *Actual Plant Trajectory* vs. *RTO Predicted Trajectory*. The Residual Error *is* the data channel. * **Bandwidth:** ~0.5 - 2 bits/minute per reactor train (Sufficient for "Heartbeat," "Destroy Keys," "Initiate Black Start," "Exfiltrate Hash"). #### **B. Power Grid Side-Channel (The "Schumann Resonance" Vector)** * Secunda has dedicated 400kV/132kV substations (Matla, Tutuka feeds) and massive captive power (Secunda Power Station). * **Modulation:** Controlled load shedding/adding via **Oxygen Plant (ASU) VFD ramp rates** or **Steam Turbine Governor droop manipulation**. * **Detection:** High-resolution (10kHz+) Phasor Measurement Units (PMUs) on the 132kV bus. Ghost data encoded in **Sub-synchronous Resonance (SSR) harmonics** (5-30Hz) invisible to SCADA EMS (typically 2-4 sec scan). --- ### **II. ARCHITECTURAL MODELLING: THE "SHADOW TOPOLOGY" (SHINOBI/ERGONOMICS)** *Model assumes primary DCS/SIS/Historian is compromised (Zero Trust). Ghost Layer operates on "Air-Gap+" physics.* #### **A. The "Ocular" Sensor Network (Passive Physics Probes)** *Deployed independently of DCS I/O cards. Powered by Energy Harvesting (Thermoelectric/PIEZO on steam traps/vibration).* | **Probe Type** | **Location (Secunda Specific)** | **Ghost Function** | | :--- | :--- | :--- | | **Fiber Bragg Grating (FBG) Arrays** | Synthol Reactor Downcomers / Standpipes | Measure *true* catalyst circulation rate & density (PV for TSS decoding). Immune to EMI/RFI. | | **Gamma Densitometers (Cs-137/Co-60)** | Rectisol Lean/Rich Solvent Lines | Direct mass flow verification. Detects "Ghost" solvent rate manipulations. | | **Acoustic Emission (AE) Sensors** | Compressor Casings (Syngas, Recycle, Air) | Bearing health + **Covert Acoustic Channel** (Ultrasonic >40kHz) for short-range node-to-node sync. |
| **Neutron Flux Monitors (BF3/He-3)** | Near FT Reactors (Safeguards grade) | **Ultimate “Dead Man Switch”**: Detects reactor criticality/power state even if all power/IO lost. |

#### **B. The “Chakra” Energy Balance Nodes (Edge Compute)**
* **Hardware:** Rad-hardened SBCs (e.g., Raspberry Pi CM4 Industrial / NXP i.MX8) inside explosion-proof enclosures (Ex d).
* **Power:** **Thermal Gradient Harvesting** (Reactor shell $\Delta T \approx 200^\circ C$ vs Ambient) + **Supercapacitor Buffer** (No batteries = 20yr life).
* **Connectivity:** **Li-Fi (850nm IR)** between adjacent nodes (Line-of-Sight on pipe racks). **Zero RF Emissions (TEMPEST Level 1).**
* **OS:** **seL4 Microkernel** (Formal verification). Runs *only* the Ghost Stack: PINN Inference, TSS Decoder, Cryptographic Wallet (Hardware PUF).

—

### **III. DIGITAL TWIN MODELLING: THE “PHANTOM” STATE ESTIMATOR (ASTROPHYSICS/QM)**
*This is the core “Model.” It runs OFF-SITE (Bunker/Cloud) AND ON-EDGE (Chakra Nodes).*

#### **A. High-Fidelity Physics Core (The “Standard Model”)**
* **Equations

ECTA Audit Token: UESP-SESSION-9c2329b3bfc9c4f959bd079a0056d18ce3152c1c629e307e420712e420bc3dcf
📥 Download Full PDF Artifact