It is highly unlikely a terrorist group could steal used fuel and create a dirty bomb. Robust security measures are required by law at facilities regulated by the U.S. NRC. The specific security capabilities required by the NRC are compartmented, and not available to the general public. It can be said that the measures include a well-trained and armed security force, physical barriers, proper lighting, and intrusion detection and surveillance systems.