Systems-Theoretic Hazard Analysis of Digital Human-System Interface Relevant to Reactor Trip
Slides for 2021 ANS-NPIC-HMIT conference
22 GENERAL STUDIES OF NUCLEAR REACTORS↗
SEARCH · Engineering Papers
Results for “risk informed design”
Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.
Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.
A Privacy-Preserving Cyber Threat Intelligence Sharing System
Cyber Threat Intelligence (CTI) is a key resource for developing defensive strategies against potential cyber adversaries. Entities typically access CTI through open-source platforms, national agencies, or specialized commercial services. However, the bi-directional exchange of CTI is hindered by organizational trust boundaries, which complicate the sharing processes between entities and CTI providers. Centralized CTI services benefit from receiving suspicious cyber observables such as IP addresses, domain names, and email addresses from various entities. The aggregation allows for the correlation of widespread adversarial activities to enhance the alert and response mechanisms across the network of involved parties. Despite these benefits, openly sharing such observables incurs potential legal, regulatory, and reputational risks for the disclosing entities.This paper introduces a system designed to facilitate the secure exchange of cyber observables across trust boundaries without compromising the anonymity of the sharing entities. Here, we propose an architecture that leverages common web protocols alongside zero-knowledge proofs to authenticate members while maintaining anonymity. Additionally, we outline a privacy model tailored for STIX (Structured Threat Information eXpression) cyber observables to minimize the risk of inadvertently disclosing private information. Through our threat models, we assess the privacy implications of our proposed system and demonstrate its potential to enhance collaborative cyber defense efforts without exposing entities to undue risk.
BBS+ Signatures↗
Integrating Cyber-Informed Engineering into Process Automation
As organizations increasingly automate their core missions and essential functions to address business risks and enhance efficiency, process automation becomes pivotal. This shift, involving minimal or no manual intervention, significantly impacts an organization's cyber-risk landscape. While automation drives efficiencies, it also introduces new cyber risks if not properly managed. Cyber-Informed Engineering (CIE) provides a proactive framework for managing these digital risks, enhancing cyber-resilience in process automation. This document supports organizations in applying CIE principles to mitigate the cyber risks associated with automation. The outlined approach can be independently implemented to improve any organization’s cyber-resilience, ensuring that the advantages of automation do not result in unaddressed or unmanaged digital risks. It serves as a starting point, offering considerations for integrating CIE principles and practices into organizational processes. CIE is presented as an iterative process, fostering continuous improvement and reinforcing the engineering and operational cultures to manage digital risks effectively. The document is structured as follows: Section 1 provides background on CIE and process automation, and their integration. Section 2 explores the twelve CIE principles in the context of process automation, highlighting key questions, engineering considerations, and implications for digital risk management. Section 3 synthesizes the findings and offers recommendations to advance resilience by design.
42 - ENGINEERING↗
De Novo Design of High‐Affinity Miniprotein Binders Targeting Francisella Tularensis Virulence Factor
Abstract Francisella tularensis poses considerable public health risk due to its high infectivity and potential for bioterrorism. Francisella‐like lipoprotein (Flpp3), a key virulence factor unique to Francisella, plays critical roles in infection and immune evasion, making it a promising target for therapeutic development. However, the lack of well‐defined binding pockets and structural information on native interactions has hindered structure‐guided ligand discovery against Flpp3. Here, we used a combination of physics‐based and deep‐learning methods to design high‐affinity miniprotein binders targeting two distinct sites on Flpp3. We identified four binders for site I with binding affinities ranging between 24–110 nM. For the second site, an initial binder showed a dissociation constant ( K D ) of 81 nM, and subsequent site saturation mutagenesis yielded variants with sub‐nanomolar affinities. Circular dichroism confirmed the topology of designed miniproteins. The X‐ray crystal structure of Flpp3 in complex with a site I binder is nearly identical to the design model (Cα root‐mean‐square deviation (RMSD): 0.9 Å). These designed miniproteins provide research tools to explore the roles of Flpp3 in tularemia and should enable the development of new therapeutic candidates.
Gokce‐Alpkilic, Gizem [Molecular Engineering and S↗
GridSTIX
SF-25-112 Grid-STIX is a comprehensive extension of the STIX (Structured Threat Information Expression) 2.1 ontology specifically designed for electrical grid cybersecurity applications. This ontology provides a standardized, machine-readable framework for modeling grid assets, operational technology devices, threats, vulnerabilities, supply chain risks, and security relationships in electrical power systems. ## Key Features - **Comprehensive Grid Coverage**: Physical assets, OT devices, grid components, sensors, and energy storage systems - **Zero Trust Architecture**: Policy decision points, enforcement points, trust brokers, and continuous monitoring - **AMI Infrastructure**: Advanced metering networks, head-end systems, mesh gateways, and MDM systems - **Advanced Security Modeling**: Attack patterns, vulnerabilities, mitigations, and supply chain risks - **Critical Grid Relationships**: Power flow, protection, control, and synchronization relationships - **Supply Chain Security**: Supplier modeling, country of origin tracking, and risk assessment - **Protocol Support**: DNP3, Modbus, IEC 61850, IEC 60870-5-104, OPC-UA, and IEEE standards - **Python Code Generation**: Automated STIX-compliant Python class generation from ontologies - **Interactive Visualization**: Enhanced HTML network graphs with grid-specific categorization - **STIX 2.1 Compliance**: Full compatibility with STIX threat intelligence ecosystem
Blakely, Benjamin [Argonne National Laboratory (AN↗
Cyber Conservative Operations
In an era of increasingly sophisticated and pervasive cyber threats, robust cyber resilience strategies are more critical than ever. This paper introduces the concept of Cyber Conservative Operations, a proactive approach designed to assist critical infrastructure owners and operators in managing risk and maintaining resilience in the face of imminent, yet not occurring, cyber events. By leveraging the principles of Cyber-Informed Engineering (CIE) and the energy sector’s practice of conservative operations, Cyber Conservative Operations offer a framework for planning and executing coordinated active defense and resilience-oriented actions ahead of cyber events. This approach aims to minimize the consequences of digitally-enabled hazards and ensure swift recovery from anticipated cyber threats. Cyber Conservative Operations enhance the ability of owners and operators to execute pre-planned defense and resilience actions, thereby reducing the impact of digitally-enabled hazards. These operations are crucial for addressing impacts that cannot be precisely quantified or forecasted and for preparing organizations for rapid recovery from imminent digital threats. The paper begins with a discussion of conservative operations as applied to the bulk power system (BPS), a current mechanism allowing BPS entities to enact defensive operating plans to mitigate impending grid unreliability. Building on this model, we present a concept for implementing cyber conservative operations at asset owner facilities. The paper concludes with two case studies of cyber conservative operations drawn from high-profile cyber events, illustrating the practical application and benefits of this proactive approach.
42 - ENGINEERING↗
Development of Genetic Algorithm Based Multi-Objective Plant Reload Optimization Platform
The U.S. nuclear industry is facing a challenge in maintaining required levels of safety while ensuring economic competitiveness to stay in business. Safety remains a key parameter for all aspects of light-water reactor nuclear power plant operations. Safety can become more economical by using a risk-informed ecosystem, such as the one being developed in the Risk-Informed Systems Analysis Pathway under the U.S. Department of Energy Light Water Reactor Sustainability Program. The Light Water Reactor Sustainability Program promotes a wide range of research and development activities to maximize both the safety and economic efficiency of nuclear power plants through improved scientific understanding, especially given that many plants are now considering second license renewals. The Risk-Informed Systems Analysis Pathway has two main goals: Deploy methodologies and technologies that better represent safety margins and cost and safety factors; Develop advanced applications that enable cost-effective plant operations. The Plant Reload Optimization Platform development project aims to build a reactor core design tool that includes reactor safety and fuel performance analyses and uses artificial intelligence to support the optimization of core design solutions. This report summarizes genetic-algorithm-based multi-objective fuel reload optimization activities, specifically: Developing the non-dominated sorting genetic algorithm II optimizer in the Risk Analysis and Virtual ENviroment (RAVEN); Demonstrating and validating the developed non-dominated sorting genetic algorithm II optimizer using benchmark optimization problems.
11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗
Design of an Ara h 2 hypoallergen from conformational epitopes
Abstract Introduction Adverse reactions are relatively common during peanut oral immunotherapy. To reduce the risk to the patient, some researchers have proposed modifying the allergen to reduce IgE reactivity, creating a putative hypoallergen. Analysis of recently cloned human IgG from patients treated with peanut immunotherapy suggested that there are three common conformational epitopes for the major peanut allergen Ara h 2. We sought to test if structural information on these epitopes could indicate mutagenesis targets for designing a hypoallergen and evaluated the reduction in IgE binding via immunochemistry and a mouse model of passive cutaneous anaphylaxis (PCA). Methods X‐ray crystallography characterized the conformational epitopes in detail, followed by mutational analysis of key residues to modify monoclonal antibody (mAb) and serum IgE binding, assessed by ELISA and biolayer interferometry. A designed Ara h 2 hypoallergen was tested for reduced vascularization in mouse PCA experiments using pooled peanut allergic patient serum. Results A ternary crystal structure of Ara h 2 in complex with patient antibodies 13T1 and 13T5 was determined. Site‐specific mutants were designed that reduced 13T1, 13T5, and 22S1 mAbs binding by orders of magnitude. By combining designed mutations from the three major conformational bins, a hexamutant (Ara h 2 E46R, E89R, E97R, E114R, Q146A, R147E) was created that reduced IgE binding in serum from allergic patients. Further, in the PCA model where mice were primed with peanut allergic patient serum, reactivity upon allergen challenge was significantly decreased using the hexamutant. Conclusion These studies demonstrate that prior knowledge of common conformational epitopes can be used to engineer reduced IgE reactivity, an important first step in hypoallergen design.
Allergy↗
Development of Plant Reload Optimization Framework Capabilities for Core Design and Fuel Performance Analysis
The United States (U.S.) nuclear industry faces a challenge in maintaining required levels of safety while ensuring economic competitiveness to stay in business. Safety remains a key parameter for all aspects of light water reactor (LWR) nuclear power plant (NPP) operations. Safety can become more economical by using a risk-informed ecosystem, such as the one being developed by the Risk-Informed Systems Analysis (RISA) Pathway under the U.S. Department of Energy (DOE) Light Water Reactor Sustainability (LWRS) Program. The LWRS Program promotes a wide range of research and development activities with the goal of maximizing both the safety and economic efficiency of NPPs through improved scientific understanding, especially given many plants are now considering second license renewals. The RISA Pathway has two main goals: (1) deploy methodologies and technologies that better represent safety margins and cost and safety factors and (2) develop advanced applications that enable cost-effective plant operation. The Plant Reload Optimization Platform development project aims to build a reactor core design tool that includes reactor safety and fuel performance analyses, and also uses artificial intelligence to support optimization of core design solutions. This report summarizes Fiscal Year 2022 (FY-22) activity in platform capability developments in RAVEN. This platform performs simulations using industry codes for core design (i.e., PARCS) and fuel performance (i.e., TRANSURANUS) which will allow expansion of the capabilities to include advanced fuel designs such as accident-tolerant fuel (ATF)s with high burnup.
11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗
Biomass supply chain equipment for renewable fuels production: A review
The production of renewable fuels is a critical component of global strategies to reduce greenhouse gas (GHG) emissions. Moreover, the collection of raw materials for its production can provide added benefits such as reduction of wildfire risk, additional income for farmers, and decreased disposal costs. Although there is substantial literature on design and modeling of supply chains, the authors were unable to find a single reference with the information needed for the selection and cost estimation of each type of equipment involved in the supply chain. Therefore, the goal of this research is to gather information necessary for the construction and utilization of models that might drive the identification of a feasible supply chain to produce renewable fuels at a commercial scale. The primary objectives are to 1) understand the supply chain of critical feedstocks for renewable fuels production; 2) identify the equipment commercially available for collection and adequation of feedstock; and 3) consolidate information regarding equipment cost, energy consumption, and efficiency, as well as feedstock storage and transportation systems. This paper provides a compilation for five feedstock types studied for sustainable aviation fuel production: 1) agricultural residues and grasses, 2) forest residues, 3) urban wood waste, 4) oilseeds, 5) fats, oils & greases. All the technologies involved from the field to the gate of the preprocessing or conversion unit were reviewed. The information on fats, oils & greases supply chains and equipment purposely designed for forest thinning and pruning was very limited.
: Feedstock, Collection and Adequation, Renewable ↗
Wood-to-Fuel Demonstration Project for California's Transportation Sector using Autothermal Pyrolysis (Non-Proprietary Summary Process Hazard Assessment)
Frontline has prioritized personnel safety, equipment preservation, and environmental protection throughout the design process of the autothermal pyrolysis unit. To facilitate a safe design, Frontline completed an informal hazards and operability (HAZOP) study and a formal HAZOP study, and employ management of change procedures. The result of these safety procedures is a plant that will function in a safe manner with a limited and acceptable amount of risk. Frontline took an approach it used in previous projects to execute a preliminary, internally facilitated hazards and operability (HAZOP) study. While this HAZOP study was performed without any subsequent change tracking, it enables a group of well-trained engineers to consider the safety implications of each part of the plant in a thorough and methodical manner. Frontline chose to bring in a pyrolysis consultant (Daren Daugaard of Burning Oak Energy) to participate in the review. Following the preliminary HAZOP and once the detailed design work was nearing completion, Frontline performed a formal HAZOP with a third-party facilitator, Jason Stittleburg of Novetus Engineering. Although the plant is not subject to process safety management (PSM) requirements, this formal HAZOP was performed in accordance with OSHA regulations deemed reasonable for PSM. Finally, after the formal HAZOP was conducted, Frontline maintained a safe system by implementing and following management of change procedures on each substantial change to the process. Frontline has kept a record of each subsequent change made to the formal HAZOP P&IDs. The process hazard assessment process allowed Frontline to find and correct several unacceptable configurations within the plant.
09 BIOMASS FUELS↗
Bridging Equipment Reliability Data and Robust Decisions in a Plant Operation Context
In order to reduce operation and maintenance (O&M) costs, nuclear power plants (NPPs) are moving from corrective and periodic maintenance to predictive maintenance strategies. Such transition requires changes on the data that needs to be retrieved and on the type of decision processes to be employed. Advanced monitoring and data analysis technologies are essential to support predictive strategies. They can in fact provide precise information about health of a component, track its degradation trends, and provide information of its expected failure time. With such information, maintenance operations for a component can be performed right before its expected failure time. This dynamic context of O&M operations requires new methods to analyze data, propagate component health information from the component to the system level, and optimize plant resources. In this respect, the risk informed asset management (RIAM) project has been tasked to develop and test this new class of methods into a risk analytics toolset. This toolset consists of data analytics tools coupled with reliability methods designed to manage plant assets and performances in a predictive maintenance context. This report shows the latest improvements on such development and the initial testing of our methods on the three main research areas that the RIAM project is focusing on. These areas are the following: equipment reliability data analytics, system reliability modeling, and plant resources optimization methods. We show how the methods developed in these areas can support predictive maintenance strategies by: 1) analyzing equipment reliability data (either in numeric and textual form), 2) assessing component and system health through an innovative margin-based reliability approach, and 3) identifying the most critical components and set optimal maintenance schedule based on plant economic and operational constraints.
97 MATHEMATICS AND COMPUTING↗
Development of a Digital Twin for Hydrogen Dispersion and Safety Assessment in an Electrolyzer Based Hydrogen Production Facility
Digital twin models are virtual representations of physical systems that use real-time data to simulate and optimize performance. This study presents the development and initial implementation of a digital twin (DT) for the electrolyzer-based hydrogen production facility at NREL's Advanced Research on Integrated Energy Systems (ARIES), focused on enhancing safety and optimizing sensor placement through physics-based simulations and metadata integration. The DT incorporates detailed facility-specific information, including component layout, leak locations, and controlled release parameters, to model hydrogen dispersion under varying environmental conditions. Using steady-state computational fluid dynamics (CFD) simulations informed by real meteorological data, such as wind speed, direction, and vertical wind profiles, the DT enables visualization of hydrogen plume behavior and spatial concentration distributions. Comparative analysis between high and low wind speed scenarios illustrates the significant influence of wind dynamics on plume shape and extent, with horizontal momentum dominating dispersion at higher speeds, while buoyancy effects become more prominent under low wind conditions. These simulations generate a rich dataset embedded within the DT, allowing users to assess potential leak outcomes and identify optimal sensor locations based on concentration thresholds. The model supports scenario-based analysis to guide safety strategies and equipment deployment for open-area hydrogen infrastructure. The digital twin thus serves as a dynamic platform for virtual prototyping, providing predictive insight into hydrogen behavior and enhancing risk-informed decision-making. This initial phase establishes a validated foundation for future integration of transient, uncontrolled leak scenarios and real-time sensor feedback, positioning the DT as a critical tool for safety design, operational planning, and adaptive monitoring in hydrogen systems. Overall, the approach demonstrates the value of combining environmental data with digital simulations to inform safer and more efficient deployment of hydrogen technologies.
08 HYDROGEN↗
Development of a Digital Twin for Hydrogen Dispersion and Safety Assessment in an Electrolyzer-Based Hydrogen Production Facility: Preprint
Digital twin models are virtual representations of physical systems that use real-time data to simulate and optimize performance. This study presents the development and initial implementation of a digital twin (DT) for the electrolyzer-based hydrogen production facility at the National Renewable Energy Laboratory (NREL)'s Advanced Research on Integrated Energy Systems (ARIES), focused on enhancing safety and optimizing sensor placement through physics-based simulations and metadata integration. The DT incorporates detailed facility-specific information, including component layout, leak locations, and controlled release parameters, to model hydrogen dispersion under varying environmental conditions. Using steady-state computational fluid dynamics (CFD) simulations informed by real meteorological data, such as wind speed, direction, and vertical wind profiles, the DT enables visualization of hydrogen plume behavior and spatial concentration distributions. Comparative analysis between high and low wind speed scenarios illustrates the significant influence of wind dynamics on plume shape and extent, with horizontal momentum dominating dispersion at higher speeds, while buoyancy effects become more prominent under low wind conditions. These simulations generate a rich dataset embedded within the DT, allowing users to assess potential leak outcomes and identify optimal sensor locations based on concentration thresholds. The model supports scenario-based analysis to guide safety strategies and equipment deployment for open-area hydrogen infrastructure. The digital twin thus serves as a dynamic platform for virtual prototyping, providing predictive insight into hydrogen behavior and enhancing risk-informed decision-making. This initial phase establishes a validated foundation for future integration of transient, uncontrolled leak scenarios and real-time sensor feedback, positioning the DT as a critical tool for safety design, operational planning, and adaptive monitoring in hydrogen systems. Overall, the approach demonstrates the value of combining environmental data with digital simulations to inform safer and more efficient deployment of hydrogen technologies.
08 HYDROGEN↗
Utility-Scale Operational Consequences for Solar Grid Services
This report delves into the critical aspects of grid services provided by solar inverter-based resources (IBRs), with an emphasis on the evolving landscape of microgrids, virtual power plants (VPPs), aggregators, and distributed energy resource management systems (DERMS). As the energy sector undergoes a transformative shift towards more decentralized and resilient grid architectures, understanding the multifaceted risks associated with these technologies becomes paramount. The report categorizes these risks into organizational, technical, and procedural domains, providing a thorough risk assessment framework that stakeholders can utilize to anticipate and mitigate potential issues. In addressing the increasing complexity of grid interconnections, the report highlights the importance of Cyber-Informed Engineering (CIE). By embedding engineering controls and cybersecurity measures into the early stages of system design, this approach aims to fortify grid infrastructure against emerging cyber threats. The analysis includes an exploration of best practices and strategies for integrating CIE principles to enhance grid security and resilience. To provide practical insights, the report conducts a detailed consequence analysis of various grid services and cyber mitigations that can be applied through the interconnection process. This analysis evaluates the potential impacts of different failure modes and vulnerabilities, offering a clear understanding of the consequences that could arise from disruptions within the energy grid. The findings are further enriched by a series of case studies that illustrate real-world scenarios and lessons learned from past incidents. Through this comprehensive examination of grid services and their criticality, the report aims to prepare industry professionals with the knowledge and tools necessary to navigate the complexities of modern energy systems. By providing a comprehensive approach that includes risk assessment, cybersecurity, and consequence analysis, solar stakeholders can more effectively guarantee the reliability, efficiency, and security of the energy grid.
14 SOLAR ENERGY↗
Emerging Threats and Technology Investigation: Industrial Internet of Things - Risk and Mitigation for Nuclear Infrastructure
Industries supporting the global nuclear infrastructure striving for cost savings, expansions in efficiency, and convenience are likely to adopt components (e.g., hardware, software) that comprise the Internet of Things (IoT) and Industrial Internet of Things (IIoT). These devices offer potential improvements along with security challenges. Modern conveniences achieved through application of technology have propagated through society in the form of interconnected devices, from doorbells to microwave ovens, commonly referred to as IoT. IoT devices are often Internet-connected devices that are designed to send data back to a cloud-based server, where a smart phone application then presents device status and control options. Home-based IoT applications carry a different set of risks when compared to a business or security environment, where there is also a history of convenience and interconnection. Industrial settings have long relied on specifically designed Supervisory Control and Data Acquisition (SCADA) systems for process control where IIoT devices are intended to inform business decisions and augment traditional processes. A recent National Institute of Standards and Technology (NIST) report provides a distinction between process control and IIoT in that traditional process control is not replaced by IIoT, but rather IIoT devices are intended to enhance industrial processes through additional monitoring of various sensors and application of data analytics models using artificial intelligence (AI) and machine learning (ML) (Fagan, Marron, et al. 2021) (Ross, et al. 2021).
98 NUCLEAR DISARMAMENT, SAFEGUARDS, AND PHYSICAL P↗
Cyber Informed Engineering (CIE) Principles Slide Presentation [Slides]
This document describes the concept and application of Cyber-Informed Engineering (CIE), a methodology that integrates cyber threat awareness into all stages of the systems engineering life cycle. It delineates how CIE enhances the security posture of critical infrastructure systems, which are increasingly targeted by sophisticated cyber threats. The exposition proceeds to methodically walk through the twelve foundational principles of CIE, each serving as a strategic guidepost for embedding cybersecurity into the fabric of system design, development, operation, and maintenance. The principles highlight the importance of proactive and comprehensive security measures that span from risk assessment to continuous improvement, ensuring that systems are not only designed with security in mind but are also resilient in the face of evolving cyber threats.
42 ENGINEERING↗
Validation and Verification for INL Modelica-based TEDS models Via Experimental Results
This report provides an overview on the verification and validation (V&V) of the Thermal Energy Distribution System (TEDS) model developed in the Modelica process modeling ecosystem using experimental data. Model development has led to the creation of a dynamic process model of the experimental TEDS facility housed within the Energy Systems Laboratory (ESL) at Idaho National Laboratory (INL). The model was then used during the preconstruction phase of the experimental effort to inform experimental design (e.g., insulation requirements, bypass line placement, expected performance of components) and to test innovative control schemes prior to the initial operation. The TEDS model developed in Modelica includes the primary components of the TEDS experimental unit: a 200kW Chromalox heater; a single-tank packed-bed thermal energy storage system filled with 0.125-inch alumina (Al2O3) beads; an ethylene-glycol-to-Therminol-66 heat exchanger; system piping; five control valves; and all associated temperature, pressure, and volumetric flow sensors. Using the Institute of Electrical and Electronics Engineers (IEEE) V&V methodologies, considered the gold standard in the engineering field, the model was verified using a combination of static analysis, spatial convergence, and regression tests. Then using dynamic time warping (DTW) initial runs to validate and tune the TEDS model versus the experiment were conducted. This tuning method was accomplished using the INL Risk Analysis Virtual ENvironment (RAVEN) software package. Tuning is required to account for physical phenomena that are less understood within the empirical heat transfer correlations. Through the commencement of this work, a systems-level model of TEDS with associated control systems, sensors, piping diameters, and component capabilities has been created. This model was utilized in the pre-experimental phase to inform system design, insulation thicknesses, and potential control schemes to operate the system effectively and safely. Then, initial experimental startup and operational data were used to demonstrate the validation and tuning methodology. This process demonstrates the classical two-step approach of a model informing experimental design followed by the experiment validation and tuning the model.
22 GENERAL STUDIES OF NUCLEAR REACTORS↗