Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “secure operation”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 235 records · Page 13

AUTOMATIC GENERATION OF EVENT TREES AND FAULT TREES: A MODEL-BASED APPROACH

In the past few decades, increasing complexity in modern engineering systems has been driven by the integration of a large number of components and by the fact that the system operations involve many disciplines (e.g., thermal-hydraulics, plant operations, cyber-security). Current safety/reliability modeling approaches to such systems are labor intensive, difficult to learn, and rely heavily on simplistic Boolean logic to depict failure propagation and accident progression. While these methods serve well for simple systems (i.e., linear causal systems with limited small inter- and intra-system interactions), their results are difficult to verify when modeling complex systems (typically performed through the extensive use of modeling assumptions). The development of new methods is addressed to meet these challenges through a model-based system engineering (MBSE) lens. Under MBSE philosophy, every aspect of the system (form or function) is represented by a model that completely characterizes its architecture or behavior. MBSE approach greatly improves the management of design, analysis and verification of complex systems. An integration of Dynamic Probabilistic Risk Assessment (DPRA) methods with MBSE models is proposed to perform safety/reliability analyses of engineering systems. In particular, MBSE representation of the system (performed using Systems Modeling Language [SysML]) is coupled with DPRA methods to automatically generate event trees and fault trees.

97 - MATHEMATICS AND COMPUTING↗

Occupational Radiation Exposure Report for Calendar Year 2023

The U.S. Department of Energy Occupational Radiation Exposure Report for Calendar 2023 presents the results of analyses of occupational radiation exposures at the U.S. Department of Energy (DOE), including the National Nuclear Security Administration (NNSA) operations, during calendar year 2023. This report includes occupational radiation exposure data for over 80,000 DOE Federal employees, contractors, and subcontractors as well as members of the public who have worked in or entered controlled areas monitored for exposure to radiation. DOE publishes this annual report to provide DOE Management, Program Offices, workers, health physicists, and other stakeholders an evaluation of DOE-wide performance regarding compliance with Title 10 of the Code of Federal Regulations (CFR) Part 835, Occupational Radiation Protection (10 CFR 835) radiation exposure limits and adherence to as low as reasonably achievable principles. This report provides a discussion regarding radiation protection and exposure reporting requirements. It also includes calendar year (CY) 2023 information and analyses regarding aggregate, individual, site, DOE Program, transient individuals’ dose, as well as a historical review of DOE exposure data. DOE continues to be diligent in protecting its workers and the public from exposure to radiation from DOE operations as illustrated by the results contained in this report.

73 NUCLEAR PHYSICS AND RADIATION PHYSICS↗

INDUSTRY ENGAGEMENT TO ESTABLISH A ROBUST SECURITY APPROACH TO MOBILE RADIOACTIVE SOURCES

The mobile radiological sources used in the well-logging and radiography industries are of sufficient curie quantities to be categorized as desirable material for malicious actors. Beyond the security risk posed by these sources, there is also an understanding of the potential damage, both reputational and monetary, that a lost source would have on the licensee and the industry overall. Identifying and communicating the risk these sources pose with impacted stakeholders is a critical first step in developing a security approach. Common day-to-day operations within both industries drive the unique security challenge of mobile sources. From storage facilities, transportation vehicles, temporary storage locations, and use in the field, each phase creates challenges regarding source control and accountability. All aspects of the operational use of these sources needs to be fully understood in order to address security equipment enhancements, policies, procedures, and training. This paper will leverage more than ten years of experience that ORS has gained working closely with industry partners and mobile radiological source users across the well-logging and radiography industries. It will identify the risk posed by mobile radiological sources, clearly define the operational phases of each industry, identify security best practices of mobile sources, and discuss what long-term, sustainable security looks like within these industries. In addition, it will explore areas of a robust security approach that are not commonly given priority in these industries, such as alarm adjudication and response.

Office of Radiological Security↗

Modular Security Apparatus for Managing Distributed Cryptography for Command-and-Control Messages on Operational Technology Networks (Module-OT)

Module-OT is a bump- in- the- wire solution acting as a secure conduit for data between devices or systems across a network. Using the latest in open-source cryptographic libraries, all defined communications undergo authentication, authorization, and encryption. The core system can be easily installed through industry standard processes, and the use of popular open-source packages allows for it to be customizable customized by the developer community or deployed in unique embedded environments.

24 POWER TRANSMISSION AND DISTRIBUTION↗

Embedding security into ferroelectric FET array via in situ memory operation

Non-volatile memories (NVMs) have the potential to reshape next-generation memory systems because of their promising properties of near-zero leakage power consumption, high density and non-volatility. However, NVMs also face critical security threats that exploit the non-volatile property. Compared to volatile memory, the capability of retaining data even after power down makes NVM more vulnerable. Existing solutions to address the security issues of NVMs are mainly based on Advanced Encryption Standard (AES), which incurs significant performance and power overhead. In this paper, we propose a lightweight memory encryption/decryption scheme by exploiting in-situ memory operations with negligible overhead. To validate the feasibility of the encryption/decryption scheme, device-level and array-level experiments are performed using ferroelectric field effect transistor (FeFET) as an example NVM without loss of generality. Besides, a comprehensive evaluation is performed on a 128 × 128 FeFET AND-type memory array in terms of area, latency, power and throughput. Compared with the AES-based scheme, our scheme shows ~22.6×/~14.1× increase in encryption/decryption throughput with negligible power penalty. Furthermore, we evaluate the performance of our scheme over the AES-based scheme when deploying different neural network workloads. Our scheme yields significant latency reduction by 90% on average for encryption and decryption processes.

47 OTHER INSTRUMENTATION↗

An Interior-Point Solver for Optimal Power Flow Problem Considering Distributed FACTS Devices

In this paper, we propose an AC optimal power flow (ACOPF) model considering distributed flexible AC transmission system (D-FACTS) devices, in which the reactance of D-FACTS equipped lines are introduced as decision variables. This is motivated by increasing interests in using D-FACTS devices to address system operational and cyber-security concerns. First, D-FACTS devices can be incorporated in real-time operations for economic benefits such as managing power congestions and reducing system losses. Second, D-FACTS devices can be utilized by moving target defense (MTD), an emerging concept against cyber-attacks, to prevent attackers from knowing true system configurations. Therefore, system operators can use the proposed ACOPF model to achieve economic benefits and provide the setpoints of D-FACTS devices for MTD at the same time. In addition, we rigorously derive the gradient and Hessian matrices of the objective function and constraints, which are further used to build an interior-point solver of the proposed ACOPF. Numerical results on the IEEE 118-bus transmission system show the validity of the proposed ACOPF model as well as the efficacy of the interior-point solver in minimizing system losses and generation costs.

Liu, Bo↗

LLNS Request for Variance From 10 CFR 851 for Construction of LLNL Emergency Operations Center

Lawrence Livermore National Security, LLC (LLNS) is submitting the following variance application requesting the use of the State of California’s Occupational Safety and Health Administration (Cal/OSHA) Regulations in lieu of Title 10 Code of Federal Regulations Part 851 (10 CFR 851, the Rule), Worker Safety and Health Program, Subpart B (Program Requirements), Subpart C (Specific Program Requirements), and Appendix A (Worker Safety and Health Functional Areas), solely with respect to the construction of the new Lawrence Livermore National Laboratory (LLNL) Emergency Operations Center (EOC) facility. The request is in support of the National Nuclear Security Administration (NNSA) “pilot” to streamline the delivery of commercial-like line item construction projects under $50 million. This pilot is aligned with the approved NA-50 safety approach for the projects in the pilot. This pilot is to test and demonstrate innovation leading to a reduced cost of construction for building commercial type structures at Department of Energy (DOE)/NNSA facilities. The variance proposes to permit local/regional construction businesses contracted to Management & Operation contractor operated facilities to bid, operate, execute, and comply with safety and health standards they utilize in their business outside of the DOE Complex. This will permit compliance to standards that are as safe and healthful as those in 10 CFR 851 without confusion, additional cost, and inefficiencies associated with the burden of compliance to an unfamiliar regulatory spectrum.

99 GENERAL AND MISCELLANEOUS↗

Module 6: Exercise 1: Fresh Fuel Receipt for a Nuclear Facility: Nuclear Security Controls [Slides]

This module presents an operational scenario to illustrate the NMAC functions that are recommended for nuclear security. After completing this module, participants should be able to: 1) Describe the role NMAC plays in implementing recommended nuclear security practices. 2) Discuss the coordination between other departments during a primarily NMAC operation.

98 NUCLEAR DISARMAMENT, SAFEGUARDS, AND PHYSICAL P↗

Automated Cyber Security Testing Platform for Industrial Control Systems

Nuclear Power Plants (NPPs) are a complex system of coupled physics controlled by a network of Programmable Logic Controllers (PLCs). These PLCs communicate process data across the network to coordinate control actions with each other and inform the operators of process variables and control decisions. Networking the PLCs allows more effective process control and provides the operator more information which results in more efficient plant operation. This interconnectivity creates new security issues, as operators have more access to the plant controls, so will bad actors. As plant networks become more digitized and encompass more sophisticated controllers, the network surface exposed to cyber interference grows. Understanding the dynamics of these coupled systems of physics, control logic, and network communications is critical to their protection. The research into the cybersecurity of the Operational Technologies of NPPs is developing and requires a platform that can allow high fidelity physics simulations to interact with digital networks of controllers. This will require three main components: a network simulation environment, a physics simulator, and virtual PLCs (vPLC) that represent typical industry hardware. A platform that incorporates these three components to provide the most accurate representation of actual NPP networks and controllers is developed in this paper.

21 SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLANTS↗

Multi-level optimization with the koopman operator for data-driven, domain-aware, and dynamic system security

Cyber-Physical Systems (CPSs) like the power grid are critically important but also increasingly vulnerable; ensuring reliable system operation in the face of disruptions is becoming more and more challenging. Multi-Level Optimization (MLO) is a powerful way to model adversarial interactions, which naturally makes it applicable to studying CPS security. However, MLO typically does not address underlying system dynamics, and incorporating nonlinear dynamics is generally infeasible. In this paper, we show how to combine MLO with the Koopman Operator (KO) to remedy this. The KO maps nonlinear dynamics to a lifted space in which those dynamics are linear, thus making it ideal for use with MLO. Moreover, the structure of the KO also provides convenient ways to incorporate domain knowledge into the data-driven process of learning the KO representation of a given system. Here we then demonstrate the use of MLO-KO on a small example problem taken from the power grid domain, discuss the scalability and computational cost of MLO-KO, and identify future research directions for this work.

42 ENGINEERING↗

Test Report for DPP-1 Regulatory Compliance Testing. Volume 1 - Main Report

Consolidated Nuclear Security, LLC (CNS), the management and operating contractor for the Y-12 National Security Complex (Y-12) for the National Nuclear Security Administration (NNSA), is currently responsible for the regulatory testing of a new Type B fissile material shipping package called the Defense Programs Package (DPP)-1. The DPP-1 is a drum packaging with an inner liner and a removable lid. Both the drum body and the lid are filled with an impact-limiting, thermal-insulating material that protects the inner containment vessel (CV) during normal conditions of transport (NCT) and hypothetical accident conditions (HAC) as defined by 10 US code of Federal Regulations (CFR) 71. In fiscal year 2021, the Oak Ridge National Laboratory (ORNL) Package Testing Program (PTP), located at the National Transportation Research Center (NTRC), conducted Type B performance tests as prescribed in Title 10 Code of Federal Regulations Part 71 (10 CFR 71) on seven DPP-1 prototype units. This test report documents test unit (TU) preparation, pretest condition, conditioning of each TU, NCT and HAC testing, and posttest measurements and observations made of the damage resulting from these tests.

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗

IEEE PES GM Poster - Cyber-Informed Engineering Approach to Mitigating BESS Supply Chain Concerns

Battery energy storage systems (BESS) are increasingly important to meet the needs of grid resilience and reliability. BESS provide critical grid services, maintaining stability of the grid with increased variable conditions. However, there are significant geopolitical and security concerns regarding their operation in critical infrastructure, due to lack of a domestic supply chain and prevalence of foreign entity of concern (FEOC) components in BESS and associated inverter-based resources. The supply chain challenge is dually exacerbated by a lack of alternative suppliers who can meet the economic targets for energy delivery and a potentially adversarial supply chain. Solutions are needed to secure components, addressing mixed layers of risk and engineering controls. This paper presents a specific application of Cyber-Informed Engineering (CIE) principles for BESS and recommends an alternative strategy to blocking the supply chain, ensuring that grid modernization targets can be met despite lack of a validated or secure supply chain. This study focuses on the United State (U.S.) use case, but the process can be applied globally to address supply chain security challenges. CIE practices represent the next step in functional assurance and risk mitigation, ensuring optimal resource allocation and enhancing security measures to safeguard the future of energy in the U.S. and beyond.

25 - ENERGY STORAGE↗

Design of a High-Assay Low-Enriched Uranium Tri-Structural Isotropic Critical Experiment for Advanced Reactor Validation

High-assay low-enriched uranium (HALEU) fuel is a key component of many small modular reactor designs. Critical experiments are an important way to understand the neutronic performance of systems by obtaining nuclear data validations through measurements. Data reduce uncertainty and risk by showing that systems respond as predicted to changes such as temperature, subsequently advancing the overall technology readiness level of the materials within. Numerous critical experiments have been performed at the National Criticality Experiments Research Center (NCERC) operated by Los Alamos National Laboratory at the Nevada National Security Site since it became operational in 2011. However, the first experiment with HALEU fuel did not occur until 2024. Through extensive engineering, the experiment described in this paper was successfully designed and executed for the Comet vertical lift assembly at NCERC to perform measurements with HALEU tri-structural isotropic fuel that will assist in validation of nuclear data and computational modeling of small modular reactors for years to come.

73 NUCLEAR PHYSICS AND RADIATION PHYSICS↗

Human Supervision of Autonomous Vehicle Fleet Operations and Associated Passenger Communications: Preprint

Advances in automated vehicle (AV) technology and expanded operations are rapidly emerging with Automated Mobility District (AMD) deployments in global cities. NLR's AMD research addresses critical elements of human supervision of AV fleet operations and associated passenger communications for vehicles in which no driver or safety attendant is present. Although sufficiently advanced AVs no longer have direct oversight by a driver, fleet management remains staffed with operations personnel at the operations command and control (OCC) facility. This paper examines the functionality of the OCC, drawing comparisons of how automated train control and automated people mover OCCs operate. Within an AMD, the OCC manages various vehicle types, sizes, and operational modes, including on-demand and fixed route service, to facilitate a 'network of networks' for transport within a metropolitan area. The OCC serves as oversight for multiple AV fleets assisting AVs via remote operation of vehicles, communication, and dispatching personnel to resolve problems. The OCC also coordinates system operation, geographically staging vehicles, and managing weather, police, and emergency events. Informed by traffic management center (TMC) strategies using highly integrated software and communications, OCCs facilitate seamless information flows. OCC personnel remotely assist passengers and oversee multi-party operation to ensure safety and security. Although social norms mitigate large-capacity unattended vehicle operations, social interaction in multi-party automated small vehicles has little precedent. This poses a new frontier for society and requires research to effectively understand and manage. Future research will monitor OCC implementations, passenger interfaces, and deployment scaling of initial AMD systems.

33 ADVANCED PROPULSION SYSTEMS↗

Addressing Consequence within Operational Risk (O.T. Gagnon III) 9-18-2024

Addressing Consequence within Operational Risk: Why threats and security are just not that important! When dealing with cyber or physical risk within any critical infrastructure (CI) environment, don’t concern yourself with vulnerabilities and threats, at least not at first! Also, don’t be overly fixated on “securing the systems” within the organization. The endeavor of tackling operational risk focused on consequences in any critical infrastructure environment to include the complex Aviation ecosystem is challenging even for the most resourced entity but can be advanced though a simplified approach: identifying, binning, and prioritizing the infrastructure environment. While no two entities within a single element of the 16 critical infrastructure sectors are exactly alike when it comes to risk, there is a basic process to move toward a greater understanding of operational risk through becoming more informed about the infrastructure environment in which the entity exists. The process starts with bringing internal and external stakeholders and subject matter experts together to analyze key areas such as Information Technology (IT) and Operational Technology (OT) components and points of convergence, analyzing internal and external cyber and physical dependencies, accounting for explosive growth in devices and wireless technology, and leveraging the contributions of people inside and outside the operational environment. Attaining a common understanding of the infrastructure environment as part of addressing consequences within operational risk is not easy to do or resource light, but the process outlined provides the framework to further any entity’s efforts in this space. When it comes to cyber risks, before an organization can consider vulnerabilities within and threats to its operations, it must first have a solid understanding of the consequences existing inside its infrastructure environment. Idaho National Lab’s Consequence-Driven, Cyber-Informed Engineering is offered as an example of this approach to effective and efficient cyber risk mitigation.

99 GENERAL AND MISCELLANEOUS↗

Blockchain Smart Contract Reference Framework and Program Logic Architecture for Transactive Energy Systems

This paper proposes a reference framework for a transactive energy market based on blockchain. The framework was designed based on the engineering requirements of a distribution-scale market; including participant needs, expected market transactions, and the cybersecurity constructs required to support a fair, secure and efficient market operation. It leverages the existing blockchain primitives to provide clear value propositions to the transactive market, including identity management (access control), data security (integrity), resiliency (decentralization, scalability and performance). The validity of the proposed framework is demonstrated using a real-time 5-min double-auction market. The results highlight its benefits while providing strong validation of applicability to blockchain within transactive energy systems.

Gourisetti, Sri Nikhil Gupta↗