Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “Security Requirements”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 289 records · Page 16

An Integrated Two-Factor Authentication Solution Using Pulse Connect Secure and Apache HTTP Server

Complex system requirements can often lead to a situation wherein no single product or platform can provide a solution. In these cases, a solution integrating the features of multiple products and platforms is needed. Recently, a program sponsor required discontinued use of a third-party Security Assertion Markup Language Identity Provider that was being used to implement a two-factor authentication (2FA) solution that fully integrated with Pulse Connect Secure (PCS). PCS alone could not provide the features necessary to meet all the requirements of a new 2FA solution. The challenge was to leverage the features of additional platforms to design an integrated solution to meet all requirements. This paper presents a solution that integrates the features of PCS, Apache HyperText Transfer Protocol Server, and a custom application that meets all requirements, including a requirement to defend against Uniform Resource Locator manipulation as means to gain unauthorized access to backend applications.

97 MATHEMATICS AND COMPUTING↗

Attack Surface of Wind Energy Technologies in the United States

Low cost, reliable electrical energy production from wind relies upon automation and control systems, arguably more so than traditional thermal generation. These same systems, however, can serve as the target of adversaries’ cyber-attacks. Idaho National Laboratory (INL), at the request of the Department of Energy’s (DOE’s) Office of Cybersecurity, Energy Security, and Emergency Response (CESER) and Energy Efficiency and Renewable Energy’s (EERE’s) Wind Energy Technologies Office (WETO), evaluated a generalized wind plant architecture to understand the classes of potential threat actors and the vectors that could enable a cyber-attack. This evaluation explores the attack surface of a representative wind plant, identifying potential methods and vectors that an adversary could leverage to conduct a cyber-attack. Included in this assessment are some recommended mitigations and approaches. Each recommendation requires a full security evaluation, cost/benefit analysis, and risk analysis by each owner and operator.

17 WIND ENERGY↗

Material Resilience in Harsh Service Conditions

Resilience describes the attributes of a material that allow it to withstand or resist detrimental environmental effects degrading properties and performance. In service, materials may experience harsh or extreme conditions, but even modest thermal or load conditions experienced over a long period can degrade performance. Thus, the National Nuclear Security Administration mission requires predictive understanding of materials performance in harsh and extreme conditions over long periods. This is particularly true for applications in which replacement is impractical, impossible, or costly. This area of leadership addresses the evolution of material properties in environments that include static and dynamic stress, radiation, and chemical or thermal extremes. A particular focus is on situations when environments coexist or for which collection of experimental data is challenging or impossible. The capability to predict and control the nature and evolution of properties to allow designing resilience is a crucial aspect of mission success in national nuclear, global, and energy security.

36 MATERIALS SCIENCE↗

Material Resilience in Harsh Service Conditions

Resilience describes the attributes of a material that allow it to withstand or resist detrimental environmental effects degrading properties and performance. In service, materials may experience harsh or extreme conditions, but even modest thermal or load conditions experienced over a long period can degrade performance. Thus, the National Nuclear Security Administration mission requires predictive understanding of materials performance in harsh and extreme conditions over long periods. This performance is particularly relevant for applications in which replacement is impractical, impossible, or costly. This area of leadership addresses the evolution of material properties in environments that include static and dynamic stress, radiation, and chemical or thermal extremes. A particular focus is on situations when environments coexist or for which collection of experimental data is challenging or impossible. The capability to predict and control the nature and evolution of properties to allow designing resilience is a crucial aspect of mission success in national nuclear, global, and energy security.

36 MATERIALS SCIENCE↗

In-space Servicing, Assembly, and Manufacturing (ISAM) State of Play 2022 Edition

The future of spaceflight will yield increasingly more ambitious missions to support civil, national security, and commercial space sectors. Achieving these ambitious missions is not feasible using the traditional paradigm of launching an integrated, fully functioning system on a single launch vehicle. For example, science and human exploration missions will desire payloads that are larger than any foreseeable launch vehicle fairing, national security missions will require persistent assets that are mobile and resilient, and commercial space missions will require cost-effective ways to update to the latest technology on orbit. In-space Servicing, Assembly, and Manufacturing (ISAM) can vastly expand the performance, availability, and lifetime of space systems compared to the traditional paradigm of launching an asset with no intent to ever touch it again. ISAM capabilities foster an ecosystem that changes the space operations paradigm, creating the foundation for sustainable exploration and serving as a multiplier for other capabilities like space logistics, power generation, and reusability. Previous achievements in ISAM have enabled ambitious human and robotic space missions. NASA’s International Space Station (ISS) operations and maintenance, servicing missions of the Hubble Space Telescope (HST), and Northrop Grumman’s Mission Extension Vehicle (MEV) demonstrate the dramatic operational missions that can be achieved using ISAM capabilities. Many current and upcoming flight demonstrations are advancing areas that will enable the next generation of civil, national security, and commercial space missions. This document describes the current state of ISAM missions, capabilities, and developments. Compiling and organizing the available ISAM capabilities will help mission designers incorporate ISAM technologies into their concepts, create the starting point for technology development plans and roadmaps, and provide technologists a survey of the field they are developing. This document divides the ISAM capabilities into 11 capability areas that describe the functions or activities that would be performed in space using ISAM. This version of the ISAM State of Play is part of a continuing journey to encourage the use of ISAM capabilities in space. Compiling and organizing the current state of ISAM provides a simple resource for those working in the ISAM ecosystem to ensure that the advancements being made build upon the investments of the past. The state of play is ever changing as new capabilities are developed, and this document will be periodically updated to ensure that it is relevant to those who need it in the future.

ISAM↗

Data-Intensive Visual Analysis for Cyber Security

Protecting communications networks against attacks where the aim is to steal information, disrupt order, or harm critical infrastructure can require the collection and analysis of staggering amounts of data. The ability to detect and respond to threats quickly is a paramount concern across sectors, and especially for critical government, utility and financial networks. Yet detecting emerging or incipient threats in immense volumes of network traffic requires new computational and analytic approaches. Network security increasingly requires cooperation between human analysts able to spot suspicious events through means such as data visualization and automated systems that process streaming network data in near real-time to triage events so that human analysts are best able to focus their work.

Pike, William A.↗

Keyless Infrastructure Security Solution (KISS): VOLTTRON™ KSI ® Blockchain Design and Specification

This document provides the technical design specifications that are required for Keyless Infrastructure Security Solution (KISS) development, including, definitions and roles of the new KISS-related products—GridAware and LinkLite—an overview of the DNP3 communications the VOLTTRON™ DNP3 agent is using for distribution control, data flow, historian processing, setup, and installation. These technical specifications provide step-by-step instructions for configuration, implementation, and deployment of the KISS subsystem, docket creation, and verification using the GridAware dashboard. Based on this document and the KISS specification requirements and device risk assessment documents, KISS will be developed by integrating keyless signature infrastructure (KSI) blockchain to increase the cybersecurity, integrity, and trustworthiness of critical energy delivery systems (EDSs). The KISS architecture consists of a VOLTTRON™ agent-based distribution control system platform and GridAware (KSI blockchain capability) for secure energy exchanges in a decentralized electrical network.

42 ENGINEERING↗

Transformative monitoring approaches for reprocessing.

The future of reprocessing in the United States is strongly driven by plant economics. With increasing safeguards, security, and safety requirements, future plant monitoring systems must be able to demonstrate more efficient operations while improving the current state of the art. The goal of this work was to design and examine the incorporation of advanced plant monitoring technologies into safeguards systems with attention to the burden on the operator. The technologies examined include micro-fluidic sampling for more rapid analytical measurements and spectroscopy-based techniques for on-line process monitoring. The Separations and Safeguards Performance Model was used to design the layout and test the effect of adding these technologies to reprocessing. The results here show that both technologies fill key gaps in existing materials accountability that provide detection of diversion events that may not be detected in a timely manner in existing plants. The plant architecture and results under diversion scenarios are described. As a tangent to this work, both the AMUSE and SEPHIS solvent extraction codes were examined for integration in the model to improve the reality of diversion scenarios. The AMUSE integration was found to be the most successful and provided useful results. The SEPHIS integration is still a work in progress and may provide an alternative option.

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗

An identity privacy scheme for blockchain‐based on edge computing

Abstract Blockchain has decentralization characteristics and requires more targeted security schemes to protect user privacy. In contrast, existing signature schemes have many high‐complexity operations and impose an enormous computational burden on wireless nodes. This article proposes a light‐weighted identity privacy scheme for blockchain‐based on edge computing. We construct linkable identity privacy and non‐linkable identity privacy, which can resist collusion attacks while virtually guaranteeing blockchain nodes' identity privacy. Since edge computing offloads heavily, the proposed scheme has lower computational complexity than the existing techniques.

Mu, Rui↗

Light hydrocarbon and noble gas migration as an analogue for potential CO 2 leakage: numerical simulations and field data from three hydrocarbon systems

Abstract Sites where anthropogenic CO 2 captured from industrial sources is stored in deep geological formations for climate change mitigation are required to show secure retention of the injected CO 2 . Monitoring, reporting, and verification (MRV) plans are needed to indicate that no CO 2 release has occurred. We explored the degree to which direct comparison between a surface anomaly and reservoir geochemistry using various geochemical parameters can be used for attribution. We used data collected on light hydrocarbons and noble gases throughout the sedimentary column at three CO 2 enhanced oil recovery (EOR) sites to understand the processes that may cause fluid evolution. Light hydrocarbon and noble gases were sampled from reservoirs, gas‐bearing intervals above reservoirs, and groundwater. Vertical profiles indicated that lighter components are relatively enriched during migration (i.e. chromatographic separation). Static and numerical models were designed to simulate episodic gas migration and geochemical alteration of these geochemical parameters from solubility and sorption. The effects of hydrocarbon solubility were minimal (Bernard ratio changes within 5.2%) although field data were within the range of expected alterations from sorption. Forward models of CO 2 migration and noble gas interactions showed that CO 2 stripping causes an enrichment of crustal noble gases. In areas where natural fluxes of CO 2 from depth are non‐existent, the occurrence of crustal noble gas signature may distinguish fugitive CO 2 from the reservoir from natural near‐surface sources, and could be considered to explain apparent fluid anomalies. © 2019 Society of Chemical Industry and John Wiley & Sons, Ltd.

Anderson, Jacob↗

Globus Nexus: A Platform-as-a-Service provider of research identity, profile, and group management

Globus Nexus is a professionally hosted Platform-as-a-Service that provides identity, profile and group management functionality for the research community. Many collaborative e-Science applications need to manage large numbers of user identities, profiles, and groups. However, developing and maintaining such capabilities is often challenging given the complexity of modern security protocols and requirements for scalable, robust, and highly available implementations. By outsourcing this functionality to Globus Nexus, developers can leverage best-practice implementations without incurring development and operations overhead. Users benefit from enhanced capabilities such as identity federation, flexible profile management, and user-oriented group management. In this paper we present Globus Nexus, describe its capabilities and architecture, summarize how several e-Science applications leverage these capabilities, and present results that characterize its scalability, reliability, and availability.

Globus Nexus↗

A Deep End-to-End Model for Transient Stability Assessment With PMU Data

Accurate transient stability assessment (TSA) is a fundamental requirement for ensuring secure and stable operation of power systems. Tremendous efforts have been made to apply artificial intelligence approaches for TSA with phasor measurement unit data. However, many previous approaches may be failed to provide favorable accuracy due to the shallow architectures and error-prone hand-crafting features. This paper proposed a model for TSA, which is termed multi-branch stacked denoising autoencoder (MSDAE). This model is a unified framework integrating multiple stacked denoising autoencoders (SDAEs), one fusion layer, and one logistic regression (LR) layer. Initially, the SDAEs at the bottom of MSDAE extract features from multiple kinds of measurements respectively. Then, the extracted features are encoded into unified fusion features by the fusion layer. Finally, the LR layer performs TSA by using the fusion features. The depth of the architecture contributes to the remarkable ability for feature learning, while the width of the architecture (i.e., the multiple branches) enables MSDAE to deal with different kinds of measurements by a reasonable mechanism. In this way, MSDAE achieves feature extraction and classification intrinsically and simultaneously, namely, achieves TSA in an end-to-end manner. The results of experiments on IEEE 50-machine system demonstrate the superiority of the proposed model over the prior methods.

42 ENGINEERING↗

Trust Model Utilization for Energy Grid Communication

The internet information that is used by the Energy Grid of Things requires both preventative security measures as well as surveillance measures. The preventative security measures include certificates, encryption, and all of the basic security protocols as defined by published standards. The surveillance measures include monitoring information flow activities and evaluating these messages for indications of potential security attacks. We describe in this paper the utilization of a Distributed Trust Model that was developed specifically for monitoring communication within an Energy Grid of Things. The goal for the Distributed Trust Models is to provide a level of aggregate trust that a Distributed Energy Resource Management System can meet its grid service obligations, as opposed to a detailed individual Distributed Energy Resources assessment.

32 ENERGY CONSERVATION, CONSUMPTION, AND UTILIZATI↗

Pattern Discovery in Internet Background Radiation

Internet Background Radiation (IBR) is observed in empty network address spaces. No traffic should arrive there, but it does in overwhelming quantities, gathering evidences of attacks, malwares and misconfigurations. The study of IBR helps to detect spreading network problems, common vulnerabilities and attack trends. However, network traffic data evolves quickly and is of high volume and diversity, i.e., an outstanding big data challenge. When used to assist network security, it also requires the online classification of dynamic streaming data. In this paper, we introduce an AGgregation & Mode (AGM) vector to represent network traffic. The AGM format characterizes IP hosts by extracting aggregated and mode values of IP header fields, and without inspecting payloads. We performed clustering and statistical analysis to explore six months of IBR from 2012 with the AGM mapping. The discovered patterns allow building a classification of IBR, which identifies phenomena that have been actively polluting the Internet for years. The AGM representation is light and tailored for monitoring and pattern discovery. We show that AGM vectors are suitable to analyze large volumes of network traffic: they capture permanent operations, such as long term scanning, as well as bursty events from targeted attacks and short term incidents.

Iglesias, Felix↗

Preliminary safety evaluation of an aircraft impact on a near-surface radioactive waste repository

The aircraft impact accident has become very significant in the design of a nuclear facilities, particularly, after the tragic September 2001 event, that raised the public concern about the potential damaging effects that the impact of a large civilian airplane could bring in safety relevant structures. The aim of this study is therefore to preliminarily evaluate the global response and the structural effects induced by the impact of a military or commercial airplane (actually considered as a 'beyond design basis' event) into a near surface radioactive waste (RWs) disposal facility. The safety evaluation was carried out according to the International safety and design guidelines and in agreement with the stress tests requirements for the security track. To achieve the purpose, a lay out and a scheme of a possible near surface repository, like for example those of the El Cabril one, were taken into account. In order to preliminarily perform a reliable analysis of such a large-scale structure and to determine the structural effects induced by such a types of impulsive loads, a realistic, but still operable, numerical model with suitable materials characteristics was implemented by means of FEM codes. In the carried out structural analyses, the RWs repository was considered a 'robust' target, due to its thicker walls and main constitutive materials (steel and reinforced concrete). In addition to adequately represent the dynamic response of repository under crashing, relevant physical phenomena (i.e. penetration, spalling, etc.) were simulated and analysed. The preliminary assessment of the effects induced by the dynamic/impulsive loads allowed generally to verify the residual strength capability of the repository considered. The obtained preliminary results highlighted a remarkable potential to withstand the impact of military/large commercial aircraft, even in presence of ongoing concrete progressive failure (some penetration and spalling of the concrete wall) of the impacted area. (authors)

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗

Asi Nuclear Energy Sensors Data Portal Chatbot And Data Structuring Tool

The Idaho National Laboratory (INL) is advancing the development of an AI-powered chatbot and data structuring tool specifically designed to accelerate data mining processes for sensor-related information and seamlessly integrate the results into the ASI Sensors Data Portal (https://nes.energy.gov/). By doing so, the software aims to enhance the accessibility, usability, and organization of sensor data for nuclear energy applications. The software initial phase focuses on retrieving comprehensive datasets, prioritizing the past five years of publicly available information from the Office of Scientific and Technical Information (OSTI). These datasets will be meticulously processed to ensure compatibility, employing cleaning and preprocessing steps to eliminate irrelevant, incomplete, or corrupted information, thus establishing a robust foundation for subsequent AI use. The data will serve as the backbone for training an AI model and chatbot, which will act as an interactive tool enabling users to ask complex, context-specific questions and receive accurate, validated answers derived from constrained literature. In parallel, the project incorporates a data structuring process supported by AI to organize sensor information from multiple sources into a standardized format. This structured data will include detailed sensor specifications, such as measurement range, applications, accuracy, and operating conditions, generated and documented with AI. These specifications will be systematically integrated into the sensor portal. To maintain the highest levels of accuracy and relevance, all AI-generated outputs will be reviewed and validated by subject matter experts (SMEs), with additional fields or parameters added as needed. Future stages of the project aim to expand the dataset beyond OSTI to include other sources and potentially incorporate unclassified controlled information (UCI) with restricted access protocols to address security and confidentiality requirements.

Mapes, NormanJ. [Idaho National Laboratory (INL), ↗

Phase I Flow and Transport Model Document for Corrective Action Unit 97: Yucca Flat/Climax Mine, Nevada National Security Site, Nye County, Nevada, Revision 1 with ROTCs 1 and 2

The Underground Test Area (UGTA) Corrective Action Unit (CAU) 97, Yucca Flat/Climax Mine, in the northeast part of the Nevada National Security Site (NNSS) requires environmental corrective action activities to assess contamination resulting from underground nuclear testing. These activities are necessary to comply with the UGTA corrective action strategy (referred to as the UGTA strategy). The corrective action investigation phase of the UGTA strategy requires the development of groundwater flow and contaminant transport models whose purpose is to identify the lateral and vertical extent of contaminant migration over the next 1,000 years. In particular, the goal is to calculate the contaminant boundary, which is defined as a probabilistic model-forecast perimeter and a lower hydrostratigraphic unit (HSU) boundary that delineate the possible extent of radionuclide-contaminated groundwater from underground nuclear testing. Because of structural uncertainty in the contaminant boundary, a range of potential contaminant boundaries was forecast, resulting in an ensemble of contaminant boundaries. The contaminant boundary extent is determined by the volume of groundwater that has at least a 5 percent chance of exceeding the radiological standards of the Safe Drinking Water Act (SDWA) (CFR, 2012).

54 ENVIRONMENTAL SCIENCES↗

Republic of the Marshall Islands. Energy Project Development Options and Technical Assessment (2013)

The advancement of renewable energy and energy efficient technologies continues to be fluid. There are many technical opportunities and strategies that can be utilized to guide communities to deploy cost-effective commercial alternative energy options; however, to achieve aggressive economic, environmental, and security goals, it requires a comprehensive, integrated approach. This document reports on the initial findings of an energy assessment that was conducted for the Republic of the Marshall Islands.

29 ENERGY PLANNING, POLICY, AND ECONOMY↗