Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “Control Systems Security”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 307 records · Page 17
All sourcesNASA NTRSDOE OSTI
DOE OSTI2023

Development of A Hardware-In-the-Loop (HIL) Testbed for Cyber-Physical Security in Smart Buildings

As smart buildings move towards open communication technologies, providing access to the Building Automation System (BAS) through the building's intranet, or even remotely through the Internet, has become a common practice. However, BAS was historically developed as a closed environment and designed with limited cyber-security considerations. Thus, smart buildings are vulnerable to cyber-attacks with the increased accessibility. This study introduces the development and capability of a Hardware-in-the-Loop (HIT) testbed for testing and evaluating the cyber-physical security of typical BASs in smart buildings. The testbed consists of three subsystems: (1) a real-time HIL emulator simulating the behavior of a virtual building as well as the Heating, Ventilation, and Air Conditioning (HVAC) equipment via a dynamic simulation in Modelica; (2) a set of real HVAC controllers monitoring the virtual building operation and providing local control signals to control HVAC equipment in the HIL emulator; and (3) a BAS server along with a web-based service for users to fully access the schedule, setpoints, trends, alarms, and other control functions of the HVAC controllers remotely through the BACnet network. The server generates rule-based setpoints to local HVAC controllers. Based on these three subsystems, the HIL testbed supports attack/fault-free and attack/fault-injection experiments at various levels of the building system. The resulting test data can be used to inform the building community and support the cyber-physical security technology transfer to the building industry.

Li, Guowen↗
DOE OSTI2023

Remote inspection of adversary-controlled environments

Remotely monitoring the location and enduring presence of valuable items in adversary-controlled environments presents significant challenges. In this article, we demonstrate a monitoring approach that leverages the gigahertz radio-wave scattering and absorption of a room and its contents, including a set of mirrors with random orientations placed inside, to remotely verify the absence of any disturbance over time. Our technique extends to large physical systems the application of physical unclonable functions for integrity protection. Its main applications are scenarios where parties are mutually distrustful and have privacy and security constraints. Examples range from the verification of nuclear arms-control treaties to the securing of currency, artwork, or data centers.

47 OTHER INSTRUMENTATION↗
DOE OSTI2026

Voltage Service Limits Smart Contract Using Distributed Ledger Technology for Electrical Utility Grid with Customer-Owned Generator

Modern electrical grids face growing stability risks from customer-owned generators, especially at points of common couplings (PCCs). Disruptive behavior from power-electronic sources can cause protective relays to isolate problematic generators, making measurement integrity critical. This article presents a distributed ledger technology (DLT) approach that uses smart contracts to evaluate PCC voltage measurements and trigger backup breaker operations. The approach is framed as a verifiable, multi-organization attestation and audit layer, not as a real-time control security mechanism. In the proposed architecture, voltage measurements from a hardware protective relay are anchored on a DLT through the Cyber Grid Guard (CGG) system for attestation by both the grid utility and customer-owned generator. A Voltage Service Limits (VSLs) smart contract evaluates the on-chain measurements against allowable phase-voltage limits derived from the ANSI C84.1 standard. The framework is validated in a hardware-relay-in-the-loop test bed under sustained-undervoltage, sustained-overvoltage, and transient line-to-line fault scenarios. The results show that the VSL smart contract can process these measurements and issue backup breaker actions consistent with the defined service-limit criteria, demonstrating the DLT potential as a verifiable audit layer at the PCC that complements primary protection.

cyber security↗
DOE OSTI2021

Blockchain Smart Contract Reference Framework and Program Logic Architecture for Transactive Energy Systems

This paper proposes a reference framework for a transactive energy market based on blockchain. The framework was designed based on the engineering requirements of a distribution-scale market; including participant needs, expected market transactions, and the cybersecurity constructs required to support a fair, secure and efficient market operation. It leverages the existing blockchain primitives to provide clear value propositions to the transactive market, including identity management (access control), data security (integrity), resiliency (decentralization, scalability and performance). The validity of the proposed framework is demonstrated using a real-time 5-min double-auction market. The results highlight its benefits while providing strong validation of applicability to blockchain within transactive energy systems.

Gourisetti, Sri Nikhil Gupta↗
DOE OSTI2025

Harnessing Virtual Power Plants Reliably: Enabling tools for increased observability, controllability, operation, and aggregation of distributed energy resources

Harnessing virtual power plants enhances the integration of distributed energy resources into utility grids for a sustainable energy future. Virtual power plants (VPPs) aggregate DERs to enhance resource adequacy and reduce emissions. U.S. utilities are exploring various technologies to manage DERs effectively. FERC Order 2222 allows DERs to participate in both wholesale and retail markets. Enhancing observability and controllability of behind-the-meter (BTM) DERs is essential for reliable grid operations. A hierarchical control architecture can improve coordination among residential energy resources. Field tests showed nearly 20% energy savings and 30% peak power reduction during grid events. Effective management of DERs requires enhanced situational awareness to prevent grid congestion. Integrating DER management systems (DERMS) with existing planning tools can improve operational security. Near-real-time grid models can validate optimal resource set points against resource uncertainty. Traditional uninterruptible power supplies (UPS) can be upgraded to support grid services and become part of VPPs. Upgrading UPS systems can reduce costs by 75% and unlock significant battery capacity. New battery management systems and grid-aware controllers are essential for optimizing UPS performance. Continued research and development are necessary to address challenges in integrating DERs into utility grids. Encouraging customer participation in pilot programs is vital for the evolution of VPPs. Here, the shift towards price-responsive DERs and VPPs is expected to enhance energy distribution efficiency.

24 POWER TRANSMISSION AND DISTRIBUTION↗
DOE OSTI2020

Colloquium : Neutrino detectors as tools for nuclear security

For over 40 years, physicists have discussed possible uses for neutrino detectors in nuclear nonproliferation, arms control, and fissile materials security. Neutrinos are an attractive fission signature because they readily pass through matter. The same property makes neutrinos challenging to detect in systems that would be practical for nuclear security applications. This Colloquium presents a broad overview of several potential neutrino applications, including the near-field monitoring of known reactors, far-field monitoring of known or discovery of undeclared reactors, detection of reactor waste streams, and detection of nuclear explosions. Recent detector advances have made near-field monitoring feasible, whereas farther-field reactor detection and waste stream detection monitoring may be possible in some cases with further research and development. Very long-range reactor monitoring and nuclear explosion detection do not seem feasible for the foreseeable future due to considerable physical and/or practical constraints.

42 ENGINEERING↗
DOE OSTI2020

Assessing Anomaly-Based Intrusion Detection Configurations for Industrial Control Systems

To reduce cost and ease maintenance, industrial control systems (ICS) have adopted Ethernetbased interconnections that integrate operational technology (OT) systems with information technology (IT) networks. This integration has made these critical systems vulnerable to attack. Security solutions tailored to ICS environments are an active area of research. Anomalybased network intrusion detection systems are well-suited for these environments. Often these systems must be optimized for their specific environment. In prior work, we introduced a method for assessing the impact of various anomaly-based network IDS settings on security. This paper reviews the experimental outcomes when we applied our method to a full-scale ICS test bed using actual attacks. Our method provides new and valuable data to operators enabling more informed decisions about IDS configurations.

Gillen, Rob↗
DOE OSTI2022

Basic Energy Sciences Roundtable: Foundational Science for Carbon Dioxide Removal Technologies (Brochure)

Basic research to identify and understand the fundamental principles governing carbon dioxide removal processes of capture, conversion, and storage is essential for achieving zero carbon emissions by 2050. In March 2022, the Office of Basic Energy Sciences (BES)—in coordination with the US Department of Energy (DOE) technology Offices of Energy Efficiency and Renewable Energy, Fossil Energy and Carbon Management, and Nuclear Energy—held a roundtable titled, “Foundational Science for Carbon Dioxide Removal Technologies,” to discuss the scientific and technical barriers for CO 2 capture, conversion, and storage. Five priority research opportunities were identified to address these scientific and technical challenges and accelerate progress toward the realization of zero carbon emissions. The PROs are as follows: 1) Master Interfacial Processes of CO2 Transport and Reactivity Across Multiple Length and Time Scales; 2) Create Materials that Simultaneously Exhibit Multiple Properties for CO 2 Capture and Release or Conversion; 3) Discover Unconventional Pathways for Energy-Efficient CO 2 Capture, Release, and Conversion; 4) Control Multiphase Interactions Required for CO 2 Conversion into Minerals and Materials; and 5) Achieve Predictive Understanding of Coupled Processes in Complex Subsurface Geologic Systems for Secure Carbon Storage.

36 MATERIALS SCIENCE↗
DOE OSTI2022

Emerging Threats and Technology Investigation: Industrial Internet of Things - Risk and Mitigation for Nuclear Infrastructure

Industries supporting the global nuclear infrastructure striving for cost savings, expansions in efficiency, and convenience are likely to adopt components (e.g., hardware, software) that comprise the Internet of Things (IoT) and Industrial Internet of Things (IIoT). These devices offer potential improvements along with security challenges. Modern conveniences achieved through application of technology have propagated through society in the form of interconnected devices, from doorbells to microwave ovens, commonly referred to as IoT. IoT devices are often Internet-connected devices that are designed to send data back to a cloud-based server, where a smart phone application then presents device status and control options. Home-based IoT applications carry a different set of risks when compared to a business or security environment, where there is also a history of convenience and interconnection. Industrial settings have long relied on specifically designed Supervisory Control and Data Acquisition (SCADA) systems for process control where IIoT devices are intended to inform business decisions and augment traditional processes. A recent National Institute of Standards and Technology (NIST) report provides a distinction between process control and IIoT in that traditional process control is not replaced by IIoT, but rather IIoT devices are intended to enhance industrial processes through additional monitoring of various sensors and application of data analytics models using artificial intelligence (AI) and machine learning (ML) (Fagan, Marron, et al. 2021) (Ross, et al. 2021).

98 NUCLEAR DISARMAMENT, SAFEGUARDS, AND PHYSICAL P↗
DOE OSTI2022

DER as a service-ecoLong and VOLTTRON (Abstract)

The project goal is to commercialize the VOLTTRON-hosted “DER as a Service” (DaaS) application and make it an “out-of-the-box” solution for ecoLong to use as a secure residential energy management system that allows 1.) distributed energy resources (DERs) to participate in wholesale markets and provide services to the grid and 2.) intelligently control the energy in the residential buildings to the desired level while maintaining occupancy comfort. The product will be field deployed onto multiple Solar Liberty sites in New York state to demonstrate wide-scale participation of DERs in wholesale markets to provide services to the grid and validate the effectiveness of the solution. The integrated management of DERs and buildings increases the penetration of solar resources by managing its variability, providing grid services, and solving the evening ramping challenges. Ultimately, the DaaS platform will make buildings and DERs smarter by unlocking grid-interactive efficient buildings.

24 POWER TRANSMISSION AND DISTRIBUTION↗
DOE OSTI2024

Security of Mobile Radiological Sources: Overview of Industry Applied Technologies

Small radiological sources used in industrial settings recurrently require transit between job sites. Securing these sources, while stationary, can be addressed with standard security approaches and equipment. Transport of these sources increases the risk and complexity of managing and maintaining control of these sources. Implementing methodologies to securely monitor and locate sources improves response and resolution of anomalous events during transit. The Mobile Source Transit Security (MSTS) system was developed to improve security and provide situational awareness of these mobile sources throughout their job cycle. The MSTS development effort focused on creating a set of systems that could be successfully implemented in industrial radiography and well-logging applications. The MSTS team worked to address source presence and location through use and storage. The MSTS system monitors radiological sources as they move from the base of operations to the job site and back. The system provides near-real-time monitoring of the mobile source location and status and early notification of source loss or theft by transmitting operational status and alerting anomalous conditions over telematic links worldwide. The MSTS system can trigger an armed response or initiation of search and recovery operations and will automatically alert management and responsible staff if a radioactive source is lost or stolen whether it is on-site, in transport, or in storage.

98 NUCLEAR DISARMAMENT, SAFEGUARDS, AND PHYSICAL P↗
DOE OSTI2025

Streamlined Approach for Environmental Restoration (SAFER) Plan for Corrective Action Unit 114: Area 25 EMAD Facility Nevada National Security Site, Nevada

This Streamlined Approach for Environmental Restoration (SAFER) Plan addresses the actions needed to achieve closure for Corrective Action Unit (CAU) 114, Area 25 EMAD Facility, identified in the Federal Facility Agreement and Consent Order (FFACO). CAU 114 comprises the following corrective action sites (CASs) located in Area 25 of the Nevada National Security Site: • 25-41-03, EMAD Facility (Building 3900) • 25-99-23, Manned Control Car (MCC) and Engine Installation Vehicle (EIV) • 25-33-05, Building 3901, Engine Transport System Maintenance Building (Train Shed) This plan provides the methodology for field activities needed to gather the necessary information for closing CAU 114. There is sufficient information and process knowledge from historical documentation and investigations of similar sites regarding the expected nature and extent of potential contaminants to recommend closure of CAU 114 using the SAFER process. Additional information will be obtained by conducting a field investigation before selecting the appropriate corrective actions for CAU 114. It is anticipated that the results of the field investigation and implementation of corrective actions will support a defensible recommendation that no further corrective action is necessary. The purpose of the corrective action investigation will be to document and verify the adequacy of existing information; to affirm the decision for either clean closure, closure in place, or no further action; and to provide sufficient data to implement the corrective action. The actual corrective action selected will be based on characterization activities implemented under this SAFER Plan. If specific conditions or findings fall outside the bounds of the conceptual site model, such as an unanticipated release, the Nevada Division of Environmental Protection (NDEP) will be consulted to determine the path forward before proceeding. Upon completion of SAFER activities, a closure report (CR) will be prepared and submitted to NDEP for review and approval. The schedule for completion of the CR will be established in consultation with NDEP.

54 ENVIRONMENTAL SCIENCES↗
DOE OSTI2025

Dynamic security assessment of systems powered only by grid-forming power plants with uncertain dispatch using polynomial vectors

A modern challenge in power engineering is to perform the dynamic security assessment (DSA) of grids that are 100% powered by inverter-based resources (IBRs). Addressing this challenge is difficult because: (i) the dispatch of IBRs can be uncertain as a result of the variability of renewable resources and (ii) they have hard current control limits that cannot be neglected, contrasting synchronous machines. To address this problem, this paper sets forth a framework to conduct DSA of bulk power systems that are 100% powered by grid-forming IBRs. Furthermore, the framework considers that IBR operational conditions are unknown but bounded by a zonotope which is also expressed as a polynomial vector for uncertainty propagation via Dormand–Prince integration. The framework is applied to modified versions of the WSCC 9-bus and IEEE 39-bus grids.

14 SOLAR ENERGY↗
DOE OSTI2025

The Impact of Cultural Values and Organizational Processes on Nuclear Security Operations

Human performance is a pivotal factor in the design, testing, maintenance, and operation of security systems. The effectiveness of these systems relies not only on the capabilities, limitations, motives, and attitudes of the individuals involved, but also on the quality of training, instructional content, and evaluation methods provided. To uphold security standards, seamless integration between technologies and operators necessitates reliable human input. In security operations, human errors, often attributed to blame, sanctions, low motivation, individual accountability, or complacency, are primary causes of system failures. Complacency, characterized by a false sense of security, reflects a lack of awareness of potential threats and is a significant contributing factor to lapses in security. Security incidents arise from various factors, many extend beyond individual control, highlighting the need for a holistic approach to human performance that integrates organizational processes and team collaboration. Historically, errors have been attributed to individual moral or cognitive failures. However, insights from Operational Experiences (OEs) suggest that organizational processes weakness and deficiencies in nuclear cultural values contribute more significantly to security failures than individual mistakes. This paper consolidates lessons learned from diverse international nuclear security cultures and aims to highlight the importance of security culture in shaping global perspectives on nuclear security. It underscores the role of cultural values in shaping nuclear security practices and enhancing the resilience of security systems in the nuclear sector.

Zineddin, Dr. Z. [ORNL] (ORCID:0009000848740725)↗
DOE OSTI2021

EMS and DMS Integration of the Coordinative Real-time Sub-Transmission Volt-Var Control Tool under High DER Penetration

This paper proposes an applicable approach to deploy the Coordinative Real-time Sub-Transmission Volt-Var Control Tool (CReST-VCT), and a holistic system integration framework considering both the energy management system (EMS) and distribution system management system (DMS). This provides an architectural basis and can serve as the implementation guideline of CReST-VCT and other advanced grid support tools, to co-optimize the operation benefits of DERs and assets in both transmission and distribution networks. Potential communication protocols for different physical domains of a real application is included. Performance and security issues are also discussed, along with specific considerations for field deployment. Finally, the paper presents a viable pathway for CReST-VCT and other advanced grid support tools, which could be integrated in an open-source standardized-based platform that supports distribution utilities.

Nguyen, Quan H.↗
DOE OSTI2023

Reinforcement Learning for Intentional Islanding in Resilient Power Transmission Systems

Intentional islanding is the process of identifying and deliberately decomposing the transmission network to form self-sustained islands from an endangered network during disruptions to improve resilience and security. Most existing intentional islanding models are offline resilience decision tools and hence do not provide outage responses in a timely manner. In this paper, a reinforcement learning (RL) based model for intentional islanding is developed, which offers real-time switching control, online deployability, and adaptability to varying system conditions. The intentional islanding process is formulated as a Markov decision process, where the optimal transmission switching policy is learned using the RL approach. The control policy is learned over an environment that encompasses a Power System Simulator for Engineering (PSS/E) model of the transmission network, facilitated by an interface to the standard openAI Gym framework. The proposed RL-based methodology aims to form stable and self-sustainable islands by ensuring voltage stability while reducing the power mismatch in the formed islands. A proximal policy optimization algorithm is designed, which is suitable for controlling the on/off status of the switches with multi-layer perceptron as value and actor networks. The effectiveness of the proposed framework in the self-recovery of the grid by island formation is applied on the modified IEEE 39-bus test network and validated by dynamic simulations.

24 POWER TRANSMISSION AND DISTRIBUTION↗
DOE OSTI2020

Safeguards Modeling for Advanced Nuclear Facility Design.

Future nuclear fuel cycle facilities will see a significant benefit from considering materials accountancy requirements early in the design process. The Material Protection, Accounting, and Control Technologies (MPACT) working group is demonstrating Safeguards and Security by Design (SSBD) for a notional electrochemical reprocessing facility as part of a 2020 Milestone. The idea behind SSBD is to consider regulatory requirements early in the design process to provide more optimized systems and avoid costly retrofits later in the design process. Safeguards modeling, using single analyst tools, allows the designer to efficiently consider materials accountancy approaches that meet regulatory requirements. However, safeguards modeling also allows the facility designer to go beyond current regulations and work toward accountancy designs with rapid response and lower thresholds for detection of anomalies. This type of modeling enables new safeguards approaches and may inform future regulatory changes. The Separation and Safeguards Performance Model (SSPM) has been used for materials accountancy system design and analysis. This paper steps through the process of designing a Material Control and Accountancy (MC&A) system, presents the baseline system design for an electrochemical reprocessing facility, and provides performance metrics from the modeling analysis. The most critical measurements in the electrochemical facility are the spent fuel input, electrorefiner salt, and U/TRU product output measurements. Finally, material loss scenario analysis found that measurement uncertainties (relative standard deviations) for Pu would need to be at 1% (random and systematic error components) or better in order to meet domestic detection goals or as high as 3% in order to meet international detection goals, based on a 100 metric ton per year plant size.

98 NUCLEAR DISARMAMENT, SAFEGUARDS, AND PHYSICAL P↗