SEARCH · Engineering Papers
Results for “secure data”
Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.
Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.
Security-Oriented and Load-Balancing Wireless Data Routing Game in the Integration of Advanced Metering Infrastructure Network in Smart Grid
Ensuring flexible and reliable data routing is indispensable for the integration of Advanced Metering Infrastructure (AMI) networks, we propose a secure-oriented and load-balancing wireless data routing scheme. A novel utility function is designed based on security routing scheme. Then, we model the interactive security-oriented routing strategy among meter data concentrators or smart grid meters as a mixed-strategy network formation game. Finally, such problem results in a stable probabilistic routing scheme with proposed distributed learning algorithm. One contributions is that we studied that different types of applications affect the routing selection strategy and the strategy tendency. Another contributions is that the chosen strategy of our mixed routing can adaptively to converge to a new mixed strategy Nash equilibrium (MSNE) during the learning process in the smart grid.
Data-Intensive Visual Analysis for Cyber Security
Protecting communications networks against attacks where the aim is to steal information, disrupt order, or harm critical infrastructure can require the collection and analysis of staggering amounts of data. The ability to detect and respond to threats quickly is a paramount concern across sectors, and especially for critical government, utility and financial networks. Yet detecting emerging or incipient threats in immense volumes of network traffic requires new computational and analytic approaches. Network security increasingly requires cooperation between human analysts able to spot suspicious events through means such as data visualization and automated systems that process streaming network data in near real-time to triage events so that human analysts are best able to focus their work.
Designing a Secure Storage Repository for Sharing Scientific Datasets using Public Clouds
As Cloud platforms gain increasing traction among scientific and business communities for outsourcing storage, computing and content delivery, there is also growing concern about the associated loss of control over private data hosted in the Cloud. In this paper, we present an architecture for a secure data repository service designed on top of a public Cloud infrastructure to support multi-disciplinary scientific communities dealing with personal and human subject data, motivated by the smart power grid domain. Our repository model allows users to securely store and share their data in the Cloud without revealing the plain text to unauthorized users, the Cloud storage provider or the repository itself. The system masks file names, user permissions and access patterns while providing auditing capabilities with provable data updates.
RanchES Data & R code
Securing food production while safeguarding ecosystem stability and resilience remains a grand challenge in the Anthropocene. Sustainable agricultural intensification holds promise in achieving ecosystem service multifunctionality beyond food production, yet empirical evidence remains tenuous, especially regarding consequences for the metaecosystems (i.e., spatially coupled ecosystems connected by flows across ecosystem boundaries). Here we synthesized long-term datasets encompassing 53 physical, chemical, and biological indicators, comprising >11,000 field measurements, to understand effects of land-use intensification on multiple ecosystem services of spatially connected grasslands and wetlands. The management practices applied to grasslands were not directly imposed on wetlands, except for grazing intensity. Our results revealed that intensification promoted high-quality forage and livestock production in both grasslands and wetlands, but at the expense of water quality regulation, methane mitigation, non-native species invasion resistance, and biodiversity, and further weakened relationships among ecosystem services. Such intensification effects on grasslands cascaded to alter multifunctionality of embedded natural wetlands within the metaecosystems to a similar extent. Our results highlight the need to integrate holistic and systematic perspectives into land-use intensification strategies to achieve multifunctional agricultural landscapes.
Cincinnatus: Domain-Independent Breach Detection System
Cincinnatus enables detection of changes in binary data, which may be attributed to anomalies, security breaches, record changes, fraud, etc., without requiring experts to craft the models for analytics as well as the pipelines for collecting new samples, in the case of cyber security memory forensics data.
RCSB Protein Data Bank: Celebrating 50 years of the PDB with new tools for understanding and visualizing biological macromolecules in 3D
We report the Research Collaboratory for Structural Bioinformatics Protein Data Bank (RCSB PDB), funded by the US National Science Foundation, National Institutes of Health, and Department of Energy, has served structural biologists and Protein Data Bank (PDB) data consumers worldwide since 1999. RCSB PDB, a founding member of the Worldwide Protein Data Bank (wwPDB) partnership, is the US data center for the global PDB archive housing biomolecular structure data. RCSB PDB is also responsible for the security of PDB data, as the wwPDB-designated Archive Keeper. Annually, RCSB PDB serves tens of thousands of three-dimensional (3D) macromolecular structure data depositors (using macromolecular crystallography, nuclear magnetic resonance spectroscopy, electron microscopy, and micro-electron diffraction) from all inhabited continents. RCSB PDB makes PDB data available from its research-focused RCSB.org web portal at no charge and without usage restrictions to millions of PDB data consumers working in every nation and territory worldwide. In addition, RCSB PDB operates an outreach and education PDB101.RCSB.org web portal that was used by more than 800,000 educators, students, and members of the public during calendar year 2020. This invited Tools Issue contribution describes (i) how the archive is growing and evolving as new experimental methods generate ever larger and more complex biomolecular structures; (ii) the importance of data standards and data remediation in effective management of the archive and facile integration with more than 50 external data resources; and (iii) new tools and features for 3D structure analysis and visualization made available during the past year via the RCSB.org web portal.
Employing a Hardware-in-the-Loop Approach to Realize a Fully Homomorphic Controller for a Small Modular Advanced High Temperature Reactor
This paper addresses the cybersecurity challenges of advanced nuclear reactors by integrating fully homomorphic encryption (FHE) into their control systems, enabling encrypted processing of control signals without compromising functionality. Advanced nuclear reactors, including Small Modular Reactors (SMRs) and microreactors, aim to achieve autonomous and remote operations, reducing costs and enhancing competitiveness. However, these advancements expand the attack surface for cyberattacks, particularly in autonomous and remote operation scenarios. Cyberattacks can exploit vulnerabilities to manipulate physical processes, causing shutdowns, asset damage, or public harm. Such attacks begin with passive reconnaissance, where adversaries intercept communications or observe behaviors to gather information, which is then leveraged to execute cyber-physical attacks by injecting malicious commands. Nuclear power must adopt cybersecurity protection measures to secure the integrity and availability of their digital control systems. This paper demonstrates the application of FHE to secure operations by enabling encrypted processing of sensitive signals and parameters -- ensuring privacy without exposing data. FHE supports secure mathematical operations on encrypted data without requiring decryption. Using a hardware-in-the-loop (HIL) approach, this paper implements an FHE-integrated controller on a BeagleBone Black (BBB) controlling a simulation of the Small Modular Advanced High Temperature Reactor (SmAHTR). By doing so, the encrypted controller protects the integrity of critical set points and control signals during transmission and processing. Thus, FHE-integrated controllers enhance secure operations of advanced nuclear reactors while maintaining functionality.
One-way transfer device with secure reverse channel
A data diode provides a flexible device for collecting data from a data source and transmitting the data to a data destination using one-way data transmission across a main channel. On-board processing elements allow the data diode to identify automatically the type of connectivity provided to the data diode and configure the data diode to handle the identified type of connectivity. Either or both of the inbound and outbound side of the data diode may comprise one or both of wired and wireless communication interfaces. A secure reverse channel, separate from the main channel, allows carefully predetermined communications from the data destination to the data source.
One-way transfer device with secure reverse channel
A data diode provides a flexible device for collecting data from a data source and transmitting the data to a data destination using one-way data transmission across a main channel. On-board processing elements allow the data diode to identify automatically the type of connectivity provided to the data diode and configure the data diode to handle the identified type of connectivity. Either or both of the inbound and outbound side of the data diode may comprise one or both of wired and wireless communication interfaces. A secure reverse channel, separate from the main channel, allows carefully predetermined communications from the data destination to the data source.
FEST: Facility Energy Saving and Securing Technology Using Multi-Source Data: (Milestone 2 Report)
This project aims to demonstrate three technologies developed in-house at LLNL and University of Michigan-Dearborn (UMD), at a military site, including i) Grid Data Crossing (called GriD-Xing) for increasing smart meter data usability, ii) Facility Energy Optimization (called Facility E-GO) for improving facility energy efficiency in both operation and planning perspectives, and iii) Co-simulation tool (called Co-Sim) for enhancing smart meter and energy facility networks resilience and security. In this report, Millstone 2 - Integration A: Integrate GriD-Xing and facility optimization tools is documented.
Implementing efficient data compression and encryption in a persistent key-value store for HPC
Recently, persistent data structures, like key-value stores (KVSs), which are stored in a high-performance computing (HPC) system’s nonvolatile memory, provide an attractive solution for a number of emerging challenges like limited I/O performance. Data compression and encryption are two well-known techniques for improving several properties of such data-oriented systems. This article investigates how to efficiently integrate data compression and encryption into persistent KVSs for HPC with the ultimate goal of hiding their costs and complexity in terms of performance and ease of use. Our compression technique exploits deep memory hierarchy in an HPC system to achieve both storage reduction and performance improvement. Our encryption technique provides a practical level of security and enables sharing of sensitive data securely in complex scientific workflows with nearly imperceptible cost. We implement the proposed techniques on top of a distributed embedded KVS to evaluate the benefits and costs of incorporating these capabilities along different points in the dataflow path, illustrating differences in effective bandwidth, latency, and additional computational expense on Swiss National Supercomputing Centre’s Grand Tavé and National Energy Research Scientific Computing Center’s Cori.
Evaluation and correction of timing inconsistencies from the Thor 1 and Thor 2 experiments at the Nevada National Security Site.
Active source seismic data was collected at the Nevada National Security Site using the Seismic Hammer(TM) (SH), under contract from HK Exploration. The SH generates a seismic pulse by dropping a 13 metric ton mass from a height of 1.5 m. Post-survey evaluation of collected data revealed inconsistencies in shot trigger time that required additional analysis and correction using cross-correlation and/or time shifts derived from manual picks of trigger times. While the primary analysis for which this data set was collected is independent of the knowledge of shot trigger time, other processing methods require highly precise knowledge of the trigger time. In order to make the Thor data set more usable to the larger community, additional work was undertaken. Results using the preferred method of cross-correlation were found to be satisfactory. An improved timing fiducial approach is required to reduce timing errors.
Local-Regional Surface Wave Dispersion Analysis using Ambient Noise Data of the Southern Nevada National Security Site Area
This report details seismic ambient noise analysis to improve seismic velocity estimates of the southeastern Nevada National Security Site (NNSS). We compare two different methods for estimating surface wave dispersion curves from ambient noise cross-correlations: frequency time analysis (FTAN) and Aki’s cross-spectral method (XSpec). We find that XSpec performs better for our local-regional dataset and frequency content. Using phase velocity estimates from XSpec, we build a preliminary phase velocity dispersion dataset, which contains data for 1,054 station pairs and 8,905 discrete phase velocity measurements for periods between 0.5 and 13 s. This phase velocity dataset will be incorporated into an updated local-regional P and S wave velocity model of the southeastern NNSS in the future and is expected to improve upon shallow velocity estimates.
Secure Distributed State Estimation for Networked Microgrids
Distributed state estimation (DSE) allows networked microgrids to achieve global state awareness with conservation of local information privacy by peer-to-peer message exchange implemented with Internet of Things protocols over heterogeneous communications. This paper presents a secure DSE (SDSE) method for networked microgrids to enhance system resiliency by addressing false data injection threat in distributed microgrid agent nodes. Here, the designated SDSE applies a trust-based diffusion algorithm using adaptive combination policy, which allows agents to adapt their combination coefficients to exclude misbehaving nodes from the network. The results demonstrate that proposed SDSE algorithm addresses emerging data integrity and security problems in critical energy delivery infrastructure and SCADA environment.
Security Vulnerability and Patch Management in Electric Utilities: A Data-Driven Analysis
This paper explores a real security vulnerability and patch management dataset from an electric utility in order to shed light on characteristics of the vulnerabilities that electric utility assets have and how they are remediated in practice. Specifically, it first analyzes the distribution of vulnerabilities over software, assets, and other metric. Then it analyzes how vulnerability features affect remediate actions.
Final Report: Sampling-Based Algorithms for Estimating Structure in Big Data.
The purpose of this project was to develop sampling-based algorithms to discover hidden struc- ture in massive data sets. Inferring structure in large data sets is an increasingly common task in many critical national security applications. These data sets come from myriad sources, such as network traffic, sensor data, and data generated by large-scale simulations. They are often so large that traditional data mining techniques are time consuming or even infeasible. To address this problem, we focus on a class of algorithms that do not compute an exact answer, but instead use sampling to compute an approximate answer using fewer resources. The particular class of algorithms that we focus on are streaming algorithms , so called because they are designed to handle high-throughput streams of data. Streaming algorithms have only a small amount of working storage - much less than the size of the full data stream - so they must necessarily use sampling to approximate the correct answer. We present two results: * A streaming algorithm called HyperHeadTail , that estimates the degree distribution of a graph (i.e., the distribution of the number of connections for each node in a network). The degree distribution is a fundamental graph property, but prior work on estimating the degree distribution in a streaming setting was impractical for many real-world application. We improve upon prior work by developing an algorithm that can handle streams with repeated edges, and graph structures that evolve over time. * An algorithm for the task of maintaining a weighted subsample of items in a stream, when the items must be sampled according to their weight, and the weights are dynamically changing. To our knowledge, this is the first such algorithm designed for dynamically evolving weights. We expect it may be useful as a building block for other streaming algorithms on dynamic data sets.
DOE Cold Climate Heat Pump Challenge Field Validation: Data Collection and Analysis Plan
This document details the data collection, storage, and analysis plan and methodologies for conducting the field validation portion of DOE’s Cold Climate Heat Pump (CCHP) Challenge. The study is focused on validating the in-field heating performance of prototypical CCHPs that have successfully demonstrated that they meet or exceed the Challenge specification in a laboratory setting. The units that have passed laboratory testing will be installed in real homes along with sensors and loggers for monitoring performance over an entire heating season. Data collected through monitoring will be cleaned and stored in a secure database. The data will be analyzed for calculating the key metrics defined by the Challenge including heating capacities at low outdoor air temperatures (below 32 °F), efficiency in terms of the Coefficient of Performance (COP), switchover temperatures and auxiliary heat staging. Demand Response (DR) capabilities will also be tested using specially designed DR events. In most cases, shoulder season and cooling season performance will also be determined and reported.