Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “time security”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 325 records · Page 18
All sourcesNASA NTRSDOE OSTI
DOE OSTI2024

Probabilistic Sizing of Energy Storage Systems for Reliability and Frequency Security in Wind-Rich Power Grids

The penetration of wind energy has increased significantly in the power grid in recent times. Although wind is abundant, environment-friendly, and cheap, it is variable in nature and does not contribute to system inertia as much as conventional synchronous generators. Coupled with the low inertia contribution, the generation intermittency of wind power leads to reliability and stability issues in the power system. Energy storage systems (ESSs) are among the most prominent alternatives to alleviate these concerns associated with high wind penetration. This paper proposes a planning strategy to size ESS for the reliability and frequency security of wind-rich power grids. A probabilistic methodology for ESS sizing is developed utilizing a composite reliability-based framework with sequential Monte Carlo simulation (MCS). The MCS generates composite reliability indices for the power system, which are employed to obtain the capacity for a reliability energy storage system (RESS). Simultaneously, the MCS-derived probability of synchronization of conventional generators is integrated into an analytical approach for sizing a frequency support energy storage system (FESS). The effect of wind farm dispersion across geographical regions is incorporated in the framework to study possible reductions in the ESS size while maintaining the system reliability and frequency security. Furthermore, the efficacy of the proposed strategy is demonstrated on the RTS-GMLC test system.

25 ENERGY STORAGE↗
DOE OSTI2021

Grid Cyber-Security Strategy in an Attacker-Defender Model

The progression of cyber-attacks on the cyber-physical system is analyzed by the Probabilistic, Learning Attacker, and Dynamic Defender (PLADD) model. Although our research does apply to all cyber-physical systems, we focus on power grid infrastructure. The PLADD model evaluates the effectiveness of moving target defense (MTD) techniques. We consider the power grid attack scenarios in the AND configurations and OR configurations. In addition, we consider, for the first time ever, power grid attack scenarios involving both AND configurations and OR configurations simultaneously. Cyber-security managers can use the strategy introduced in this manuscript to optimize their defense strategies. Specifically, our research provides insight into when to reset access controls (such as passwords, internet protocol addresses, and session keys), to minimize the probability of a successful attack. Our mathematical proof for the OR configuration of multiple PLADD games shows that it is best if all access controls are reset simultaneously. For the AND configuration, our mathematical proof shows that it is best (in terms of minimizing the attacker's average probability of success) that the resets are equally spaced apart. We introduce a novel concept called hierarchical parallel PLADD system to cover additional attack scenarios that require combinations of AND and OR configurations.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2020

Potential Advantages to Employing an Onsite Laboratory at FUSRAP Sites Contaminated with Radionuclides and Metals - 20353

Various factors that support an evaluation of the relative costs, advantages and disadvantages of utilizing an onsite laboratory or an offsite laboratory for remediation of Formerly Utilized Sites Remedial Action Program (FUSRAP) sites contaminated with radionuclides and metals are presented. In terms of how much more quickly an onsite laboratory provides results versus an offsite laboratory, the results of this study provide tools for calculating the amount of cost savings per day for excavation of contaminated soils for various scenarios including: - State, municipal or local property remediation where the remediation schedule becomes time-critical due to the extra cost and inconvenience to the town or municipality caused by the need for increased security and safety personnel, possible road closures and detours, and the inconvenience to the public due to modified or decreased services of State or municipal facilities; - Residential property where the remediation schedule becomes time-critical due to the inconvenience to the homeowner as well as the importance of maintaining good community relations; - Commercial property where the remediation schedule becomes time-critical due to the hardship and potential loss of revenue endured by the property owner; - Open area where treatment of excavation water is required, and - Open area where treatment of excavation water is not required. For every scenario, the number of matrices, radionuclide and metal contaminants of concern and the project duration are important factors. The costs for the onsite laboratory included the capital costs associated with setting up the lab such as trailer(s) or building(s), power and water hookup, analytical testing equipment, balances, computers, desks and bookcases; support equipment such as hot plates, filtration assemblies, safety equipment, ovens, etc.; and supplies such as glassware, pipettes, filters, etc. and ongoing costs such as labor, chemicals and reagents, standards, cost of the laboratory obtaining certification and maintenance. Offsite laboratory sample testing costs are generally very competitive and typically substantially lower than onsite laboratory costs if only the sample testing costs are considered. The great disadvantage of using an offsite laboratory is that they often cannot guarantee rapid turnaround times for results which creates project delays associated with the remediation process including delays determining the completeness of the characterization and remediation processes, delays in backfilling a property and additional costs for treating wastewater (excavation water, stormwater or both). These costs will vary greatly depending upon the area of the country in which the project is located due to the wide range of labor costs for the onsite laboratory and field workers, as well as the contaminants of interest, matrices and most importantly the size of the impacted area and the number of properties located in that area. This paper provides guidelines for calculating the cost savings that may be realized if an onsite laboratory can generate results more quickly than an offsite laboratory by estimating the costs associated with the remediation process for the various scenarios noted above such as work crew labor costs, excavator and dump truck equipment rentals, wastewater treatment costs (if applicable) and the additional costs incurred by homeowners, commercial property owners and towns/municipalities that are reimbursed by the potentially responsible parties. Key assumptions involve the typical quickest turnaround time provided by the onsite and offsite laboratories. Costs for the operation of a wastewater treatment system and the remediation of a site area or property were provided by personnel who have been involved in the operation of a large FUSRAP site in New Jersey for many years. This study provides valuable information for determining the most cost-effective approach for analysis of project samples and therefore may be used on upcoming FUSRAP projects. (authors)

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗
DOE OSTI2024

Data Security Defense: Modeling and Detection of Synchrophasor Data Spoofing Attack for Grid Edge

Data security and cyberattack have become critical issues in the distributed power system where adversaries can swap the source information of sensors or even spoof and alter measurements. However, the cyber security of the power system is challenged by the unpredictability and stealth of the spoofing attacks. Here, to protect the data security at the grid edge, this paper developed a synchrophasor data spoofing attack detection framework based on the time-frequency feature extraction techniques including the short-time Fourier transform (STFT) and object detection network for real-time synchrophasor data categorization and spoofing attack localization. The proposed approach outperforms earlier work in terms of spoofing attack detection and offers a vital localization function employing distributed synchrophasor sensors.

24 POWER TRANSMISSION AND DISTRIBUTION↗
DOE OSTI2022

PAS: Privacy Algorithms in Systems

Today we face an explosion of data generation, ranging from health monitoring to national security infrastructure systems. More and more systems are connected to the Internet that collects data at regular time intervals. These systems share data and use machine learning methods for intelligent decisions, which resulted in numerous real-world applications (e.g., autonomous vehicles, recommendation systems, and heart-rate monitoring) that have benefited from it. However, these approaches are prone to identity thief and other privacy related cyber-security attacks. So, how can data privacy be protected efficiently in these scenarios? More dedicated efforts are needed to propose the integration of privacy techniques into existing systems and develop more advanced privacy techniques to address the complex challenges of multi-system connectivity and data fusion. Therefore, we have introduced Privacy Algorithms in Systems (PAS) at CIKM which provides a venue to gather academic researchers and industry researchers/practitioners to present their research in an effort to advance the frontier of this critical direction of privacy algorithms in systems.

Kotevska, Olivera↗
NASA NTRS2011

Share the Sky: Concepts and Technologies That Will Shape Future Airspace Use

The airspace challenge for the United States is to protect national sovereignty and ensure the safety and security of those on the ground and in the air, while at the same time ensuring the efficiency of flight, reducing the costs involved, protecting the environment, and protecting the freedom of access to the airspace. Many visions of the future NAS hold a relatively near-term perspective, focusing on existing uses of the airspace and assuming that new uses will make up a small fraction of total use. In the longer term, the skies will be filled with diverse and amazing new air vehicles filling our societal needs. Anticipated new vehicles include autonomous air vehicles acting both independently and in coordinated groups, unpiloted cargo carriers, and large numbers of personal air vehicles and small-scale point-to-point transports. These vehicles will enable new capabilities that have the potential to increase societal mobility, transport freight at lower cost and with lower environmental impact, improve the study of the Earth s atmosphere and ecosystem, and increase societal safety and security by improving or drastically lowering the cost of critical services such as firefighting, emergency medical evacuation, search and rescue, border and neighborhood surveillance, and the inspection of our infrastructure. To ensure that uses of the airspace can continue to grow for the benefit of all, a new paradigm for operations is needed: equitably and safely sharing the airspace. This paper is an examination of such a vision, concentrating on the operations of all types of air vehicles and future uses of the National Airspace. Attributes of a long-term future airspace system are provided, emerging operations technologies are described, and initial steps in research and development are recommended.

Ballin, Mark G.↗
DOE OSTI2023

Project: Corbomite - Product: ConsoleWorks REACT

TDi Technologies presents ConsoleWorks REACT, an advanced platform designed to tackle the complexities of cyber and operational risk assessment. This comprehensive solution goes beyond asset-focused approaches by considering the impact of both assets and people have on the security and operation of critical infrastructure, specifically targeting preventing gird mis-operation by evaluating real-time human interaction or commands with critical assets. The hypothesis suggests that by integrating the assessment of user commands into the overall risk assessment process, organizations can make more informed decisions, prioritize resources effectively, and respond promptly to potential threats. This hypothesis forms the basis for the development of a proactive and holistic risk management approach that is more comprehensive and context aware than traditional models which only look at assets, patch levels, configuration and threat intel by collecting that information off the network vs directly from the asset, human, and human interaction all in real-time. ConsoleWorks' unique man-in-the-middle architecture is a key feature that sets it apart in the cybersecurity landscape. This architecture enables the real-time observation, enforcement, and commands or interaction risk transparency of user interaction with critical infrastructure to be risk mitigated and audited as they are aggregated with device and human risk factors for a more comprehensive risk threat score across a device or group of devices. This architecture allows ConsoleWorks to act as a secure intermediary between users and critical assets, monitoring all interactions and ensuring that only authorized commands are sent to the asset to be executed. This not only enhances security but also provides a comprehensive audit trail of all user activities, contributing to compliance efforts and facilitating incident investigation and risk management. By integrating this unique architecture with our comprehensive risk assessment methodology, ConsoleWorks REACT provides a powerful solution for managing cyber and operational risks, enabling organizations to maintain a robust security posture and effectively mitigate potential threats. To that end, the primary objective of this project was to research and develop a robust solution that enables the energy industry to mitigate the risks associated with human actions that can compromise the security or operations of assets critical to energy delivery, generation, transmission and operation. ConsoleWorks REACT plays a pivotal role in achieving this goal by leveraging its unique capabilities to monitor and track all user activity. Through its Zero Trust approach, which emphasizes continuous verification, the platform ensures secure access to assets and serves as the centralized human response and notification platform for addressing cyber and operational issues.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2025

Building Cybersecurity Educational Materials for Students: The Windfarm Capture-The-Flag Exercise

Securing and protecting critical infrastructure in an increasingly digital world is vital but it is all too often an afterthought. It is especially important that students become aware of internet safety and security at an early age. However, the availability of interactive and educational cybersecurity material targeted toward students is minimal in the United States. Here we show an example of interactive cyber security educational material that an educator can use in their classroom to encourage students to think about the interaction between real-world physical objects, cyber security, and information security. By putting together a “capture-the-flag” exercise, students can see in real time how hackers and cybercriminals exploit vulnerabilities and gain access information. The students try to “capture” the “flag” (i.e., information) in the wind farm by looking for oddities in the code or by taking advantage of weaknesses in everyday protocols. Students can also see how cybersecurity interacts with the power grid through the wind farm project scenario and how a hacker could cause serious problems to a critical infrastructure sector. Our goal for the project is getting students interested in cybersecurity and help them develop an awareness of how important having robust security systems is. We also hope that this project demonstrates the importance of introducing these concepts early and inspires others to create similar projects geared toward students.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2025

Automation of Vulnerability and Patch Management: Information Extraction, Association, and Optimization

Vulnerability and patch management is an integral part of a robust cybersecurity program, yet it grows increasingly complex due to the sheer amount of data that must be analyzed. Particularly in Operational Technology (OT) environments, analysis must be done manually because of the lack of automated solutions. Additionally, there are many steps in this process, from the initial discovery of the vulnerability to the implementation of its remediation, and each step in the process requires different data in order to be performed effectively. In this work, we provide approaches and strategies to assist operators in industrial or OT environments throughout the vulnerability management cycle. Security advisories provide key information about mitigation strategies, or actions that can be taken when a patch is unavailable or cannot be installed. Details of these strategies are not shared in public vulnerability databases and must be found manually. We approach this problem by designing a solution to automatically identify that information within vendor security advisories and retrieve it for operator use. We start with an approach that requires domain-specific knowledge of certain frequently-seen reference websites. Next, an approach that can work on an arbitrary website but relies on certain keywords. Finally, an approach that uses Natural Language Processing (NLP) methods and does not require specific knowledge or keywords. Each of these approaches is more general than its predecessor; we demonstrate high accuracy for all approaches Advisories also often contain details of affected products in non-standard or natural language formats. While this information can be easily understood when read by an operator, the non-standard format acts as a barrier to effective automation. We provide an approach for the first step in this process: identifying vendors in security advisories and mapping them to a standard framework for representing digital assets and software products. We evaluate five established string similarity algorithms, plus one of our own design that combines string similarity and information theory, on the task of mapping vendors to their corresponding entries in the Common Platform Enumeration (CPE) repository. Our results show that our proposed metric outperforms all others. Due to the constraints on time, finances, and personnel for organizations, Large Language Models (LLMs) may seem like attractive opportunities for security operators to speed up information gathering; however, it is still not clear whether LLMs can handle vulnerability management tasks well. To answer this question, we perform an empirical study of LLMs’ ability to provide consistent, accurate information about vulnerabilities in order to guide organizations in their adoption of LLMs. We observe poor performance for all models tested, suggesting that these models are not well-suited to the consistent retrieval of accurate vulnerability information. Finally, once vulnerabilities have been identified and any additional information has been obtained, operators must decide which remediation actions to implement based on their available resources. This already-complex problem becomes even more so when we consider that a vulnerability may have multiple avenues for remediation. We formulate this scenario as two knapsack problems and provide solutions, which we then compare against several existing strategies for vulnerability prioritization seen in real operational environments.

McClanahan, Kylie↗
DOE OSTI2025

Cyber‐Resilient Distributed Energy Resource Control Algorithms for Smart Distribution Grids

ABSTRACT This paper focuses on the development of cyber‐resilient gradient‐based optimisation algorithms and theoretical proof for grid‐interactive distributed energy resource (DER) control to enable two grid services of virtual power plants (VPPs) dispatch and grid voltage regulation, considering the communication and security impacts. Firstly, the combined DER dispatch and voltage regulation as a real‐time gradient‐based optimisation problem is recapped. Thereafter, we consider a probabilistic traffic model to characterise packet delays and loss in a communication network, and study how the delays enter the process of information exchange among the grid measurement units, local DER controllers and the grid control centre that execute this control algorithm in a coordinated manner. Then, a strategy combining delay thresholds and message update rules is proposed to immunity the asynchrony resulting from the communications traffic and it avoids possible numerical instabilities and sensitivities of the power tracking and voltage regulation capabilities, resulting as cyber‐resilient DER control algorithms. Additionally, their convergence is theoretically proved. Effectiveness of proposed cyber‐resilient algorithms has been validated on the IEEE 37‐bus system in terms of convergence, VPP tracking and voltage regulation performance for smart distribution systems with high penetration of DERs.

24 POWER TRANSMISSION AND DISTRIBUTION↗
DOE OSTI2024

Cybersecurity Assessment in DER-rich Distribution Operations: Criticality Levels and Impact Analysis

The integration of distributed energy resources (DERs) in distribution networks has become a pivotal strategy for achieving decarbonization, enhancing grid resilience, and optimizing grid efficiency. Remote monitoring and control op- erations of such resources rely on a network of sensors and communication infrastructure, exposing the system to potential cyber threats. Therefore, as the deployment of DERs increases, ensuring secure monitoring and control becomes an imperative challenge. This paper utilizes real-time feeder models, which are instrumental in developing cybersecurity testbeds tailored for hardware-in-loop (HIL) systems. These models enable users to simulate cyber attacks in a real-world environment and analyze the power distribution operations during vulnerabilities. Furthermore, we discuss several practical sets of grid parameters to identify critical levels of DERs and evaluate various scenarios that simulate cyber threats on sensitive DERs. The modified IEEE 123-bus model is used as the test case for demonstrating the proposed scenarios. The findings from this study provide valuable insights into the vulnerabilities and potential consequences of cyber attacks on DERs, allowing for better mitigation strategies and improved cyber resilience in future distribution networks.

Maharjan, Manisha↗
DOE OSTI2021

Cyber Physical Grid-Interactive Distributed Energy Resources Control for VPP Dispatch and Regulation

This paper presents a cyber-physical algorithm for grid-interactive Distributed Energy Resource (DER) control to enable two features of Virtual Power Plants (VPPs) dispatch and grid voltage regulation, considering the communication and security impacts. We first formulate the DER dispatch problem as a real-time, iterative, and grid-interactive DER control problem. Thereafter, we consider a probabilistic traffic model to characterize packet delays and loss in a communication network, and study how the delays enter the process of information exchange among the grid measurement units, local DER controllers and the grid control center that coordinately execute this dispatch algorithm. Finally, a strategy combining delay threshold and modified message update rules is proposed to immune the asynchrony resulting from the communications network traffic and it avoids possible numerical instabilities and sensitivities of the tracking and regulation capabilities of this DER control algorithm. By implementing the proposed cyber-physical algorithm on the modified IEEE 37-node system, our preliminary results exhibit that the uncertainties of the underlying communications infrastructure must be considered for the VPP tracking and regulation capabilities of any DER in a generic Cyber-Physical System (CPS), because the delayed voltage measurements in the uplink/bi-link cases result in the off-track in VPP dispatch and jittery in voltage regulation.

cyber-physical algorithm↗
DOE OSTI2020

An Interior-Point Solver for Optimal Power Flow Problem Considering Distributed FACTS Devices

In this paper, we propose an AC optimal power flow (ACOPF) model considering distributed flexible AC transmission system (D-FACTS) devices, in which the reactance of D-FACTS equipped lines are introduced as decision variables. This is motivated by increasing interests in using D-FACTS devices to address system operational and cyber-security concerns. First, D-FACTS devices can be incorporated in real-time operations for economic benefits such as managing power congestions and reducing system losses. Second, D-FACTS devices can be utilized by moving target defense (MTD), an emerging concept against cyber-attacks, to prevent attackers from knowing true system configurations. Therefore, system operators can use the proposed ACOPF model to achieve economic benefits and provide the setpoints of D-FACTS devices for MTD at the same time. In addition, we rigorously derive the gradient and Hessian matrices of the objective function and constraints, which are further used to build an interior-point solver of the proposed ACOPF. Numerical results on the IEEE 118-bus transmission system show the validity of the proposed ACOPF model as well as the efficacy of the interior-point solver in minimizing system losses and generation costs.

Liu, Bo↗
DOE OSTI2024

'I’m here because I want to make a difference.’

If you're at Los Alamos National Laboratory and happen to encounter Matt Johnson, don't be surprised if this busy leader smiles and stops to ask you how he can help. That’s the essence of the type of manager—and person—he is. As the leader of the Pit Technologies division at the Lab, Matt oversees six groups that cover national security manufacturing, operations and professional support. Matt started his career at the Lab in 2002. His first assignments included work with confinement vessels used at firing sites such as Nevada National Security Site. Matt's deep knowledge of high-strength steel made him a perfect fit for the research and fabrication of these explosive-proof containers. Shortly after joining the Lab, Matt accepted the position as the Welding and Joining team leader supporting national security manufacturing, the hydrotest program and welding efforts across the NNSA complex. Over time, Matt made his way across many programs at the Laboratory.

99 GENERAL AND MISCELLANEOUS↗
DOE OSTI2024

EMP Testing of NAE Magnetic Motor Starters

Sandia National Laboratories (SNL) performed a high-altitude nuclear electromagnetic pulse (HEMP) critical generation station component vulnerability test campaign with a focus on high-frequency, conducted early-time (E1) HEMP for the Department of Energy (DOE) Office of Cybersecurity, Energy Security, and Emergency Response (CESER). This report provides vulnerability test results to investigate component response and/or damage thresholds to reasonable HEMP threat levels that will help to inform site vulnerability assessments, mitigation planning, and modeling calibrations. This work details testing of North American Electric (NAE) magnetic motor starters to determine the effects of conducted HEMP environments. Motor starters are the control elements that provide power to motors throughout a generating plant; a starter going offline would cause loss of power to critical pumps and compressors, which could lead to component damage or unplanned plant outages. Additionally, failed starters would be unable to support plant startup. Six industrial motor starters were tested: two 2 horsepower (HP) starters with breaker disconnects and typical protection equipment, two 20 HP starters with breaker disconnects, and two 20 HP starters with fused disconnects. Each starter was placed in a circuit with a generator and inductive motor matching the starter rating. The conducted EMP insult was injected on the power cables passing through the motor starter, with separate tests for the generator and motor sides of the starter.

24 POWER TRANSMISSION AND DISTRIBUTION↗
DOE OSTI2025

Ultra-Low Disorder Graphene Quantum Dot-Based Spin Qubits for Cyber Secure Fossil Energy Infrastructure (Final Technical Report)

The overarching goal of the proposed project is to demonstrate the feasibility of creating ultralow local disorder graphene quantum dots (GQDs)-based high-speed, high-fidelity spin quantum bits (qubits) for extremely cyber-secure coal energy plants of the future. Despite their inherent benefits, the coherence times in the state-of-the-art GQD qubits are still low primarily due to the local disorder in GQD devices generated during lithographic fabrication of GQDs. Hence, the focus of this research is to prepare ultralow disorder GQDs (e.g., edge roughness ~0.5nm) and evaluate the low temperature (~mK) charge/spin transport characteristics of the engineered GQD qubit platform. To achieve minimal disorder in GQD qubits, we employ a novel approach that combines nanotomy (novel GQD fabrication technique developed by the PI) and scanning probe microscopy-atomic oxidation lithography (SPM-AOL).

20 FOSSIL-FUELED POWER PLANTS↗
DOE OSTI2025

Euro-Deterrent: Analysis of Proposals for a European Nuclear Arsenal (CNSIS Paper)

The idea of a “Euro-deterrent”—a nuclear arsenal under European control and mandated to protect multiple European countries—has been proposed many times as a means for European self-defense independent of United States security guarantees under the North Atlantic Treaty Organization (NATO). This paper examines not only the concept’s multiple guises, but the reasons for their failure. It will address the idea of a Franco-British umbrella, a French umbrella, a European “pool”, and the nuclear arsenal of a hypothetical “united Europe”. Reasons for rejection largely fall into three categories: sovereignty concerns, credibility gaps, and a desire to preserve existing norms and structures. This paper concludes that the Euro-deterrent will likely remain only hypothetical unless the US unequivocally signals its intent to withdraw its nuclear umbrella from Europe, thereby forcing European countries to build a new defense arrangement.

45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗