Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “security assessment”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 343 records · Page 19
All sourcesNASA NTRSDOE OSTI
DOE OSTI2022

Evaluation of Physical Security Risk for Potential Implementation of FLEX using Dynamic Simulation Methods

The requirements for United States nuclear power plants to maintain a large onsite physical security force contribute to their large operational costs. The cost of maintaining the current physical security posture is approximately 10% of the overall operation and maintenance budget for commercial nuclear power plants. The goal of the Light Water Reactor Sustainability Program Physical Security Pathway is to develop tools, methods, and technologies and provide the technical basis for an optimized physical security posture. This pathway will analyze and minimize the conservatisms built into current security postures in order to reduce security costs while still ensuring adequate security and operational safety. The research performed at Idaho National Laboratory within this pathway has successfully developed a dynamic force-on-force (FOF) modeling framework using various computer simulation tools and integrated them with the dynamic assessment Event Modeling Risk Assessment using Linked Diagrams (EMRALD) tool. This document provides an overview of lessons learned in applying a dynamic computational framework that links results from a commercially available FOF simulation tool, a commercially available thermal-hydraulic tool, and EMRALD to an operating commercial nuclear power plant. This process of including plant procedures and multiple analysis results is being called Modeling and Analysis for Safety Security using Dynamic EMRALD Framework. Previous reports described how a user could integrate their plant-specific FOF models with the dynamic simulation tool EMRALD, model operator actions, integrate with probabilistic risk assessment tools, such as Computer Aided Fault Tree Analysis System or Systems Analysis Programs for Hands-on Integrated Reliability Evaluations, and with thermal-hydraulic tools, such as RELAP-5. Previous reports applied various combinations of available simulations codes with EMRALD using generic plant models to demonstrate how to perform the analysis. This report documents the results of applying the dynamic computational framework to an actual nuclear facility using their security scenarios and timelines. The purpose of this study was to verify that results achieved using generic models are similar to actual plant results and to refine our guidance of the use of the framework. Such an assessment enables further analysis, such as what-if scenarios and staff-reduction evaluation, thereby optimizing physical security at plants. NOTE: The work performed in this report is based on a generic EMRALD model with actual plant data used for the analysis. However, only the generic model and general results of the analysis are in the report. No plant’s sensitive information is discussed in this report. The discussion shows examples of insights that can be obtained from the MASS-DEF methodology.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗
DOE OSTI2024

Application of quantitative risk assessment to address stakeholder questions in geologic carbon storage

Ambitious international greenhouse gas emissions reduction targets demand a rapid transformation to a low-carbon economy. This transformation includes the accelerated adoption of carbon dioxide (CO2) capture and storage (CCS) technology. However, as with any large-scale engineering enterprise, the widespread commercial-scale deployment of geologic carbon storage (GCS) raises important questions about technology and cost-effectiveness, safety, environmental risk, and long-term liability. Effectively assessing and managing risks and liability associated with GCS projects is a key technical need throughout the project life cycle-from site selection and permitting to monitoring design, operational risk management, and post-operational site closure. This presentation highlights recent advancements in tools for quantitative risk assessment, being developed by the National Risk Assessment Partnership (NRAP). NRAP is a multi-year, multinational laboratory research collaboration sponsored by the U.S. Department of Energy's Office of Fossil Energy and Carbon Management. Our focus will be on these tools' applications in addressing critical stakeholder questions related to supporting permitting to ensure secure and environmentally protective storage; designing effective and efficient monitoring plans; evaluating the effectiveness of remedial actions and risk management alternatives; and informing liability assessment and investment decisions. This paper will detail the key functionality of NRAP’s Open-Source Integrated Assessment Model (NRAP-Open-IAM), a computational framework for assessing leakage risk and containment assurance. This model features streamlined workflows for calculating leakage risk profiles, delineating risk-based area of review, and assessing contingency plans and post-injection site care requirements. ORION is an open-source, observation-based ensemble forecasting toolkit to help operators assess the seismic hazard at a carbon storage site. The State of Stress Analysis Tool (SOSAT), designed to assess subsurface stress conditions and evaluate geomechanical risk resulting from CO2 injection in an area of interest will also be presented. We will also introduce a prototype model to evaluate storage project costs and liability associated with risk management. The Technoeconomic and Liability Evaluation for Storage (TALES) model uses results from forecasts of leakage and induced seismicity risk to estimate the lifecycle cost of managing risk. Finally, a preliminary example of how the NRAP Risk-based Adaptive Monitoring Plan (RAMP) tool can be used to design efficient and effective site monitoring plans and estimate the detectability of fluid leakage will be provided. The relevance of these tools for addressing key stakeholder questions amidst uncertainty will be emphasized.

decision support↗
DOE OSTI2021

A Method for Assessing Effectiveness and Technical Capabilities Required for Integrated Deterrence (NSLP-Final Report-Draft2022)

The United States faces an ever-increasingly multi-polar security environment dominated by great power competition with China and a lingering Russian threat as well as from would-be regional hegemons led by ambitions from Iran and North Korea. Our adversaries are pursuing and expanding the strategic means by-which they have an asymmetric offset (e.g., cyber, space, and other modes below the level of armed conflict). To combat and deter against the widening range of hostile actions, the U.S. must have additional capabilities with-which to deter. All of which drives us towards a more thoughtful integrated approach to deterrence, attempting to best align deterrent tools with the adversary actions in order to maximize the credibility of our deterrent. Such an approach complicates our deterrence strategy and demands a methodology to assess whether the U.S. has the deterrent tools necessary to deter the adversarial actions most costly to the U.S. To address this complexity, we create a framework to comprehensively and systematically assess our deterrent tools as qualitatively measured against the adversarial actions we wish to deter. Deterrence is ultimately an operation in the cognitive domain and at the heart of the framework presented here is the fundamental deterrence calculus which we use as the defining measure of whether a tool will credibly deter a given action. We describe the eight levers of the deterrence calculus and distill these levers to four products that are used to qualitatively assess the overall effectiveness of deterrence tools against adversarial actions. Credibility is determined by two principal variables: the technical credibility of the deterrent tool, and the principle of proportionality. Technical credibility of realized deterrence products is assessed through development of key mission requirements and hardware (e.g., components) that will impose costs, deny benefits, or encourage restraint. The principle of proportionality qualitatively asserts that for a deterrent tool to be cognitively credible, the costs imposed against, or benefits denied by, an action are commensurate to the magnitude of costs received from the adversarial action. By basing this framework on these two fundamentals, it is possible to compare deterrent tools in a systematic approach across the broad spectrum of hostile actions.

42 ENGINEERING↗
DOE OSTI2021

Technical Assistance for Characterization Studies of Personal Protection Equipment (PPE) (Final CTAP Report)

Sandia National Laboratories (SNL) conducted an independent assessment of three different certified N95 respirators for the State of New Mexico Department of Homeland Security and Emergency Management. The testing conducted under this effort mimicked traditional NIOSH certification testing methodologies, where possible (NIOSH 2019). This included the use of a commercially available off-the-shelf (COTS) instrument typically used in industry for N95 respirator certification (ATI 2018). The COTS system, an Air Techniques International 100Xs automated filter tester, was used for all the testing reported in this document. It is important to note that SNL is NOT a certification laboratory, and all quantitative results are for informational purposes only. Additional technical information of N95-related efforts conducted by this team may be found in: Omana et al. (2020a), Omana et al. (2020b), Celina et al. (2020)

42 ENGINEERING↗
DOE OSTI2022

Verification and Validation of a Modified Numerical Algorithm for Simulation of Transient Unconfined Groundwater Flow

This report extends verification and validation testing of the NUFT package of codes (Nitao 2000a,b) to the US1P module of code designed for simulation of single-phase mixed or “coupled” saturated and unsaturated (or “variably saturated”) groundwater flow. Importantly, the verification and validation testing of US1P in this report includes performance evaluation of a modified numerical algorithm that was not included in prior quality assurance (QA) of the NUFT package by Carle et al. (2014) for Underground Test Area (UGTA) project activities, which are directed at assessment of radionuclide contamination in groundwater sourced from underground nuclear test locations at the Nevada National Security Site (NNSS). An immediate purpose of this report is to provide QA for ongoing large-scale, three-dimensional (3-D) groundwater flow modeling of transient water levels associated with longterm water supply pumping and underground nuclear testing at the NNSS (Jackson and Fenelon, 2018; Jackson et al., 2021). For UGTA activities, the QA refers to the standards of ASTM (1996) for verification and validation testing of groundwater modeling codes.

54 ENVIRONMENTAL SCIENCES↗
DOE OSTI2026

Equipment Assessment Guide: A Technical Inspection and Hardening Guide for Devices in Power Grid Operations

This Equipment Assessment Guide, developed by Idaho National Laboratory (INL), provides a comprehensive framework designed to enhance the security of operational technology (OT) devices within power grid operations. The guide outlines essential steps for asset owners to conduct technical inspections and harden vulnerable hardware and firmware components commonly found in embedded systems. It focuses on components frequently targeted by cyber threats, offering valuable identification techniques for locating and recognizing critical components on devices. Additionally, the guide presents recommended secure configurations aimed at minimizing exposure and reinforcing defenses, along with impact analysis that highlights the potential consequences for grid operations if components are compromised. By implementing the recommendations outlined in this guide, asset owners can significantly enhance their cybersecurity posture, reduce the attack surface of field-deployed devices, and improve the resilience of grid services against emerging cyber threats.

42 - ENGINEERING↗
DOE OSTI2024

Multisectoral analysis of drought impacts and management responses to the 2008–2015 record drought in the Colorado Basin, Texas

Abstract. Drought has long posed an existential threat to society. Engineering and technological advancements have enabled the development of complex, interconnected water supply systems that buffer societies from the impacts of drought, enabling growth and prosperity. However, increasing water demand from population growth and economic development, combined with more extreme and prolonged droughts due to climate change, poses significant challenges for governments in the 21st century. Improved understanding of the cascading multisectoral impacts and adaptive responses resulting from extreme drought can aid in adaptive planning and highlight key processes in modeling drought impacts. The record drought spanning 2008 to 2015 in the Colorado Basin in the state of Texas, United States, serves as an outstanding illustration to assess multisectoral impacts and responses to severe, multi-year drought. The basin faces similar water security challenges to those across the western US, such as groundwater depletion and sustainability, resource competition between agriculture and growing urban populations, limited options for additional reservoir expansion, and the heightened risk of more severe and frequent droughts due to climate change. By analyzing rich, high-quality data sourced from nine different local, state, and federal sources, we demonstrate that characterizing regional multisector dynamics is crucial to predicting and understanding future vulnerability and possible approaches to reduce impacts to human and natural systems in the face of extreme drought conditions. This review reveals that, despite the severe hydrometeorological conditions of the drought, the region's advanced economy and existing water infrastructure effectively mitigated economic and societal impacts.

54 ENVIRONMENTAL SCIENCES↗
DOE OSTI2021

Mapping SIEM Vulnerabilities in STIG

SIEM (Security Information and Event Management) tools monitor network traffic and allow users to quickly detect problems in their networks. Because of the valuable information processed by SIEM tools, it is important to understand their vulnerabilities. STIG (Structured Threat Intelligence Graph) is an application created at INL used to visualize data related to cyber threats. Using STIG can allow users to understand vulnerabilities related to their SIEM products and how to protect their systems.

99 GENERAL AND MISCELLANEOUS↗
DOE OSTI2022

Cybersecurity assessment and risk management tool

Techniques and apparatuses are described for a cybersecurity risk management tool to assess cybersecurity risk and prioritize cybersecurity correction plans. The cybersecurity risk management tool categorizes cybersecurity framework security controls into maturity indicator levels, identifies implementation states achieved by an entity with respect to the cybersecurity framework security controls, and determines which of the maturity indicator levels represents the implementation state achieved by the entity with respect to each of the cybersecurity framework security controls. A cost-benefit analysis for modifying from the implementation state achieved by the entity to a next implementation state to be achieved by the entity with respect to the cybersecurity framework security controls is also enabled. The cost-benefit analysis leverages factored weights including aspects indicative of security perspectives, Gaussian distributions, and the maturity indicator levels.

Gourisetti, Sri Nikhil Gupta↗
DOE OSTI2024

GraphCH: A Deep Framework for Assessing Cyber-Human Aspects in Insider Threat Detection

Insider threat is one of the most damaging cyber attacks that could cause the loss of intellectual property and enterprise data security breaches. Action sequence data such as host logs are used to investigate such threats and develop anomaly-based AI detectors. However, insider threat actions are similar to legitimate user activities, causing AI detectors to fail and suffer from high false alarm rates. Therefore, user cyber activity logs are inadequate to fully unfold insider threats. In this study, we adopt human psychological principles of risk-taking and impulsiveness along with host data to assess the influence and usefulness of human behavioral aspects in insider threat detection. Here, we hypothesize that individuals' impulsive and risk-taking behavior correlates with cyberspace activities. To validate our hypothesis, we conducted an IRB-approved study recruiting 35 participants who work in a large U.S. university and collected their cyber and psychological data for 90 days. Host and human-behavioral data analysis and mapping indicate that impulsive and risk-taking users trigger more system errors causing (un)intentional insider threats and are susceptible to attackers' social engineering and cognitive hacking. Utilizing cyber-human aspects, we introduce a Cyber-Human Graph Neural Network (GNN) based framework GraphCH to identify abnormal user behaviors and detect insider threats.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2020

Site-wide occupancy assessment using camera traps for seven mammalian species at Los Alamos National Laboratory

Los Alamos National Laboratory (LANL or Laboratory) is committed to solving national security challenges through scientific excellence and has been serving the nation and northern New Mexico for over 70 years. Being located on the Pajarito Plateau in the eastern flanks of the Jemez Mountains, the Laboratory is surrounded by a rich diversity of plants and animals. It is common to see many different species of wildlife on Laboratory property; however, sometimes interactions with wildlife can be negative. Vehicle accidents with wildlife have become a common occurrence. With the current and ongoing expansion of the Laboratory on the Pajarito Plateau, it has the potential to further impact wildlife movement including large game species. Local agencies and tribal Pueblos rely on large game species and do not want these species to be restricted from moving across property boundaries. Temporal and spatial aspects of where wildlife occur on the site is a phenomena that is either not well understood in uncommon species or needs periodic reevaluation for common species. Estimating the distribution of multiple species across the landscape provides wildlife biologists with crucial information for monitoring and conserving animal populations in a particular area. Utilizing motion activated wildlife cameras, also known as camera traps, to monitor wildlife populations has become an essential tool for biologists. Camera traps are non-invasive and cost-effective and can document multiple elusive or uncommon wildlife species, such as carnivores, simultaneously. Occupancy modeling provides a flexible framework for the analysis of the distribution for multiple wildlife species. It explicitly recognizes whether a species is spatially common or rare (occupancy = ψ) and if that species is easy or hard to detect (detection probability = p ). Multispecies and multi-season occupancy models can detect trends in species occupancy because individual species may vary in seasonal movements, detection probability, and transition rates between habitats. In this study, we assessed the site as a whole to ascertain when and where medium and large mammal species are present. Understanding wildlife patterns at the Laboratory will better inform future management decisions regarding land use and development strategies. We placed motion activated wildlife cameras in a random systematic sampling design and used these data to create occupancy models. We tested for differences in single-species occupancy and detection probability by season of mammal species captured on 20 camera traps placed across the Laboratory in a 40 mi² (103 km²) area. We focus the interpretation of our findings on seven mammal species found during this study. They are Rocky Mountain elk ( Cervus canadensis nelsoni ; hereafter “elk”), mule deer ( Odocoileus hemionus ; hereafter “deer”), mountain lion ( Puma concolor ; hereafter “lion”), American black bear ( Ursus americanus ; hereafter “bear”), coyote ( Canis latrans ), bobcat ( Lynx rufus ), and gray fox ( Urocyon cinereoargenteus ; hereafter “fox”).

59 BASIC BIOLOGICAL SCIENCES↗
DOE OSTI2026

An Assessment of Technical Hydropower Potential at Non-Powered Dams in the United States

Historically, dams have been constructed for a variety of purposes, such as providing a more secure and reliable water supply, mitigating impacts from variations in river flow, allowing continuous navigability, and harnessing mechanical power. A relatively small portion of dams have been designed to store or regulate flows for the purpose of generating electricity (roughly 3% of nationally inventoried dams in the US and 17% of the dams included in the World Register of Dams). The remaining population of existing non-powered dams (NPDs) presents both an opportunity to generate renewable energy and a need to modernize aging infrastructure. This report describes an assessment of more than 2,600 NPDs in the US that have a collective potential of nearly 4 GW in new power capacity. Previous national-scale assessments were aimed at evaluating the theoretical maximum power potential at existing dams in the United States. These estimates were based on the best available information at the time for water availability, hydraulic head, and representative regional capacity factors. This study revisits a subset of 3,299 dams identified in the most recent theoretical resource assessment and uses more detailed and updated hydrologic data to produce estimates of technical potential. These improvements in data enable estimates that more realistically reflect what is physically possible given simple assumptions about the existing structure and constraints on flow and head (Figure 1).

13 HYDRO ENERGY↗
DOE OSTI2020

Underground Test Area (UGTA) Sampling Plan for Corrective Action Units 101 and 102: Central and Western Pahute Mesa, Nevada National Security Site, Nevada

The purpose of this groundwater sampling plan (referred to herein as “the Plan”) is to describe the approach for collecting and analyzing groundwater samples to meet the objectives of the U.S. Department of Energy (DOE), Environmental Management (EM) Nevada Program’s Underground Test Area (UGTA) Activity. The Plan is focused on the Central and Western Pahute Mesa corrective action units (CAUs 101 and 102). The remaining UGTA CAUs are in the final stage of the UGTA strategy (Closure Report [CR] stage), and monitoring requirements for these CAUs are described in their respective CRs. The Plan supersedes the Nevada National Security Site Integrated Groundwater Sampling Plan and its ensuing Record of Technical Change (ROTC) (DOE/EMNV, 2019b). The Plan is designed to ensure compliance with the UGTA Quality Assurance Plan (QAP) and its ensuing ROTC (DOE/EMNV, 2018), and the Federal Facility Agreement and Consent Order (FFACO) (1996, as amended). The Plan is implemented by the Environmental Program Services (EPS) contractor. Implementation of the Plan provides data to complete corrective actions prescribed by the FFACO to protect the public from groundwater contaminated by historical underground nuclear testing. The Plan’s scope comprises sample collection and analysis requirements for assessing the extent of groundwater contamination from underground nuclear testing. Sampling wells located in the communities surrounding the Nevada National Security Site (NNSS) is performed by other organizations (e.g., management and operating [M&O] contractor) and is therefore not included within the Plan. The results of the community sampling are presented in the annual NNSS environmental reports.

54 ENVIRONMENTAL SCIENCES↗
DOE OSTI2021

Cyber Threat Assessment Methodology for Autonomous and Remote Operations for Advanced Reactors (Conference Presentation)

The next generation of Advanced Reactors include planned capabilities for both Autonomous (operating without human interaction for a set period-of-time) and Remote (operating with human interaction from a separate physical location) Operations. Existing Nuclear Reactor architectures include a set of safety and security constraints tightly coupled with personnel policies and procedures. As Advanced Reactors are fielded with these new Autonomous and Remote operational capabilities, the architectures and associated infrastructure services and components will perceivably expand the overall attack surface and risk calculations with regards to safe and secure operations. This paper is part of an FY21 work program focused on ensuring Advanced Reactor designs are informed with threat-based guidance on design and operation of Secure Architectures with a specific focus on the deployment of Autonomous Systems in support of Advanced Reactor Operations. The next phase of this research program is to complement produce a methodology for assessment of the cyber threat against these architectures as well as a catalogue of Use Cases to support the Advanced Reactor community in their implementation of Autonomous and Remote Operations.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2022

Semiconductor: Supply Chain Deep Dive Assessment

In February 2021, President Biden signed Executive Order (EO) 14017, “America’s Supply Chains,” directing seven executive agencies to evaluate the resilience and security of the nation’s critical supply chains and to craft strategies for six industrial bases that underpin America’s economic and national security. See Sec. 3(b) of E.O. 14017. As part of the one-year response to EO 14017, the U.S. Department of Energy (DOE), through the national laboratories, conducted evaluations of the supply chains that encompass the Energy Sector Industrial Base, with a particular focus on technologies required to decarbonize the U.S. by 2050. This report focuses on one of these technologies, semiconductors, both conventional and wide bandgap (WBG) power electronics (PE). As noted in the 100-Day report, conventional semiconductors are a keystone technology that are essential for the operation of nearly every electronic device, including those that are critical to decarbonization, such as electric vehicles (EVs), industrial and building applications, and electricity generation and end use. In addition, power electronics have been applied to industrial equipment to improve energy efficiency and enhance controllability. Power electronics have also been used to improve the reliability of data centers and critical infrastructure, including the stabilization of the electric grid while subjected to disturbances. Increasingly, power electronics are being used to integrate renewable energy and battery storage systems, enabling new grid services and the development of microgrids. It is estimated that 30% of the electricity used in the U.S. passes through power electronic devices, and studies suggest that this number could reach 80% as power electronics are deployed in more markets. Nearly all forms of electrified transportation will depend on power electronics. Power electronic systems utilize high-capacity semiconductor devices at their core. The continued growth in power electronics depends on sustained innovation in the semiconductor industry.

29 ENERGY PLANNING, POLICY, AND ECONOMY↗
DOE OSTI2022

From Protection and Prevention to Research and Discovery: Eligibility Assessment of the Health Research Laboratory (TA-43) and Historic Documentation for TA-43-0001 - Volume 1

The U.S. Department of Energy National Nuclear Security Administration Los Alamos Field Office (NA-LA) requests the New Mexico State Historic Preservation Officer (SHPO) to concur with the National Register of Historic Places (NRHP)–eligibility determinations detailed in this report for the Health Research Laboratory (HRL) complex in Technical Area 43 (TA-43) at the Los Alamos National Laboratory (LANL). As part of the LANL Footprint Reduction Program’s Decommissioning and Demolition (D&D) process, all facilities of the HRL complex are scheduled for characterization and future demolition.

99 GENERAL AND MISCELLANEOUS↗