Cyber-Securing Facility Related Control Systems
Fact sheet describes cyber security strategies applicable to federal facilities, which were gleaned from the experiences at several U.S. Department of Energy national laboratories.
control system↗
SEARCH · Engineering Papers
Results for “systems security”
Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.
Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.
Integrating security in a group oriented distributed system
A distributed security architecture is proposed for incorporation into group oriented distributed systems, and in particular, into the Isis distributed programming toolkit. The primary goal of the architecture is to make common group oriented abstractions robust in hostile settings, in order to facilitate the construction of high performance distributed applications that can tolerate both component failures and malicious attacks. These abstractions include process groups and causal group multicast. Moreover, a delegation and access control scheme is proposed for use in group oriented systems. The focus is the security architecture; particular cryptosystems and key exchange protocols are not emphasized.
Reiter, Michael↗
Hypergames and Cyber-Physical Security for Control Systems
The identification of the Stuxnet worm in 2010 provided a highly publicized example of a cyber attack that physically damaged an industrial control system. This raised public awareness about the possibility of similar attacks against other industrial targets—including critical infrastructure. Here, we use hypergames to analyze how strategic perturbations of sensor readings and calibrated parameters can be used to manipulate a system that employs optimal control. Hypergames form an extension of game theory that enables us to model strategic interactions where the players may have significantly different perceptions of the game(s) they are playing. Past work with hypergames has focused on relatively simple interactions consisting of a small set of discrete choices for each player. Here, we apply single-stage hypergames to larger systems with continuous variables. We find that manipulating constraints can be a more effective attacker strategy than manipulating objective function parameters. Moreover, the attacker need not change the underlying system to carry out a successful attack—it may be sufficient to deceive the defender controlling the system. It is possible to scale our approach up to even larger systems, but this will depend on the characteristics of the system in question, and we identify several characteristics that will make those systems amenable to hypergame analysis.
97 MATHEMATICS AND COMPUTING↗
Session 3: Grid Integration Studies for Planning Secure and Reliable System Operations with Expected Shares of Variable Renewables
This presentation provides a high-level overview of planning for secure and reliable electric power system operations with high shares of renewable energy resources.
24 POWER TRANSMISSION AND DISTRIBUTION↗
System Studies for Global Nuclear Assurance & Security: 3S Risk Analysis for Small Modular Reactors (Volume I)—Technical Evaluation of Safety Safeguards & Security
Coupling interests in small modular reactors (SMR) as efficient and effective method to meet increasing energy demands with a growing aversion to cost and schedule overruns traditionally associated with the current fleet of commercial nuclear power plants (NPP), SMRs are attractive because they offer a significant relative cost reduction to current-generation nuclear reactors—increasing their appeal around the globe. Sandia's Global Nuclear Assurance and Security (GNAS) research perspective reframes the discussion around the "complex risk" of SMRs to address interdependencies between safety, safeguards, and security. This systems study provides technically rigorous analysis of the safety, safeguards, and security risks of SMR technologies. The aim of this research is three-fold. The first aim is to provide analytical evidence to support safety, safeguards, and security claims related to SMRs (Study Report Volume I). Second, this study aims to introduce a systems-theoretic approach for exploring interdependencies between the technical evaluations (Study Report Volume II). The third aim is to demonstrate Sandia's capability for timely, rigorous, and technical analysis to support emerging complex GNAS mission objectives.
21 SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLANTS↗
System Studies for Global Nuclear Assurance & Security: 3S Risk Analysis for Small Modular Reactors (Volume II). Conclusions & Implications
Coupling interests in small modular reactors (SMR) as efficient and effective method to meet increasing energy demands with a growing aversion to cost and schedule overruns traditionally associated with the current fleet of commercial nuclear power plants (NPP), SMRs are attractive because they offer a significant relative cost reduction to current-generation nuclear reactors-- increasing their appeal around the globe. Sandia's Global Nuclear Assurance and Security (GNAS) research perspective reframes the discussion around the "complex risk" of SMRs to address interdependencies between safety, safeguards, and security. This systems study provides technically rigorous analysis of the safety, safeguards, and security risks of SMR technologies. The aims of this research is three-fold. The first aim is to provide analytical evidence to support safety, safeguards, and security claims related to SMRs (Study Report Volume I). Second, this study aims to introduce a systems-theoretic approach for exploring interdependencies between the technical evaluations (Study Report Volume II). The third aim is to demonstrate Sandia's capability for timely, rigorous, and technical analysis to support emerging complex GNAS mission objectives.
21 SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLANTS↗
Experiments for Securing Air Traffic Against Cyber-Physical System Attacks
This presentation describes experiments conducted with single board computers to investigate methods for creating trust for enabling the development of cyber-resilient air transportation systems. Methods included secure communication to prevent unauthorized access to data, consistency of data obtained via sensors and by processing, and built-in safeguards to prevent mission failure. The motivation for this work are the following. The future air transportation system needs to ensure availability, integrity, confidentiality and safety of operations. Safety of vehicles and operations is paramount for successful integration of Urban Air Mobility (UAM), Unmanned Aerial Systems (UAS), supersonic aircraft and launch vehicles with conventional aviation operations in the National Airspace System. Security is becoming critical because the sensors, networks and computers are far more vulnerable to bad actors than their mechanical or human predecessors. The goal therefore is to design and develop cyber-resilient systems that continue to function even in degraded states. The main findings are (1) off-the-shelf hardware can support development of cyber-resilient onboard flight computers and (2) trust in system design and implementation can be accomplished by integrating layers in depth (detail) and in breadth (scope).
cyber-resilient autonomy, trust, secure communicat↗
Our teams design high-resolution MeV x-ray radiography systems for National security missions [Poster]
The NNSS has been at the forefront of custom high-fidelity x-ray/gamma radiographic imaging solutions that serve our national security for over five decades. Our radiography team utilizes expertise in physics modeling and analysis, along with optical, mechanical, and electrical design, in close collaboration with our customers, to develop imaging methods and capabilities that go beyond their needs. Conceptual designs are developed through R&D efforts to provide solutions for the specific problem at hand. Field systems are designed and built in-house, then qualified utilizing a range of facilities across the National Security Enterprise. Radiographic imaging systems are deployed by our team in the most challenging environments. The NNSS has a strong math and programming team that provides novel on-site image analysis methods that extract crucial information from data returned in field tests.
46 INSTRUMENTATION RELATED TO NUCLEAR SCIENCE AND ↗
Dynamic security assessment of systems powered only by grid-forming power plants with uncertain dispatch using polynomial vectors
A modern challenge in power engineering is to perform the dynamic security assessment (DSA) of grids that are 100% powered by inverter-based resources (IBRs). Addressing this challenge is difficult because: (i) the dispatch of IBRs can be uncertain as a result of the variability of renewable resources and (ii) they have hard current control limits that cannot be neglected, contrasting synchronous machines. To address this problem, this paper sets forth a framework to conduct DSA of bulk power systems that are 100% powered by grid-forming IBRs. Furthermore, the framework considers that IBR operational conditions are unknown but bounded by a zonotope which is also expressed as a polynomial vector for uncertainty propagation via Dormand–Prince integration. The framework is applied to modified versions of the WSCC 9-bus and IEEE 39-bus grids.
14 SOLAR ENERGY↗
Disruptive Ideas for IT/OT Security in Energy Systems
Presentation on disruptive ideas for IT and OT cybersecurity in energy systems, presented by Power Systems Engineering Center Researcher Maurice Martin. This presentation was prepared for the Florida Institute for Cybersecurity Research Conference on March 1, 2018.
14 SOLAR ENERGY↗
Cyber Security for Lighting Systems
Fact sheet discusses cyber threats unique to lighting control systems in buildings and helps facility managers identify the types of lighting control systems that could introduce cybersecurity risks. Download the fact sheet.
Cyber security↗
Intel® DOE Grid Security Enhancement Security in Power System Edge. Final Technical Report
Intel® and its partners, Schneider Electric and LiveData Utilities, were tasked by Department of Energy to explore solutions in two areas of grid security. One, secure the existing communication network and the legacy devices with minimal disruption to the infrastructure, and second, to develop capabilities in semiconductor chips such that they come with built-in security to order to provide secure communication and protection from cyberattacks with minimal effort from operation technology (OT) application developers.
24 POWER TRANSMISSION AND DISTRIBUTION↗
Quantification of storage required for preserving frequency security in wind‐integrated systems
Abstract The penetration of wind power generation into the power grid has been accelerated in recent times due to the aggressive emission targets set by governments and other regulatory authorities. Although wind power has the advantage of being environment‐friendly, wind as a resource is intermittent in nature. In addition, wind power contributes little inertia to the system as most wind turbines are connected to the grid via power electronic converters. These negative aspects of wind power pose serious challenges to the frequency security of power systems as penetration increases. In this work, an approach is proposed where an energy storage system (ESS) is used to mitigate frequency security issues of wind‐integrated systems. ESSs are well equipped to supply virtual inertia to the grid due to their fast‐acting nature, thus replenishing some of the energy storage capability of displaced inertial generation. In this work, a probabilistic approach is proposed to estimate the amount of inertia required by a system to ensure frequency security. Reduction in total system inertia due to the displacement of conventional synchronous generation by wind power generation is considered in this approach, while also taking into account the loss of inertia due to forced outages of conventional units. Monte Carlo simulation is employed for implementing the probabilistic estimation of system inertia. An ESS is then sized appropriately, using the system swing equation, to compensate for the lost inertia. The uncertainty associated with wind energy is modeled into the framework using an autoregressive moving average technique. Effects of increasing the system peak load and changing the wind profile on the expected system inertia are studied to illustrate various factors that might affect system frequency security. The proposed method is validated using the IEEE 39‐bus test system.
17 WIND ENERGY↗
Compact mobile-reader system for two-way wireless communication, tracking and status monitoring for transport safety and security
A system for monitoring a plurality radio frequency identification tags is described. The system uses at least one set of radio frequency identification tags. Each tag is attached to a container and includes several sensors for detecting physical conditions of said container. The system includes at least one autonomous intermediate reader in wireless communication with the frequency identification tags. The intermediate reader includes external wireless communication system, intermediate reader logic controller, and a self-contained rechargeable power supply. The system uses a central status reporting system in communication the intermediate reader.
97 MATHEMATICS AND COMPUTING↗
Security in high-performance computing environments
Exploring the many distinctive elements that make securing HPC systems much different than securing traditional systems.
97 MATHEMATICS AND COMPUTING↗
Global Power System Transformation Consortium: Unlocking Zero-Emission, Low-Cost, Secure, and Reliable Power Systems
This fact sheet outlines the purpose of the Global Power System Transformation Consortium and its major accomplishments since its 2019 inception.
energy transition↗
Energy Sector Security through a System for Intelligent, Learning Network Configuration Monitoring and Management (“Essence”)
The project was conceived and executed with the overarching objective to provide cost effective tools to cooperative utilities that enabled them to quickly detect, characterize and take remediative action against cyber attacks.
47 OTHER INSTRUMENTATION↗
Securing Ground Data System Applications for Space Operations
The increasing prevalence and sophistication of cyber attacks has prompted the Multimission Ground Systems and Services (MGSS) Program Office at Jet Propulsion Laboratory (JPL) to initiate the Common Access Manager (CAM) effort to protect software applications used in Ground Data Systems (GDSs) at JPL and other NASA Centers. The CAM software provides centralized services and software components used by GDS subsystems to meet access control requirements and ensure data integrity, confidentiality, and availability. In this paper we describe the CAM software; examples of its integration with spacecraft commanding software applications and an information management service; and measurements of its performance and reliability.
Security↗