Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “Attack surface management”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

25 records · Page 2

Cybersecurity for Electric Vehicle Charging Infrastructure

As the U.S. electrifies the transportation sector, cyberattacks targeting vehicle charging could impact several critical infrastructure sectors including power systems, manufacturing, medical services, and agriculture. This is a growing area of concern as charging stations increase power delivery capabilities and must communicate to authorize charging, sequence the charging process, and manage load (grid operators, vehicles, OEM vendors, charging network operators, etc.). The research challenges are numerous and complicated because there are many end users, stakeholders, and software and equipment vendors interests involved. Poorly implemented electric vehicle supply equipment (EVSE), electric vehicle (EV), or grid operator communication systems could be a significant risk to EV adoption because the political, social, and financial impact of cyberattacks — or public perception of such — would ripple across the industry and produce lasting effects. Unfortunately, there is currently no comprehensive EVSE cybersecurity approach and limited best practices have been adopted by the EV/EVSE industry. There is an incomplete industry understanding of the attack surface, interconnected assets, and unsecured inter faces. Comprehensive cybersecurity recommendations founded on sound research are necessary to secure EV charging infrastructure. This project provided the power, security, and automotive industry with a strong technical basis for securing this infrastructure by developing threat models, determining technology gaps, and identifying or developing effective countermeasures. Specifically, the team created a cybersecurity threat model and performed a technical risk assessment of EVSE assets across multiple manufacturers and vendors, so that automotive, charging, and utility stakeholders could better protect customers, vehicles, and power systems in the face of new cyber threats.

24 POWER TRANSMISSION AND DISTRIBUTION↗

Securing Vehicle Charging Infrastructure

As the US electrifies the transportation sector, cyber attacks targeting vehicle charging could bring consequences to electrical system infrastructure. This is a growing area of concern as charging stations increase power delivery and must communicate to a range of entities to authorize charging, sequence the charging process, and manage load (grid operators, vehicles, OEM vendors, charging network operators, etc.). The research challenges are numerous and are complicated because there are many end users, stakeholders, and software and equipment vendors interests involved. Poorly implemented electric vehicle supply equipment (EVSE), electric vehicle (EV), or grid communication system cybersecurity could be a significant risk to EV adoption because the political, social, and financial impact of cyberattacks - or public perception of such - ripples across the industry and has lasting and devastating effects. Unfortunately, there is no comprehensive EVSE cybersecurity approach and limited best practices have been adopted by the EV/EVSE industry. There is an incomplete industry understanding of the attack surface, interconnected assets, and unsecured interfaces. Thus, comprehensive cybersecurity recommendations founded on sound research are necessary to secure EV charging infrastructure. This project is providing the power, security, and automotive industry with a strong technical basis for securing this infrastructure by developing threat models, determining technology gaps, and identifying or developing effective countermeasures. Specifically, the team is creating a cybersecurity threat model and performing a technical risk assessment of EVSE assets, so that automotive, charging, and utility stakeholders can better protect customers, vehicles, and power systems in the face of new cyber threats.

33 ADVANCED PROPULSION SYSTEMS↗

Aging of Concrete for the Evaluation of Repair Materials to Protect the Walls of the HCAEX Tunnel at Savannah River - 20301

H-Canyon, located in the Savannah River site, is a unique facility for chemical reprocessing of plutonium, highly-enriched uranium, and other radioactive materials. The exhaust gases of the H-Canyon are sent through the H-Canyon Exhaust (HCAEX) tunnel for contamination removal. Robotic inspections of the tunnel revealed significant degradation of the reinforced concrete structure that was associated with acid attack, and could compromise the structural stability of the tunnel. Thus, the identification and evaluation of potential repair materials that could be applied on the degraded walls to mitigate and prevent further degradation is of significant interest to the Department of Energy and the Savannah River representatives. This research effort has been divided into two phases: 1) Development and evaluation of aged concrete under accelerated aging conditions (which is the focus of this paper) and 2) Evaluation of potential repair materials applied on aged and non-aged concrete under simulated aggressive conditions. In order to develop and evaluate concrete samples exposed to accelerated aging conditions in simulated aggressive environments, a literature review of the HCAEX tunnel was conducted that included 1) characterization and extent of the concrete damage, 2) environmental conditions inside the tunnel and 3) primary deterioration mechanisms. In addition, potential coatings and/or repair materials for degraded concrete surfaces exposed to aggressive environments (primarily acidic) were selected from the literature review and the most common testing and measurements for evaluating acid attack phenomena, erosion, etc. were reviewed. From the literature review findings, a preliminary bench-scale test plan for the concrete aging was developed, including accelerated aging tests with aggressive conditions (acid fumes, humidity, etc.). Concrete samples were exposed to the aging accelerated conditions (e.g. immersion in acid solutions) and visual inspection, mass loss and pH change (acid solution) were recorded over time. Correlations between the visual inspection, mass loss and pH changes results and the aging time or the aging conditions were developed. Specimens submitted to the highest acid concentration showed the fastest and most intense degradation. The type of coarse aggregate (limestone) used for the concrete seemed to be the cause of the fastest aging observed, compared to the cement paste. The research findings created the foundation for the ongoing investigation, in which new concrete samples with a mix design similar to the HCAEX tunnel will be tested and will serve as the substrate for testing the selected coatings and /or repair materials. In this paper, the literature review and preliminary results from the aging tests are provided. (authors)

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗

In-Situ TEM Molten Salt Corrosion

Molten salt reactors (MSRs) offer a compelling pathway for next-generation nuclear energy, with advantages in thermal efficiency, inherent safety, and flexible fuel management. Yet, halide-based molten salts introduce significant materials challenges, particularly alloy corrosion. Alloy performance in these environments ultimately depends on understanding how corrosion initiates and progresses at the nanoscale, however most existing models rely on post-exposure characterization, leaving degradation mechanisms largely inferred rather than directly observed. NiCr alloys have garnered interest in MSRs applications as the Ni-based matrix provides strength and creep resistance, while Cr content offers oxidation resistance in air. However, NiCr corrosion resistance in chloride salts has proven poor due to preferential chromium dissolution, the formation of Cr-depleted pathways, and grain-boundary attack. This work aims to directly visualize corrosion of Ni-20Cr exposed to LiCl-KCl using in-situ Transmission Electron Microscopy (TEM) to capture real-time microstructural evolution during corrosion. Experiments will be performed at ~800 °C under controlled pressure conditions while utilizing Energy-Dispersive X-ray Spectroscopy (EDS) to analyze elemental redistribution. Observation of chromium depletion fronts, associated surface restructuring, and localized chloride enrichment are expected. Ultimately, this study is expected to provide a link between microscale processes and the macroscopic degradation behaviors relevant to MSR operation in advanced reactor environments. Simultaneously, this approach enables future in-situ investigations regarding alloy composition, salt chemistry, and their influence on corrosion pathways and long-term stability.?

36 - MATERIALS SCIENCE↗

Sticky roots--implications of widespread, cryptic, viral infection of plants in natural and managed ecosystems for soil carbon processing in the rhizosphere

Plants strongly influence soil properties through rhizodeposition, in which exudates diffuse from roots, additional secretions are actively released, and root cells are sloughed into the soil. This contribution by plants of carbon compounds belowground is at the core of soil health, water holding capacity, and the soil carbon storage that pulls carbon dioxide out of the atmosphere. Once in soil, organic matter can bind with minerals such as iron hydroxides, where it can be protected from microbial attack for millenia, preserving very large terrestrial soil carbon pools. However, those same compounds contributed by roots to soil may also destabilize the long-term protective associations of SOM with minerals, making that soil organic matter (SOM) more vulnerable to microbial attack and decomposition. Plant roots thus influence both the buildup and breakdown of soil carbon pools. DOE’s E3SM Land Model (ELM) includes a representation of soil carbon storage on minerals, but the potential vulnerability of SOM–mineral associations to effects of rhizodeposition is not yet represented in ELM. To begin testing for this effect of rhizodeposition on soil carbon storage and decomposition, we worked to develop a novel approach during this TES Exploratory project DE-SC0019142 – we harnessed the power of plant viral infection. We examined whether plant virus infection can serve as a tool to intensify rhizodeposition at the root surface, and therefore possibly intensify mobilization of SOM from minerals making it visible to our analytical techniques. Viral infection is widespread in terrestrial ecosystems; 25-70% of plants have virus infection, yet the influence of such infection on root traits and terrestrial soil carbon dynamics remains largely unexplored. We used two plant hosts: the annual Avena sativa (oats) and the genetically tractable, model grass Brachypodium distachyon. These grasses were infected with the broad host range virus Barley Yellow Dwarf Virus (BYDV) via aphids (Rhopalosiphum padi). BYDV infects at least 150 grass species in agricultural and natural ecosystems, and in previous experiments, oats infected with BYDV had roots that were very sticky to the touch, strongly suggesting that infection altered rhizodeposition. We developed this new experimental approach mostly in a one virus (Barley Yellow Dwarf Virus)–one plant (Avena sativa) system. (Several effects of infection in a Brachypodium-BYDV system were similar in nature to effects on Avena sativa, but were more variable.) In the BYDV-Avena system, we developed protocols for consistently infecting target plants (and avoiding infection of control plants) using aphid caging on leaves. We measured that infected plants exhibited reduced photosynthesis, plant (including root) biomass, and root:shoot ratio, as well as simplified root system architecture. We established procedures for sampling the organic compounds carried specifically in phloem (vascular tissue) of leaves and roots, using aphid stylectomy. We used FTICR-MS, Orbitrap GC-MS, and LC-MS/MS to analyze organic compounds in phloem, liquid around roots of plants grown hydroponically, and pore water around roots in soil, and found differences in the compounds in solution bathing roots when infected and uninfected plants were grown hydroponically. Finally, we synthesized isotopically-labeled mineral–organic matter (MAOM) associations in the lab and developed assays using them in solution and in soil. Assays quantified the extent and rate of mineralization of labeled MAOM that was mobilized by functionally distinct rhizodeposits and then attacked by microbes. Two mechanisms for MAOM mobilization emerged, with distinct dynamics. During “direct” mobilization, rhizodeposits such as the strong ligand oxalic acid could drive rapid dissolution of minerals, mobilizing MAOM. During “indirect” mobilization, rhizodeposits such as the simple sugar glucose did not attack minerals directly but instead intensified microbial activity, which led to mobilization via changes in e.g. pH, Eh, and microbial metabolite production (Li et al. 2021). Mechanistic understanding derived from these data and our ongoing experiments using these techniques will inform future development of ELM. Plant roots not only contribute newly fixed organic compounds to soils, but also root activities can drive mineralization of the carbon and nutrients mobilized off minerals via “indirect” or “direct” mechanisms. Using viral infection as a new tool, ongoing combined experimentation and modeling will explore the strength and larger-scale significance of the cascade of processes from rhizodeposition to MAOM mobilization for soil carbon storage and nutrient cycling in terrestrial ecosystems. And if viral infection leads quite generally to “sticky roots”, our perception of the potential importance of prevalent virus infection in terrestrial landscapes will be transformed.

54 ENVIRONMENTAL SCIENCES↗

A Cybersecurity Threat Profile for a Connected Lighting System

In anticipation of improved energy performance and cost savings, cities and building owners are increasingly considering “smart lighting initiatives” that aim to convert their collection of simple luminaires (i.e., lighting fixtures) into an intelligent connected lighting system (CLS) capable of remotely monitoring energy consumption and fault conditions, and possibly implementing adaptive lighting schemes. The U.S. Department of Energy (DOE) has set an national goal of tripling the energy efficiency and demand flexibility of the buildings sector by 2030, relative to 2020 levels 1. It is forecast that connected lighting systems can contribute to that goal by delivering 125 TWh of annual energy savings by 2035 2, equivalent to the annual output of 50 typical (500 MW) power plants. However, these energy savings and the DOE goal are put at significant risk if connected technologies are not adopted due to real or perceived cybersecurity concerns. Connected IoT devices such as these have historically been rife with vulnerabilities which sometimes put security considerations secondary to functionality and operability. What are the cybersecurity threats that will impact these systems, as formerly banal luminaires transition into intelligent connected devices that collect information about themselves, their surrounding environment, and possibly us? In this paper we analyze a threat profile performed on a fault-detection use case for streetlights. A threat profile establishes security requirements, justifies security measures, yields actionable controls, and effectively communicates risk to stakeholders. This effort provides critical information for making threat-based decisions to increase security at a reasonable cost, and can effectively be used by development teams, software architects, and managers to make cybersecurity a part of their ongoing culture of awareness, training, and prevention. This leads to more secure systems and better-understood security. On-premise, cloud, and hybrid architectures with different authentication mechanisms were modeled and later categorized using the Microsoft STRIDE framework. An analysis of the recommended controls for each threat was performed to determine which controls could and should be put in place by manufacturers or third-party suppliers, and which controls need to be left up the end-user to implement. Fifty-seven threats were identified. Among our key findings: (1) 65% (37/57) of the threats did not involve the luminaires, but rather the other components needed to communicate with and manage them; (2) 63% (36/57) of the threats could have been mitigated through manufacturer-implemented defensive techniques or “controls”; and (3) 23% (13/57) of the threats were dependent on the network configuration. Recommendations based on the results of this work are made to key stakeholder groups. Notably, lighting technology developers are advised to address all threats that can be reasonably controlled with baked-in technology solutions (e.g., encryption or authentication controls), and employ some form of secure supply chain management and tracking where other parts (e.g., sensors, microprocessors) of a luminaire must also be built and manufactured with the proper security controls in place. Developers should also review threats involving assets not developed in-house to understand how connectivity with other devices will affect their product during system operation and determine if a compensating control for a defense-in-depth strategy will be needed. Finally, those interested in deploying CLS should compare the differences between cloud and on-premise models to determine which is more suitable for their needs and the abilities of their security team.

32 ENERGY CONSERVATION, CONSUMPTION, AND UTILIZATI↗

Cybersecurity for Distance Relay Protection

This project is a DOE follow-up effort on the CREDC workshop held on September 13, 2018 in Cambridge, MA to discuss cybersecurity of distance relays, which considered the benefits, vulnerabilities and risk mitigations for the use of communication systems in power system protection. The objectives of this project are to define the taxonomy of relay protection and associated communications; define use cases describing approaches to reduce the cyber-attack surface on those protective relays; and evaluate the loss of operational functional capability from changes to communication coverage. Mitigating controls will also be evaluated to understand if there are other approaches to reduce attack surfaces while maintaining communications or partial communications. Distance relays are used to protect transmission lines of approximately 10 to 300 miles in length, by detecting short circuits (i.e., faults) on the lines and then tripping circuit breakers in the substation. Such protection systems are a subset of the power system and they incorporate sensing, logic and communication functions. Protection system exposure to cyberattack could be drastically limited by disconnecting relays from all vulnerable communication systems, but this may adversely impact overall power system performance in the absence of cyberattack. This project began with a use case analysis of protection systems with communications, as summarized in this report. It continued with modeling, testing and evaluation in a miniature power system (MPS), located in the Western Area Power Administration (WAPA) Electric Power Training Center (EPTC). The project also incorporated feedback from two industry meetings held in February and September 2019. The suggested next steps account for and complement the work already underway with DOE/CESER funding: 1. Study the performance of LCD and PC vs. PUTT, which is less reliant on communication system performance and GPS timing references. The PUTT scheme could prove to be more resilient to cyberattack or communications-related disruption. It could also be more tolerant of message re-routing with SDN/SDR communication systems. On the other hand, it will be more vulnerable to false tripping during dynamic events or to loss of the voltage signal. The optimum choice of scheme may depend on the specific power system and risk assessment. This study could provide a new template for evaluation based on business functions. 2. Research and develop new methods to detect and monitor distributed physical attacks, possibly using drones, video sensors, thermal sensors, machine learning and other advanced techniques. This will help mitigate the impact of cyberattack on the protection system, and will also help mitigate the impact of wild fires. 3. Implement a scalable PKI for use in electric utility protection systems. This will encourage widespread adoption of secure authentication methods that are already available, but not widely used at present. This will help secure engineering access to the relays. 4. Investigate the use of SDN in combination with SDR to achieve better cybersecurity and electromagnetic security of the network, incorporating path variability. This would help secure both engineering access and peer-to-peer GOOSE messaging. 5. Perform additional testing, with operator evaluation of “red button” scenarios, PUTT vs. LCD, relay mis-operations, and other cyberattacks in the EPTC. This is an important advantage of testing in the EPTC rather than by computer simulation or even hardware-in-the-loop simulation; the EPTC is already dedicated to managing the situational awareness, operator response times and other human impacts. One of the project objectives was to settle on a common nomenclature for this problem space. We have concluded that the OSI layer model, supplemented by ANSI device numbers and other IEEE standards, is already well-accepted by the industry. The IEEE PSRC knowledge base provides a great deal of public information

24 POWER TRANSMISSION AND DISTRIBUTION↗