Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “IT security”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 361 records · Page 20
All sourcesNASA NTRSDOE OSTI
DOE OSTI2021

Cyber–Physical System Security of Distribution Systems

The Information and Communications Technology (ICT) for control and monitoring of power systems is a layer on top of the physical power system infrastructure. The cyber system and physical power system components form a tightly coupled Cyber–Physical System (CPS). Sources of vulnerabilities arise from the computing and communication systems of the cyber–power grid. Cyber intrusions targeting the power grid are serious threats to the reliability of electricity supply that is critical to society and the economy. In a typical Information Technology environment, numerous attack scenarios have shown how unauthorized users can access and manipulate protected information from a network domain. The need for cyber security has led to industry standards that power grids must meet to ensure that the monitoring, operation, and control functions are not disrupted by cyber intrusions. Cyber security technologies such as encryption and authentication have been deployed on the CPS. Intrusion or anomaly detection and mitigation tools developed for power grids are emerging. Furthermore, this survey paper provides the basic concepts of cyber vulnerabilities of distribution systems and CPS security. The important ICT subjects for distribution systems covered in this paper include Supervisory Control And Data Acquisition, Distributed Energy Resources, including renewable energy and smart meters.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2022

Strengthening the Security of Operational Technology: Understanding Contemporary Bill of Materials

The evolution of cyber-physical infrastructure has made its security more challenging. The last few years have witnessed a convergence of hardware and software segments in various domains, including operational technology (OT) which is responsible for carrying out critical tasks such as monitoring and controlling power grids, nuclear plants, transportation, and emergency services. Both hardware and software encapsulate numerous open source and proprietary subcomponents, making it crucial for end-users to understand the composition of the products they are using. For example, wind turbines incorporate thousands of lines of code (software) used for the turbine's design, planning, operation, and analytics in addition to the numerous hardware subcomponents that construct it. Due to the highly complex nature of software and hardware, knowledge of the components and subcomponents is required to mitigate cyber vulnerabilities and defend against cyberattacks. There has also been a transformation from a traditional linear supply chain into a global, dynamic, diverse, and interconnected system. The digitization of the supply chain makes it easier to find and exploit vulnerabilities. Critical infrastructures (e.g., power grids, oil, natural gas, water, and wastewater) rely on OT to function, and if the OT is compromised, equipment damage and potential interruption of services could result. A significant security measure to protect OT systems from disruption is to develop a supply chain bill of materials (BoM) corresponding to the software and hardware used in OT, along with attestations amongst vendors and asset owners. A supply chain BoM is a proactive way to understand the inherent vulnerabilities in the system and mitigate them in advance of being exploited. BoMs bolster the trust placed in the digital infrastructure and enhance software supply chain security by sustaining the management of component obsolescence and compliance, along with the seclusion of unsafe segments of a specific product. Adopting BoM tools is becoming increasingly important across various government sectors, as evidenced by the recent U.S. executive order on cybersecurity (NIST 2021). This paper aims to classify BoMs based on structure, functionality, component type, and architecture. The work also discusses case studies to further highlight the benefits of BoMs. In addition, it identifies missing pieces in existing BoM implementations so that future research may identify bounds on where it could expect to make improvements and directly enable researchers to identify promising areas for exploration. Further, the authors provide valuable recommendations to tool developers, researchers, and standardizing organizations (policymakers), additionally benefitting critical infrastructure owners and government executives. This aids in paving a path for future work, thereby, providing suggestions to determine a tool for consumers that best suit their needs.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2020

A Historic Context and Mitigation Documentation for a Portion of the U12n Tunnel Ventilation and Containment Systems, Area 12, Nevada National Security Site, Nye County, Nevada

The National Nuclear Security Administration Nevada Field Office (NNSA/NFO) has proposed repurposing the U12n Vent Hole #2 (SHPO Resource S2488) and the U12n.10 Vent Hole (S2489) for water sampling in the U12n Tunnel. The vent holes are part of the historic ventilation system for the tunnel and are contributing elements to the U12n Tunnel Historic District (D84). In consultation with the SHPO, NNSA/NFO determined the undertaking will have an adverse effect on the vent holes. The NNSA/NFO and the SHPO negotiated a memorandum of (MOA) with stipulations to mitigate adverse effects. This submission is to comply with the stipulations in the executed Memorandum of Agreement Between the National Nuclear Security Administration Nevada Field Office, Environmental Management Nevada Program Office, and the Nevada State Historic Preservation Officer Regarding Repurposing of Portions of the Ventilation System of the U12n Tunnel Complex Located in Area 12 at the Nevada National Security Site. In accordance with the MOA, the manuscript provides a historic context that describes the development and functioning of the historic U12n Tunnel ventilation system for underground nuclear tests (Stipulation III.C). High resolution digital color images of the vent hole containment doors, nearby elements, and overviews were obtained and keyed to a map and a photo index (Stipulation III.A) (Appendix A). Lastly, Architectural Resource Assessment (ARA) forms were completed for each of the vent holes and Historic District D84 (Stipulation III.B) (Appendix B). The documentation including the historic context report, photographs, image files, and resource forms produced to fulfill the terms of the MOA will be archived with the Nuclear Testing Archive in Las Vegas (Stipulation III.D).

54 ENVIRONMENTAL SCIENCES↗
DOE OSTI2021

Treatment of uncertainties for security-related design aspects of advanced reactors when using a risk-informed licensing approach

Sabotage of nuclear plants and theft of special nuclear material are different from many other issues potentially affecting public health and safety, and some of those differences drive the content of the present report. A high-level indication of these differences is provided in the US Nuclear Regulatory Commission’s Safety Goal Policy. Promulgated in the mid-1980’s, when it had become reasonably clear that risk analysis had improved to the point where it was possible to understand the risks associated with plant operation, the Safety Goal Policy articulates qualitative safety goals and quantitative health objectives that are meant to guide regulatory and risk management activities, with the following key exceptions noted in the original policy statement: The possible effects of sabotage or diversion of nuclear material are also not presently included in the safety goals. At present there is no basis on which to provide a measure of risk on these matters. It is the Commission’s intention that everything that is needed will be done to keep these types of risks at their present very low level; and it is the Commission’s expectation that efforts on this point will continue to be successful. With these exceptions, it is the Commission’s intent that the risks from all the various initiating mechanisms be considered to the best of the capability of current evaluation techniques. The present report discusses extensions of classical risk management to address some of the special issues that arise in the context of security. Although the present emphasis is on physical security, some attention will be paid to cyber security. A particular focus of the report is on quantitative framework to manage and address uncertainties. This framework is demonstrated via a couple of hypothetical examples.

98 NUCLEAR DISARMAMENT, SAFEGUARDS, AND PHYSICAL P↗
DOE OSTI2022

An Architectural Survey of the REECo Maintenance Compound, Area 6, Nevada National Security Site, Nye County, Nevada

The U.S. Department of Energy (DOE), National Nuclear Security Administration Nevada Field Office (NNSA/NFO) plans to install a 26.45-mile-long 138-kilovolt (kV) transmission line on the Nevada National Security Site (NNSS) in Nye County, Nevada. This new transmission line will upgrade the electrical transmission system and provide reliable power between Mercury Switching Station in Area 23 and the U1a Facility in Area 1. The proposed upgrade to the power transmission system constitutes an undertaking subject to review under Section 106 of the National Historic Preservation Act (NHPA) (54 United States Code [USC] § 306101) and its implementing regulations, 36 Code of Federal Regulations (CFR) Part 800. A portion of this new transmission line will cross the western perimeter of the Reynolds Electrical and Engineering Company (REECo) Maintenance Compound located in Area 6 of the NNSS. This compound with its trade shops, storage sheds, and yards served as a general construction facility that supported nuclear testing activities on the NNSS from 1967 to 1992. Although three architectural resources in the compound have previously been recorded and evaluated for the National Register of Historic Places (NRHP), other resources within it have not, nor has the compound been recorded and evaluated as a potential district. The State Historic Preservation Officer (SHPO) concurred with NNSA/NFO’s determination that the unevaluated REECo Maintenance Compound will be adversely affected by the proposed undertaking (Reed 2021). The NNSA/NFO, in consultation with the SHPO, then developed the Memorandum of Agreement DE-GM58-22NA25553 between the U.S. Department of Energy and the Nevada State Historic Preservation Officer Regarding Installation of a 138-kilovolt Transmission Line from the Mercury Switching Station to the U1a Facility and the Removal of the Historic 138-kilovolt Transmission Line from the Mercury Switching Station to the U1a Facility in Areas 1, 3, 5, 6, and 23 of the Nevada National Security Site, Nye County, hereafter referred to as the MOA. This architectural survey report was prepared in accordance with MOA Stipulation III.B. It describes the origins, history, layout, and functions of the REECo Maintenance Compound during the Cold War and identifies contributing and noncontributing resources. The report defines a district boundary based on archival research and the field survey and concludes with an appendix that presents digital color images of the compound with descriptions and a map key showing image viewpoints and directions. Although none of the architectural resources are recommended individually eligible, the district evaluation concludes the REECo Maintenance Compound is eligible as a historic district for listing in the NRHP under the Secretary of the Interior’s Significance Criteria A and C at the local level. The historic district retains all seven aspects of integrity and conveys its significance under the abovementioned criteria.

138 kV↗
DOE OSTI2022

Building a better framework for evaluating human well-being impacts in global change analysis: The example of energy security

Human well-being can be greatly impacted by the global environmental and socio-economic change captured in Integrated Models of Global Change (IMGCs). Though most IMGCs address some aspects of well-being, their underlying modeling approach and ‘philosophy’ differ widely, and some key elements – like energy security – are omitted. In this report, we describe a project in which we set out to a create a framework through which the well-being dimensions of the household are connected to key drivers of socio-economic and environmental change – and how the needed metrics, data and modeling methods can be brought to bear. We focus on the well-being dimensions of energy, and lay out the necessary elements to capturing household energy security – using household energy burden as the relevant metric. We begin by showing the conceptual linkage of energy burden to environmental drivers like temperature change, using a simple and straightforward conceptual framework. We then go further to use the example of GCAM-USA to show how some key analytical features of the model can provide insight into how energy security across different groups can change along alternative pathways to sustainability. We compare our preliminary assessment of household energy burden to existing data and suggest further steps to improve and refine this analysis in future research.

29 ENERGY PLANNING, POLICY, AND ECONOMY↗
DOE OSTI2021

Fiscal Year 2020 Report for the Radiation Detection for Nuclear Security Summer School

The Pacific Northwest National Laboratory (PNNL) planned to hold its 6th Radiation Detection for Nuclear Security Summer School 15-26 June 2020. The COVID-19 pandemic prevented an in-person school from happening, and PNNL staff did not have adequate time to prepare a virtual format school. So fiscal year 2020 was taken as an off year with the intention of hosting an in-person or online summer school in 2021. As with typical off years, some course materials and activities were refined to better achieve the key objectives of 1) exposing students to the range of nuclear security applications for which radiation detection is necessary, 2) articulating the relevance of student research into the broader context, and 3) growing student interest in careers in nuclear security.

61 RADIATION PROTECTION AND DOSIMETRY↗
DOE OSTI2024

A Blockchain and PKI-Based Secure Vehicle-to-Vehicle Energy-Trading Protocol

With the increasing awareness for sustainable future and green energy, the demand for electric vehicles (EVs) is growing rapidly, thus placing immense pressure on the energy grid. To alleviate this, local trading between EVs should be encouraged. In this paper, we propose a blockchain and public key infrastructure (PKI)-based secure vehicle-to-vehicle (V2V) energy-trading protocol. A permissioned blockchain utilizing the proof of authority (PoA) consensus and smart contracts is used to securely store data. Encrypted communication is ensured through transport layer security (TLS), with PKI managing the necessary digital certificates and keys. A multi-leader, multi-follower Stackelberg game-based trade algorithm is formulated to determine the optimal energy demands, supplies, and prices. Finally, we propose a detailed communication protocol that ties all the components together, enabling smooth interaction between them. Key findings, such as system behavior and performance, scalability of the trade algorithm and the blockchain, smart contract execution costs, etc., are presented through numerical results by implementing and simulating the protocol in various scenarios. This work not only enhances local energy trading among EVs, encouraging efficient energy usage and reducing burden on the power grid, but also paves a way for future research in sustainable energy management.

Stackelberg game↗
NASA NTRS2003

Addressing software security risk mitigations in the life cycle

The NASA Office of Safety and Mission Assurance (OSMA) has funded the Jet Propulsion Laboratory (JPL) with a Center Initiative, 'Reducing Software Security Risk through an Integrated Approach' (RSSR), to address this need. The Initiative is a formal approach to addressing software security in the life cycle through the instantiation of a Software Security Assessment Instrument (SSAI) for the development and maintenance life cycles.

software tools↗
NASA NTRS2001

Reducing software security risk through an integrated approach

The fourth quarter delivery, FY'01 for this RTOP is a Property-Based Testing (PBT), 'Tester's Assistant' (TA). The TA tool is to be used to check compiled and pre-compiled code for potential security weaknesses that could be exploited by hackers. The TA Instrumenter, implemented mostly in C++ (with a small part in Java), parsels two types of files: Java and TASPEC. Security properties to be checked are written in TASPEC. The Instrumenter is used in conjunction with the Tester's Assistant Specification (TASpec)execution monitor to verify the security properties of a given program.

software security↗
NASA NTRS2014

Secure Naming and Addressing Operations for Store, Carry and Forward Networks

This paper describes concepts for secure naming and addressing directed at Store, Carry and Forward (SCF) distributed applications, where disconnection and intermittent connectivity between forwarding systems is the norm. The paper provides a brief overview of store, carry and forward distributed applications followed by an in depth discussion of how to securely: create a namespace; allocate names within the namespace; query for names known within a local processing system or connected subnetwork; validate ownership of a given name; authenticate data from a given name; and, encrypt data to a given name. Critical issues such as revocation of names, mobility and the ability to use various namespaces to secure operations or for Quality-of-Service are also presented. Although the concepts presented for naming and addressing have been developed for SCF, they are directly applicable to fully connected systems.

computer security↗
NASA NTRS2015

Addressing Software Security

Historically security within organizations was thought of as an IT function (web sites/servers, email, workstation patching, etc.) Threat landscape has evolved (Script Kiddies, Hackers, Advanced Persistent Threat (APT), Nation States, etc.) Attack surface has expanded -Networks interconnected!! Some security posture factors Network Layer (Routers, Firewalls, etc.) Computer Network Defense (IPS/IDS, Sensors, Continuous Monitoring, etc.) Industrial Control Systems (ICS) Software Security (COTS, FOSS, Custom, etc.)

software↗
NASA NTRS2015

The AgMIP Coordinated Global and Regional Assessments (CGRA) of Climate Change Impacts on Agriculture and Food Security

The Agricultural Model Intercomparison and Improvement Project (AgMIP) has been working since 2010 to construct a protocol-based framework enabling regional assessments (led by regional experts and modelers) that can provide consistent inputs to global economic and integrated assessment models. These global models can then relay important global-level information that drive regional decision-making and outcomes throughout an interconnected agricultural system. AgMIPs community of nearly 800 climate, crop, livestock, economics, and IT experts has improved the state-of-the-art through model intercomparisons, validation exercises, regional integrated assessments, and the launch of AgMIP programs on all six arable continents. AgMIP is now launching Coordinated Global and Regional Assessments (CGRA) of climate change impacts on agriculture and food security to link global and regional crop and economic models using a protocol-based framework. The CGRA protocols are being developed to utilize historical observations, climate projections, and RCPsSSPs from CMIP5 (and potentially CMIP6), and will examine stakeholder-driven agricultural development and adaptation scenarios to provide cutting-edge assessments of climate changes impact on agriculture and food security. These protocols will build on the foundation of established protocols from AgMIPs 30+ activities, and will emphasize the use of multiple models, scenarios, and scales to enable an accurate assessment of related uncertainties. The CGRA is also designed to provide the outputs necessary to feed into integrated assessment models (IAMs), nutrition and food security assessments, nitrogen and carbon cycle models, and additional impact-sector assessments (e.g., water resources, land-use, biomes, urban areas). This presentation will describe the current status of CGRA planning and initial prototype experiments to demonstrate key aspects of the protocols before wider implementation ahead of the IPCC Sixth Assessment Report.

models↗
NASA NTRS2016

Cyber Security for the Spaceport Command and Control System: Vulnerability Management and Compliance Analysis

With the rapid development of the Internet, the number of malicious threats to organizations is continually increasing. In June of 2015, the United States Office of Personnel Management (OPM) had a data breach resulting in the compromise of millions of government employee records. The National Aeronautics and Space Administration (NASA) is not exempt from these attacks. Cyber security is becoming a critical facet to the discussion of moving forward with projects. The Spaceport Command and Control System (SCCS) project at the Kennedy Space Center (KSC) aims to develop the launch control system for the next generation launch vehicle in the coming decades. There are many ways to increase the security of the network it uses, from vulnerability management to ensuring operating system images are compliant with securely configured baselines recommended by the United States Government.

Cyber Security↗
DOE OSTI2023

AI-ENABLED MONITORING OPTIONS TOWARDS SECURE MICROREACTOR DEPLOYMENT AND OPERATIONS

Global nuclear energy deployment scenarios suggest favorable economics for smaller, more versatile, and self-contained reactor technologies. Recognizing their key features as integrated, autonomous and either semi-remotely operated or fully remotely operated systems, microreactors are expected to be deployed in large numbers servicing off/micro-grids, many in geographically remote locations. Integrated nature of these systems as well as ease of their transportation as complete units, simplified installation and relocation/decommissioning challenge traditional continuity-of-knowledge practices used for conventional light water reactors where refueling is done onsite at designated times only replacing portions of their cores and only after their full commissioning for operations including completion of their containment building with security and safeguards measures in place. This effort is exploring AI (artificial intelligence)-enabled monitoring options that would be design agnostic and would assure secure unit deployment and operations. The principle is to maintain situational awareness via real-time evaluations of simultaneous and remotely transmitted monitoring data capturing key safeguards attributes including such characteristics as temperature, radiation, vibrational signals (inter alia), and others. The key principle is to provide reliable and resilient security options while maintaining simplified and economical deployment. The paper will review feasible options for AI-enabled solutions for such evaluations.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗
DOE OSTI2024

Reducing Current and Future Risks to Energy Security

As global communities transition to clean energy technologies, the threat landscape for energy security is more complex than ever before. While broad adoption of clean energy technologies has progressed across the world, the National Renewable Energy Laboratory (NREL) has been researching how to reduce risks and the value renewable energy technologies bring to improved energy security, today and decades into the future. Continuing adoption of technologies to meet clean energy and climate mitigation goals requires consideration of energy security, making NREL's risk reduction and mitigation research increasingly important.

clean energy↗
DOE OSTI2023

The oversized role of transmission in renewable integration and national security

This is a presentation for the June 1 Road to Resilience Week webinar focused on "Transmission: A National Security and Energy Resilience Imperative." Today’s electric grid cannot adequately address the national security threats it faces. Interregional HVDC transmission is a core solution to address these vulnerabilities. This webinar will focus on why we need to think about transmission as not only key for the clean energy transformation but as essential to strengthening the resilience of our electric grid. Emma Stewart, in her first speaking engagement as Chief Power Grid Scientist and Research Strategist for Idaho National Laboratory, will provide her perspective on how transmission plays an oversized role in enhancing national security and unlocking clean energy.

24 POWER TRANSMISSION AND DISTRIBUTION↗
DOE OSTI2025

Nevada National Security Site Environmental Report 2024 with Attachment A Site Description

The Nevada National Security Site Environmental Report 2024 Attachment A report expands on the general description of the Nevada National Security Site (NNSS) presented in the Introduction to the Nevada National Security Site Environmental Report 2024. Included are subsections that summarize the site’s geological, hydrological, climatological, and ecological settings and the cultural resources of the NNSS.

54 ENVIRONMENTAL SCIENCES↗