Cybersafety: A System-Theoretic Approach to Identify Cyber-Vulnerabilities & Mitigation Requirements in Industrial Control Systems
Not Available
97 MATHEMATICS AND COMPUTING↗
SEARCH · Engineering Papers
Results for “Cyber”
Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.
Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.
A Mobile Edge Computing Framework for Traffic Optimization At Urban Intersections Through Cyber-Physical Integration
The stop-and-go traffic pattern on urban roads often results in excessive energy consumption because of unnecessary vehicle braking, idling, and accelerations. With the widespread and increased use of automobiles, this traffic pattern creates many negative impacts (e.g., delayed travel time, air pollution, and additional carbon emission) on the sustainability of our cities. Taking advantage of the recent emerging Internet of Things (IoT) and edge computing paradigms, we propose a mobile edge computing framework that integrates the capability of real-time vehicle-to-infrastructure communication and intelligent speed optimization algorithms into a mobile app to optimize individual vehicles' driving speed at signalized intersections. The optimization aims to mitigate the stop-and-go traffic pattern and its undesirable consequences in urban transportation systems. The framework consists of (1) a cyberinfrastructure-enabled dynamic messaging system for retrieving and delivering real-time traffic and signal phase and timing information from IoT-connected signal controllers and sensors, (2) a real-time speed optimization algorithm for generating intelligent speed advisory using vehicle's information (e.g., GPS and driving directions from mobile sensing) and corresponding signal and traffic information, and (3) an ad-hoc mobile computing environment that converts drivers' smartphones into edge devices to host the speed optimization algorithms for enabling intelligent advisory on the vehicle's driving speed within signalized corridors. The paper presents the design and implementation of the proposed framework. Finally, we demonstrate the feasibility, usefulness, and energy-saving benefits of our proposed framework and its prototyping mobile app on urban transportation systems through traffic simulation, real-vehicle laboratory experiments, an evaluative survey, and field communication tests. The simulation-based energy evaluation results show that the 100% usage of the mobile app can achieve 24% energy savings in the transportation system.
33 ADVANCED PROPULSION SYSTEMS↗
Cyber Secure Sensor Network for Fossil Fuel Power Generation Assets Monitoring
The energy sector is undergoing digital transformation which is to say more and more power generation assets have become automated and connected to the internet. The connected sensors can tap into plants to monitor the health of assets and manage fleets remotely. These are just some of the benefits digitalization is bringing to the power industry. Within a power plant, control systems are no longer concerned with one system or one piece of equipment, but rather whole fleet of assets inter-connected with smart sensors which have the function of continuously monitoring and transmitting real-time operational data to operators. These connected systems will form a part of the industrial internet of things (IIoT). The big data scenarios provide benefits of performing system prognostics and optimization which is a key selling point of power plant digitalization.
20 FOSSIL-FUELED POWER PLANTS↗
Emulation Modeling for Development of Cyber-Defense Capabilities for Satellite Systems
The objective of this project was to develop a novel capability to generate synthetic data sets for the purpose of training Machine Learning (ML) algorithms for the detection of malicious activities on satellite systems. The approach experimented with was to a) generate sparse data sets using emulation modeling and b) enlarge the sparse data using Generative Adversarial Networks (GANs). We based our emulation modeling on the Open Source NASA Operational Simulator for Small Satellites (NOS3) developed by the Katherine Johnson Independent Verification and Validation (IV&V) program in West Virginia. Significant new capabilities on NOS3 had to be developed for our data set generation needs. To expand these data sets for the purpose of training ML, we experimented with a) Extreme Learning Machines (ELMs) and b) Wasserstein-GANs (WGAN-GP).
45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗
User Access to Scientific Facilities via 5G: A Cyber Security Thought Experiment
5G is more than an over-the-air radio technology upgrade. It is a strategy to extend Mobile Network Operator service offerings beyond traditional voice, instant messaging and Internet access. 5G Mobile Network Operators will offer new telecommunication services that include enhanced guarantees of confidentiality, integrity and availability. How could such services change the way Science collaborations connect scientists to supercomputers and other scientific facilities? Current scientific collaborations implicitly trust cloud service providers to securely store and process data. The perceived risks of outsourcing Science data security are counterbalanced by assurances that cloud providers operate at a scale that allows them to implement security measures impractical for Science collaborations (e.g. continuous system administrator behavioral monitoring and strict individual separation of duties). If that is true for a cloud service provider like Amazon Web Services (2018 revenue: $25.7 billion), could it also be true for Mobile Network Operators like Verizon Wireless (2018 revenue: $91.7 billion) or AT&T Mobility (2018 revenue: $71.3 billion)? DOE Leadership Class supercomputer facility users currently access them from the public Internet via Secure Shell. The sponsors and operators of the supercomputer facilities have determined that the public Internet path between the Scientist’s Device and the Login Node does not natively provide enough confidentiality or integrity to protect those communications. Therefore, the facilities achieve additional confidentiality and integrity by requiring Secure Shell encryption across those untrusted network paths. Using 5G Network Slice technology, a Mobile Network Operator may offer communication services between supercomputer users and facilities that natively provide confidentiality and integrity guarantees. Sponsors and operators of supercomputer facilities may determine that these guarantees provide enough confidentiality and integrity to protect those communications. If so, a 5G Network Slice could replace an SSH session running over the public Internet. Finally, this use case could be extended to other Office of Science user facility access requirements. Consider microscopy instruments at (e.g.) the Center for Nanoscale Materials or the Environmental Molecular Sciences Laboratory. The embedded systems controlling such instruments may not always support encrypted network access technologies like SSH. 5G Network Slices may offer an alternative to current VPN or SSH tunneling techniques, with additional benefits like guaranteed minimum bandwidth.
5G↗
Attack Surface Analysis of the Digital Twins interface with Advanced Sensor and Instrumentation Interfaces: Cyber Threat Assessment and Attack Demonstration for Digital Twins in Advanced Reactor Architectures
A digital twin is a virtual representation of a physical system or object using real-time data that can predict and analyze how the system or object performs. This relatively new technology can be applied to the field of nuclear power generation, to aid in the design and development of new nuclear power plants and reduce operation costs using predictive maintenance and other data analytical methods. While there are already companies utilizing simulation software to train operators and technicians in the nuclear industry, some are now transitioning to utilizing their existing technology, software, and methods to develop digital twin solutions for the next generation of nuclear power plants, offering their services to utilities and government organizations around the world.
21 SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLANTS↗
Application Guide for the Cyber-Resilient Design Framework for Hybrid Systems
As the energy landscape evolves, hybrid power plants—integrating multiple renewable energy sources (e.g., solar, wind, and battery storage) with the bulk power electric system—play a crucial role in meeting growing energy demands. However, with a hybrid power plant’s increased number of components, complex network connectivity and digitization of controls, these systems face growing cybersecurity risks. To help mitigate these risks, Idaho National Laboratory (INL) presents this application guide specifically designed for operators and systems engineers to evaluate the cybersecurity resilience of their hybrid power plant’s design.
14 SOLAR ENERGY↗
Cyber-Informed Engineering Water Booster Pump Station Case Study Slides [Slides]
This document presents an introduction to the twelve CIE principles applied through an engineering case study focused on a water booster pump station.
42 ENGINEERING↗
Emission Based Monitoring for Cyber Threat Detection of DER Systems
Explore the source record for details and available documents.
29 ENERGY PLANNING, POLICY, AND ECONOMY↗
Advanced Research on Integrated Energy Systems (ARIES) Cyber Range Overview and Threat-to-Consequence Demonstration
This presentation was presented at the Aggregation and Grid Security Workshop - held on June 17-18, 2025, at NREL in Golden, Colorado. The goal of the two-day workshop was to address the critical cybersecurity challenges for the future electric grid. The threat-to-consequence demonstration showcases NREL's capability to model, simulate, test, and evaluate cyberattacks targeting energy systems that coincide with natural hazards, as well as the ramifications for the energy grid as a whole.
24 POWER TRANSMISSION AND DISTRIBUTION↗
Critical Energy Infrastructure Cybersecurity: Enhanced Cyber Resilience for Federal Energy Systems
This presentation is an overview of FEMP Resilient and Secure Infrastructure and Facilities. An educational and interactive workshop centered on resilient and secure federal infrastructure and facilities, with a focus on inverter-based resources at Federal sites, building automation systems, and Federal supply chains. This workshop will illustrate an all-hazards scenario and discuss how Federal agencies can be positioned to resist these real-world scenarios.
97 MATHEMATICS AND COMPUTING↗
Cyber-Informed Engineering (CIE) for Standard Development Organizations [Slides]
SDO stands for Standard Development Organization. For our purposes, an SDO is an organization whose primary activities are developing, coordinating, promulgating, revising, amending, issuing, or publishing standards. These standards are crucial for interoperability, safety, quality, and innovation across various industries and technologies. In the context of our discussion, when we refer to an "SDO," we are specifically targeting these organizations as our primary audience. The purpose is to provide an overview of CIE and how SDOs can apply its concepts in standards development and updates.
97 MATHEMATICS AND COMPUTING↗
Cyber-Informed Engineering for Strategic Planning
The CIE Guide for Engaging Organizational Leadership: Board and C-Suite describes how to apply CIE at the senior-level of organizational management. This guidance integrates CIE concepts into theory and practice of guiding coalition leadership to improve permeation of CIE concepts throughout organizational culture. This guide incorporates feedback from CIE community of practice volunteers in a study of how business administrative and strategic planning and management guidance and course materials can be applied to CIE implementation throughout an organization's principles and processes. This guide defines the interests guiding senior leadership, managers and supervisors, and technicians and workers involved in creating and operating and maintaining systems, and cultural/ historical/ political assumptions or influences shaped the landscape that could facilitate or impede development of CIE. The included guidance for organizational strategic management and leadership can be imbedded into contract guidance based on the CIE implementation guide and lessons learned from industry application.
97 MATHEMATICS AND COMPUTING↗
Cooperative Systems in Presence of Cyber-Attacks: A Unified Framework for Resilient Control and Attack Identification
Here, this paper considers a cooperative control problem in presence of unknown attacks. The attacker aims at destabilizing the consensus dynamics by intercepting the system’s communication network and corrupting its local state feedback. We first revisit the virtual network based resilient control proposed in our previous work and provide a new interpretation and insights into its implementation. Based on these insights, a novel distributed algorithm is presented to detect and identify the compromised communication links. It is shown that it is not possible for the adversary to launch a harmful and stealthy attack by only manipulating the physical states being exchanged via the network. In addition, a new virtual network is proposed which makes it more difficult for the adversary to launch a stealthy attack even though it is also able to manipulate information being exchanged via the virtual network. A numerical example demonstrates that the proposed control framework achieves simultaneously resilient operation and real-time attack identification.
97 MATHEMATICS AND COMPUTING↗
Cyber-Informed Engineering (CIE) Power Generation Guide [Slides]
This guide offers suggestions for applying CIE principles to technologies used to generate electric power. It addresses issues of design, implementation, and maintenance, preemptively addressing cybersecurity threats to electric generation. The intended audience for this guide includes practitioners across the energy and cybersecurity sectors, such as energy industry professionals (e.g., engineers, system designers, operators, and researchers) and cybersecurity experts (e.g., communication system designers, information technology/operational technology [IT/OT] administrators, and penetration testers).
13 HYDRO ENERGY↗
Cyber-physical Resilient Interoperable Microgrid Networks
The paper presents the results of an industry-academic collaboration between ABB, Duke Energy and the University of Illinois at Urbana-Champaign (UIUC) that has developed and demonstrated a cyberphysical resilient control and communication architecture for deployment of multiple microgrid networks, as well as retrofitting the existing distribution grids by increasing DER penetration levels.
24 POWER TRANSMISSION AND DISTRIBUTION↗
Fixing Codified Cyber Analysis
This intern poster addresses the projects I worked on this summer.
97 MATHEMATICS AND COMPUTING↗
Connecting the Dots: An Assessment of Cyber-risks in Networked Building and Municipal Infrastructure Systems
The buildings and city streets we walk down are changing. Driven by various data-driven use cases, there is increased interest in networking and integrating lighting and other building systems (e.g., heating, ventilation, and air conditioning (HVAC), security, scheduling) that were previously not internet-facing, and equipping them with sensors that collect information about their environment and the people that inhabit it. These data-enabled systems can potentially deliver improved occupant and resident experiences and help meet the U.S. Department of Energy (DOE) national energy and carbon reduction goals. Deploying connected devices new to being networked, however, is not without its challenges. This paper explores tools available to system designers and integrators that facilitate a cybersecurity landscape assessment – or more specifically the identification of threats, vulnerabilities, and adversarial behaviors that could be used against these networked systems. These assessments can help stakeholders shift security prioritization proactively toward the beginning of the development process.
cyber-risk assesment, adversarial behavior, MITRE ↗