Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “Security Requirements”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 451 records · Page 25

Reconciling food security and bioenergy: priorities for action

Abstract Understanding the complex interactions among food security, bioenergy sustainability, and resource management requires a focus on specific contextual problems and opportunities. The United Nations’ 2030 Sustainable Development Goals place a high priority on food and energy security; bioenergy plays an important role in achieving both goals. Effective food security programs begin by clearly defining the problem and asking, ‘What can be done to assist people at high risk?’ Simplistic global analyses, headlines, and cartoons that blame biofuels for food insecurity may reflect good intentions but mislead the public and policymakers because they obscure the main drivers of local food insecurity and ignore opportunities for bioenergy to contribute to solutions. Applying sustainability guidelines to bioenergy will help achieve near‐ and long‐term goals to eradicate hunger. Priorities for achieving successful synergies between bioenergy and food security include the following: (1) clarifying communications with clear and consistent terms, (2) recognizing that food and bioenergy need not compete for land and, instead, should be integrated to improve resource management, (3) investing in technology, rural extension, and innovations to build capacity and infrastructure, (4) promoting stable prices that incentivize local production, (5) adopting flex crops that can provide food along with other products and services to society, and (6) engaging stakeholders to identify and assess specific opportunities for biofuels to improve food security. Systematic monitoring and analysis to support adaptive management and continual improvement are essential elements to build synergies and help society equitably meet growing demands for both food and energy.

09 BIOMASS FUELS↗

Bayesian Attack Model (BAM) User Story

This document presents a user story for the Bayesian Attack Model (BAM) tool designed to aggregate and analyze cyber-attack observables for operational technology (OT) systems. BAM aims to empower cybersecurity analysts by providing a streamlined interface for collecting observable data from various sources, enabling real-time analysis of potential adversary activity. By enhancing the response capabilities of security teams, BAM facilitates risk-informed decision-making and improves organizational security posture. This user story outlines the key functionalities, user interactions, and requirements necessary to successfully integrate BAM with other security information and event management (SIEM) technology and cybersecurity operations centers (CSOCs).

97 MATHEMATICS AND COMPUTING↗

Simulation Data Management - Requirements and Design Specification

Simulation Data Management (SDM), the ability to securely organize, archive, and share analysis models and the artifacts used to create them, is a fundamental requirement for modern engineering analysis based on computational simulation. We have worked separately to provide secure, network SDM services to engineers and scientists at our respective laboratories for over a decade. We propose to leverage our experience and lessons learned to help develop and deploy a next-generation SDM service as part of a multi-laboratory team. This service will be portable across multiple sites and platforms, and will be accessible via a range of command-line tools and well-documented APIs. In this document, we’ll review our high-level and low-level requirements for such a system, review one existing system, and briefly discuss our proposed implementation.

96 KNOWLEDGE MANAGEMENT AND PRESERVATION↗

Pathways to IEC Standards for Heliostat Design Qualification and Site Acceptance in Central Receiver CSP Applications

This paper surveys the existing landscape of standards relevant to heliostats, identifies their gaps, and proposes a path forward to a comprehensive set of heliostat guidelines, technical specifications, and standards under the framework of International Electrotechnical Commission (IEC) TC 117. Gaps in existing guidelines and standards are surveyed using a three-tiered taxonomy: component-level, heliostat-level, and field-level. At each level, the gap analysis is followed by a proposal for a coordinated path forward on the development of standards. At the component level, advances in the understanding of wind loading should inform a technical specification for drives and structures. Reflectors require consolidation of measurement guidelines into existing standards documents. Communications & controls require technical standards to inform their selection and secure implementation. At the heliostat level, IEC 62817 (solar trackers) adequately characterizes drive systems, structures, and electronics, but requires adaptation to heliostats' use patterns, operating modes, and expected life cycles. IEC 62817 does not address heliostat beam quality and pointing accuracy, but the process for determining both is elaborated in the SolarPACES Guideline for Heliostat Performance Testing. This SolarPACES document requires two main modifications: adaptation to IEC language and inclusion of testing after heliostats which have undergone accelerated weathering and mechanical cycling (to understand performance degradation). At the field level, IEC 62862-4-2 addresses the function and control of heliostat fields but does not cover the statistically rigorous testing of heliostat groups, or field performance factors like security and soiling. The addition of documents under IEC-62862-4 is proposed to address this gap.

beam↗

Analysis of Vehicle-Based Security Operations

Vehicle-to-vehicle (V2V) communications promises to increase roadway safety by providing each vehicle with 360 degree situational awareness of other vehicles in proximity, and by complementing onboard sensors such as radar or camera in detecting imminent crash scenarios. In the United States, approximately three hundred million automobiles could participate in a fully deployed V2V system if Dedicated Short-Range Communication (DSRC) device use becomes mandatory. The system s reliance on continuous communication, however, provides a potential means for unscrupulous persons to transmit false data in an attempt to cause crashes, create traffic congestion, or simply render the system useless. V2V communications must be highly scalable while retaining robust security and privacy preserving features to meet the intra-vehicle and vehicle-to-infrastructure communication requirements for a growing vehicle population. Oakridge National Research Laboratory is investigating a Vehicle-Based Security System (VBSS) to provide security and privacy for a fully deployed V2V and V2I system. In the VBSS an On-board Unit (OBU) generates short-term certificates and signs Basic Safety Messages (BSM) to preserve privacy and enhance security. This work outlines a potential VBSS structure and its operational concepts; it examines how a vehicle-based system might feasibly provide security and privacy, highlights remaining challenges, and explores potential mitigations to address those challenges. Certificate management alternatives that attempt to meet V2V security and privacy requirements have been examined previously by the research community including privacy-preserving group certificates, shared certificates, and functional encryption. Due to real-world operational constraints, adopting one of these approaches for VBSS V2V communication is difficult. Timely misbehavior detection and revocation are still open problems for any V2V system. We explore the alternative approaches that may be applicable to a VBSS, and suggest some additional research directions in order to find a practical solution that appropriately addresses security and privacy.

Connected Vehicle↗

Scintillation properties of diamond powders and feasibility of using them in thermal neutron detectors

Diamond offers unique properties for radiation detection, including high radiation hardness, very low gamma sensitivity, and fast response. Conventional diamond detectors rely on charge collection, but this approach requires ultra-pure single crystals and suffers from radiation-induced degradation. Here, in this work, we demonstrate an alternative approach using diamonds as scintillators for detection of charged particles and thermal neutrons. Prototypes were fabricated from commercially available diamond powders bonded to glass substrates and coupled with 6 LiF converters and silicon photomultipliers (SiPMs) and conventional PMTs. We characterized their scintillation properties under alpha particle excitation, x-ray photoluminescence, and thermal neutrons. The tryout detectors exhibit strong scintillation light signals, nanosecond-scale response times, and neutron detection efficiencies up to approximately 14 %, evaluated by comparison to conventional 3 He detector with known efficiency. These results demonstrate the feasibility of cost-effective, lightweight and robust diamond scintillation detectors for applications in space and planetary science, nuclear security, safeguards and environmental monitoring requiring efficient, robust, gamma-blind neutron detectors.

47 OTHER INSTRUMENTATION↗

Biodiversity and Global Health: Intersection of Health, Security, and the Environment

One of the biggest consequences of large-scale environmental change is the loss of biodiversity. Recent studies predict a loss of 1 million species in the near future. Biodiversity loss and land use change through anthropogenic disturbance are known to affect disease exposure, disease severity, and disease impacts. It is becoming increasingly clear that biodiversity loss will lead to an increase in infectious diseases in certain regions. Changes in biodiversity may contain important signatures for prediction of infectious diseases and outbreaks. Here, we argue that areas of high or rapid biodiversity loss will be critical to monitor under the umbrella of global health security. Global Health Security consists of the actions and activities required to reduce the impact of public health events in populations living in different geographic regions and across international borders. Like infectious diseases, climate change and other causes of environmental changes do not respect international borders and are becoming more widespread in all parts of the world. Here, the relationships among biodiversity, climate and environmental changes, and pathogen prevalence are dynamic, context dependent, and complex. Accounting for this complexity requires the inclusion of the environment sector, presently missing, when evaluating the potential of global health security actions for mitigating disease risks.

59 BASIC BIOLOGICAL SCIENCES↗

Simple, Secure, Internet Delivery of MOOSE-based Applications

Application packaging and distribution are the final steps for delivering software to end-users; both are frequently neglected when creating scientific software. Commercial businesses rely on electronic distribution systems that have rendered disk drives obsolete. Still, national laboratories continue to rely heavily on removable media to distribute and limit access to controlled applications. With increasing concerns of unauthorized copying of sensitive applications, a modern distribution system that utilizes cryptographically secure communication and authentication protocols has been developed. This new distribution system will secure the chain of custody for nuclear software while simultaneously simplifying access to these tools. This report summarizes four primary advancements made toward the secure distribution of Nuclear Energy Advanced Modeling and Simulation (NEAMS)-developed, Multiphysics Object Oriented Simulation Environment (MOOSE)-based applications: application installation, package distribution, automated package building, and distribution of documentation. NEAMS is currently developing more than ten separate applications based on the open-source MOOSE Framework. Distribution of these applications has primarily been accomplished by distributing source code, with end-users compiling the applications themselves. This work created a mechanism where MOOSE applications can be installed in a similar way to any other software. This allows both administrators and end-users simplified access to runnable executables. With this new installation capability, it was then possible to rethink distribution. A new, secure capability for delivering MOOSE-based applications over the internet has been created. This system requires unique cryptographic tokens for authentication, greatly securing the custody chain for software. Once granted access, installation of any NEAMS code can be accomplished with these terminal commands: "conda install ncrc" "ncrc install ncrc-bison." After these two commands (and authenticating) the BISON application will be securely down- loaded from Idaho National Laboratory (INL)’s servers, installed, and ready to use. To enable this new distribution capability to be successful, the open-source Continuous Integration, Verification, Enhancement, and Testing (CIVET) Continuous Integration (CI) capability was augmented to add Continuous Delivery (CD). CD enables the automated building and packaging of MOOSE-based applications as they are modified by development teams, ensuring that our customers can obtain up-to-date versions of the software at any time. The need for instruction on how to use these applications was addressed through modifications to the MOOSE documentation system. The MooseDocs capability, which enables robust documentation of MOOSE-based applications, has been extended to allow both for the installation of documentation and the packaging of documentation with installed applications. Together, these enhancements form the core of a new, secure distribution mechanism for nuclear simulation tools. In concert with the Nuclear Computational Resource Center (NCRC), NEAMS- developed applications will now be straightforward to obtain securely.

97 MATHEMATICS AND COMPUTING↗

The Johnson Space Center Management Information Systems (JSCMIS). 1: Requirements Definition and Design Specifications for Versions 2.1 and 2.1.1. 2: Documented Test Scenario Environments. 3: Security Design and Specifications

The Johnson Space Center Management Information System (JSCMIS) is an interface to computer data bases at NASA Johnson which allows an authorized user to browse and retrieve information from a variety of sources with minimum effort. This issue gives requirements definition and design specifications for versions 2.1 and 2.1.1, along with documented test scenario environments, and security object design and specifications.

Source record↗

Radiological Monitoring Plan for the Oak Ridge Y-12 National Security Complex: Surface Water

DOE Order 458.1 requires that dose estimates consider contributions from all facilities. In the Y-12 Radiological Monitoring Plan (RMP), surface water is monitored at points that reflect individual facilities, as well as at points that reflect the combined contributions of all facilities. This monitoring plan does not consider other potential routes (i.e., airborne releases and food chains). Thus, a complete determination of total effective dose (TED) cannot be made based on this plan alone. The other routes from Y-12, and all routes from other DOE facilities on the Oak Ridge Reservation (e.g., Oak Ridge National Laboratory (ORNL) and The Heritage Center), must be considered in order to satisfy DOE Order 458.1 requirements. Determination of TED from all sites and pathways is done through the use of dose-assessment models and is documented in the Annual Site Environmental Report. This monitoring plan provides adequate monitoring goals for Y-12 surface water releases to provide input of sufficient sensitivity and accuracy to reliably determine the Y-12 surface water component of the TED. The routine radiological monitoring program is designed to monitor effluents at four types of locations: (1) treatment facilities, (2) other point and area source discharges, (3) instream locations, and (4) production building roof run-off. With this sampling and analysis program, data will be obtained on primary point sources as well as on locations that represent the composite of other potential sources. This plan will be reviewed periodically to determine necessary modifications to the sampling frequencies, parameters, and locations. Modifications, if any, will be based on the analysis of the previous data and its effectiveness in satisfying the objectives of this plan. Appendix A contains graphs of the sum of the DCS fractions for locations and frequencies contained in a previous version of this plan. The data was collected from January 2009 through December 2019. Each sample was analyzed, and each result was divided by the appropriate DCS to compute a DCS fraction. These fractions were summed for all isotopes. According to DOE –STD-1196-2011, the annual average of these sums should be below 1.

54 ENVIRONMENTAL SCIENCES↗

Underground Test Area Fiscal Year 2014 Annual Quality Assurance Report: Nevada National Security Site, Nevada, Revision 0

This report is required by the Underground Test Area (UGTA) Quality Assurance Plan (QAP) and identifies the UGTA quality assurance (QA) activities from October 1, 2013, through September 30, 2014 (fiscal year [FY] 2014). All UGTA organizations—U.S. Department of Energy (DOE), National Nuclear Security Administration Nevada Field Office (NNSA/NFO); Desert Research Institute (DRI); Lawrence Livermore National Laboratory (LLNL); Los Alamos National Laboratory (LANL); National Security Technologies, LLC (NSTec); Navarro-Intera, LLC (N-I); and the U.S. Geological Survey (USGS)—conducted QA activities in FY 2014. The activities included conducting oversight assessments for QAP compliance, identifying findings and completing corrective actions, evaluating laboratory performance, and publishing documents. UGTA Activity participants conducted 25 assessments on topics including safe operations, QAP compliance, activity planning, and sampling. These assessments are summarized in Section 2.0. Corrective actions tracked in FY 2014 are presented in Appendix A. Laboratory performance was evaluated based on three approaches: (1) established performance evaluation programs (PEPs), (2) interlaboratory comparisons, or (3) data review. The results of the laboratory performance evaluations, and interlaboratory comparison results are summarized in Section 4.0. The UGTA Activity published three public documents and a variety of other publications in FY 2014. The titles, dates, and main authors are identified in Section 5.0. The Contract Managers, Corrective Action Unit (CAU) Leads, Preemptive Review (PER) Committee members, and Topical Committee members are listed by name and organization in Section 6.0. Other activities that affected UGTA quality are discussed in Section 7.0. Section 8.0 provides the FY 2014 UGTA QA program conclusions, and Section 9.0 lists the references not identified in Section 5.0.

54 ENVIRONMENTAL SCIENCES↗

Underground Test Area Fiscal Year 2015 Annual Quality Assurance Report Nevada National Security Site, Nevada, Revision 0

This report is required by the Underground Test Area (UGTA) Quality Assurance Plan (QAP) and identifies the UGTA quality assurance (QA) activities from October 1, 2014, through September 30, 2015 (fiscal year [FY] 2015). All UGTA organizations—U.S. Department of Energy (DOE), National Nuclear Security Administration Nevada Field Office (NNSA/NFO); Desert Research Institute (DRI); Lawrence Livermore National Laboratory (LLNL); Los Alamos National Laboratory (LANL); National Security Technologies, LLC (NSTec); Navarro-Intera, LLC (N-I); Navarro Engineering and Research Inc (Navarro); and the U.S. Geological Survey (USGS)—conducted QA activities in FY 2015. The activities included conducting oversight assessments for QAP compliance, identifying findings and completing corrective actions, evaluating laboratory performance, and publishing documents.

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗

Nevada National Security Site Radiological Control Manual

This manual contains the radiological control requirements to be used for all radiological activities conducted by programs under the purview of the U.S. Department of Energy (DOE), National Nuclear Security Administration Nevada Field Office (NNSA/NFO). (Activities conducted under the purview of the U.S. Department of Energy, Office of Environmental Management Nevada[(EM Nevada] may require additional approval authorities as described in the EM Nevada Prime Contractor’s implementation plan.) Compliance with these requirements will ensure compliance with Title 10 Code of Federal Regulations (CFR) Part 835, “Occupational Radiation Protection.” This manual represents policies, guidelines, and best practices for implementing the DOE/NV/03624--0082, “Nevada National Security Site Radiation Protection Program,” (NNSS RPP) according to the requirements of 10 CFR 835.

61 RADIATION PROTECTION AND DOSIMETRY↗

Towards Resilient Critical Infrastructures: Application of Type-2 Fuzzy Logic in Embedded Network Security Cyber Sensor

Resiliency and cyber security of modern critical infrastructures is becoming increasingly important with the growing number of threats in the cyber-environment. This paper proposes an extension to a previously developed fuzzy logic based anomaly detection network security cyber sensor via incorporating Type-2 Fuzzy Logic (T2 FL). In general, fuzzy logic provides a framework for system modeling in linguistic form capable of coping with imprecise and vague meanings of words. T2 FL is an extension of Type-1 FL which proved to be successful in modeling and minimizing the effects of various kinds of dynamic uncertainties. In this paper, T2 FL provides a basis for robust anomaly detection and cyber security state awareness. In addition, the proposed algorithm was specifically developed to comply with the constrained computational requirements of low-cost embedded network security cyber sensors. The performance of the system was evaluated on a set of network data recorded from an experimental cyber-security test-bed.

97 MATHEMATICS AND COMPUTING↗

The Impacts of Demand Response Participation in Capacity Markets

Demand Response is capable of reducing the total amount of generation capacity investment required to ensure electricity system security. We utilise this fact to devise a novel methodology to estimate the contribution of a load-shifting demand response resource to system adequacy. We then simulate an electricity market using mixed complementarity models to determine how the participation of demand response in capacity markets impacts on market outcomes. Demand response primarily affects the equilibrium outcome through the energy market, however demand response also reduces both equilibrium prices and consumer costs through its capacity market contribution. The effect is particularly pronounced when there is a high level of variable renewable generation and initial undercapacity. In the absence of demand response, increased wind generation leads to higher capacity prices as generators seek to offset depressed energy prices. However, we find that demand response's participation in the capacity market can combat these increased capacity prices. These results suggest that demand response participation in capacity markets can mitigate some of the market challenges of renewable integration, particularly that of the 'missing money' problem.

24 POWER TRANSMISSION AND DISTRIBUTION↗

Blockchain Smart Contract Reference Framework and Program Logic Architecture for Transactive Energy Systems

This paper proposes a reference framework for a transactive energy market based on blockchain. The framework was designed based on the engineering requirements of a distribution-scale market; including participant needs, expected market transactions, and the cybersecurity constructs required to support a fair, secure and efficient market operation. It leverages the existing blockchain primitives to provide clear value propositions to the transactive market, including identity management (access control), data security (integrity), resiliency (decentralization, scalability and performance). The validity of the proposed framework is demonstrated using a real-time 5-min double-auction market. The results highlight its benefits while providing strong validation of applicability to blockchain within transactive energy systems.

Gourisetti, Sri Nikhil Gupta↗

Diffusivity of Carbon Dioxide in Aqueous Solutions under Geologic Carbon Sequestration Conditions

Accurate assessment of the long-term security of geologic carbon sequestration requires knowledge of the mobility of carbon dioxide in brines under pressure and temperature conditions that prevail in subsurface aquifers. In this paper, we report Raman spectroscopic measurements of the rate of CO 2 diffusion in water and brines as a function of pressure, salinity, and concentration of CO 2 . In pure water at 50 ± 2 °C and 90 ± 2 bar, we find the diffusion coefficient, D, to be (3.08 ± 0.03) × 10 –9 m 2 /s, a value that is consistent with a recent microfluidic study but lower than earlier PVT measurements. Under reservoir conditions, salinity affects the mobility of CO 2 significantly and D decreased by 45% for a 4 M solution of NaCl. We find significant differences of diffusivity of CO 2 in brines (0–4 M NaCl), in both the absolute values and the trend compared to the Stokes–Einstein prediction under our experimental conditions. Finally, we observe that D decreases significantly at the high CO 2 concentrations expected in subsurface aquifers (~15% reduction at 0.55 mol/kg of CO 2 ) and provides an empirical correction to the commonly reported D values that assume a tracer concentration dependence on diffusivity.

37 INORGANIC, ORGANIC, PHYSICAL, AND ANALYTICAL CH↗