SEARCH · Engineering Papers

Results for “security assessment”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

SourceResearch connectionFrom yearThrough year

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 451 records · Page 25

All sources NASA NTRS DOE OSTI

DOE OSTI2023

The Jupiter High-240 Experiment

The Jupiter High-240 experiment was performed in May of 2019 by researchers from Los Alamos National Laboratory (LANL) at the National Criticality Experiments Research Center (NCERC) in the Device Assembly Facility (DAF) located at the Nevada National Security Site (NNSS). This experiment has previously been mentioned briefly in prior publication related to a collaborative effort with the Japan Atomic Energy Agency (JAEA) to assess lead void coefficients of reactivity in uranium- and plutonium-fueled systems with lead. This series of experiments supports JAEA’s research into the development of an accelerator driven transmutation system for spent nuclear fuel. The Jupiter High-240 experiment built upon the previous Jupiter experiment by incorporating plutonium fuel plates with higher 240 Pu content. Efforts to formally benchmark the original Jupiter experiment have continued for inclusion in the benchmark handbook of the International Criticality Safety Benchmark Evaluation Project (ICSBEP). Whereas there is much similarity between the two Jupiter experiments, there is a desire to also evaluate and benchmark this second experiment to further contribute towards the availability of lead-sensitive benchmarks. The components utilized in these two experiments have also been used to perform other subcritical and Rossi-α measurements.

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗

DOE OSTI2023

Cybersecurity Platform and Certification Framework Development for Extreme Fast Charging (XFC)-Integrated Charging Ecosystem (Final Project Report)

This report summarizes a pioneering effort in Electric Vehicle charging infrastructure ecosystem cybersecurity requirements, assessment methodologies, functional verification, as well as embodiment of the key technologies in the form of hardware and software tools being made available to the public. EPRI led a team of experts, as well as a stakeholder coalition encompassing all key actors in the EV charging infrastructure ecosystem that includes eXtreme Fast Charging (XFC) equipment (defined as 200kW or above). EV charging infrastructure in the United States is a patchwork of networks that have continued to grow organically and have been designed to serve the charging needs of the EV owners, who are their customers. In doing so, each network provider, as well as their connected entities such as the cloud Electric Vehicle Service Providers or EVSPs, utility back office, utility AMI networks, payment networks, as well as Original Equipment Manufacturer (EV manufacturer) telematics networks, have designed systems that may work well individually, but no single entity is responsible for the entire ecosystem to be secure in terms of data exchange. Furthermore, there is no uniformity in how each actor has implemented the cybersecurity requirements since no system-wide cybersecurity requirements existed prior to this project. The final project report describes the technical approach guided by the EV charging infrastructure cybersecurity working group, convened specifically for this project. The technical approach included definition of requirements at the ecosystem level, treated as a ‘system of systems’, and then passed down to individual systems (EVSE, EV, cloud EVSP, utility, and the payment networks), followed by developing the cybersecurity risk and vulnerability assessment methods, that were later applied to real-world cyber-physical systems at EPRI, ANL, and NREL laboratories, to validate both the process and the results. Finally, in a spotlight over the most vulnerable equipment, which is the EV charge station (AC or DC), the team developed a multi-layer cybersecurity implementation in the embedded domain embodied by the open-source Secure Network Interface Card (SNIC) demonstrating the various ways in which the infrastructure can be secured protecting against the identified attack surfaces. Finally, the entire process of EV infrastructure cybersecurity assessment was encapsulated in the Electric Vehicle Charging Cybersecurity Management (EVC2M) online GUI-based tool, that is expected to be released to the public. The report presents the objectives, the technical approach, the key results, and recommendations for future work.

24 POWER TRANSMISSION AND DISTRIBUTION↗

DOE OSTI2021

Repository-Scale Performance Assessment Incorporating Postclosure Criticality

A key objective of the United States Department of Energy’s (DOE) Office of Nuclear Energy’s Spent Fuel and Waste Science and Technology Campaign is to better understand the technical basis, risks, and uncertainty associated with the safe and secure disposition of spent nuclear fuel (SNF) and high-level radioactive waste. Commercial nuclear power generation in the United States has resulted in thousands of metric tons of SNF, the disposal of which is the responsibility of the DOE (Nuclear Waste Policy Act of 1982, as amended). Any repository licensed to dispose of SNF must meet requirements regarding the long-term performance of that repository. For an evaluation of the long-term performance of the repository, one of the events that may need to be considered is the SNF achieving a critical configuration during the postclosure period. Of particular interest is the potential behavior of SNF in dual-purpose canisters (DPCs), which are currently licensed and being used to store and transport SNF but were not designed for permanent geologic disposal. A study has been initiated to examine the potential consequences, with respect to long-term repository performance, of criticality events that might occur during the postclosure period in a hypothetical repository containing DPCs. The first phase (a scoping phase) consisted of developing an approach to creating the modeling tools and techniques that may eventually be needed to either include or exclude criticality from a performance assessment (PA) as appropriate; this scoping phase is documented in Price et al. (2019a). In the second phase, that modeling approach was implemented and future work was identified, as documented in Price et al. (2019b). This report gives the results of a repository-scale PA examining the potential consequences of postclosure criticality, as well as the information, modeling tools, and techniques needed to incorporate the effects of postclosure criticality in the PA.

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗

DOE OSTI2025

LandScan Mosaic Rapid Population Update: Jamaica After Hurricane Melissa (V1)

During a natural disaster such as Hurricane Melissa, understanding where people are located is critical for situational awareness, operational planning and humanitarian support and consequence assessment. Traditional population datasets focus on mapping populations based on residential, or "business-as-usual" scenarios. However, natural disasters can create disruptions in daily routines of population in addition to the magnitude of the population displacement, depending on the type, duration, context, and location of the event. The Geospatial Science and Human Security Division at Oak Ridge National Laboratory (ORNL) produced this latest LandScan Mosaic Rapid Population Update for Jamaica following Hurricane Melissa, a category 5 hurricane that made landfall on Jamaica on October 28 2025. This Rapid Population Update captures the immediate population displacement following the hurricane using a combination of open-source building damage assessment data from Microsoft, flood exposure data from the Global Flood Monitoring service, reported population displacement information, and humanitarian shelter locations from the Jamaican Office of Disaster Preparedness and Emergency Management and the underlying LandScan Mosaic Jamaica as a base population.

97 MATHEMATICS AND COMPUTING↗

DOE OSTI2021

Tamper-Indicating Enclosures with Visually Obvious Tamper Response

Sandia National Laboratories is developing a way to visualize molecular changes that indicate penetration of a tamper-indicating enclosure (TIE). Such "bleeding" materials (analogous to visually obvious, colorful bruised skin that doesn't heal) allows inspectors to use simple visual observation to readily recognize that penetration into a material used as a TIE has been attempted, without providing adversaries the ability to repair damage. Such a material can significantly enhance the current capability for TIEs, used to support treaty verification regimes. Current approaches rely on time-consuming and subjective visual assessment by an inspector, external equipment, such as eddy current or camera devices, or active approaches that may be limited due to application environment. The complexity of securing whole volumes includes: (1) enclosures that are non-standard in size/shape; (2) enclosures that may be inspectorate- or facility-owned; (3) tamper attempts that are detectable but difficult or timely for an inspector to locate; (4) the requirement for solutions that are robust regarding reliability and environment (including facility handling); and (5) the need for solutions that prevent adversaries from repairing penetrations. The approach is based on a transition metal ion solution within a microsphere changing color irreversibly when the microsphere is ruptured. Investigators examine 3D printing of the microspheres as well as the spray coating formulation. The anticipated benefits of this work are passive, flexible, scalable, cost-effective TIEs with obvious and robust responses to tamper attempts. This results in more efficient and effective monitoring, as inspectors will require little or no additional equipment and will be able to detect tamper without extensive time-consuming visual examination. Applications can include custom TIEs (cabinets or equipment enclosures), spray-coating onto facility-owned items, spray-coating of walls or structures, spray-coatings of circuit boards, and 3D-printed seal bodies. The paper describes research to-date on the sensor compounds and microspheres.

98 NUCLEAR DISARMAMENT, SAFEGUARDS, AND PHYSICAL P↗

DOE OSTI2023

2022 Annual Site Environmental Report for Sandia National Laboratories, Livermore, California

Sandia National Laboratories is a multimission laboratory managed and operated by National Technology & Engineering Solutions of Sandia, LLC, a wholly owned subsidiary of Honeywell International Inc., for the U.S. Department of Energy’s National Nuclear Security Administration. The National Nuclear Security Administration’s Sandia Field Office administers the contract and oversees contractor operations at Sandia National Laboratories, California. Activities at this multiprogram engineering and science laboratory support the nuclear weapons stockpile program, energy and environmental research, homeland security, micro- and nanotechnologies, and basic science and engineering research. The U.S. Department of Energy and its management and operating contractor are committed to safeguarding the environment, assessing sustainability practices, and ensuring the validity and accuracy of the monitoring data presented in this annual site environmental report. This report provides a summary of environmental monitoring information and compliance activities that occurred at Sandia National Laboratories, California during calendar year 2022 unless noted otherwise. General site and environmental program information is also included. This report was prepared in accordance with DOE O 231.1B, Environment, Safety and Health Reporting.

54 ENVIRONMENTAL SCIENCES↗

DOE OSTI2020

Distributed Ledger Technology Preliminary Performance Assessment for Applications in Utilities Operational Technology

This paper provides descriptions of the key components of different distributed ledger technology platforms. Distributed ledger technology (DLT) allows for distribution of databases among different organizations and devices. The platforms use cryptographically linked “blocks” to store and verify transactional information between these organizations. DLT increases data security, data integrity, trust among its participants. Different organizations are looking to deploy this distributed and decentralized approach to avoid the single-point-of-failure vulnerabilities associated with centralized data repositories. In this study we examine twelve different DLT platforms. There is agreement within the community that of all the platforms considered here, Hyperledger and Ethereum are the most mature when it comes to privacy and permissions. These DLT platforms are being used for applications such as transactive energy, health care, and the food and goods supply chain. However, further development is required to realize the full promise of DLT. Our assessment includes a general description of each DLT and its key characteristics. Such characteristics include consensus protocol and cryptography used, public vs. private, and permissioned or permissionless. The selection and implementation of a DLT architecture depends heavily on the use case and performance requirements. During this research we found key parameters to measure performance and existing tools for assessment. Four different parameters were identified 1) consensus, 2) throughput, 3) latency, and 4) scalability. The architectures of Hyperledger Caliper and Blockbench are described as different performance assessment frameworks. From this preliminary study it is evident that there are dissimilarities on the performance assessments methods developers and users are characterizing DLT architectures. The purpose of this paper is to identify key parameters to test performance, tools that are being used and provide information on results from previous studies.

97 MATHEMATICS AND COMPUTING↗

DOE OSTI2023

Health Assessment and Performance Monitoring of Large Machine Diagnostics

Diagnostic machines are a crucial component of the Stockpile Stewardship Program for data collection, toward the ultimate goal of improving our understanding of nuclear physics. These systems consist of interactions between many complex components, and require regular maintenance for acceptable performance. The Cygnus X-ray diagnostic located at the Nevada National Security Site's U1a underground facility which provides radiographic data for subcritical experiments, is a prime example of these systems. Component degradation and failures within Cygnus can result in system downtime and data loss, affecting schedules and increasing experiment costs. To evade such failures, years worth of data on machine performance has been collected on the two Cygnus axes in the form of voltage and current measurements of Cygnus' various components. Using these as input, we have developed machine learning techniques for assessing the health of Cygnus, with the ultimate goal of predicting declining performance and machine failure.

97 MATHEMATICS AND COMPUTING↗

DOE OSTI2022

Health Assessment and Performance Monitoring of Large Machine Diagnostics

Presentation to be given at the CCS-6 Statistical Seminar Series. Regularly maintained and operated diagnostic machines are a backbone of data collection and are a vital component of the Stockpile Stewardship Program’s efforts to better understand nuclear physics. The Cygnus X-ray machine, stationed at the Nevada National Security Site’s U1a underground facility, is one such diagnostic that provides a radiographic capability for the subcritical experiment program. Component failures within Cygnus can result in catastrophic downtime for the diagnostic, affecting performance, schedules, and cost. However, over the years various measurements have been collected on the two Cygnus axes, including voltage and current measurements at different locations, which we believe have predictive power to indicate machine health. We will share preliminary insight into this data and the machine learning approaches we are taking to assess Cygnus’ health, observe declining performance, and predict failures.

97 MATHEMATICS AND COMPUTING↗

DOE OSTI2021

Assessment of the High Flux Isotope Reactor Cybersecurity Initiative

Recent cyber-attacks on industrial control systems, and inadvertent exposure of nuclear plant systems to cyber-exploits underscore the need for plant operators to adopt and deploy cyber-security defense solutions made for industrial control systems. Of increasing concern is the fact that international cyber hackers are beginning to target critical infrastructure, and because these more modern controls systems depend on advanced use of digital systems, they are more vulnerable than ever before to cyber-attacks. Traditional cyber defense strategies and products that have been available for decades are tailored for use on IT or corporate networks but can cause interruptions and catastrophic damage when deployed on industrial control system networks. The Department of Energy (DOE) Office of Nuclear Energy established the Gateway for Accelerated Innovation in Nuclear (GAIN) program to provide private companies pursuing innovative nuclear energy technologies with access to the technical support necessary to move toward commercialization. One of these GAIN small business vouchers was awarded to Dragos, Inc. to enable collaboration with Oak Ridge National Laboratory (ORNL) to evaluate the Dragos Platform on a production nuclear reactor test bed, hence laying the path for future commercial adoption. The vision was to provide a guide for industrial operators on implementing an industrial monitoring solution and to show how these solutions can be deployed without causing safety and reliability issues. This report documents the results of the collaboration between ORNL and Dragos, Inc.

21 SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLANTS↗

DOE OSTI2025

Evaluating Probability of Assessment for Central Alarm Station Operators

This project focused on developing and analyzing a method that could be employed by operational nuclear facilities to evaluate their CAS operators and determine a probability of assessment for each operator. This method is agnostic of alarm communication and display system (AC&D), sensors and cameras in place in the field, and any other technical security measures. This security-measure-agnostic method enables operational facilities to adopt it to determine the effectiveness of their alarm station operators.

42 ENGINEERING↗

DOE OSTI2026

Energy Systems Integration Facility Stewardship Summary: Fiscal Year 2025

A summary of NLR's stewardship of the nationally unique Energy Systems Integration Facility (ESIF) highlighting performance metrics, capability upgrades, and examples of R&D impact. 2025 brought a national focus on energy and ESIF is meeting the moment. All eyes are on data centers and domestic manufacturing and bringing the benefits of artificial intelligence to power system planning and operations. In step with national priorities, ESIF is building out capabilities that advance secure, reliable, and affordable power. ESIF hosted 190 multidisciplinary research projects, 855 high-performance computer users, and collaborated with 81 partners from industry, academia, research, and federal agencies. These research projects resulted in an AI method for detecting high-impedance faults with 90% accuracy, a grid controls demonstration in Connecticut, power quality validation of CorePower's flagship inductor, and a cybersecurity assessment of potential rogue capabilities in digitally connected energy devices. Facility infrastructure improvements enhanced the thermal research network, the SCADA system, the cyber range, power hardware-in-the-loop testing, and more. With support from the U.S Department of Energy (DOE), the ESIF laboratories continue to deliver leading solutions for secure, reliable, and affordable power.

24 POWER TRANSMISSION AND DISTRIBUTION↗

DOE OSTI2025

Dependable classical-quantum computing systems engineering

Increasing evidence suggests quantum computing (QC) complements traditional High-Performance Computing (HPC) by leveraging its unique capabilities, leading to the emergence of a new, hybrid paradigm, QHPC. However, this integration introduces new challenges, with dependability–defined by reproducibility, resiliency, and security and privacy–emerging as a central concern for building trustworthy systems that provide an advantage to the users. This paper proposes a framework for dependable QHPC system design, organized around these three pillars. We identify integration challenges, anticipate roadblocks, and highlight productive synergies across QC, HPC, cloud platforms, and network security. Drawing from both classical computing principles and quantum-specific insights, we present a roadmap for co-design that supports robust hybrid architectures. Our approach offers concrete metrics for assessing dependability, provides design guidance for engineers working at the QC-HPC interface, and surfaces new engineering questions around complexity, scale, and fault tolerance. Ultimately, designing for dependability is key to realizing practical, scalable QHPC systems and accelerating the broader quantum ecosystem capable of translating quantum promises into actual application delivery.

HPC↗

DOE OSTI2020

APPLICATION OF MATURITY MODELS FOR EVALUATING CYBERSECURITY PROGRAMS AT NUCLEAR AND RADIOLOGICAL FACILITIES

Maturity models can be used to provide government agencies, industry associations, and organizations operating nuclear facilities with the ability to quickly evaluate the maturity of their cybersecurity programs and identify areas to prioritize for improvement. The Cybersecurity Capability Maturity Model (C2M2) was developed by the U.S. Department of Energy to allow organizations in the energy sector to evaluate the programmatic capabilities of their cybersecurity programs in a consistent manner, communicate programmatic maturity information, prioritize cybersecurity investments in targeted areas of concern, and track how the maturity of their cybersecurity program evolves over time. The C2M2 is designed for use by any critical infrastructure organization regardless of ownership, structure, or size. The C2M2 can be easily fine-tuned to access the maturity of nuclear cybersecurity programs and their application at individual facilities. Built on a foundation of existing cybersecurity standards, frameworks, programs, and initiatives, the model features 10 security domains. Performance in each security domain is characterized using a structured set of cybersecurity practices that represent activities an organization can perform to improve cybersecurity in their domain. Each practice can be quickly evaluated as being either fully, largely, partially, or not implemented. Once practices are evaluated for each security domain, the model defines four maturity indicator levels that apply independently to each domain in the model. To earn a maturity level in a given domain, an organization must adequately perform all the practices for that maturity level and its predecessor level(s). A small assessment team can conduct a C2M2 assessment in a single day. A screening version of the C2M2 allows an initial look at the maturity of nuclear cybersecurity programs that could be completed in under an hour.

Cyber security, Nuclear security, maturity model↗

DOE OSTI2021