SEARCH · Engineering Papers
Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.
Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.
This research will provide information on the importance of collaboration between software development teams and cyber security teams. As Urban Air Mobility software services are developed, a collaborative approach between software development and software assurance teams will limit the exposed vulnerabilities and weaknesses.
Supply chain has brought up many challenges to the current aerospace industry (e.g. limited sources, lack of inventory, and cyber security). The purpose of this research is to develop a web-based modeling and simulation platform for supply chains relating to Advanced Air Mobility and vertical take-off and landing vehicles (VTOLs).
The illicit trafficking of strategic nuclear commodities (defined here as the goods needed for a covert nuclear program excluding special nuclear materials) poses a significant challenge to the international nuclear nonproliferation community. Export control regulations, both domestically and internationally, seek to inhibit the spread of strategic nuclear commodities by restricting their sale to parties that may use them for nefarious purposes. However, export controls alone are not sufficient for preventing the illicit transfer of strategic nuclear goods. There are two major pitfalls to relying solely on export control regulations for the deterrence of proliferation of strategic goods. First, export control enforcement today relies heavily on the honesty and willingness of participants to adhere to the legal framework already in place. Secondly, current practices focus on the evaluation of single records which allow for the necessary goods to be purchased separately and hidden within the thousands of legitimate commerce transactions that occur each day, disregarding strategic information regarding several purchases. Our research presents two preliminary data-centric approaches for investigating procurement networks of strategic nuclear commodities. Pacific Northwest National Laboratory (PNNL) has been putting significant effort into nonproliferation activities as an institution, both in terms of the classical nuclear material focused approach and in the examination of other strategic goods necessary to implement a nuclear program. In particular, the PNNL Signature Discovery Initiative (SDI) has codified several scientific methodologies for the detection, characterization, and prediction of signatures that are indicative of a phenomenon of interest. The methodologies and tools developed under SDI have already been applied successfully to problems in bio-forensics, cyber security and power grid balancing efforts and they have now made the nonproliferation of strategic goods into a challenge problem for testing their methodology and tools. As a first step towards the detection and characterization of illicit procurement networks, our research examines procurement networks as defined by a system of entities (people or companies) that enter into transactions of specific items with one another. Once we have defined such networks, we are interested in answering questions about the behavior and characterization of such networks. The questions we wish to answer regarding procurement networks are, first, “Can we detect networks within large, noisy datasets?” and second, “To what extent can we compare multiple networks and identify their similarities?” As procurement networks can be naturally viewed as a graph, we have employed several graph analytic tools to aid in these tasks. In particular, Graphscape, an SDI tool, uses a novel method to approximate edit distance, a graph distance measure based on the number of changes needed to transform one graph into another, in order to measure how similar two given graphs are to each other. Given a set of graphs where vertices represent companies and edges represent a shipment from company A to company B, we can calculate an all-for-all comparison of graphs. In this way, we are able to determine which graphs are most similar, and which require more changes to transform one into the other. The set of graphs to be compared can be further specialized to provide more insight, e.g., using different time periods to explore events in a company life cycle.
Rapidly discovering novel and sophisticated cyber attacks and providing situation aware-ness to analysts are unsolved problems in cyber security. We have developed a platform that scores events in real-time based on probabilistic models to define how typical an event is. This anomaly detection approach is based on unsupervised, probabilistic modeling of data at multiple scales. Scoring events based on multiple scales allows the system to 1) score anomalousness at different levels to detect important events that would otherwise be hidden, and 2) explain to users why an event is anomalous, not just that it is. The system was designed to address several challenges: 1) scaling to very high volume, heterogeneous, streaming data, and 2) minimizing the time from observation to discovery to understanding. The prototype has the real-time framework for pushing scored events to a web-based visualization.
There are over 3000 electricity providers in the United States, encompassing investor and publicly owned utilities as well as electric cooperatives. There has been ongoing trends to increasingly automate and provide remote control and monitoring of electric energy delivery systems. The deployment of computer network technologies has increased the efficiency and reliability of electric power infrastructure. However, the increased use of digital communications has also increased the vulnerability to malicious cyber attacks [1]. In 2004 the National Research Councils (National Academies) formed a committee of specialists to address these vulnerabilities and propose possible solutions with an objective to prioritize the R&D needs for developing countermeasures. The committee addressed many potential concerns in the electric power delivery system and classified them based upon different criteria and presented recommendations to minimize the gap between the academic research directions and the needs of the electric utility industry. The complexity and diversity of the electric power delivery system in the U.S. has opened many ports for attackers and intruders [1]. This complexity and diversity is attributed to the fact that power delivery system is a network of substations, transmission and distribution lines, sub-networks of controlling, sensing and monitoring units, and human operator involvement for running the system [1]. Accordingly, any incident such as the occurrence of a fault or disturbance in this complex network cannot be deferred and should be resolved within an order of milliseconds, otherwise there is risk of large-scale outages similar to the occurrences in India and the U.S. in 2003 [2]. There are three main vulnerabilities in supervisory control and data acquisition (SCADA) systems commonly identified—physical vulnerability, cyber vulnerability and personal vulnerability [1]. In terms of cyber threats, SCADA systems are the most critical elements in the electric power grid in the U.S. Unauthorized access to a SCADA system could enable/disable unexpected equipment (such as disable the protection system or a circuit breaker) which could cause large scale disruptions of electric power delivery. This paper provides an overview of power system SCADA technologies in transmission substations (Section 2) and summarizes the best practices for implementing a cyber security program. After introducing SCADA system operations in Section 2, a description of the security challenges for SCADA systems is presented in Section 3. In Section 4, NECRC Critical Infrastructure Protection standards CIP-002 through CIP-009 are summarized. An overview of industry best practices is presented in Section 5.
Considerable money and effort has been expended by generation, transmission, and distribution entities in North America to implement the North American Electric Reliability Corporation (NERC) Critical Infrastructure Protection (CIP) standards for the bulk electric system. Assumptions have been made that as a result of the implementation of the standards, the grid is more cyber secure than it was pre-NERC CIP, but are there data supporting these claims, or only speculation? Has the implementation of the standards had an effect on the grid? Furthermore, developing a research study to address these and other questions provided surprising results.
Modern cyber security operations collect an enormous amount of logging and alerting data. While analysts have the ability to query and compute simple statistics and plots from their data, current analytical tools are too simple to admit deep understanding. To detect advanced and novel attacks, analysts turn to manual investigations. While commonplace, current investigations are time-consuming, intuition-based, and proving insufficient. Our hypothesis is that arming the analyst with easy-to-use data science tools will increase their work efficiency, provide them with the ability to resolve hypotheses with scientific inquiry of their data, and support their decisions with evidence over intuition. To this end, we present our work to build IDEAS (Interactive Data Exploration and Analysis System). We present three real-world use-cases that drive the system design from the algorithmic capabilities to the user interface. Finally, a modular and scalable software architecture is discussed along with plans for our pilot deployment with a security operation command.
Graph analytics has emerged as an important tool in the analysis of large scale data from diverse application domains such as social networks, cyber security and bioinformatics. Counting the number of triangles in a graph is a fundamental kernel with several applications such as detecting the community structure of a graph or in identifying important vertices in a graph. The ubiquity of massive datasets is driving the need to scale graph analytics on parallel systems. However, numerous challenges exist in efficiently parallelizing graph algorithms, especially on distributed-memory systems. Irregular memory accesses and communication patterns, low computation to communication ratios, and the need for frequent synchronization are some of the leading challenges. In this paper, we present TriC, our distributed-memory implementation of triangle counting in graphs using the Message Passing Interface (MPI), as a submission to the 2020 GraphChallenge competition. Using a set of synthetic and real-world inputs from the challenge, we demonstrate a speedup of up to 90x relative to previous work on 32 processor-cores of a NERSC Cori node. We also provide details from distributed runs with up to8192 processes along with strong scaling results. The observations presented in this work provide an understanding of the system-level bottlenecks at scale that specifically impact sparse-irregular workloads and will therefore benefit other efforts to parallelize graph algorithms.
Software Defined Networking for Operational Technologies, referred to as OT-SDN, is a leading technology to secure critical infrastructure and command and control (C2) systems. As the name implies, OT-SDN networks are programmable, which allows system owners to utilize the characteristics of their physical process to inform the security of their network. There are best practices for deploying OT-SDN into an environment, whether it is all at once or over time (hybrid) that the network is converted to SDN technologies. Through the development of data mining tools and standardized process control, OT-SDN can be deployed reliably. These tools will minimize or eliminate any communication failures during the transition and provide the network owner with complete documentation of their environment. This documentation could enable or facilitate the network owner to pass any audits or policy checks (Authority to Operate) before being allowed to utilize the OT-SDN infrastructure.
Cybersecurity Certification Standard for Inverter Based Resources led by UL, and contributed to by NREL, is a certification standard for devices and their cyber security practices. The standard, which is being developed and led by UL, contains certification and testing processes for the devices to be certified before they are deployed in the field. The importance of the standard is to ensure that all DER devices have all the five pillars of cybersecurity, in which the baseline cybersecurity posture of the DER industry will be elevated.
The Hanford site, located in southeastern Washington, produced much of our nation's weapons-grade plutonium for the Defense nuclear weapons program. This production lasted the better part of four decades with production ending in 1987. Since 1987, the focus of the Hanford site has turned to clean-up activities. Mission Support Alliance (MSA) is the integrator of the multi-contractor effort to clean up the Hanford site. MSA collaborates with the U.S. Department of Energy (DOE) and all Hanford site contractors in finding and implementing new, cost-saving, safe and practical solutions to cleanup challenges with a continual focus on innovative processes and technologies that reduce costs, energy use and bring safety improvements to the site. Support Services include environmental integration and land management; fleet and road maintenance; water/electric and utilities; cyber security and information management as well as the preservation of the site's cultural artifacts. This paper describes the process, challenges, and focus on infrastructure upgrade and energy efficiency projects in the context of a multi-contractor nuclear clean-up site. Project development and new technology deployment at Hanford has long been plagued with economic challenges. For example, despite extensive auditing, analysis, and project development, most of the energy-related projects on the Hanford site have gone unfunded due to the low cost of electricity, the relatively high cost of labor, and costs associated with detailed safety and cultural reviews. - The Hanford site is a direct-service customer of the Bonneville Power Administration (BPA) and has a marginal electricity rate of $0.033/kWh. - Labor costs on the Hanford site track high because of the requirements associated with the safety and security necessary to operate a legacy nuclear weapons complex. - In partnership with three federally recognized and other affected Native American tribes (Yakama Nation, Confederated Tribes of the Umatilla Indian Reservation, the Nez Perce Tribe, and Wanapum People), most activities on the Hanford site are afforded in-depth cultural reviews. To work within these constraints, the MSA Energy Management team has embarked on a three-pronged approach to energy project development: Program Visibility: The MSA Energy Management team has promoted both project opportunities and requirements across the Hanford site. This information comes in the form of site-wide newsletters, group meetings, e-mails, success stories, and recognition of staff. Single-point Analysis: To by-pass the inevitable duplications of effort, learning curve issues, and to improve project consistency/delivery, the MSA Energy Management team serves as the single resource to the site for energy project analysis. This resource includes initial assessment, engineering analysis, efficiency calculation and project recommendations. Contractor/utility Interface: In addition to the infrastructure under its own purview, MSA provides all support services for the contractor/utility interface. These activities include formulation and submission of incentive-based efficiency projects, project tracking, and incentive awards. All incentive awards are forwarded to the relevant contractor and then highlighted in the visibility campaign. Successful energy efficiency projects at Hanford have included high efficiency heating, ventilation, air conditioning (HVAC) systems, interior and exterior lighting/lighting control systems, pump and motor systems, and the right-sizing of transformers and area-wide electrical distribution systems. Prior to the initiation of this program and structure (roughly 3 years ago) the average annual energy efficiency incentive applied for and received was under $10,000, with an annual energy savings of approximately 36,000 kilowatt hours (kWh). In fiscal year 2017, the annual incentive received was over $419,000, with identified energy savings of over 1.3 million kWh. Details and case studies of the major project accomplishments are included. The success of this program can be traced to an understanding of the constraints, the development of a program to address these constraints, and good communication/coordination across DOE and the multiple contractors serving the Hanford site. (authors)
Cybersecurity requirements and controls for digital I and C systems are increasingly added to well-established safety-oriented provisions. Interactions and potential side-effects are possible and must be mastered, taking into account the nuclear I and C system specificities as well as their normative and regulatory contexts. The new international standard IEC 62859 'Nuclear power plants - Instrumentation and control systems - Requirements for coordinating safety and cyber security' aims to optimize the integration of cybersecurity provisions in nuclear I and C architecture and systems, to prevent conflicts between safety and cybersecurity provisions, and to aid the identification and the leveraging of the potential synergies between safety and cybersecurity. The paper presents the structure and the key aspects of this standard. IEC 62859 is structured along three main sections: one dealing with the overall I and C architecture, a second one focusing on the system level, a third one dealing with organizational and procedural issues. The paper also discusses related work in the nuclear industry, and in other sectors. (authors)
A European BWR plant carried out a relevant and pioneering modernization project regarding the Feedwater and Feed Pump Turbine Control System, replacing the legacy analogic control with the new General Electric MarkVIe digital system. This digital instrumentation and control modernization, motivated by obsolescence, had a great impact on the main control room and on the plant operation. Tecnatom collaborated with the nuclear power plant in the project performing the following activities: early installation of the system in the full scope and classroom simulators, Human Factors Engineering (HFE) Verification and Validation (V and V), Simulation Assisted Engineering (SAE), design and implementation of cyber secure communication with the Plant Process Computer (PPC), operating procedures modification and plant operators training. Those activities contributed to the success of the project that was completed during the refueling outage as planned. Scheduling HFE verification before the design freeze allowed the plant to modify the Human Machine Interface (HMI) to comply with the standards and increase safety without overcharging the project. SAE resulted in the reduction of costs and time during the system commissioning through the detection of discrepancies and improvements in the control, covering different plant scenarios. All the activities carried out in the simulators before the implementation of the system in the plant contributed to validate it and to build confidence in the new control among the plant personnel. New digital system communication interfaces with the PPC saved cable laying works and allowed future expansions. (authors)
Transition from analog to digital instrumentation and control systems requires a systematic study of the modifications, and assessment of their reliability. Such studies are often carried out on a test bed. The test bed developed earlier includes a commercially available triple modular redundant (TMR) programmable logic controller (PLC) for testing not only the reliability of the digital I and C but also the cyber-security of the system during plant operation. This paper reports results of our preliminary analyses carried out using the test bed following the injection of faults mimicking faulty sensors. The fault injection tool generates faulty signals in single or multiple sensors located in the primary loop. These scenarios studied under steady-state operation conditions simulate a bad sensor, a cut wire, noise, etc. The faults injected can lead to information being displayed in the main control room (MCR) to not match the conditions in the plant. In addition to a fault injection module, a result analyzer module is also a part of this testbed. Operator actions can be based on information displayed in the MCR, or they can be informed by the result analyzer. Potential operator actions following these single- or multiple faulty signals are assessed. It is concluded that the result analyzer in some cases can be helpful in guiding operators to make the right decisions. (authors)
Full text of publication follows. Research and training reactors have served a valuable role in helping train workforce for currently operating fleet of light water reactors. These research and training reactors have been used in reactor laboratory classes to familiarize the students with such vital concepts as approach to criticality, reactor period, neutron moderation, reactivity, flux distribution and leakage, etc. As the industry moves toward advanced non-light-water reactor designs, it is critical that research and training reactors be developed and deployed at university campuses to help train the new generation of nuclear and non-nuclear engineers who are likely to design, build, and operate these advanced reactors. Among the designs currently being pursued for nuclear power generation include molten salt, sodium cooled, and gas cooled designs, with options for various fuel forms. Thus, industry and DOE in collaboration with academic institutions should devise plans on how to familiarize the next generation of nuclear workforce with hands-on experience necessary for such designs. These research and training reactors will play a vital role in familiarizing the future workforce with hands-on experience with concepts associated with fast spectrum reactors, gas cooled reactors, and other features not associated with light water reactors. In addition to classical nuclear engineering concepts, these advanced research and training reactors can also be used for hands-on training as well as for research on features being considered in the design of GEN-IV reactors: cyber security for digital control room operations, hybrid energy system, hydrogen generation, district heating, autonomous control... (author)
The present disclosure is related to a cyber-security system that includes a Supervisory Control and Data Acquisition (SCADA) network monitor configured to receive a data set from a power system network, an event manager, and a mitigation system, where the SCADA network monitor includes an anomaly detector.
In the past few decades, increasing complexity in modern engineering systems has been driven by the integration of a large number of components and by the fact that the system operations involve many disciplines (e.g., thermal-hydraulics, plant operations, cyber-security). Current safety/reliability modeling approaches to such systems are labor intensive, difficult to learn, and rely heavily on simplistic Boolean logic to depict failure propagation and accident progression. While these methods serve well for simple systems (i.e., linear causal systems with limited small inter- and intra-system interactions), their results are difficult to verify when modeling complex systems (typically performed through the extensive use of modeling assumptions). The development of new methods is addressed to meet these challenges through a model-based system engineering (MBSE) lens. Under MBSE philosophy, every aspect of the system (form or function) is represented by a model that completely characterizes its architecture or behavior. MBSE approach greatly improves the management of design, analysis and verification of complex systems. An integration of Dynamic Probabilistic Risk Assessment (DPRA) methods with MBSE models is proposed to perform safety/reliability analyses of engineering systems. In particular, MBSE representation of the system (performed using Systems Modeling Language [SysML]) is coupled with DPRA methods to automatically generate event trees and fault trees.
This paper presents research in collaboration with a few university partners related to cyber security within the electric vehicle charging infrastructure space.