Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “IT security”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 469 records · Page 26

Nevada National Security Site Environmental Report 2023, with Attachment A Site Description and Summary Report

This Nevada National Security Site Environmental Report (NNSSER) summarizes actions taken in 2023 to protect the environment and the public while achieving the NNSA/NFO mission goals. It is prepared for the public and our stakeholders in hopes that it is readily understandable and usable. It is a key component in our efforts to keep the public informed of environmental conditions at the NNSS and its support facilities in Las Vegas, Nevada. The accompanying Attachment A expands on the general description of the Nevada National Security Site (NNSS) presented in the Introduction to the Nevada National Security Site Environmental Report 2023. Included are subsections that summarize the site’s geological, hydrological, climatological, and ecological settings and the cultural resources of the NNSS. The supplemental Summary report provides an abbreviated version of the full report.

54 ENVIRONMENTAL SCIENCES↗

Nevada National Security Site Environmental Report 2023; Attachment A Site Description

This Nevada National Security Site Environmental Report (NNSSER) summarizes actions taken in 2023 to protect the environment and the public while achieving the NNSA/NFO mission goals. It is prepared for the public and our stakeholders in hopes that it is readily understandable and usable. It is a key component in our efforts to keep the public informed of environmental conditions at the NNSS and its support facilities in Las Vegas, Nevada. The accompanying Attachment A expands on the general description of the Nevada National Security Site (NNSS) presented in the Introduction to the Nevada National Security Site Environmental Report 2023. Included are subsections that summarize the site’s geological, hydrological, climatological, and ecological settings and the cultural resources of the NNSS. The supplemental Summary report provides an abbreviated version of the full report.

54 ENVIRONMENTAL SCIENCES↗

Nevada National Security Site Environmental Report 2023: Summary Report

This Nevada National Security Site Environmental Report (NNSSER) summarizes actions taken in 2023 to protect the environment and the public while achieving the NNSA/NFO mission goals. It is prepared for the public and our stakeholders in hopes that it is readily understandable and usable. It is a key component in our efforts to keep the public informed of environmental conditions at the NNSS and its support facilities in Las Vegas, Nevada. The accompanying Attachment A expands on the general description of the Nevada National Security Site (NNSS) presented in the Introduction to the Nevada National Security Site Environmental Report 2023. Included are subsections that summarize the site’s geological, hydrological, climatological, and ecological settings and the cultural resources of the NNSS. The supplemental Summary report provides an abbreviated version of the full report.

54 ENVIRONMENTAL SCIENCES↗

Privacy by Design in Distributed Edge Systems: Innovating Secure Workflows for Smart Cities

The proliferation of distributed edge systems, such as those in smart cities, healthcare, and industrial IoT, offers unprecedented opportunities for data processing closer to its source, thereby reducing latency and enhancing efficiency. However, these systems also present significant privacy challenges due to the handling of sensitive data from multiple sources. This article explores the critical need for designing privacy-preserving workflows in distributed edge systems to ensure data security while maximizing the potential of edge computing. By examining the challenges, technological advancements, and potential of privacy-by-design approaches, we highlight the importance of integrating advanced privacy-preserving techniques like federated learning, differential privacy, homomorphic encryption, secure multi-party computation, and zero-knowledge proofs. These innovations are crucial for enhancing data security, regulatory compliance, and public trust in smart city applications, ultimately leading to safer and more efficient urban environments.

Kotevska, Olivera↗

DEVELOPMENT OF AN INTEGRATED SECURITY AND SAFETY MONITORING SYSTEM FOR SPENT NUCLEAR FUEL AND HIGH-LEVEL WASTE TRANSPORTATION

This paper provides an overview of the progress to date, and discussion of the path forward, related to designing, fabricating, and testing an integrated security and safety monitoring system (ISSMS) for railcars used to transport spent nuclear fuel (SNF) and high-level radioactive waste (HLW) in the United States. The system will comply with the US Department of Energy’s (DOE) Order 460.2B “Departmental Materials Transportation Management” and the Association of American Railroads’ (AAR) standard S-2043 “Performance Specification for Trains Used to Carry High-level Radioactive Material” [1] developed specifically for railcars used to transport high-level radioactive material (HLRM). DOE is in the process of developing and testing an ISSMS that will satisfy both DOE requirements and AAR standards. DOE has already developed railcar designs for transportation of HLRM. In 2024, DOE’s Atlas railcar project completed the design, fabrication and testing of three railcar types: transportation cask-carrying, buffer, and security escort, resulting in AAR conditional approval to operate on freight rail networks in North America. DOE decided to combine the required security and safety systems into one system, and this combined system is the subject of the current effort. DOE is developing and proposes to implement the ISSMS for these railcars as part of the build out of the railcar fleet. DOE began planning for development of the ISSMS in February 2020. The project is divided into seven phases starting with conceptual design and continuing through production design, as shown in Figure 1. An earlier version of the system was tested as part of the Atlas railcar consist demonstration test run in 2023. This paper describes the design features and system testing using the Atlas project railcars, and laboratory testing completed to date. The paper will also describe the activities planned to support the DOE project to ship the High Burn-Up Research Cask (HBRC) in 2027.

Schultze, Michael [ORNL] (ORCID:0000000283205671)↗

Cyber Security Analysis for Nuclear Reactor Control Systems (Final Technical Report)

This project investigated the cyber-security impacts of moving from an all analog, point-to-point, instrumentation and control (I&C) system to a digital I&C system based on Modbus and a shared communication medium. A formalism called a hybrid attack graph was expanded to support the nuclear research reactor system. The hybrid attack graph allows one to check a system for vulnerabilities, in this case cyber-security vulnerabilities, and to document the attack vectors (scenarios) causing those vulnerabilities. In parallel, a simulation of the system was developed to model both the physical reactor parameters and operations, as well as the network interconnects and communications. This simulation platform was modeled on the nuclear research reactor located at Washington State University. The simulation platform provided a sandbox to evaluate and quantify the impact of identified and proposed vulnerabilities in the system and to determine the effectiveness of countermeasures at stopping these attacks. The simulation and hybrid attack graph tools were integrated to provide a streamlined process of generating attack scenarios, playing those scenarios out in the simulation, and then analyzing the results to correlate system state to states in the hybrid attack graph. This process was used to (1) quantify the impact of attack scenarios and (2) to determine if the system moved through the hybrid attack graph as anticipated. The hybrid attack graph tool was extended and customized to produce a tool to automatically identify critical assets (CAs) and critical digital assets (CDAs) as defined by NRC Regulatory Guide 5.71. This tool was verified using the nuclear research reactor at Washington State University. Finally, a series of educational modules covering the findings of the different aspects of this research have been created.

97 MATHEMATICS AND COMPUTING↗

Xenith Scalable Security Economics

These slides present a high level overview of an ongoing project sponsored by NNSA. The project is focused on economic analysis of physical security design of micro reactors. The slides will be presented to NNSA's office of International Nuclear Security (INS) at a program update meeting on May 28th, 2025.

98 - NUCLEAR DISARMAMENT, SAFEGUARDS, AND PHYSICAL↗

Using advanced data structures to enable responsive security monitoring

Write-optimized data structures (WODS), offer the potential to keep up with cyberstream event rates and give sub-second query response for key items like IP addresses. These data structures organize logs as the events are observed. To work in a real-world environment and not fill up the disk, WODS must efficiently expire older events. As the basis for our research into organizing security monitoring data, we implemented a tool, called Diventi, to index IP addresses in connection logs using RocksDB (a write-optimized LSM tree). In this work, we extended Diventi to automatically expire data as part of the data structures’ normal operations. We guarantee that Diventi always tracks the N most recent events and tracks no more than N + k events for a parameter k < N, while ensuring the index is opportunistically pruned. To test Diventi at scale in a controlled environment, we used anonymized traces of IP communications collected at SuperComputing 2019. We synthetically extended the 2.4 billion connection events to 100 billion events. We tested Diventi vs. Elasticsearch, a common log indexing tool. In our test environment, Elasticsearch saw an ingestion rate of at best 37,000 events/s while Diventi sustained ingestion rates greater than 171,000 events/s. Our query response times were as much as 100 times faster, typically answering queries in under 80 ms. Furthermore, we saw no noticeable degradation in Diventi from expiration. We have deployed Diventi for many months where it has performed well and supported new security analysis capabilities.

97 MATHEMATICS AND COMPUTING↗

Certification and prediction of post-disturbance states in dynamic security assessment

Dynamic security assessment usually involves the simulation of system dynamics under large disturbances. The instant large disturbance occurs, the post-disturbance state of the system could deviate significantly from the pre-disturbance one. It is desirable and necessary to develop an efficient method to certify the existence of state and predict the approximate post-disturbance state because: (1) faster warning can be made in online assessment; and (2) the dynamic simulator can be given better initial values to calculate precise solutions, which prevents convergence failure brought on by poor initial values. We propose a novel approach for efficiently certifying and predicting the post-disturbance states in dynamic security assessment. Based on the fixed-point power flow mapping approach applied to salient pole generator models, the criterion for determining the existence and uniqueness of the post-disturbance solution is derived, and the bounds of post-disturbance solution can be rigorously characterized.

24 POWER TRANSMISSION AND DISTRIBUTION↗

Radiative lifetime-encoded unicolour security tags using perovskite nanocrystals

Traditional fluorescence-based tags, used for anticounterfeiting, rely on primitive pattern matching and visual identification; additional covert security features such as fluorescent lifetime or pattern masking are advantageous if fraud is to be deterred. Herein, we present an electrohydrodynamically printed unicolour multi-fluorescent-lifetime security tag system composed of lifetime-tunable lead-halide perovskite nanocrystals that can be deciphered with both existing time-correlated single-photon counting fluorescence-lifetime imaging microscopy and a novel time-of-flight prototype. We find that unicolour or matching emission wavelength materials can be prepared through cation-engineering with the partial substitution of formamidinium for ethylenediammonium to generate “hollow” formamidinium lead bromide perovskite nanocrystals; these materials can be successfully printed into fluorescence-lifetime-encoded-quick-read tags that are protected from conventional readers. Furthermore, we also demonstrate that a portable, cost-effective time-of-flight fluorescence-lifetime imaging prototype can also decipher these codes. A single comprehensive approach combining these innovations may be eventually deployed to protect both producers and consumers.

37 INORGANIC, ORGANIC, PHYSICAL, AND ANALYTICAL CH↗

Hardware-in-the-Loop Testbed for Cyber-Physical Security of Photovoltaic Farms

In the last decades, modem grids with distributed energy resources, such as photovoltaic (PV) farms, are increasingly vulnerable to cyber-attacks that seriously affect the stability and performance of the power system. While cyber-physical security of smart grids is extensively studied, most of the existing work focuses on the grid level and neglects the modeling and features of device-level power electronics converters (PECs). Furthermore, establishing a high-fidelity simulation testbed that can simulate harmonic frequencies of the PV farm is in urgent need. In this paper, a high-fidelity and real-time hardware-in- the-loop testbed is built to simulate the harmonics of power electronics converters for cyber-physical security of PEC-enabled PV farms. Based on this testbed, the impact of typical cyber-attacks and physical faults on the PV converter can be analyzed, thus providing a foundation for cyber-attack detection, root cause diagnosis, and resilient control to mitigate the adverse effects of cyber-attacks.

14 SOLAR ENERGY↗

Probabilistic Sizing of Energy Storage Systems for Reliability and Frequency Security in Wind-Rich Power Grids

The penetration of wind energy has increased significantly in the power grid in recent times. Although wind is abundant, environment-friendly, and cheap, it is variable in nature and does not contribute to system inertia as much as conventional synchronous generators. Coupled with the low inertia contribution, the generation intermittency of wind power leads to reliability and stability issues in the power system. Energy storage systems (ESSs) are among the most prominent alternatives to alleviate these concerns associated with high wind penetration. This paper proposes a planning strategy to size ESS for the reliability and frequency security of wind-rich power grids. A probabilistic methodology for ESS sizing is developed utilizing a composite reliability-based framework with sequential Monte Carlo simulation (MCS). The MCS generates composite reliability indices for the power system, which are employed to obtain the capacity for a reliability energy storage system (RESS). Simultaneously, the MCS-derived probability of synchronization of conventional generators is integrated into an analytical approach for sizing a frequency support energy storage system (FESS). The effect of wind farm dispersion across geographical regions is incorporated in the framework to study possible reductions in the ESS size while maintaining the system reliability and frequency security. Furthermore, the efficacy of the proposed strategy is demonstrated on the RTS-GMLC test system.

25 ENERGY STORAGE↗

Secure mmWave Spectrum Sharing with Autonomous Beam Scheduling for 5G and Beyond

Spectrum Sharing (SS) has seen a renewed set of initiatives in 5G with the availability of shared and unlicensed spectrum bands that can be used by multiple cellular service providers and private cellular networks. Beam based transmission, instead of the traditional sector based transmission in conjunction with the spectrum agility of the 5G New Radio (NR) has brought new opportunities to optimized sharing of spectrum. Currently in the U.S., a centralized Spectrum Access Server (SAS) is used to co-ordinate spectrum sharing among networks sharing the same spectrum band. However, SAS becomes a focal point for security attacks and a performance bottleneck. In addition, SAS relies on an Environmental Sensor Network (ESN), separate from the 5G network. Without trusted spectral occupancy information, false reporting of spectrum sensing data can create sub-optimal and unfair spectrum usage. This paper summarizes our recent research findings in using a decentralized scheme for multiple networks to securely share spectrum with autonomous beam scheduling : 1) A new stochastic network framework based on Lyapunov Optimization approach is developed to optimize scheduling at the base stations; 2) Game theoretic (GT) approach is used to formulate the distributed scheduler; 3) Another distributed scheduler with Q-learning is presented that utilizes the Reinforcement Learning (RL) approach; 4) The performance and convergence rate of these distributed solutions to use shared and unlicensed spectrum are compared with existing solutions. Conditions under which the performance of these schedulers approach the theoretical upper bound, which is the performance possible with no interference among the operators sharing the spectrum, are presented; 5) The ability of a base station to use its own user equipment as sensors, for optimal spectrum sharing with base stations in other operator networks, is demonstrated to be an effective approach.

5G↗

Secure biosystems design in Saccharomyces cerevisiae establishes effective biocontainment strategies and mechanisms of escape

The widespread application of recombinant DNA and synthetic biology approaches for microbial metabolic engineering pursuits has motivated the development of biocontainment strategies, targeting safe and secure deployment of genetically modified microorganisms (GMMs). However, the design rules and mechanistic drivers governing biocontainment efficacy, as well as impacts of biocontainment upon microbial fitness, remain to be comprehensively evaluated, hindering predictive design and application of these strategies. We have developed a platform for high-resolution analysis of a transactivated kill switch in laboratory and industrial strains of Saccharomyces cerevisiae to assess modes of biocontainment escape and establish design rules for development of kill switch systems in diverse microbes. A camphor-regulated, RelE toxin system was systematically deployed to assess the impacts of differential kill switch copy number and ploidy in laboratory vs industrial strains. CRISPR-mediated integration of the biocontainment system at various loci revealed rapid escape events driven, in part, by mutations to both the Cam-transactivator (cam-TA) and RelE toxin. Genetic engineering enabled recapitulation of escape phenotypes, confirming mechanisms of escape and establishing structure-function relationships in the cam-TA system. Interestingly, genomic resequencing of escape mutants also revealed a series of off-target mutations, implicating additional modes of kill switch escape. Multi-copy integration of the kill switch system mitigated these effects by orders of magnitude, without compromising the biosynthetic capacity of the microbes, but proved insufficient to establish sustained biocontainment. The resultant data define a series of key design rules for next-generation biocontainment strategies and add to a growing foundational knowledge base targeting establishment of secure biosystems designs.

59 BASIC BIOLOGICAL SCIENCES↗

IRAD-MPE Radiological and Nuclear Security Threats (Day 1) [Slides]

This module is designed to enhance awareness regarding radiological and nuclear security threats and the types of radioactive materials that can be used for criminal purposes or terrorist acts. The goals are to: (1) Review the Threat Assessment Process for MPEs, (2) Recognize Potential Radiological and Nuclear Security Threats, (3) Understand the basics of Radiological Dispersal Devices (RDD) and Radiological Exposure Devices (RED), (4) Learn about Medical, Commercial, and Naturally Occurring Radioactive Materials (NORM) sources, and (5) Understand the term Material Out of Regulatory Control (MORC).

61 RADIATION PROTECTION AND DOSIMETRY↗

Campaign Guidelines: Security Starts With You [Slides]

The Security Starts With You Campaign Guidelines have been prepared by the CEA-CAS Visual Design team for use primarily by DSOs, FODs, and/or any LANL employee who wishes to extend the messaging to new and existing buildings. By adhering to this guidance, you will be a responsible steward of the “One Lab, one voice” mentality and successfully implement the Lab’s brand and security messaging on all of your communications.

96 KNOWLEDGE MANAGEMENT AND PRESERVATION↗

Historic Context, Character-Defining Elements, And Photographic Record For A 26.45-Mile Segment Of The 138-Kilovolt Power Transmission System, Areas 3, 5, 6, And 23, Nevada National Security Site, Nye County, Nevada

The subject of this report is the 138-kilovolt (kV) power transmission line on the Nevada National Security Site (NNSS) (see Figure 1). The NNSS, formerly the Nevada Test Site (NTS), was the main continental nuclear test site for the United States between 1951 and 1992. Known as the battleground of the Cold War, the NNSS hosted a total of 928 nuclear tests during that period. It also served as the location of numerous scientific advancements in the fields of rocketry, big-hole drilling, nuclear waste management, and defense. From its construction in the 1960s through the present day, the 138 kV line has provided electrical power to the numerous buildings, facilities, experiments, and tests on the NNSS. The Department of Energy (DOE), in consultation with the Nevada State Historic Preservation Officer (SHPO), has determined that it may contribute to the character and significance of the Mercury Historic District (MHD) on the NNSS, as well as other historic districts that have not been recorded or evaluated yet. The purpose of this report is to fulfill two of the stipulations in the Memorandum of Agreement DEGM58-22NA25553 between the U.S. Department of Energy and the Nevada State Historic Preservation Officer Regarding Installation of a 138-kilovolt Transmission Line from the Mercury Switching Station to the U1a Facility and the Removal of the Historic 138-kilovolt Transmission Line from the Mercury Switching Station to the U1a Facility in Areas 1, 3, 5, 6, and 23 of the Nevada National Security Site (MOA). The MOA was executed as part of the DOE’s obligations under Section 106 of the National Historic Preservation Act (NHPA) to mitigate the adverse effects of two undertakings on historic properties. In particular, this report fulfills MOA Stipulations III.C.1-3, which state that the Department of Energy (DOE) will prepare the following: A historic context for the 138 kV transmission line and identification of the line’s characterdefining elements; High-quality digital images of the 26.45-mile segment of the 138 kV transmission line that is subject to the two undertakings for which the MOA was executed; and Photograph catalogs and map keys showing photograph viewpoints and directions.

54 ENVIRONMENTAL SCIENCES↗