Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “Secure by Design”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 505 records · Page 28

Cybersecurity Platform and Certification Framework Development for Extreme Fast Charging (XFC)-Integrated Charging Ecosystem (Final Project Report)

This report summarizes a pioneering effort in Electric Vehicle charging infrastructure ecosystem cybersecurity requirements, assessment methodologies, functional verification, as well as embodiment of the key technologies in the form of hardware and software tools being made available to the public. EPRI led a team of experts, as well as a stakeholder coalition encompassing all key actors in the EV charging infrastructure ecosystem that includes eXtreme Fast Charging (XFC) equipment (defined as 200kW or above). EV charging infrastructure in the United States is a patchwork of networks that have continued to grow organically and have been designed to serve the charging needs of the EV owners, who are their customers. In doing so, each network provider, as well as their connected entities such as the cloud Electric Vehicle Service Providers or EVSPs, utility back office, utility AMI networks, payment networks, as well as Original Equipment Manufacturer (EV manufacturer) telematics networks, have designed systems that may work well individually, but no single entity is responsible for the entire ecosystem to be secure in terms of data exchange. Furthermore, there is no uniformity in how each actor has implemented the cybersecurity requirements since no system-wide cybersecurity requirements existed prior to this project. The final project report describes the technical approach guided by the EV charging infrastructure cybersecurity working group, convened specifically for this project. The technical approach included definition of requirements at the ecosystem level, treated as a ‘system of systems’, and then passed down to individual systems (EVSE, EV, cloud EVSP, utility, and the payment networks), followed by developing the cybersecurity risk and vulnerability assessment methods, that were later applied to real-world cyber-physical systems at EPRI, ANL, and NREL laboratories, to validate both the process and the results. Finally, in a spotlight over the most vulnerable equipment, which is the EV charge station (AC or DC), the team developed a multi-layer cybersecurity implementation in the embedded domain embodied by the open-source Secure Network Interface Card (SNIC) demonstrating the various ways in which the infrastructure can be secured protecting against the identified attack surfaces. Finally, the entire process of EV infrastructure cybersecurity assessment was encapsulated in the Electric Vehicle Charging Cybersecurity Management (EVC2M) online GUI-based tool, that is expected to be released to the public. The report presents the objectives, the technical approach, the key results, and recommendations for future work.

24 POWER TRANSMISSION AND DISTRIBUTION↗

2011.5 Revision of the Evaluated Nuclear Data Library: ENDL2011.5 (legacy and GNDS), and ENDL2011.5-direct

LLNL’s Nuclear Data and Theory Group has created the 2011.5 revised release of the Evaluated Nuclear Data Library (ENDL2011.5). ENDL2011.5 is designed to support LLNL’s current and future nuclear data needs and will be employed in nuclear reactor, nuclear security and stockpile stewardship simulations with ASC codes. This database is currently the most complete nuclear database for Monte Carlo and deterministic transport of neutrons and charged particles. This library was assembled with strong support from the ASC PEM and Attribution programs, leveraged with support from Campaign 4 and the DOE/Office of Science’s US Nuclear Data Program. This document lists the revisions made in ENDL2011.5 compared with the data existing in the original ENDL2011.2 and ENDL2011.3 releases. These changes are made in parallel with some similar revisions for ENDL2009.5. We also describe ENDL2011.5-direct that directly uses ENDF sources wherever possible.

73 NUCLEAR PHYSICS AND RADIATION PHYSICS↗

Evaluated Nuclear Data Library, with ENDL2009.5-direct (2009.5 Rev.)

LLNL’s Nuclear Data and Theory Group have created a 2009.5 revised release of the Evaluated Nuclear Data Library (ENDL2009.5). This library is designed to support LLNL’s current and future nuclear data needs and will be employed in nuclear reactor, nuclear security and stockpile stewardship simulations with ASC codes. The ENDL2009 database was the most complete nuclear database for Monte Carlo and deterministic transport of neutrons and charged particles. It was assembled with strong support from the ASC PEM and Attribution programs, leveraged with support from Campaign 4 and the DOE/Office of Science’s US Nuclear Data Program. This document lists the revisions and fixes made in a new release called ENDL2009.5, by comparing with the existing data in the previous releases ENDL2009.3 and ENDL2009.4. In addition to the legacy library ENDL2009.5 from ENDL-format files generated by Fete, an ENDL2009.5-direct library is also released, in which ENDF6-formatted sources are used wherever possible to avoid possible translation errors from Fete.

73 NUCLEAR PHYSICS AND RADIATION PHYSICS↗

Container Factories in the Oak Ridge Research Cloud

This technical report describes an implementation of a devops container factory utilizing ORNL ResearchCloud (ORC) birthright resources. Any researcher or project can implement the strategy described here fortheir CI/CD needs. This is a technology demonstration of using rootless podman as a direct replacementfor docker in a GitLab CI/CD context to enhance security. It is also a stepping stone towardsimplementation of the containerized software factory described in the DoD Enterprise DevSecOpsReference Design.

97 MATHEMATICS AND COMPUTING↗

Policy Brief: California’s Cap-and-Trade Program and Future Direction

The Cap-and-Trade Program, a key part of California’s climate efforts, is a way to gradually increase what it costs an entity (usually a company) to release greenhouse gases into the air. The Program’s goal is to encourage a transition away from fossil fuels. By starting with a relatively low carbon price and steadily increasing it, the Program aims to secure the most cost-effective emission reductions first and gradually move to more expensive ones over time. This design supports economic progress while delivering emission cuts.

54 ENVIRONMENTAL SCIENCES↗

Advancing Conduction-Cooled 650 MHZ SRF Technology for Industrial Accelerators at Fermilab S IARC

The National Nuclear Security Administration (NNSA) funds the Illinois Accelerator Research Center (IARC) at Fermilab in developing a high-power, conduction-cooled Superconducting Radio Frequency (SRF) accelerator tailored for industrial applications requiring robust and efficient operation. A 650 MHz, 1.6 MeV, 20 kW SRF accelerator is currently under development, employing a conduction cooling approach to simplify cryogenic requirements and enhance accessibility for industrial use. The accelerator's control system is implemented on the Blinky Lite platform, selected for its open-source architecture, secure remote access capabilities, and operational flexibility attributes advantageous for industrial deployment and sustained operation. A dedicated beamline is designed to measure essential beam parameters and test the integrated performance of the accelerator and control systems, thereby validating their operational readiness for intended applications.

Ji, Yichen [Fermilab]↗

From Long-distance Entanglement to Building a Nationwide Quantum Internet: Report of the DOE Quantum Internet Blueprint Workshop

A Quantum Path Forward. Today, many scientific experts recognize that building and scaling quantum-protected and enhanced communication networks are among the most important technological frontiers of the 21st century. The international research community perceives the construction of a first prototype global quantum network-the Quantum Internet-to be within reach over the next decade. In February 2020, the U.S. Department of Energy (DOE)'s Office of Advanced Scientific Computing Research hosted the Quantum Internet Blueprint workshop to define a potential roadmap toward building the first nationwide quantum Internet. The workshop participants included representatives from DOE national laboratories, universities, industry, and other U.S. agencies with serious interests in quantum networking. The goal was to provide an outline of the essential research needed, detail any engineering and design barriers, and suggest a path forward to move from today's limited local network experiments to a viable, secure quantum Internet.

Peters, Nicholas↗

Simplifying the Advanced Test Reactor LOWE Element Test Series

The Advanced Test Reactor (ATR) is one of six remaining high performance research reactors in the United States scheduled to be converted from 93% high-enriched uranium (HEU) fuel to 19.75% low-enriched uranium (LEU) fuel as part of the Department of Energy (DOE), National Nuclear Security Administration (NNSA), Office of Material Management and Minimization (MMM) reactor conversion efforts(1). The specific LEU fuel element design for the ATR is called the Low Enriched (LOWE) element. A series of fuel qualification tests are scheduled to occur over the next decade before the ATR is fully converted. In addition to several experiments of demonstration plates, a series of Element Tests (ETs) are planned for conversion, in which full sized LOWE elements are placed in ATR driver positions. The purpose of these ETs was generally to sequentially increase the amount of LEU and core power to full power, therefore creating a representative safety profile in which LEU could operate for the duration of the ATR lifetime. The planned element tests were (2): ET-1: one LOWE element at low power for once cycle ET-2: ~8 LOWE elements at low/medium power for multiple cycles, and ET-3: >8 LOWE elements for a full lobe of elements at high power for multiple cycles. Given recent improvements in modeling fidelity, scheduling considerations, and an opportunity to combine later ETs, the LEU conversion program successfully defined the operational requirements for the “ET-ATR” test, which combines the needed information collected from ET-2 and ET-3 into a single test.

42 ENGINEERING↗

Blending Behavioral Science and Physics-Based Models Inform Equitable Decarbonization Pathways in the US Housing Stock: Preprint

A just energy transition is an imperative of the Biden-Harris Administration, emphasizing the equitable distribution of benefits through energy-efficient and decarbonizing household technologies. Understanding the factors that increase a household's willingness to adopt these technologies helps policymakers implement more targeted and effective approaches. Our research addresses this by blending 550,000 housing stock types and energy simulation data with a nationally representative survey on residential technology adoption and decision-making (n=10,000). We identify energy equity gaps across tenure and income, highlighting disparities in energy burdens and insecurity. Findings show that households with prior modification experience are more willing to renovate, suggesting that small-scale retrofit programs could foster greater willingness. Energy secure but burdened homeowners are least willing to modify, highlighting the need to consider energy bill perceptions in policy design. Nearly half of US households that are energy burdened also face energy insecurity, with a significant gap in assistance for low-income households. We emphasize the need to understand household perceptions to improve policy. This research underscores the importance of understanding household behaviors to improve policy effectiveness, offering actionable insights for policymakers to promote equitable housing upgrades and advance a decarbonized future.

behavioral science↗

Clean Energy for the Battery-to-EV Supply Chain: A Roadmap for Indonesia - Summary Brief

Indonesia has a unique opportunity to support the clean energy transition, enhance energy security, and spur economic growth with local battery manufacturing, bridging from the material supply all the way to pack designs and, ultimately, the manufacturing of electric cars. Following the elevation of United States and Indonesia relations to a Comprehensive Strategic Partnership, leaders of both countries highlighted the importance of Net Zero World support for Indonesia's energy transition, including collaboration on low-carbon battery supply chains. In support of this agreement, Net Zero World has partnered with Indonesia's Ministry of Energy and Mineral Resources and other Indonesian partners to chart actionable steps for establishing a clean, resilient battery supply chain and circular economy. This partnership aims to position Indonesia as a regional leader in clean energy and can help attract investment in the domestic battery and electric vehicle (EV) sectors.

batteries↗

Pilot-Scale Modular Research Facility for Acidic Water Pollution Cleanup and Domestic Production of Critical Minerals for National Security

A recent study by Penn State researchers revealed that Pennsylvania AMD streams originate from abandoned mines, with coal refuse piles of the lower Kittanning coal seam containing the most valuable heavy rare earth elements. Penn State has developed a three-stage process to recover these critical minerals, tested it for proof of concept, and secured a patent. Funded by the US DOE, a modular pilot-scale research and development unit has been designed and built to process 1,000 gallons per day of AMD from a site managed by the Pennsylvania Department of Environmental Protection (PA DEP). The system will selectively recover iron, aluminum, rare earth elements, and cobalt-nickel-manganese concentrates from AMD, followed by a proprietary downstream purification process. These operations aim to produce concentrates of critical minerals while treating acid mine drainage to meet environmental standards and evaluate different feedstocks. This presentation will describe the design, operation, and innovations of the proposed process and pilot facility, emphasizing its role in promoting sustainable recovery of critical minerals from legacy waste streams.

Pisupati, Sarma V [Center for Critical Minerals, T↗

Surface roughness and dimensional evaluation of laser powder bed fusion additively manufactured shell and tube heat exchangers

The growing interest in additively manufactured (AM) heat exchangers drove the need to understand how this construction technique impacts heat exchanger performance. Two primary factors driven by AM that influence heat exchanger performance are surface roughness and geometry. To better understand these parameters, a range of shell and tube heat exchangers constructed using laser powder bed fusion were evaluated. Of those evaluated, the surface roughness throughout a fourteen-tube, zero-baffle heat exchanger was measured using computed tomography. Between the inner and outer tubes, the inner tube surfaces had a greater surface roughness than the outer by 8.07 μm, while the surfaces at the top of the build volume had higher surface roughness values than the bottom. Dimensionally, the inner tube diameters of this heat exchanger were 0.15% different from the design value, while the outer diameters were within a 0.84 % difference. Manual measurements across seven other heat exchangers yielded a maximum 1.15% difference between the design and measured diameters. Across the build volume for all heat exchangers studied, the tube diameters at the top were larger than at the bottom by a maximum of 1.24% difference. Inconsistent melting throughout the individual parts and the build volume, as well as particle splatter and thermal gradient variation were attributed to the surface roughness and dimensional changes seen. These results strengthen the knowledge of dimensional and surface roughness considerations when designing AM heat exchangers.

36 MATERIALS SCIENCE↗

Optimization Algorithm for Criticality Experiment Design Using Whisper

Many criticality experiments performed to aid in nuclear data evaluation are designed to maximize the sensitivity of the system’s effective neutron multiplication factor to a certain nuclide reaction pair over an energy region of interest. This is typically done by evaluating possible designs in a transport code such as MCNP and selecting the one with the highest desired sensitivity. A designer has many tools to try to maximize this sensitivity such as different moderators, reflectors, fuels, and geometries. This balancing act of identifying a critical and maximally sensitive system become very computationally expensive as more variables are added and higher precisions are desired. In order to identify these optimal configurations more efficiently a Particle Swarm Optimization (PSO) algorithm coupled with MCNP has been developed by Los Alamos National Laboratory (LANL). This algorithm has been used to design two upcoming criticality experiments that will be performed at the National Criticality Experiments Research Center (NCERC), located at the Nevada National Security Site, and operated by LANL, the only general-purpose critical experiments laboratory in the United States. PSO uses a population (swarm) of candidate solutions (particles) on a search space of dimensions such as moderator and reflector thicknesses or enrichments and concentrations. These particles move around the search space from generation to generation according to simple rules. Eventually, the swarm converges on the configuration that is both critical and maximally sensitive to a piece of nuclear data. PSO is well suited for criticality experiments as the algorithm is agnostic to the underlying physics, meaning it is effective on many different experimental setups. This algorithm has been modified to maximize the nuclear data similarity coefficient between an application case and an experiment aimed at replicating the application case using WHISPER, a nuclear criticality safety analysis tool. This allows for the efficient design of critical experiments informed by nuclear data sensitives.

73 NUCLEAR PHYSICS AND RADIATION PHYSICS↗

An Advanced Cyber-Physical System Security Testbed for Substation Automation

A Cyber-Physical System (CPS) testbed serves as a powerful platform for testing and validating cyber intrusion detection and mitigation strategies in substations. This study presents the design and development of a CPS testbed that can effectively assess the real-time dynamics of a substation. Cyber attacks exploiting IEC 61850-based SV and GOOSE protocols are demonstrated using the testbed, along with an analysis on attack detection. Realistic timing measurements are obtained, and the time frames for deploying detection and mitigation strategies are evaluated.

24 POWER TRANSMISSION AND DISTRIBUTION↗

A Review of Visualization Methods for Cyber-Physical Security: Smart Grid Case Study

Cyber-Physical Systems (CPSs) are becoming increasingly complex and interconnected as they attempt to meet the demands of evolving society. As a result, monitoring and maintaining them becomes a more complex and demanding task for control system operators and cyber defenders. While the literature on visualization techniques in the context of cybersecurity is extensive, the same cannot be said for studies on visualization for the security of cyber-physical systems. This paper aims to fill that gap by: 1) defining the main features of a visualizations workflow for security visualizations in cyber-physical systems. The workflow includes the acquisition of cyber and physical data, processing of data, selection, and configuration of both visualization tools and end-user interactions. 2) Providing an overview of cyber-physical security visualization systems, with a focus on smart grids as a case study. Finally, we use the perspectives gained from this analysis to provide insights and directions for future research and design of cyber-physical visualization techniques.

24 POWER TRANSMISSION AND DISTRIBUTION↗

Method for Assessment of Security-Relevant Settings in Anomaly-Based Intrusion Detection for Industrial Control Systems

Ensuring the integrity of Ethernet-based networks is a challenging and constantly evolving domain. This problem is exacerbated for those operational technology (OT) networks supporting industrial control systems (ICS) since much of that equipment was originally designed to be on a network that was isolated and generally considered free of malefactors. Increasing pressure to bridge these systems with traditional information technology (IT) networks has introduced a bevy of new threats. In response, both academia and industry have responded with security solutions tailored to ICS environments. Deploying these protection systems often involves several configuration choices. While some of these choices are clear (e.g., block/enable protocol X) others are far more subjective (e.g. alert threshold == 3.43). Further complicating the situation, while often similar to IT networks, OT networks have unique challenges and characteristics that make the task of protecting them simultaneously more difficult and straight forward.Extant solutions for quantifying the relative security of intrusion detection systems fail to effectively support the operators of said systems with understanding the impact of various configuration changes. Further, they assume that the attacks are static and not subject to manipulation or alteration in the face of defenses. In this paper, we present a threat-based method for quantifying the relative impact of various security settings for intrusion detection systems (IDSs) within ICS environments. This method provides operational staff with a clear understanding of the relative impact of their settings and assumes that the attacks levied against them are dynamic. The model is described in detail, we apply the model to a synthetic data set, and discuss the inferences that can be made and what types of decisions they could be used to support.

Gillen, Rob↗

Secure boot, trusted boot and remote attestation for ARM TrustZone-based IoT Nodes

With the extensive application of IoT techniques, IoT devices have become ubiquitous in daily lives. Meanwhile, attacks against IoT devices have emerged to compromise IoT devices by tampering with system pre-installed programs or injecting new malware. To mitigate these attacks, integrity enforcement of IoT systems has been proposed. The integrity of an IoT device system includes load-time integrity and runtime integrity. In this paper, we design an IoT system based on ARM TrustZone to enforce the system integrity. First, we establish the root of trust and propose a hybrid booting approach consisting of both secure boot and trusted boot to enforce the system load-time integrity. Second, we investigate a paging-based process integrity measurement method to measure the NW processes and conduct remote attestation based on the measurement results ensuring the NW runtime process integrity. We implement an IoT prototype system on a NXP i.MX6Q SABRE SD development board to assess its feasibility. Finally, real-world experiment results demonstrate that our prototype introduces negligible performance overhead to the original system.

97 MATHEMATICS AND COMPUTING↗