Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “Control Systems Security”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 523 records · Page 29

IBR Digital Supply Chain Gap Analysis and Recommendations

The adoption of clean energy technologies, including solar photovoltaics, continues to introduce non-traditional stakeholders to the operations and planning of the electric system. Stakeholders such as manufacturers, vendors, owners, aggregators, and others are enabling the adoption, integration, and optimum operations of solar technologies at accelerated rates. Inverters form the foundation of many digitally controlled energy sources for clean energy technologies, including Solar, Battery Energy Storage Systems, Hybrid Systems, and Hydrogen Fuel Cells. Their supply chain is complex, a series of microchips, electronic switches and other components making up its primary functions. The complexity of this space and the growing digitization associated with these components can create supply chain cyber risks. One measure to mitigate cybersecurity attacks is proper digital supply chain security. The U.S. Department of Energy (DOE) Solar Energy Technologies Office (SETO), in partnership with the Cybersecurity, Energy, Security, and Emergency Response (CESER) office, is hosting a workshop to bring together solar vendors and services providers to discuss digital supply chain security for solar systems and challenges and opportunities in the transitioning to a fully domestic supply chain for solar energy in the U.S. This workshop will support the Securing Solar for the Grid (S2G) and Energy Cyber Sense program activities. During the workshop, industry experts and researchers from DOE National Laboratories will discuss the current solar supply chain landscape and the transition to domestic manufacturing of solar components in the U.S. Tools and techniques to better manage and secure the digital supply chain of solar devices and systems will be discussed.

cybersecurity↗

Results of an In-Field Validation Exercise in Support of Wide-Area Environmental Sampling

The National Nuclear Security Administration’s (NNSA) Office of Nonproliferation and Arms Control (NA-24) is evaluating Wide-Area Environmental Sampling (WAES) as an additional safeguards verification tool for the International Atomic Energy Agency to detect undeclared nuclear activities. The NNSA is evaluating strategies for conducting a generic WAES campaign, the cost of a WAES campaign, and the effect of technological advancements that have occurred since the last major WAES review in 1999. Until now, the NNSA effort has focused on tabletop exercises (TTXs) in which high-performance computing allows for advanced modeling and simulation efforts to be applied to the WAES question. Although the modeling and simulations used in the TTXs are extremely valuable, field campaigns are still needed to validate the assumptions that underpin the models and the modeling process itself. During a 7 week period beginning in May 2023 and ending in June 2023, which included 4 weeks of active field collections, a multilaboratory team conducted its first in-field validation exercise. Prior to the in-field exercise, abbreviated TTXs were conducted to estimate the performance of all collection systems to be used during the field test. These TTXs guided the selection of materials to be released and the placement of the collection system. Based on these determinations, materials were procured to use in the field test, and an injection/release system was designed, built, and installed at the test facility. Background samples were collected during weeks one and four, and environmental collections against active releases were conducted during weeks two and three. The goals of this validation exercise included a demonstration of (1) the ability to provide controlled releases of particulates of surrogate materials, (2) the fielding and operation of collection systems (including deposition and active air collectors), and (3) the flexibility to revise equipment and campaign plans in the field. This paper presents the results and preliminary conclusions for this initial validation test. Based on these results, subsequent field campaigns are anticipated and will include the addition of other released materials.

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗

Structural Health Monitoring: Using an Autoencoder to Identify Damage in a Bolted Joint [Capstone Project]

Los Alamos National Laboratory (LANL) is an important fixture in the United States Department of Energy’s (DOE) National Nuclear Security Agency (NNSA) complex. LANL is one of the largest national laboratories in the country, and the laboratory’s primary mission is to support the nation’s nuclear stockpile. The lab functions as a design agencies for the NNSA and performs extensive testing on weapons as part of that mission. The shock and vibration test team at LANL utilizes electrodynamic shaker systems for important qualification testing in support of the laboratory’s mission. Modern engineering relies heavily on bolted joints to connect two objects. During these shaker tests, engineers depend on bolted joints to secure the test article to a fixture and the fixture to the table. The test article may be hazardous and contain high explosives which could create a safety issue if a bolted joint failed. A loss of preload in a bolt will affect the way energy is input to the system and may introduce nonlinearities as the joint opens and closes. The loss of preload can create challenges controlling the test and make acquired signals useless. Being able to monitor preload within bolted joints during testing can improve the quality of the data and keep workers safe.

42 ENGINEERING↗

Artificial Diversity and Defense Security (ADDSec)

Artificial Diversity and Defense Security (ADDSec) machine learning algorithms are used to classify and cluster threats so that an appropriate response can be initiated as a mitigation strategy. The package includes an ensemble of machine learning algorithms such as Support Vector Machines, naïve bayes, logistic regression, and random forest that evolve with the data to recognize anomalous behavior at the host and network levels. Inputs into the machine learning algorithms include end host system calls, system utilization, packet captures, and syslog messages. The machine learning algorithms can be retrained based on user defined intervals or on the number of packets received. ADDSEC's threat responses include Internet Protocol (IP) Address randomization, application port number randomization, and application library randomization. The IP randomization implementation is built on top of a Software Defined Networking (SDN) framework. The SDN controller installs flows on each of the SDN switches with randomized source and destination IP addresses. The application port numbers are randomized using iptables. The application library randomization is created with a LLVM compiler. All randomization schemes are transparent to the endpoints on the network. Sandia National Laboratories is a multimission laboratory managed and operated by National Technology & Engineering Solutions of Sandia, LLC, a wholly owned subsidiary of Honeywell International Inc., for the U.S. Department of Energy’s National Nuclear Security Administration under contract DE-NA0003525. SAND2021-3379 O

Cox, RebeccaE.↗

Photonuclear Physics in SCALE

Radiation shielding modeling involves a wide range of applications, such as power reactors, critical experiments, portable sources, linear accelerators, and fusion systems. Particle energy ranges vary from thermal energies to fast energy spectra. MAVRIC, as the radiation shielding sequence of the SCALE code system [1] developed and maintained by Oak Ridge National Laboratory, is capable of modeling both neutron and photon interactions in matter and is widely used by the US Nuclear Regulatory Commission, Department of Energy, the National Nuclear Security Administration, and radiation shielding practitioners all around the world. Although most applications don’t involve highly energetic photons that can cause photonuclear reactions and create coupled chains of high energy, ionized electrons and bremsstrahlung radiation within a material medium, when present, these reactions can have a significant impact upon the downstream particle fluxes from incident photons above 20 MeV. For example, linear accelerators used for medical isotope production are examples of applications in which high-energetic photons are generated and used for driving or controlling other components of a complex facility. Radiation shielding analyses of such a facility would require accounting for any and all significant sources of radiation. Unfortunately, MAVRIC included no data and methods to model either photonuclear reactions or the bremsstrahlung photons until this work, which enabled accounting for both. Photonuclear reaction cross sections were imported from the Evaluated Nuclear Data File libraries, and corresponding methods were implemented in the SCALE code system; see Section 2 for how the nuclear data are imported and used. Bremsstrahlung photons were modeled by assuming thick-target approximation whereby all generated electrons and positrons due to photon interactions are assumed to be absorbed within the same material in which they were born, yielding a quick particle transport simulation method by using fast lookup tables for generating subsequent gammas; see Section 4 for details. A suite of verification models was used to test implemented methods and associated data. Tests yielded satisfactory results for the new features. Enhancements will be released as part of the next major SCALE release (v7.0), which is anticipated to be deployed in 2025, with beta releases available in the interim.

73 NUCLEAR PHYSICS AND RADIATION PHYSICS↗

Enabling Cybersecurity, Situational Awareness and Resilience in Distribution Grids with High Penetration of Photovoltaics (CARE-PV) (Final Report)

Since legacy distribution systems have very limited visibility beyond the substation, high penetration of PV at the grid edge presents some unique operational challenges. One approach to address these challenges is to use information from advanced metering infrastructure (AMI) and µPMUs. However, exploiting this information is impacted by a number of factors, including multi-timescale measurements, volume of data generated, communication network impairments (e.g., information loss and latency) and susceptibility to cyber-attacks. Therefore, one of the critical tasks involved in the management of a distribution grid is to develop complete situational awareness by integrating cyber-security mechanisms with state estimation strategies and leveraging this situational awareness to assure energy services at strategic locations while exploiting AMI/PV inverter/ µPMU data. This CARE-PV project addresses the fundamental challenges in situational awareness and resilience to cyber and physical vectors by exploiting the synergy between innovative modeling, estimation, data analytics, testing and validation using smart PV inverters designed at K-State and facilities at NREL. Specifically, the project involved the development, testing and validation of the following novel enabling technologies: (Thrust 1) Resilience to cyber vectors that impact data integrity was addressed via a two-level defense strategy that combines cyber intrusion detection using self-learning, cooperative smart PV inverters, and a novel moving target defense framework to combat data integrity attacks. (Thrust 2) Resilience to cyber-physical vectors that impact situational awareness by limiting data availability was addressed via novel centralized and decentralized, sparsity-based static and dynamic state estimation approaches that enhance observability even when the underlying system is unobservable. (Thrust 3) Leveraging a unique probabilistic sensitivity analysis approach accompanied by one-of-a-kind dominant influencer set computation, the vulnerability of critical infrastructure at strategic locations was evaluated so that proactive PV-based control strategies can be used to support operations under normal/outage scenarios. These CARE-PV project innovations were demonstrated on both small-scale IEEE and larger utility-scale testbeds (Thrust 4). Feedback from Industry Advisory Board members was used to formulate a commercialization pathway for a subset of CARE-PV technologies. These CARE-PV technologies will ultimately lead to reliable and secure, large-scale integration of renewable energy and mitigate the risk of energy disruption resulting from cyber incidents and other emerging threats within the energy environment.

14 SOLAR ENERGY↗

Heavy-Duty Mixed-Controlled Compression Ignition: Fuel Effects and Ducted Fuel Injection.

This project is focused on developing advanced combustion strategies for mixing-controlled compression ignition (MCCI, i.e., diesel-cycle) engines that are synergistic with renewable and/or unconventional fuels in a manner that enhances domestic energy security, economic competitiveness, and environmental quality. During this reporting period, the two focus areas were ducted fuel injection (DFI) and surrogate diesel fuels.

33 ADVANCED PROPULSION SYSTEMS↗

A comprehensive guide to CAN IDS data and introduction of the ROAD dataset

Although ubiquitous in modern vehicles, Controller Area Networks (CANs) lack basic security properties and are easily exploitable. A rapidly growing field of CAN security research has emerged that seeks to detect intrusions or anomalies on CANs. Producing vehicular CAN data with a variety of intrusions is a difficult task for most researchers as it requires expensive assets and deep expertise. To illuminate this task, we introduce the first comprehensive guide to the existing open CAN intrusion detection system (IDS) datasets. We categorize attacks on CANs including fabrication (adding frames, e.g., flooding or targeting and ID), suspension (removing an ID’s frames), and masquerade attacks (spoofed frames sent in lieu of suspended ones). We provide a quality analysis of each dataset; an enumeration of each datasets’ attacks, benefits, and drawbacks; categorization as real vs. simulated CAN data and real vs. simulated attacks; whether the data is raw CAN data or signal-translated; number of vehicles/CANs; quantity in terms of time; and finally a suggested use case of each dataset. State-of-the-art public CAN IDS datasets are limited to real fabrication (simple message injection) attacks and simulated attacks often in synthetic data, lacking fidelity. In general, the physical effects of attacks on the vehicle are not verified in the available datasets. Only one dataset provides signal-translated data but is missing a corresponding “raw” binary version. This issue pigeon-holes CAN IDS research into testing on limited and often inappropriate data (usually with attacks that are too easily detectable to truly test the method). The scarcity of appropriate data has stymied comparability and reproducibility of results for researchers. As our primary contribution, we present the Real ORNL Automotive Dynamometer (ROAD) CAN IDS dataset, consisting of over 3.5 hours of one vehicle’s CAN data. ROAD contains ambient data recorded during a diverse set of activities, and attacks of increasing stealth with multiple variants and instances of real (i.e. non-simulated) fuzzing, fabrication, unique advanced attacks, and simulated masquerade attacks. To facilitate a benchmark for CAN IDS methods that require signal-translated inputs, we also provide the signal time series format for many of the CAN captures. Our contributions aim to facilitate appropriate benchmarking and needed comparability in the CAN IDS research field.

97 MATHEMATICS AND COMPUTING↗

Digital Twins for Nuclear Power Plants and Facilities

The nuclear digital twin (DT) is the virtual representation of a nuclear energy system across its lifecycle. The nuclear DT uses real-time information and other data sources to improve the process of design, licensing, construction, security, O&M, decommissioning, and waste disposal. By leveraging the knowledge base and experience from the past 40 years of LWR operation, the nuclear DT is helping to accelerate the development and deployment of advanced nuclear technology in areas of passive safety, new fuel forms, instrumentation, and reactor control. For the currently operating nuclear fleet, DTs are reducing the operational risks, increasing plant availability, increasing energy capability, and reducing electricity production costs. For advanced fission and fusion reactors, DTs are being used to design for passive safety and built-in security-by-design. Rapidly deployable small modular reactor (SMR) and microreactor designs compatible with modular construction techniques and advanced manufacturing will be the new normal, reducing the need for large capital expenditures and compressing construction schedules. In addition, lower operational and maintenance costs will be realized by reducing the complexity of operations, staffing needs, and maintenance-related activities.

Kropaczek, Dave↗

Synchrophasors-based Master State Awareness Estimator for Cybersecurity in Power Grid: Testbed Implementation & Field Demonstration

The integration of distributed energy resources(DERs) and expansion of complex network in the distribution grid requires an advanced distributed state estimator to monitor the grid health at micro-level. The distribution state estimator will improve the situational awareness and resiliency of distributed power system. This paper proposes a synchrophasors-based master state awareness (MSA) estimator to enhance the cybersecurity in distribution grid by providing a real-time estimation of system operating states to control center operators. In this paper, the proposed MSA estimator utilizes only phasor measurements, bus magnitudes and angles, from phasor measurement units (PMUs),deployed in local substations, to estimate the system states and also detects data integrity attacks, such as load tripping attack that disconnects the load. To validate the proof of concept, we implement the proposed methodology in cyber-physical testbed environment at the Idaho National Laboratory (INL) Electric Grid Security Testbed. Further, to address the “valley of death” and support technology commercialization, field demonstration is also performed at the Critical Infrastructure Test Range Complex(CITRC) at the INL. Our experimental results reveal a promising performance in detecting load tripping attack and providing an accurate situational awareness through an alert visualization dashboard in real-time

42 ENGINEERING↗

System and method for roll-to-roll film tensioning for reduced separation force during bottom-up stereolithography

The present disclosure relates to a tensioning system for use in a stereolithography manufacturing application. The system may have a build plate for supporting a three dimensional part being formed using a photo responsive resin, a base plate and a release element extending over the base plate. The release element is configured to receive a quantity of photo responsive resin for forming a new material layer of the three dimensional part. A pair of tensioning components are secured to opposite ends of the release element, and apply a controlled tension force to the release element during peeling of the release element to reduce a separation force required to separate the release element from the new material layer after the new material layer is cured.

Duoss, Eric B.↗

Idaho National Laboratory’s Mobile Hot Cell Transportation: Engineering Solutions for Global Disused Sealed Radioactive Sources.

Title: Idaho National Laboratory’s Mobile Hot Cell Transportation: Engineering Solutions for Global Disused Sealed Radioactive Sources. Abstract: The Mobile Hot Cell (MHC), currently under development by Idaho National Laboratory (INL) for the Off-Site Source Recovery Project (OSRP), is designed to help international partners meet the unique challenges of end-of-life radioactive material management. The MHC will provide a critical resource for countries that require assistance securing and disposing of Disused Sealed Radioactive Sources (DSRS) and orphaned sources in challenging environments, allowing these sources to be secured against misuse and nefarious activities. The MHC is a rapidly deployable system for conditioning and preparing end-of-life radioactive sources for transportation or storage. It is designed to handle sources of up to 1,000 Ci Co-60 equivalent while maintaining full radiological and biological containment. It will be deployable within 48 hours of an alert, making it ideal for emergency situations. The MHC features an operational suite for control, support racks for electronics, pneumatics, and welding systems, and a modular robust steel structure providing radiological shielding and internal robotic support. This design allows configurations for multiple device types to be conditioned and the ability to safely manage routine issues such as leaking or damaged sources. The MHC has been designed with the transportation challenges of rapid deployment to difficult environments in mind. The system weighs approximately 150,000 pounds, with individual systems breaking down into pieces not exceeding 20,000 pounds. Components are to be transportable on standard 20ft ISO containers, with shielding shells on 20ft flat racks. It is estimated that a total of eight containers and flat racks will be required. The use of 20ft containers, as opposed to 40ft containers, minimizes the impact on less developed road infrastructures, enabling the MHC to be positioned in constrained environments such as hospital parking lots. The system’s modularity also allows for deployment using smaller equipment, such as a 10-ton boom truck or forklift, which is crucial given the potential logistical challenges in different countries. This transportation strategy, evaluated in collaboration with Utah State University, ensures the MHC can be deployed via ground, rail, sea, or air, addressing the primary concern of international transport logistics.

99 - GENERAL AND MISCELLANEOUS↗

E-Tunnel wastewater discharge permit quarterly monitoring report. Water pollution control permit Nev 96021, third quarter 2020

Monitoring and sampling activities are performed at the E-Tunnel Wastewater Disposal System (ETDS ) in accordance with the requirements of Water Pollution Control (WPC) Permit NEV 96021, Revision 1, which is effective October 1, 2013. Although the end date of the WPC permit is September 30, 2018, the Nevada Division of Environmental Protection (NDEP), in a letter dated September 21, 2018, provided guidance that indicated the WPC Permit NEV 96021, Revision 1, is in effect until NDEP notifies the U.S. Department of Energy, National Nuclear Security Administration Nevada Field Office otherwise. This QMR includes the results of monthly inspections and monitoring for July, August, and September 2020. Monthly inspections and monitoring were conducted on July 21, August 19, and September 16, 2020. Inspections include a visual assessment of the berms, ponding, water levels relative to the overflow pipes, tunneling or burrowing into the berms, soil conditions on and around the berms, erosion or sloughing of the slopes of the berms, seeps at the toe of the berms, deep-rooting botanicals on the berms, and fencing. Monthly monitoring includes measurement s of the instantaneous flow rate, hydrogen ion activity (pH), and specific conductance of the ETDS discharge. The report will be submitted to the State of Nevada.

54 ENVIRONMENTAL SCIENCES↗

E-Tunnel Wastewater Discharge Permit Quarterly Monitoring Report

Monitoring and sampling activities are performed at the E-Tunnel Wastewater Disposal System (ETDS) in accordance with the requirements of Water Pollution Control (WPC) Permit NEV 96021, Revision 1, which is effective October 1, 2013. Although the end date of the WPC permit is September 21, 2018, provided Nevada Division of Environmental Protection (NDEP), in a letter date September 21, 2018, provided guidance that indicated the WPC Permit NEV 96021, Revision 1, is in effect until NDEP notifies the U.S. Department of Energy, National Nuclear Security Administration Nevada Field Office otherwise. This QMR includes the results of monthly inspections and monitoring for April, May, and June 2020. Monthly inspections and monitoring were conducted on April 21, May 28, and June 24 2020. Inspections include a visual assessment of the berms, ponding, water levels relative to the overflow pipes, tunneling or burrowing into the berms, seeps at the toe of the berms, deep-rooting botanicals on the berms, and fencing. Monthly monitoring includes measurements of the instantaneous flow rate, hydrogen ion activity (pH), and specific conductance of the ETDS discharge.

99 GENERAL AND MISCELLANEOUS↗

Supporting Cyber Security of Power Distribution Systems by Detecting Differences Between Real-time Micro-Synchrophasor Measurements and Cyber-Reported SCADA (Final Report)

As modern power grids tend towards greater levels of automation and communication, the challenges of identifying and mitigating vulnerabilities to cyber-attacks are ones that are increasingly demanding attention. Today’s power system has evolved to form the foundational bedrock of modern society, and an attack on this infrastructure could prove disastrous. In this project we were tasked to investigate the use of distribution synchrophasors as an independent isolated sensor network with which we can corroborate, or flag potentially spoofed,Supervisory Control And Data Acquisition (SCADA) data. We adapted an approach to marry the underlying physical properties of power systems with the network communications used by power systems in order to offer insights unattainable by either data stream isolation. While the concept of intrusion detection systems (IDS) is well understood for monitoring network traffic and traditional IT computing systems, the approach discussed in this report is motivated by several key notions: first, current SCADA communications alone presents an incomplete view of the grid. Second, the power grid, and the equipment controlling it, is grounded by laws of physics. Given this, we leverage high-frequency physical grid measurements to understand the physical condition of the grid, and combine this with SCADA. While high-frequency physical grid measurements and SCADA communication over Internet Protocol (IP) networks are fundamentally disparate information sources, when collectively examined through appropriate lenses, they offer a much more nuanced depiction of the grid.

24 POWER TRANSMISSION AND DISTRIBUTION↗

OT Emulation Data Broker

The OT Emulation Data Broker system allows Simulink models to be connected to an emulated control system network. The package includes a Simulink S-Function that allows communication to the data broker via inter process communication; a data broker, which orchestrates communication between the emulated control system network and the simulation; an endpoint, which facilitates communication between the data broker and PLC's on the control network using ModBus/TCP; and an example PLC structured text files that work with OpenPLC, an open source emulated PLC. Sandia National Laboratories is a multimission laboratory managed and operated by National Technology & Engineering Solutions of Sandia, LLC, a wholly owned subsidiary of Honeywell International Inc., for the U.S. Department of Energy’s National Nuclear Security Administration under contract DE-NA0003525. SAND2021-11479 O

Hahn, Andrew↗

OT Emulation Data Broker v.2.0

SAND2021-11479 O The OT Emulation Data Broker system allows Simulink models to be connected to an emulated control system network. The package includes a Simulink S-Function that allows communication to the data broker via inter process communication; a data broker, which orchestrates communication between the emulated control system network and the simulation; an endpoint, which facilitates communication between the data broker and PLC's on the control network using ModBus/TCP; and an example PLC structured text files that work with OpenPLC, an open source emulated PLC. Sandia National Laboratories is a multimission laboratory managed and operated by National Technology & Engineering Solutions of Sandia, LLC, a wholly owned subsidiary of Honeywell International Inc., for the U.S. Department of Energy’s National Nuclear Security Administration under contract DE-NA0003525.

Hahn, Andrew↗