Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “Security monitoring”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 523 records · Page 29
All sourcesNASA NTRSDOE OSTI
DOE OSTI2022

Development of a Cloud-based Application to Enable a Scalable Risk-informed Predictive Maintenance Strategy at Nuclear Power Plants

Light-water reactor operations and maintenance (O&M) costs are prohibitively high, thus contributing to the premature decommissioning of nuclear power plants (NPPs). This is partly due to how the equipment is monitored. In recent years, cloud computing has emerged as a dominant technology by virtue of its low costs, computing and storage adaptability, and ability to host applications over numerous types of virtual infrastructures. Cloud computing can be a cost-effective alternative to onsite storage and diagnostics. This paper conducts a techno-economic assessment of a provisional cloud deployment architecture for a NPP predictive monitoring (PdM) system. The cloud-based monitoring system would enable maintenance and diagnostics (M&D) analysts and other authorized plant users to remotely monitor equipment functionality so as to enable PdM practices and early detection of faults. The Microsoft Azure cloud platform is included in the proposed cloud architecture to provide data processing and storage, sensor device networking, and database management; however, this analysis could be extended to other cloud computing service providers as well. For the techno-economic assessment, technical feasibility is measured in terms of network performance metrics such as response time, latency, and throughput, whereas economic feasibility is measured in terms of operational costs and capital expenditures. Finally, this report covers certain regulatory and security aspects that may concern licensees looking to implement cloud computing. The report focuses on the integration of sensor database storage, the application of cloud resources to PdM, and the identification of technological and economic hurdles associated with moving to a cloud-computing-based architecture.

46 INSTRUMENTATION RELATED TO NUCLEAR SCIENCE AND ↗
DOE OSTI2020

2019 Site Environmental Report (Volume 1)

Brookhaven National Laboratory (BNL) is managed on behalf of the Department of Energy (DOE) by Brookhaven Science Associates (BSA), a partnership between the Research Foundation for the State University of New York on behalf of Stony Brook University and Battelle. For over 70 years, the Laboratory has played a lead role in the DOE Science and Technology mission and continues to contribute to the DOE’s missions in energy resources, environmental quality, and national security. BNL manages its world-class scientific research with particular sensitivity to environmental issues and community concerns. The Laboratory’s Environmental, Safety, Security, and Health (ESSH) Policy reflects the commitment of BNL’s management to fully integrate environmental stewardship into all facets of its mission and operations. BNL prepares an annual Site Environmental Report (SER) in accordance with DOE Order 231.1B, Environment, Safety, and Health Reporting. The report is written to inform the public, regulators, employees, and other stakeholders of the Laboratory’s environmental performance during the calendar year in review. Volume I of the SER summarizes environmental data; environmental management performance; compliance with applicable DOE, federal, state, and local regulations; and performance in restoration and surveillance monitoring programs. BNL has prepared annual SERs since 1971 and has documented nearly all its environmental history since the Laboratory’s inception in 1947. Volume II of the SER, the Groundwater Status Report, is also prepared annually to report on the status of groundwater protection and restoration efforts. Volume II includes detailed technical summaries of groundwater data and treatment system operations and is intended for regulators and other technically oriented stakeholders. A summary of the information contained in Volume II is included in Chapter 7, Groundwater Protection, of this volume.

54 ENVIRONMENTAL SCIENCES↗
DOE OSTI2023

2022 Site Environmental Report (SER)

Brookhaven National Laboratory (BNL) is managed on behalf of the Department of Energy (DOE) by Brookhaven Science Associates (BSA), a partnership between Stony Brook University and Battelle, and six core universities: Columbia, Cornell, Harvard, Massachusetts Institute of Technology, Princeton, and Yale. For over 75 years, the Laboratory has played a lead role in the DOE Science and Technology mission and continues to contribute to the DOE’s missions in energy resources, environmental quality, and national security. BNL manages its world-class scientific research operations with sensitivity to environmental issues and community concerns. The Laboratory’s Environmental, Safety, Security, and Health (ESSH) Policy reflects the commitment of BNL’s management to fully integrate environmental stewardship into all facets of its mission and operations. BNL prepares an annual Site Environmental Report (SER) in accordance with DOE Order 231.1B, Environment, Safety, and Health Reporting. The report is written to inform the public, regulators, employees, and other stakeholders of the Laboratory’s environmental performance during the calendar year in review. Volume I of the SER summarizes environmental data; environmental management performance; compliance with applicable DOE, federal, state, and local regulations; and performance in restoration and surveillance monitoring programs. BNL has prepared annual SERs since 1971 and has documented nearly all its environmental history since the Laboratory’s inception in 1947. Volume II of the SER, the Groundwater Status Report, is also prepared annually to report on the status of groundwater protection and restoration efforts. Volume II includes detailed technical summaries of groundwater data and treatment system operations and is intended for regulators and other technically oriented stakeholders. A summary of the information contained in Volume II is included in Chapter 7, Groundwater Protection, of this volume.

54 ENVIRONMENTAL SCIENCES↗
DOE OSTI2024

2023 Site Environmental Report: Volume 1

Brookhaven National Laboratory (BNL) is managed on behalf of the Department of Energy (DOE) by Brookhaven Science Associates (BSA), a partnership between Stony Brook University and Battelle, and six core universities: Columbia, Cornell, Harvard, Massachusetts Institute of Technology, Princeton, and Yale. For over 75 years, the Laboratory has played a lead role in the DOE Science and Technology mission and continues to contribute to the DOE’s missions in energy resources, environmental quality, and national security. BNL manages its world-class scientific research operations with sensitivity to environmental issues and community concerns. The Laboratory’s Environmental, Safety, Security, and Health (ESSH) Policy reflects the commitment of BNL’s management to fully integrate environmental stewardship into all facets of its mission and operations. BNL prepares an annual Site Environmental Report (SER) in accordance with DOE Order 231.1B, Environment, Safety, and Health Reporting. The report is written to inform the public, regulators, employees, and other stakeholders of the Laboratory’s environmental performance during the calendar year in review. Volume I of the SER summarizes environmental data; environmental management performance; compliance with applicable DOE, federal, state, and local regulations; and performance in restoration and surveillance monitoring programs. BNL has prepared annual SERs since 1971 and has documented nearly all its environmental history since the Laboratory’s inception in 1947. Volume II of the SER, the Groundwater Status Report, is also prepared annually to report on the status of groundwater protection and restoration efforts. Volume II includes detailed technical summaries of groundwater data and treatment system operations and is intended for regulators and other technically oriented stakeholders. A summary of the information contained in Volume II is included in Chapter 7, Groundwater Protection, of this volume.

54 ENVIRONMENTAL SCIENCES↗
DOE OSTI2021

2020 Annual Site Environmental Report for Sandia National Laboratories, Tonopah Test Range, Nevada, and Kaua'i Test Facility, Hawai'i

Sandia National Laboratories is a multimission laboratory managed and operated by National Technology & Engineering Solutions of Sandia, LLC, a wholly owned subsidiary of Honeywell International Inc., for the U.S. Department of Energy’s National Nuclear Security Administration. The National Nuclear Security Administration’s Sandia Field Office administers the contract and oversees contractor operations at Sandia National Laboratories, Tonopah Test Range (SNL/TTR) in Nevada and Sandia National Laboratories, Kaua‘i Test Facility (SNL/KTF) in Hawai‘i. Activities at SNL/TTR are conducted in support of U.S. Department of Energy weapons programs and have operated at the site since 1957. SNL/KTF has operated as a rocket preparation launching and tracking facility since 1962. The U.S. Department of Energy and its management and operating contractor are committed to safeguarding the environment, assessing sustainability practices, and ensuring the validity and accuracy of the monitoring data presented in this Annual Site Environmental Report. This report summarizes the environmental protection, restoration, and monitoring programs in place at SNL/TTR and SNL/KTF during calendar year 2020. Environmental topics include air quality, ecology, environmental restoration, oil storage, site sustainability, terrestrial surveillance, waste management, water quality, and implementation of the National Environmental Policy Act. This report is prepared in accordance with and as required by DOE O 231.1B, Admin Change 1, Environment, Safety and Health Reporting , and has been approved for public distribution.

54 ENVIRONMENTAL SCIENCES↗
DOE OSTI2022

Feasibility of critical infrastructure protection using network functions for programmable and decoupled ICS policy enforcement over WAN

Industrial control systems (ICS) represent a major component of our critical infrastructure. With the increasing need for more control and monitoring of such systems, ICS have seen an increase in connectivity to wide area networks (WAN) exposing aging equipment to rapidly evolving cybersecurity threats. Furthermore, the ICS data requires a reliability measure from the networks for critical functions for infrastructure monitoring and control. Especially when remote plant sites are involved such as pipelines, energy distribution networks, and transportation, WAN transport impairments most often provide a best effort delivery with no strict reliability guarantees. Network functions can provide a vendor agnostic, programmable critical infrastructure protection with a single maintenance, policy determination, and reliability assurance surface. A network function (NF) can be utilized for policy enforcement over the communication between remote entities and the main control office. This paper presents the research on transparent integration with existing ICS without disrupting communications, resulting in minimal downtime while decoupling the fast paced evolution of defensive security measures from the upgrade cycle of expensive long term hardware. We report our measurements on the resource requirements and overhead in the network for successful NF insertion under a wide variety of network impairments (network packet delay, reordering, and loss). Our paired NF implementation provides a policy enforcement platform extensible to cover myriad cybersecurity-related communication goals, including packet signing for verification, encryption for data privacy, packet filtering and data diode operation (i.e. protecting against eavesdropping, packet injection, and denial-of-service). Furthermore, bundling communication specifications into packet flows allows for tunability in applying policies as coarse- or fine-grained as the needs of the operator. We report on network function resource requirements in the form of required queue depth and network utilization overhead to inform the decision making against hardware cost constraints.

42 ENGINEERING↗
DOE OSTI2022

Model-Based Diagnostics and Mitigation of Cyber Threats

The report summarizes key tasks performed to develop a toolkit for detecting cyber-attack events in instrumentation and control (I&C) systems of nuclear power plants. The toolkit connects the state-of-the-art GPWR Simulator with the RELAP5 code providing best-estimate nuclear steam supply system (NSSS) analyses, via the application programming interface (API), and allows users to introduce potential cyber-attack scenarios into power plant operational simulation. This summary for the project reflects topical reports submitted during the project as well as a journal paper published in 2022. The focus areas of the summary include: (1) modeling I&C systems for the AP1000 Generation III+ nuclear plant and GPWR simulator, (2) simulation and monitoring of plant response to cyber-attack events, (3) API structure for the toolkit interfacing the GPWR simulator and RELAP5 code, and (4) restructuring of the three-loop NSSS software of GPWR to model the two-loop AP1000 structure. Discussed in some details are (a) the attack tree analysis assessing the susceptibility of the AP1000 I&C system, resulting in reactor trips, in terms of the attack possibility and component sensitivity and (b) realistic estimation of the time to steam generator trip due to cyber-intrusions in the GPWR Simulator. Finally, sample demonstrations of the cyber-security tool kit, in the form of the GPWR-RELAP5 API, are summarized.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗
DOE OSTI2024

Biomass Carbon Removal and Storage (BiCRS)

To achieve the ambitious net-zero emission goal by 2050, it is vital to explore practical approaches for removing carbon dioxide from the air. One promising method is Biomass Carbon Removal and Storage (BiCRS). BiCRS combines the natural ability of plants to convert carbon dioxide into biomass with human engineering to store the biomass, or derived products (char), belowground where it won't decompose. By securely storing these materials underground, we can trap the carbon dioxide absorbed by the plants during their growth, thus aiding in carbon removal from the atmosphere. BiCRS not only addresses carbon emissions but also has co-benefits such as wildfire risk reduction by utilizing forest residues. It is essential to establish best practices to ensure accurate measurements of net carbon dioxide removed by BiCRS for policymakers, businesses and communities. Presently, there is a lack of consistent methods for calculating these removals, considering variables like plant type, storage conditions, and conditions for converting the biomass to other products for storage like char. This project develops guidelines for monitoring and reporting BiCRS activities, offering a dependable framework for measuring carbon dioxide removal, enabling adoption of transparent BiCRS approaches for making significant contributions to reducing carbon dioxide levels in the atmosphere.

biomass carbon removal and storage↗
DOE OSTI2024

Recent Advances in Assessing Environmental Effects of Marine Renewable Energy Around the World

Marine renewable energy (MRE) is increasingly of interest to coastal nations as a source of renewable energy that can support climate change mitigation goals as well as provide secure locally-produced energy for coastal and island communities. MRE extracts power from tidal streams, waves, ocean currents, run of rivers, and gradients in the ocean, with specialized devices developed and tested for each energy resource. Alongside development of MRE technologies and systems, first in Europe and then in North America, Australia, Asia, and other regions, it has been universally recognized that there is also a need to examine potential effects on marine animals, habitats, ecosystem processes, local communities and other sea users, to ensure that the MRE industry can be developed in a responsible and sustainable manner. This paper looks at the status of assessment and monitoring for potential environmental effects associated with MRE projects around the world. Over 80 projects were identified worldwide as having been tested, demonstrated, or commercially deployed with associated environmental monitoring. Five of the projects that represent tidal stream, wave, and run of river projects are examined in more detail to determine the types of data and information collected for those projects, the outputs of the monitoring campaigns, and the actions taken as a result of the data collection and analysis. Recommendations are provided for standardization of the monitoring approaches, instruments, and analysis methods at MRE project sites worldwide.

marine renewable energy, environmental effects, ri↗
DOE OSTI2020

Supporting Cyber Security of Power Distribution Systems by Detecting Differences Between Real-time Micro-Synchrophasor Measurements and Cyber-Reported SCADA (Final Report)

As modern power grids tend towards greater levels of automation and communication, the challenges of identifying and mitigating vulnerabilities to cyber-attacks are ones that are increasingly demanding attention. Today’s power system has evolved to form the foundational bedrock of modern society, and an attack on this infrastructure could prove disastrous. In this project we were tasked to investigate the use of distribution synchrophasors as an independent isolated sensor network with which we can corroborate, or flag potentially spoofed,Supervisory Control And Data Acquisition (SCADA) data. We adapted an approach to marry the underlying physical properties of power systems with the network communications used by power systems in order to offer insights unattainable by either data stream isolation. While the concept of intrusion detection systems (IDS) is well understood for monitoring network traffic and traditional IT computing systems, the approach discussed in this report is motivated by several key notions: first, current SCADA communications alone presents an incomplete view of the grid. Second, the power grid, and the equipment controlling it, is grounded by laws of physics. Given this, we leverage high-frequency physical grid measurements to understand the physical condition of the grid, and combine this with SCADA. While high-frequency physical grid measurements and SCADA communication over Internet Protocol (IP) networks are fundamentally disparate information sources, when collectively examined through appropriate lenses, they offer a much more nuanced depiction of the grid.

24 POWER TRANSMISSION AND DISTRIBUTION↗
DOE OSTI2021

Post-Closure Report for Closed Resource Conservation and Recovery Act Corrective Action Units, Nevada National Security Site, Nevada (CY2020)

This report serves as the combined annual report for post-closure activities in compliance with the requirements listed in Resource Conservation and Recovery Act (RCRA) Permit Number NEV HW0101 associated with the following closed corrective action units (CAUs): 1) CAU 90, Area 2 Bitcutter Containment. 2) CAU 91, Area 3 U-3fi Injection Well. 3) CAU 92, Area 6 Decon Pond Facility. 4)CAU 110, Area 3 WMD U-3ax/bl Crater. 5) CAU 111, Area 5 WMD Retired Mixed Waste Pits. 6) CAU 112, Area 23 Hazardous Waste Trenches. The locations of the sites are shown in Figure ES-1. This report covers calendar year 2020. The post-closure requirements for these sites are described in RCRA Permit NEV HW0101 and are summarized in each CAU-specific section of this report. The results of the inspections, a summary of maintenance activities, and an evaluation of monitoring data are presented in this report.

54 ENVIRONMENTAL SCIENCES↗
DOE OSTI2024

Photovoltaic Analysis and Response Support (PARS) Platform for Solar Situational Awareness and Resiliency Services

The project's primary objective is to develop a digital-twin based Photovoltaic (PV) Analysis and Response Support (PARS) platform, which aims to provide real-time situational awareness and optimal response plans. This platform is designed to enhance the performance of hybrid PV systems, making them competitive with or even superior to conventional generation resources. The PARS platform enabled the project team to develop and evaluate an extensive suite of grid support functionalities for the hybrid PV systems to enhance grid performance, across key areas including visibility, dispatchability, security, resilience, and reliability. Given the global push toward achieving 100% clean energy by 2035, there is a significant increase in the integration of inverter-based resources (IBRs) throughout the energy grid. Effectively managing the inherent variability and uncertainty associated with IBRs is crucial for ensuring cost-effectiveness, reliability, and security in both the main grid and islanded microgrids. Constrained to a limited array of IEEE test systems or standard feeder models, traditional IBR modeling struggles to assimilate new field data, accurately reflect system dynamics, and adapt to the evolving energy landscape. In our project, we embraced a Digital Twin (DT) strategy for crafting the PARS platform. A digital twin acts as a precise virtual counterpart of a physical system, built on historical data and continuously honed with real-time insights. This enables the high-fidelity DT to accurately mirror current system operations and forecast future scenarios. Consequently, the PARS platform becomes an ideal environment for testing and refining monitoring, control, power, and energy management algorithms designed to boost hybrid PV system performance. The defining feature of the PARS platform, distinguishing it from other advanced simulation tools, is its exceptional adaptability. This is achieved by employing actual network topologies and utilizing real-time field data for fine-tuning and calibration, ensuring a close emulation of real-world conditions. The project deliverables include: 1) High-fidelity IBR models and tools for real-time parameterization, utilizing real-time field measurements to refine IBR models for enhanced accuracy and performance; 2) Grid-forming and Grid-following capabilities to deliver resilience services, including blackstart, voltage and frequency support, cold-load pick-up, power reserves, and three-phase load balancing across grid-connected and microgrid settings; 3) Machine learning-based forecasting tools and methods for generating synthetic data and topologies, creating diverse and realistic simulation environments for evaluating varied operational scenarios; 4) Advanced microgrid power and energy management algorithms for optimizing the integration and operation of PV, storage, and demand response resources within both feeder and community scales. The power grid data sets are provided by four utility companies in North Carolina and the New York Power Administration. Acting as industry advisors, our industry partners communicated stakeholder needs and regulatory standards to the research teams, aiding technology transfer by incorporating the developed methodologies into their daily operations. This collaboration ensures that the PARS platform, functioning as a power system digital twin, enhances our understanding of IBR dynamic behaviors and enables the development and evaluation of IBR control functions that match or exceed the capabilities of conventional synchronous generators.

14 SOLAR ENERGY↗
DOE OSTI2020

Achieving the End State for the Pahute Mesa Corrective Action Units at the Nevada National Security Site - 20355

Underground nuclear testing at the Nevada National Security Site (NNSS) ended in 1992. To address the impact of radionuclide contamination from underground nuclear testing on the groundwater resources of Nevada, the U.S. Department of Energy (DOE) Environmental Management (EM) Nevada Program created the Underground Test Area (UGTA) activity to characterize the radionuclides in groundwater, understand the nature and extent of radionuclide migration, and forecast the distribution of radionuclides in groundwater for 1,000 years. The UGTA activity is regulated by the Federal Facility Agreement and Consent Order (FFACO), an agreement negotiated between the Nevada Division of Environmental Protection (NDEP), DOE, and the U.S. Department of Defense (DoD). DOE is close to achieving the end state (closure in place with monitoring and institutional control) for three of the five UGTA corrective action units (CAUs) on the NNSS. A number of challenges remain to achieve the end state of the other two CAUs, both located on Pahute Mesa. Pahute Mesa was the location of 82 underground nuclear tests, less than 10% of the total number of tests on the NNSS. Yet, Pahute Mesa contains slightly more than 60% of the total radionuclides (in curies). Based on groundwater sampling in monitoring wells, two radionuclide plumes have migrated several kilometers (km) in groundwater from selected test cavities and have crossed the boundary of the NNSS (yet remain within the boundaries of Federally controlled land). The path to achieve the end state continues to evolve as more data are collected and a better understanding of radionuclide migration in groundwater is developed. DOE has invested in drilling and sampling more than 50 characterization and monitoring groundwater wells over the past 25 years. The data indicate that the primary radionuclide of concern is tritium as it is about 89% of the total radionuclide inventory (in curies). As well, only tritium has been measured in groundwater outside of cavities at concentrations exceeding the Safe Drinking Water Act (SDWA) standard. For one of the tritium plumes that has migrated across the NNSS boundary, the average rate of migration has been measured as about 45 meters (m) per year with the rate of migration at the leading edge of the plume of about 85 meters per year. At that rate of migration, the tritium plume will decay to safe levels and not reach the publicly accessible environment at concentrations above the SDWA standard. Other radionuclides, at concentrations below the SDWA standards, will be monitored to ensure they remain at safe levels. Consequently, the end state path forward for Pahute Mesa has evolved to take full advantage of the data from the monitoring network to constrain uncertainty in model forecasts and to reduce reliance on probabilistic simulations. The focus of the end state approach relies on developing a monitoring well network that is protective of human health by increasing confidence that no radionuclide plume in the groundwater will migrate undetected to the accessible environment, located about 22 km from the nearest up-gradient underground nuclear test. Using the measured data to remove uncertainty, the evaluation of radionuclide migration from Pahute Mesa is directed toward meeting the goals of the end state. (authors)

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗
DOE OSTI2022

Los Alamos National Laboratory Floodplain Assessment for the Technical Area 72 Outdoor Live Fire Range Safety Upgrades Project

The National Nuclear Security Administration (NNSA), a semi-autonomous agency within the U.S. Department of Energy (DOE), is proposing new construction and upgrade activities in lower Sandia Canyon at Technical Area (TA) 72 at the Outdoor Live Fire Range facility at Los Alamos National Laboratory (LANL). The proposed upgrades are intended to improve range safety to help fulfill the mission requirements of maintaining a trained and qualified armed Protective Force.

54 ENVIRONMENTAL SCIENCES↗
DOE OSTI2021

Assessing the impact of demand response on peak demand in a developing country: The case of Ghana

Peak demand on electricity grids is a growing problem that increases costs and risks to supply security. Residential sector loads often contribute significantly to seasonal and daily peak demand. Demand response refers to consumer actions that change the utility load profile in a way that reduces costs or improves grid security by applying price signals and automated load shedding technologies. The methodologies that are used to achieve demand response can hardly be applicable in developing countries. Peak pricing of electricity, for instance, can hardly be implemented in many developing countries as high prices would disproportionately affect the many low-income households who do not have the capacity to take action to avoid paying high peak prices. This study aims to develop demand response methodology that can be applied in developing countries to achieve residential peak demand reduction. We use a consumer preference survey to develop a methodology suitable for developing countries. The method of diversified demand is used with energy audit and monitored data to estimate the potential peak load reduction and its cost-effectiveness for Ghana. Results show that peak reduction of 15-210 MW is expected by 2040 with a positive return on investment of 2-22% for all designed scenarios.

Diawuo, FA↗
DOE OSTI2022

Remote Monitoring Systems/Remote Data Transmission for International Nuclear Safeguards.

The use of remotely transmitted data from a nuclear facility under international nuclear safeguards to an inspectorate headquarters has been rapidly growing since inception as its value in reducing inspection effort and cost is demonstrated. There are opportunities for further growth moving forward including (1) the number of spent fuel casks in dry interim storage are increasing, leading to strain on inspection resources and potentially increased radiation exposure to inspectors, (2) the frequency of encapsulating spent nuclear fuel for final disposal in geological repositories occurs at a rate that may lead to the need for on-site inspectors unless systems can be developed to remotely transmit data, and (3) new facility types such as small modular reactors may rely heavily on remotely transmitted data due in part to remote locations of operation and mobility. Challenges need to be addressed too and include (1) hesitancy to implement remote data transmission by states, (2) data collection, transmission, security, and analysis, and (3) reliable power and communications. This report examines the evolution, equipment deployed, status, and opportunities/challenges of remote data transmission moving forward.

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗
DOE OSTI2021

G3P3 Phase 3 Project Execution Plan. Issue 1

The National Solar Thermal Test Facility (NSTTF) at Sandia National Laboratories New Mexico (SNL/NM) developed this Project Execution Plan (PEP) to document its process for executing, monitoring, controlling and closing-out Phase 3 of the Gen 3 Particle Pilot Plant G3P3. This plan serves as a resource for stakeholders who wish to be knowledgeable of project objectives and how they will be accomplished. The plan is intended to be used by the development partners, principal investigator, and the federal project director. Project objectives are derived from the mission needs statement, and an integrated project team assists in development of the PEP. This plan is a living document and will be updated throughout the project to describe current and future processes and procedures. The scope of the PEP covers: Cost, schedule, and scope Project reporting Staffing plan Quality assurance plan Environment, safety, security, and health This document is a tailored approach for the Facilities Management and Operations Center (FMOC) to meet the project management principles of DOE Order 413.3B, Program and Project Management for the Acquisition of Capital Assets , and DOE G 413.3-15, DOE Guide for Project Execution Plans. This document will elaborate on content as knowledge of the project is gained or refined.

14 SOLAR ENERGY↗
DOE OSTI2022

A Cybersecurity Threat Profile for a Connected Lighting System

In anticipation of improved energy performance and cost savings, cities and building owners are increasingly considering “smart lighting initiatives” that aim to convert their collection of simple luminaires (i.e., lighting fixtures) into an intelligent connected lighting system (CLS) capable of remotely monitoring energy consumption and fault conditions, and possibly implementing adaptive lighting schemes. The U.S. Department of Energy (DOE) has set an national goal of tripling the energy efficiency and demand flexibility of the buildings sector by 2030, relative to 2020 levels 1. It is forecast that connected lighting systems can contribute to that goal by delivering 125 TWh of annual energy savings by 2035 2, equivalent to the annual output of 50 typical (500 MW) power plants. However, these energy savings and the DOE goal are put at significant risk if connected technologies are not adopted due to real or perceived cybersecurity concerns. Connected IoT devices such as these have historically been rife with vulnerabilities which sometimes put security considerations secondary to functionality and operability. What are the cybersecurity threats that will impact these systems, as formerly banal luminaires transition into intelligent connected devices that collect information about themselves, their surrounding environment, and possibly us? In this paper we analyze a threat profile performed on a fault-detection use case for streetlights. A threat profile establishes security requirements, justifies security measures, yields actionable controls, and effectively communicates risk to stakeholders. This effort provides critical information for making threat-based decisions to increase security at a reasonable cost, and can effectively be used by development teams, software architects, and managers to make cybersecurity a part of their ongoing culture of awareness, training, and prevention. This leads to more secure systems and better-understood security. On-premise, cloud, and hybrid architectures with different authentication mechanisms were modeled and later categorized using the Microsoft STRIDE framework. An analysis of the recommended controls for each threat was performed to determine which controls could and should be put in place by manufacturers or third-party suppliers, and which controls need to be left up the end-user to implement. Fifty-seven threats were identified. Among our key findings: (1) 65% (37/57) of the threats did not involve the luminaires, but rather the other components needed to communicate with and manage them; (2) 63% (36/57) of the threats could have been mitigated through manufacturer-implemented defensive techniques or “controls”; and (3) 23% (13/57) of the threats were dependent on the network configuration. Recommendations based on the results of this work are made to key stakeholder groups. Notably, lighting technology developers are advised to address all threats that can be reasonably controlled with baked-in technology solutions (e.g., encryption or authentication controls), and employ some form of secure supply chain management and tracking where other parts (e.g., sensors, microprocessors) of a luminaire must also be built and manufactured with the proper security controls in place. Developers should also review threats involving assets not developed in-house to understand how connectivity with other devices will affect their product during system operation and determine if a compensating control for a defense-in-depth strategy will be needed. Finally, those interested in deploying CLS should compare the differences between cloud and on-premise models to determine which is more suitable for their needs and the abilities of their security team.

32 ENERGY CONSERVATION, CONSUMPTION, AND UTILIZATI↗