Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “Attack surface analysis”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

50 records · Page 3

Attack Surface of Renewable Energy Technologies

This slide deck presents an overview of the threat landscape for renewable energy technologies. It highlights he growing penetration of renewable resources and potential impact of an attack. Standard architectures are shared to highlight where vulnerabilities may exist and attack paths to reach critical infrastructure. We discuss threat actors and attack paths. Several recent events impacting renewable energy assets or companies are explained.

14 SOLAR ENERGY↗

Attack Surface of Wind Energy Technologies in the United States [Slides]

This slide deck presents an overview of the threat landscape for wind energy technologies. It highlights unique cybersecurity considerations for wind, the growing penetration and potential impact of an attack. Standard architectures are shared to highlight where vulnerabilities may exist and attack paths to reach critical infrastructure. We discuss threat actors and attack paths. Several recent events impacting wind assets or wind companies are explained.

17 WIND ENERGY↗

Mechanism and kinetics of light alkane dehydrogenation and cracking over isolated Ga species in Ga/H-MFI

The objective of this study is to examine the mechanisms and kinetics of C2H6 dehydrogenation and n-C4H10 dehydrogenation and cracking over isolated Ga species in Ga/HMFI and to compare these results to those reported previously for C3H8 dehydrogenation and cracking. C2H6 dehydrogenation is found to be catalyzed by both [GaH]2+ and [GaH2]+ cations at similar turnover frequencies. Rate measurements over Ga/H-MFI containing predominantly [GaH2]+ cations reveal that C2H6 dehydrogenation rates exhibit a Langmuir.Hinshelwood dependence on C2H6 partial pressure at elevated temperatures (>730 K), consistent with the involvement of chemisorbed [C2H5.GaH]+ species. The reaction kinetics suggest that C2H6 dehydrogenation proceeds via heterolytic C-H cleavage of adsorbed C2H6 by [GaH2]+ cations to form H2 and [C2H5-GaH]+ species, which further decompose via β-hydride elimination to form C2H4. By contrast, C4H10 dehydrogenation and both terminal and central cracking are catalyzed exclusively by [GaH]2+ cations. All three reactions exhibit a Langmuir-Hinshelwood dependence on C4H10 partial pressure and are inhibited by H2. Ratios of dehydrogenation to cracking (total) and terminal to central cracking are approximately independent of C4H10 partial pressure consistent with the involvement of a common C4H10-derived surface intermediate. The observed reaction kinetics are consistent with an alkyl-mediated mechanism occurring over [GaH]2+, analogous to that reported previously for C3H8 dehydrogenation/cracking over Ga/H-MFI (Phadke, N. M.; et al. J. Am. Chem. Soc. 2019, 141, 1614-1627). The mechanism proceeds via facile, heterolytic dissociation of adsorbed C4H10 to form [C4H9-GaH]+-H+ cation pairs via methyl C-H-activated pathways. Dehydrogenation then proceeds via β-hydride elimination, respectively, forming butene, while terminal and central cracking proceed via C-H-activated H+ attack. Methylene activation was also considered but found to occur at a significantly lower rate. Theoretical analysis of the proposed reaction pathways leads to apparent activation enthalpies in good agreement with values extracted from the measured kinetics, thereby supporting the proposed pathways and the roles of [GaH]2+ and [GaH2]+ cations in the dehydrogenation and cracking of light alkanes on Ga/H-MFI.

Phadke, NM↗

Catalytic CO Oxidation on MgAl 2 O 4 -Supported Iridium Single Atoms: Ligand Configuration and Site Geometry

Probing and understanding the local chemical environment of an active site is essential for designing high-performance single-atom catalysts (SACs). Density functional theory (DFT) calculations were performed to investigate the ligand configuration and site geometry of MgAl 2 O 4 -supported iridium single atoms (Ir-1) toward catalytic carbon monoxide (CO) oxidation. We employed MgAl 2 O 4 (111) and MgAl 2 O 4 (211) as the model substrates with adsorbed Ir single atoms of different site geometries. DFT calculations revealed that the Mg-site on MgAl 2 O 4 (111) and the step site on MgAl 2 O 4 (211) are the most stable adsorption sites for Ir single atoms. Irrespective of site choices, CO oxidation on supported Ir single atoms follows the Eley-Rideal (E-R) mechanism, in which the surface oxygen vacancies close to the Ir single atoms activate molecular O 2 with a negligible barrier and the rate-limiting step is the gas-phase CO directly attacking the O-Ir species that is modulated by a CO ligand. Furthermore, first-principles X-ray absorption near-edge spectra of reaction intermediates along with in situ/operando X-ray absorption spectroscopy (XAS) suggest that Ir single atoms adsorb primarily on the step sites of MgAl 2 O 4 . However, microkinetic modeling predicts that a higher activity can be attained on the equally stable Mg-site, maximizing the population of which in catalyst synthesis might prove fruitful in future studies. Electronic structure analysis indicates that the CO ligand increases the reactivity of adsorbed oxygen atoms bound to Ir single atoms by increasing the antibonding nature of the O-Ir bond.

37 INORGANIC, ORGANIC, PHYSICAL, AND ANALYTICAL CH↗

Systematic investigations on iron cycling in phosphorus/siderophore systems: Synergism or antagonism?

Synergisms between microbial exudates on Fe (hydr)oxide dissolution as an effective Fe acquisition pathway have been recently addressed and vigorously debated. However, Fe liberation mechanisms and where siderophores and phosphorus (P) coexist received little attentions. Current study systematically investigated ferrihydrite dissolution in the presence of desferrioxamine B (DFOB) (a kind of fungally-derived siderophores) and inorganic/organic phosphorus (orthophosphate, Pi; myo-inositol hexaphosphate, IHP), as a function of solute pH, reaction time and reagent content. Reacted solids were characterized by N 2 -BET adsorption, zeta (ζ) potential analysis, sequential extraction analysis (SEDEX), field emission scanning electron microscopy (FESEM), high-resolution transmission electron microscopy (HRTEM), X-ray diffraction (XRD), X-ray photoelectron spectroscopy (XPS), micro Raman spectroscopy and attenuated total reflectance-Fourier transform infrared spectroscopy (ATR-FTIR). Our results indicate that upon reaction with P-only or (DFOB + P) systems, interfacial complexation partially switched from monolayer bidentate-binuclear surface complexes to ternary complexes, or laterally transformed into amorphous Fe–P precipitates. The Fe-Pi complex precipitated more readily under acidic conditions, and Fe-IHP complex preferentially nucleated in neutral-alkaline environments. Phosphorus slightly promoted Fe release from minerals and fixation to the leached layer or interfacial liquid zone initially, but subsequently prevented further attacks from protons and DFOB. The co-effects of P and DFOB likely correspond to two successive scenarios: 1) DFOB is preferentially attracted toward ferrihydrite surfaces by negative electrical fields induced by adsorbed phosphorus and can act synergistically with labile P–Fe complexes, resulting in intensive temporal dissolution of Fh; 2) subsequent Fe shuttling to DFOB can be prohibited by stabilized, passive P/Fe–P layers. Finally, our results emphasize the antagonism between P compounds and siderophores (i.e., DFOB here) on ferrihydrite dissolution to improve understanding of the biologically-mediated Fe cycling in natural systems.

37 INORGANIC, ORGANIC, PHYSICAL, AND ANALYTICAL CH↗

The Design and Evaluation of Zero Trust Architecture for Electric Vehicle Charging Infrastructure: EVs @ Scale Series on EV Charging Station Cybersecurity

Implementing a zero trust architecture can significantly bolster the security of electric vehicle (EV) charging infrastructure. EV charging infrastructure includes numerous networked interfaces, each of which can present potential vulnerabilities. When these vulnerabilities are exploited, they can compromise the entire system, leading to severe operational and security risks. Zero trust is a security model that operates on the principle of "never trust, always verify," which helps manage the attack surface and limit the scope of any potential compromises. Fundamentally, this model ensures that no entity, whether inside or outside the network, is trusted by default. The design principles of zero trust include continuous verification, strict deny-by-default access controls, and micro-segmentation. Continuous verification ensures that every request is thoroughly checked, regardless of its origin. Strict access controls enforce the principle of least privilege, allowing users and devices only the minimum necessary access to perform their functions. Micro-segmentation involves dividing the network into smaller, isolated segments to prevent lateral movement in case of a breach. In the context of EV charging infrastructure, zero trust can be implemented through various strategies. For example, multi-factor authentication (MFA) can be required for engineers to access the management interfaces and control systems of charging stations. Real-time monitoring and analysis of network traffic can help detect and respond to anomalies. Systems that do not need to communicate with each other can be micro-segmented to enhance security. All communications should adhere to predefined policies to be permitted. Additionally, encrypting communications can protect sensitive information exchanged between chargers and management systems. This paper presents a zero trust architecture specifically designed for EV charging infrastructure. Implementing zero trust not only mitigates risks but also builds a resilient infrastructure capable of withstanding and quickly recovering from cyber threats. The architecture addresses six defined security objectives. A comprehensive test plan is developed to assess the architecture against these objectives, and the results of the evaluation are reported. This approach is essential for maintaining the reliability and integrity of EV charging services in an increasingly interconnected and vulnerable digital landscape. This is the first in a planned series of papers exploring the implementation of zero trust in EV charging infrastructure. Each paper will delve into different aspects and applications of zero trust, highlighting how various work processes and requirements can lead to distinct architectural designs. These architectures will be tailored to address specific security challenges and operational needs within the EV charging ecosystem, ensuring a robust and adaptable security framework.

33 ADVANCED PROPULSION SYSTEMS↗

Technical Performance of Refractory Liners for Molten Chloride Salt Thermal Energy Storage Systems

A chloride-based molten-salt system that uses a ternary blend of MgCl2/KCl/NaCl is investigated to provide higher temperature thermal energy storage capability. Despite higher thermal stability, molten chlorides present several unique challenges, including the design of internal refractory-ceramic liners to prevent the corrosion and thermal stress of alloy tank shells. This work discusses issues and potential solutions related to containment of molten chloride salt, specifically the optimization of the refractory material at the molten salt interface (hot face). The down-selected hot face candidate limits permeation of salt through the material and forms a highly stable secondary surface phase in equilibrium with the molten salt. A mortar is created using the corrosion resistant hot face brick. Brick and mortar composite are subjected to mechanical stress/strain analysis, in order to calculate composite material properties and better inform thermomechanical models. The U.S. Department of Energy Generation 3 (DOE Gen3) program seeks to develop higher efficiency CSP plants that can provide cost-competitive, flexible power in the U.S. electric grid. The proposed Gen3 Liquid Pathway CSP plant closely resembles the configuration of current nitrate salt power towers with two-tank storage (Gen2). The differences between Gen2 and Gen3 include the types of compatible materials used in salt storage tank construction. Stainless steel loses strength at Gen3 temperatures, and although nickel superalloys would be capable of withstanding sustained high temperatures, these materials are prohibitively expensive at scale. Uninsulated tank shells also pose a significant risk as common steels are highly susceptible to chemical attack from molten chloride salt. To address these concerns, refractory-ceramic based containment materials are proposed to line the inside of the hot and cold storage tanks. In doing so, stainless or carbon steel shells may be used in construction depending on the level of insulation provided. The composition of the internal liner requires careful consideration to maximize the efficacy of multiple parameters including corrosion resistance, strength at operating temperature, durability, and cost. This is particularly true for the material at the interface with the salt, known as the "hot face", which is responsible for protecting the insulating layers between the tank shell and the hot face brick layer. The molten salt in this system is superheated over 300 °C above its freeze temperature. Therefore, unlike other industrial processes which use refractory-lined vessels, it is not expected that a freeze plane will develop in the hot face. Therefore, the hot face must be designed to withstand chemical corrosion and inhibit permeation of molten salt into the insulating layers. A down selection was performed to identify a hot face candidate best equipped to maintain thermal, mechanical, and chemical integrity when exposed to molten salt over extended periods of time. Long-duration chemical capability experiments were conducted with the down selected hot face refractory fully immersed in molten chloride salt for up to 3000 hours. The average salt penetration does not exceed 100 microns. When extrapolated to 20 and 30 years of continuous exposure, the expected salt penetration depth is approximately 2.0 mm and 2.9 mm, respectively. A magnesium-rich secondary phases develops at the salt/refractory interface. X-ray diffraction identifies the material as forsterite (Mg2SiO4), which is reported to form synthetically in molten chloride salt solutions. These results suggest the selected hot face will adequately inhibit salt permeation. While there is optimism that the hot face brick will inhibit salt permeation, mortar joints are typically the weakest point of a refractory brick liner. From a thermochemical perspective, differing thermal expansion coefficients may result in the mortar and brick to grow independent of each other, creating gaps through which molten salt can penetrate. To address this issue, NREL has developed an in-house mortar composed of the down selected hot face brick that has been shown to be compatible with the salt. Compressive stress/strain analyses have been performed on the brick/ mortar composites to generate stress/strain curves. Modulus of elasticity and Poisson's ratio of the composite may be calculated from the stress/strain curves, in order to provide more representative data to finite element mechanical models for accurate approximation of stress on the tank shell and the amount of thermal expansion expected within the tank liner.

41 EE - Solar Energy Technologies Office (EE-4S)↗

Airfoil Computational Fluid Dynamics - 9k shapes, 2 AoA's

This dataset contains aerodynamic quantities - including flow field values (momentum, energy, and vorticity) and summary values (coefficients of lift, drag, and momentum) - for 8,996 airfoil shapes, computed using the HAM2D CFD (computational fluid dynamics) model. The airfoil shapes were designed using the separable shape tensor parameterization that encodes two-dimensional shapes as elements of the Grassmann manifold. This data-driven approach learns two independent spaces of parameter from a collection of sample airfoils. The first captures large-scale, linear perturbations, and the second defines small-scale, higher-order perturbations. For this data, we used the G2Aero database of over 19,000 airfoil shapes to learn a parameter space that captured a wide array of shape characteristics. We fixed the linear deformations to be the mean over the database and sampled new shapes over a four-dimensional parameter space of higher-order perturbation. This sampling approaches allows for isolated analysis of non-linear airfoil shape deformations while holding other aspects (e.g., airfoil thickness) approximately constant. The aerodynamic quantities for the generated airfoil were obtained using the HAM2D code, which is a finite-volume Reynolds-averaged Navier-Stokes (RANS) flow solver. We employ a fifth-order WENO scheme for spatial reconstruction with Roe's flux difference scheme for inviscid flux and second-order central differencing for viscous flux. A preconditioned GMRES method is applied for implicit integration. The Spalart-Allmaras 1-eq turbulence model is used for the turbulence closure, and the Medida-Baeder 2-eq transition model is applied to account for the effects of laminar turbulent transition. The airfoil grid is generated with a total of 400 points on the airfoil surface, the initial wall-normal spacing of y+ = 1, and an outer boundary located at 300 chord lengths away from the wall. The CFD simulations are performed at a freestream Mach number of 0.1, Reynolds number of 9M, and at two angles of attack, 4 deg. and 12 deg. The simulations were performed using the Bridges-2 system at the Pittsburgh Supercomputing Center in February 2023 as part of the INTEGRATE project funded by the Advanced Research Projects Agency - Energy in the U.S. Department of Energy. The data was collected, reformatted, and preprocessed for this OEDI submission in July 2023 under the Foundational AI for Wind Energy project funded by the U.S. Department of Energy Wind Energy Technologies Office. This dataset is intended to serve as a benchmark against which new artificial intelligence (AI) or machine learning (ML) tools may be tested. Baseline AI/ML methods for analyzing this dataset have been implemented, and a link to their repository containing those models has been provided. The .h5 data file structure can be found in the GitHub Repository resource under explore_airfoil_9k_data.ipynb.

9k↗

Multifractal Characterization of Distribution Synchrophasors for Cybersecurity Defense of Smart Grids

“Source ID Mix” spoofing emerged as a new type of cyber-attack on Distribution Synchrophasors (DS) where adversaries have the capability to swap the source information of DS without changing the measurement values. Accurate detection of such a highly-deceptive attack is a challenging task especially when the spoofing attack happens on short fragments of DS recorded within a relatively small geographical scale. Herein this letter proposes an effective approach to detect this cyber-attack by realizing the multifractal characteristics of DS measurements. First, the multifractal cross-correlation of DS measured at multiple intra-state locations is revealed. Then the derived correlation is integrated with weighted two-dimensional multifractal surface interpolation to reconstruct quasi high-resolution signals. Finally, informative location-specific signatures are extracted from the high-resolution DS and they are integrated with advanced machine learning techniques for source authentication. Experiments using the real-life DS are performed to verify the proposed method.

24 POWER TRANSMISSION AND DISTRIBUTION↗

Corrosion of Zinc Cold Spray Coatings in a Wet Sweet and Sour Gas Environment

Internal corrosion is a problem for steel pipelines transporting natural gas or CO 2 containing water and partial pressures of H 2 S higher than 0.3 kPa (0.05 psi). This work aims to mitigate internal corrosion in steel pipelines transporting natural gas containing H 2 S using cold spray coatings. Two types of the cold spray binary metallic coatings (zinc chromium [ZnCr]. zinc niobium [ZnNb]) were studied using electrochemical techniques: potentiodynamic polarization, linear polarization resistance, and electrochemical impedance spectroscopy. The corrosion resistance of cold spray coatings (ZnCr, ZnNb) was evaluated in an environment containing 4 bar CO 2 pressure, simulating the partial pressures found in gas transmission lines over a solution of 3.5 wt% NaCl heated to 40°C. A concentration of 0.003 M Na 2 S 2 O 3 ·5H 2 O, corresponding to H 2 S partial pressures around 0.079 bar (1.146 psi), was used to simulate sour conditions. Postcorrosion surface characterization was performed using a scanning electron microscope (SEM) equipped with an energy-dispersive x-ray spectroscope (EDS) and x-ray diffraction analysis. The data showed that the presence of 0.003 M Na 2 S 2 O 3 ·5H 2 O shifted the corrosion potential to more anodic values and decreased the corrosion current density. Both coatings showed similar behavior after 1 h of exposure in the CO 2 /H 2 S environment, indicating that similar electrochemical reactions were occurring on ZnNb and ZnCr. SEM images and EDS surface analyses for specimens showed a significant change in the surface chemical composition of carbon steel coated with ZnNb and ZnCr after 24 h of immersion. In the presence of thiosulfate (under sour conditions), the formation of corrosion product layers (ZnCO 3 and ZnS) on top of ZnNb and ZnCr coatings increased their corrosion resistance, which helped to reduce their corrosion by a factor of 2. Under a sweet environment, the corrosion rates for steel coated with cold spray coatings after 14 d of exposure are lower than that for galvanized steel by a factor of 5 due to the ZnCO 3 layer formed on top of the coatings. The ZnCO 3 layer formed on the steel surface acts as a physical barrier against corrosion by blocking the diffusion of corrosive species to the surface. No localized attack was observed. ZnCr Cold spray coating with defect showed promising corrosion protection against CO 2 corrosion (sweet corrosion) after 14 d of exposure to a CO 2 environment. Here, the scratch on the coating simulated damage created in service, and it was deep enough to expose the substrate material (steel). The formation of zinc oxide (ZnO) and zinc carbonate (ZnCO 3 ) on the scratch confirmed the cathodic protection of the steel by ZnCr and ZnNb coatings.

36 MATERIALS SCIENCE↗

EVSE Cybersecurity and Resilience

Consequence-driven Cybersecurity Analysis for Extreme Fast Charging Electric Vehicle Infrastructure Electric vehicle (EV) development and associated charging infrastructure are expected to advance rapidly. Thirty percent of all global vehicle sales may be EVs and hybrid EVs by 2025, and they will rely on increasingly sophisticated strategies for grid integration. Next-generation EV charging infrastructure is expected to include interconnected renewable resources, such as photovoltaic (PV) arrays and battery storage systems, along with grid-edge devices. Although distributed energy resources (DERs) are useful in several ways, such as peak shaving at high demand times and backup supply for added resilience, the integration of vehicle charging and DERs could create more avenues for cyberattack. Physical and/or remote access to EV charging station components, including charge ports, power electronics, controllers, and local generation (e.g., PV and energy storage) could be paths to cause power fluctuations, leading to altered operations at the charging station, escalated privileges to administrative systems, exfiltration of financial information (including personally identifiable information), and reduced grid stability. One compromised EV supply equipment component can open the door to a variety of exploitable vulnerabilities. Cloud computing and mobile application control have the potential to expand the threat surface to non-repudiation and firmware integrity challenges. Vendor clouds have access to hundreds of chargers, and if compromised, can scale the attack surface exponentially. The high power and voltage levels of xFC infrastructure (e.g., 400 kW at 1000- V DC) increase the hazards and ability to impact the grid and vehicles more than lower-power charging systems. Legacy communications systems and protocols could also put EV infrastructure at risk of cyberattacks requiring a robust patch management process. Communications networks link EVs and chargers to several stakeholders - including charging station operators, grid operators, vendors/manufacturers, and aggregators - who have both physical and network access to share information for control, monitoring, and analytics. Information in these networks that is vulnerable to compromise includes the state of charge, charging duration, payment information, electricity price, and load control. Analyzing and prioritizing these interconnections risks could help address cybersecurity related to data leakage and manipulation.

charging↗

Microstructure Experiments-Enabled MARMOT Simulations of SiC/SiC-based Accident Tolerant Nuclear Fuel System

We have undertaken an experimental-computational project that addresses a few key technology gaps associated with the use of SiC/SiC composites for light water reactor fuel cladding. Two principal endeavors in this project are to assess the irradiation-induced microstructural changes and swelling in SiC/SiC composites, and to characterize and model the porous oxide surface layer (when exposed to steam) along SiC recession that is detrimental to the clad integrity under accident conditions. The project tasks are: (i) ion irradiation and characterization (University of Tennessee, Knoxville), (ii) mechanical tests and analysis (University of South Carolina), (iii) steam exposure tests (Oak Ridge National Laboratory), (iv) electron microscopy and spectroscopic characterization (NC State University), (v) x-ray microscopy and reconstruction (University of South Carolina and NC State University), (vi) phase field modeling and simulations (NC State University and Idaho National Laboratory). The effects of 10 MeV Au ion irradiation at 350°C on the microstructure evolution in SiC/SiC composites are investigated at doses up to 400 displacements per atom (dpa) at the University of Tennessee, Knoxville. Atomic force microscopy and optical profilometry reveal irradiation induced axial and radial shrinkage of the fibers for doses greater than 10 dpa. Based on detailed electron microscopy characterization, the primary cause of the fiber shrinkage is attributed to irradiation-induced loss of carbon packets. Additionally, the multilayer PyC interface is observed to portray high resistance to irradiation damage. The mechanical response and failure mechanisms of un-irradiated samples is also assessed through loading tests and X-ray imaging at the University of South Carolina. Steam exposure tests are performed at the Oak Ridge National Laboratory in a facility that represents a reactor pressure vessel under a loss-of-coolant-accident scenario. The samples that are analyzed methodically in this report are tested for 32/31 hours at 1200°C with a velocity of 0.25 cm/s for the pressures: 0.1 MPa, 0.45 MPa, 0.92 MPa and 1.38 MPa. Scanning/transmission electron microscopy analysis conducted at the NC State University (NCSU) shows that the oxide layer thickness increases with the steam pressure. While the oxide layer is crystalline (α- cristobalite) for the pressures 0.45 MPa, 0.92 MPa and 1.38 MPa, the layer is amorphous at 0.1 MPa. Results from Raman spectroscopy have also confirmed the formation of α-cristobalite phase of SiO₂. The abrupt increase in the integrated Raman intensity ratio between steam pressures 0.1 and 0.45 MPa suggests the onset of accelerated crystallization. Non-destructive three dimensional X-ray microscopy/tomography (XCT) and computational image processing techniques are employed by the University of South Carolina to probe the porous oxidation features on SiC samples at varying pressures. Interestingly, most pores are observed to be located away from the surface as well as the oxide-SiC interface. The average oxide layer thickness assessed from the XCT analysis is seen to be in excellent agreement with the values determined through scanning electron microscopy analysis for the highest pressures where the oxide layer is relatively more uniform. A phase-field model developed by the NC State University and Idaho National Laboratory for simulating oxidation of SiC by steam captures the paralinear kinetics of SiC oxidation with a high degree of fidelity. Results from quasi-one-dimensional and two dimensional simulations show that the pores with oxidizing species lead to a higher volatilization rate. These simulations indicate that the enhanced apparent volatilization rates at higher pressures observed in experiments can be rationalized by the increased volatilization from the pores. The project team has also successfully developed the capability to import images from experiments for realistic evolution of the oxidizing microstructure.

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗

Examining Graphite Degradation in Molten Salt Environments: A Chemical, Physical, and Material Analysis

Molten-salt reactors (MSRs) are Generation IV nuclear reactors that use liquid salt as a coolant and/or fuel. In several MSR designs, graphite serves as a moderator and/or reflector. However, due to limited experimental data and operational experience, our understanding of graphite behavior in molten salt environments remains incomplete. This report aims to identify the degradation mechanisms of nuclear graphite in MSRs, detail the mechanisms of each factor, and provide an initial assessment of their impact on the structural integrity of graphite components. This assessment is based on an extensive literature review and insights from subject matter experts. Furthermore, given the limited data, a modeling strategy using existing Grizzly software is proposed for a more thorough analysis where appropriate. Additionally, it presents mitigation strategies where applicable. The report covers physical degradation mechanisms such as infiltration, erosion, and abrasion, as well as chemical degradation mechanisms including fluorination, intercalation, corrosion, and oxidation. Molten salt can infiltrate the porous structure of graphite, leading to several detrimental effects. Entrapment of fissile products within the graphite pores can cause radiation damage and could pose challenges in the handling and disposal of contaminated components. The differential thermal expansion between the infiltrated salt and graphite, along with internal stress from pressurized molten salt and volumetric heating, can compromise the structural integrity of graphite. To mitigate these effects, employing ultra-fine graphite grades and applying sealants and coatings are effective strategies. A computational model based on coupled solid mechanics and heat transfer phenomena could be used to predict the internal stresses using Grizzly software. In pebble-bed MSRs, graphite fuel pebbles can cause abrasion against reactor components due to friction and wear. The severity of wear is influenced by various factors such as temperature, environment, and the presence of lubricants. Tribological studies reveal that higher temperatures and molten salt environments, such as FLiBe, significantly reduce wear rates compared to dry conditions. Additionally, the chemical composition of the salt can further optimize graphite's tribological performance. Long-term wear effects can be modeled by incorporating surface defects into the geometry and predict stresses under thermal and radiation effects using Grizzly software. Chemical degradation of graphite in a molten salt environment can occur through fluorination and intercalation. Fluorination can occur via replacement of hydrogen or oxygen atoms, or at the active sites, but does not cause structural degradation. Intercalation, on the other hand, can lead to exfoliation, where layers of graphite separate and peel away, damaging the graphite. Protective coatings can enhance graphite's resistance to intercalation. Graphite generally exhibits good chemical stability in molten salt environments, though it can corrode under specific conditions, particularly in the presence of impurities or oxidants. Studies have shown that protective coatings, such as plasma-sprayed partially stabilized zirconia (PSZ), can effectively prevent such degradation. Corrosion behavior varies significantly with different graphite grades and coating applications, underscoring the need for detailed studies on uncoated and coated graphite to understand and mitigate corrosion mechanisms in MSRs. Research indicates that the presence of oxidants and impurities can accelerate graphite degradation in molten salts, making it essential to explore acceptable impurity limits. Oxidation is another critical degradation mechanism, leading to weight loss and structural damage due to the formation of CO and CO 2 from the reaction of carbon atoms with oxygen. This process creates new porosity and compromises graphite's integrity. While extensive research on graphite oxidation has been conducted for gas-cooled reactors, studies specific to MSRs are limited. Findings from the coal industry suggest that molten alkali metal salts can significantly accelerate graphite oxidation, a hypothesis worth exploring for fluoride salts in MSRs. Understanding oxidation behavior in MSRs is vital for developing protective measures. The analysis of post-irradiated graphite from the MSRE experiment demonstrated exceptional chemical compatibility with molten fluoride salt, suggesting that the extent of chemical attack on graphite largely depends on the salt's infiltration capability. Therefore, the use of ultra-fine grade graphite could help mitigate chemical degradation effects. Existing oxidation modeling capabilities in Grizzly, which use reaction-diffusion equations to model graphite-air interactions, could be adapted to simulate the chemical degradation effects of graphite in molten salt environments.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

A Cybersecurity Threat Profile for a Connected Lighting System

In anticipation of improved energy performance and cost savings, cities and building owners are increasingly considering “smart lighting initiatives” that aim to convert their collection of simple luminaires (i.e., lighting fixtures) into an intelligent connected lighting system (CLS) capable of remotely monitoring energy consumption and fault conditions, and possibly implementing adaptive lighting schemes. The U.S. Department of Energy (DOE) has set an national goal of tripling the energy efficiency and demand flexibility of the buildings sector by 2030, relative to 2020 levels 1. It is forecast that connected lighting systems can contribute to that goal by delivering 125 TWh of annual energy savings by 2035 2, equivalent to the annual output of 50 typical (500 MW) power plants. However, these energy savings and the DOE goal are put at significant risk if connected technologies are not adopted due to real or perceived cybersecurity concerns. Connected IoT devices such as these have historically been rife with vulnerabilities which sometimes put security considerations secondary to functionality and operability. What are the cybersecurity threats that will impact these systems, as formerly banal luminaires transition into intelligent connected devices that collect information about themselves, their surrounding environment, and possibly us? In this paper we analyze a threat profile performed on a fault-detection use case for streetlights. A threat profile establishes security requirements, justifies security measures, yields actionable controls, and effectively communicates risk to stakeholders. This effort provides critical information for making threat-based decisions to increase security at a reasonable cost, and can effectively be used by development teams, software architects, and managers to make cybersecurity a part of their ongoing culture of awareness, training, and prevention. This leads to more secure systems and better-understood security. On-premise, cloud, and hybrid architectures with different authentication mechanisms were modeled and later categorized using the Microsoft STRIDE framework. An analysis of the recommended controls for each threat was performed to determine which controls could and should be put in place by manufacturers or third-party suppliers, and which controls need to be left up the end-user to implement. Fifty-seven threats were identified. Among our key findings: (1) 65% (37/57) of the threats did not involve the luminaires, but rather the other components needed to communicate with and manage them; (2) 63% (36/57) of the threats could have been mitigated through manufacturer-implemented defensive techniques or “controls”; and (3) 23% (13/57) of the threats were dependent on the network configuration. Recommendations based on the results of this work are made to key stakeholder groups. Notably, lighting technology developers are advised to address all threats that can be reasonably controlled with baked-in technology solutions (e.g., encryption or authentication controls), and employ some form of secure supply chain management and tracking where other parts (e.g., sensors, microprocessors) of a luminaire must also be built and manufactured with the proper security controls in place. Developers should also review threats involving assets not developed in-house to understand how connectivity with other devices will affect their product during system operation and determine if a compensating control for a defense-in-depth strategy will be needed. Finally, those interested in deploying CLS should compare the differences between cloud and on-premise models to determine which is more suitable for their needs and the abilities of their security team.

32 ENERGY CONSERVATION, CONSUMPTION, AND UTILIZATI↗