Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “security assessment”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 577 records · Page 32

Multi-Semester Mentoring and GPA Trajectories in SPINS: A Longitudinal Program Evaluation of STEM Scholars

This exploratory longitudinal program evaluation examined GPA trajectories among 14 STEM scholars participating in the Scholarly Partnership in Nuclear Security (SPINS) mentoring program at an HBCU. Using de-identified administrative data (37 scholar-semester observations), the study compared baseline and latest term GPAs anchored to each scholar’s first funded semester. A Wilcoxon signed-rank test was used to assess within-student change. Mean GPA increased modestly from 3.46 (SD = 0.30) at baseline to 3.61 (SD = 0.33) at the latest observed semester, with 12 of 14 scholars (85.7%) showing net improvement (median change = +0.12). The Wilcoxon signed-rank test indicated a statistically significant positive shift (W = 18, p = 0.030). However, scholars entered the program with a high baseline GPA, and ceiling effects were evident for several participants. Grounded in Social Cognitive Career Theory, findings suggest that multi-semester participation in SPINS is associated with GPA stability and modest improvement in an already high-performing cohort. Results should be interpreted cautiously given the small sample size and single-group design. The study highlights the value of sustained, culturally responsive mentoring at an HBCU while underscoring the need for larger evaluations with comparison cohorts and broader psychosocial outcomes. An evidence-informed mentoring framework is proposed to strengthen multi-semester support.

42 ENGINEERING↗

Integrating Commercial Ready Autonomous Robotic Platforms to Enhance Worker Safety and Efficiency - 20053

This paper will explore the challenges and triumphs of implementing advanced robotic systems and the supporting technology for the waste management industry. Deployment-ready solutions for autonomous robotic platforms are new to the radioactive waste management industry and have been slow to implement across the complex. Specifically, it will explore Hanford Tank Operations Contractor's implementation of ground-based autonomous robotic platforms to enhance workforce safety and efficiency. The first objective of the project is to demonstrate safe operation of autonomous instrumented robots, followed by a scaling up of capabilities for the platform to meet any additional requests of internal stakeholders. Autonomous robotics platforms offer a fantastic range of capabilities that will aid in decreasing long-term liability of radioactive waste management industry by enhancing clean-up efforts and worker safety. Over the past five years, deployment-ready solutions for autonomous robotic platforms have come a long way. Autonomous robotic platforms are increasingly available to purchase from many vendors, often for prices under $100,000. Additionally, the vendors who produce these products are efficient in accommodating customized solutions to unique challenges, such as those often found in the radioactive waste management industry. However, the newness of this technology to the radioactive waste management industry and has resulted in a slow implementation across the complex. This paper will explore the challenges and triumphs of implementing advanced robotic systems and supporting technology for the waste management industry. Specifically, it will explore Hanford Tank Operations Contractor's implementation of ground based autonomous robotic platforms to enhance workforce safety and efficiency. While the company has utilized robots in many parts of the tank farms mission, this was first attempted in the deployment of an autonomous platform that required no operator with only minor maintenance and created challenges not yet encountered. These challenges included stakeholder buy-in, operational safety, procurement uncertainties, adaption of 'off the shelf products, overcoming the 'Fukushima complexity' perception, security concerns, and the initial criteria down select. Hanford Tank Operations Contractor's management identified the need for a workforce protecting low cost robotics solution in the fall of 2017. The project scope generated was part of the response to the Tank Vapor Assessment Team recommendation to enhance the safety of the workforce by utilizing new technology. Since the projects inception, it has been incorporated into the Tank Stewardship Plan. This project was unique to Hanford Tank Operations Contractor, as the company does not frequently incorporate advanced technology for field deployment quickly. The project was also progressive to the Hanford Tank Operations Contractor as it functions as a partnership project with a local university. The first objective of the project is to demonstrate safe operations of autonomous instrumented robotics, monitoring and collecting data, and the wireless transmission of data to a central computing system. Following the completion of this first objective, the project will scale up capabilities of the platform to meet the requests of additional internal stakeholders throughout the tank farms - including completion of specific in-field tasks. (authors)

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗

Infrastructure and resource development needs to support a significant expansion of US nuclear capacity

In December 2023, the United States pledged at a United Nations conference to triple nuclear energy by 2050. In May of 2025 a new administration announced plans to quadruple nuclear energy by 2025, setting a new target that requires understanding the key infrastructure and resources needed to achieve large-scale deployment. This study attempts to quantify “what it takes” to deploy an additional 200 GWe of nuclear capacity. It projects demand levels for workforce, fuel, uranium mining and enrichment, waste management, supply chain, land, licensing, and water. Demand growth is also contextualized. For example, the peak number of construction workers required is approximately 215,000, a 37 % increase in the current US utility construction workforce. Up to 80,000 MT/year of mined uranium will be needed, necessitating a 60-fold increase in US mining production or a doubling of global mining if sourced externally. Advanced reactor fuels, uranium mining, and nuclear-grade equipment production would need substantial expansion. Operational workforce, enrichment needs, and licensing submissions also face significant increases. Although water consumption may see relatively lower increases, securing water rights poses unique challenges. This study consolidates various demand metrics in a broad context, highlighting the necessity of early preparations, such as workforce training, to support a tripling of nuclear energy. While it outlines the demand-side requirements, it does not assess the difficulties of ramping up or other supply-side issues. The findings also shed light on the impact of reactor size and reactor technology on various demand metrics.

29 ENERGY PLANNING, POLICY, AND ECONOMY↗

Secure and Cost-Effective Micro Phasor Measurement Unit (PMU)-Like Metering for Behind-the-Meter (BTM) Solar Systems using Blockchain-Assisted Smart Inverters

Recently, there is increasing interest in using behind-the-meter (BTM) solar systems for grid services. However, providing visibility and operational situational awareness of BTM solar systems mainly operated by small-scale solar inverters is challenging due to the requirement of relatively expansive networked observation tools (e.g., micro phasor measurement units (µPMUs)) and consequent cybersecurity threats through networks. This paper presents a secure, cost-effective, µPMUs-like metering method using a blockchain-assisted smart (BAS) inverters for a BTM solar system. The proposed BAS inverter consisting of an internet of things device as a node of a local blockchain network enables the secure provision of inverter measurement data for grid services. The BAS inverter sends the encrypted local measurement data with a timestamp to a local blockchain miner. Once the blockchain miner generates a tamper-resistant metering ledger including the measurements, it is used to assess the situational awareness of the BTM solar system. The concept of the proposed metering using the BAS inverters is validated by experimental studies.

behind the meter↗

Outline for Feasibility Study on a Nuclear Material Accounting and Control System for Measurement of High-Activity Waste at Tokai Reprocessing Plant during Decommissioning

The objective of this collaboration between the DOE/NNSA International Nuclear Security Program (INS) and JAEA is to conduct a feasibility study on nuclear material accounting and control needs and requirements for NDA measurement of high-activity waste at TRP during the decommissioning process. Under this study, both sides will exchange information, perform an assessment of needs and requirements, and develop joint recommendations for development of the A-HMMS.

98 NUCLEAR DISARMAMENT, SAFEGUARDS, AND PHYSICAL P↗

Classification of Nuclear Reactor Operations Using Spatial Importance and Multisensor Networks

Distributed multisensor networks record multiple data streams that can be used as inputs to machine learning models designed to classify operations relevant to proliferation at nuclear reactors. The goal of this work is to demonstrate methods to assess the importance of each node (a single multisensor) and region (a group of proximate multisensors) to machine learning model performance in a reactor monitoring scenario. This, in turn, provides insight into model behavior, a critical requirement of data-driven applications in nuclear security. Using data collected at the High Flux Isotope Reactor at Oak Ridge National Laboratory via a network of Merlyn multisensors, two different models were trained to classify the reactor’s operational state: a hidden Markov model (HMM), which is simpler and more transparent, and a feed-forward neural network, which is less inherently interpretable. Traditional wrapper methods for feature importance were extended to identify nodes and regions in the multisensor network with strong positive and negative impacts on the classification problem. These spatial-importance algorithms were evaluated on the two different classifiers. The classification accuracy was then improved relative to baseline models via feature selection from 0.583 to 0.839 and from 0.811 ± 0.005 to 0.884 ± 0.004 for the HMM and feed-forward neural network, respectively. While some differences in node and region importance were observed when using different classifiers and wrapper methods, the nodes near the facility’s cooling tower were consistently identified as important—a conclusion further supported by studies on feature importance in decision trees. Node and region importance methods are model-agnostic, inform feature selection for improved model performance, and can provide insight into opaque classification models in the nuclear security domain.

Tibbetts, Jake↗

Secure and Cost-Effective Micro Phasor Measurement Unit (PMU)-Like Metering for Behind-the-Meter (BTM) Solar Systems Using Blockchain-Assisted Smart Inverters: Preprint

Recently, there is increasing interest in using behind-the-meter (BTM) solar systems for grid services. However, providing visibility and operational situational awareness of BTM solar systems mainly operated by small-scale solar inverters is challenging due to the requirement of relatively expansive networked observation tools (e.g., micro phasor measurement units (uPMUs)) and consequent cybersecurity threats through networks. This paper presents a secure, cost-effective, uPMUs-like metering method using a blockchain-assisted smart (BAS) inverters for a BTM solar system. The proposed BAS inverter consisting of an internet-of-things device as a node of a local blockchain network enables the secure provision of inverter measurement data for grid services. The BAS inverter sends the encrypted local measurement data with a timestamp to a local blockchain miner. Once the blockchain miner generates a tamper-resistant metering ledger including the measurements, it is used to assess the situational awareness of the BTM solar system. The concept of the proposed metering using the BAS inverters is validated by experimental studies.

24 POWER TRANSMISSION AND DISTRIBUTION↗

Securing Solar for the Grid: Spring 2024 IAB Meeting

The Spring 2024 IAB meeting will focus on updates from the research team and collective feedback and inputs for an updated Roadmap for Solar Cybersecurity. Researchers from the four DOE National Laboratories will present with industry counterparts for the major research tasks within the S2G program, including: Solar Cybersecurity Standards and Certifications, Solar Risk Assessments & Mitigation, Solar Supply Chain Assessment, Network Monitoring Tools and Analysis, and Training and Workforce Development. Sandia National Laboratories developed an original Roadmap for PV Cybersecurity in 2017. This year, we are updating that roadmap to reflect the current state of research and industry and identify gaps and priorities still to be addressed. We look forward to the IAB’s input on key topics for the roadmap.

14 SOLAR ENERGY↗

Secure biosystems design in Saccharomyces cerevisiae establishes effective biocontainment strategies and mechanisms of escape

The widespread application of recombinant DNA and synthetic biology approaches for microbial metabolic engineering pursuits has motivated the development of biocontainment strategies, targeting safe and secure deployment of genetically modified microorganisms (GMMs). However, the design rules and mechanistic drivers governing biocontainment efficacy, as well as impacts of biocontainment upon microbial fitness, remain to be comprehensively evaluated, hindering predictive design and application of these strategies. We have developed a platform for high-resolution analysis of a transactivated kill switch in laboratory and industrial strains of Saccharomyces cerevisiae to assess modes of biocontainment escape and establish design rules for development of kill switch systems in diverse microbes. A camphor-regulated, RelE toxin system was systematically deployed to assess the impacts of differential kill switch copy number and ploidy in laboratory vs industrial strains. CRISPR-mediated integration of the biocontainment system at various loci revealed rapid escape events driven, in part, by mutations to both the Cam-transactivator (cam-TA) and RelE toxin. Genetic engineering enabled recapitulation of escape phenotypes, confirming mechanisms of escape and establishing structure-function relationships in the cam-TA system. Interestingly, genomic resequencing of escape mutants also revealed a series of off-target mutations, implicating additional modes of kill switch escape. Multi-copy integration of the kill switch system mitigated these effects by orders of magnitude, without compromising the biosynthetic capacity of the microbes, but proved insufficient to establish sustained biocontainment. The resultant data define a series of key design rules for next-generation biocontainment strategies and add to a growing foundational knowledge base targeting establishment of secure biosystems designs.

59 BASIC BIOLOGICAL SCIENCES↗

Assessing the impact of Byzantine attacks on coupled phase oscillators

Abstract For many coupled dynamical systems, the interaction is the outcome of the measurement that each unit has of the others as e.g. in modern inverter-based power grids, autonomous vehicular platoons or swarms of drones, or it is the result of physical flows. Synchronization among all the components of these systems is of primal importance to avoid failures. The overall operational state of these systems therefore crucially depends on the correct and reliable functioning of the individual elements as well as the information they transmit through the network. Here, we investigate the effect of Byzantine attacks where one unit does not behave as expected, but is controlled by an external attacker. For such attacks, we assess the impact on the global collective behavior of nonlinearly coupled phase oscillators. We relate the synchronization error induced by the input signal to the properties of the attacked node. This allows to anticipate the potential of an attacker and identify which network components to secure.

Tyloo, Melvyn (ORCID:0000000317614095)↗

Machine learning methods for weather forecasting

SAND2025-14466O This repository contains code for developing, training, and evaluating machine learning models for weather and climate forecasting, including forecast skill assessment, feature importance analysis, and reproducible workflows for model comparison. Sandia National Laboratories is a multimission laboratory managed and operated by National Technology & Engineering Solutions of Sandia, LLC, a wholly owned subsidiary of Honeywell International Inc., for the U.S. Department of Energy’s National Nuclear Security Administration under contract DE-NA0003525.

Holthuijzen, Maike [Sandia National Lab. (SNL-CA),↗

Software-defined Networking for Energy Delivery Systems (SDN4EDS): An Architectural Blueprint (Final Report)

This is the initial version of a reference for suppliers and energy companies of all sizes to deploy networks based on software-defined networking technology (SDN) to improve reliability, reduce cyber security attack surface, and facilitate mitigation of adversarial behavior. It is a living document and will progress over the life cycle of the Software-Defined Networking for Energy Delivery Systems (SDN4EDS) project. Version 2 of this report provides information on the Red Team tabletop assessment performed against the initial reference architecture. Version 3 of this report updates the reference architecture with lessons learned from the Red Team tabletop assessment, as well as provides additional details for the use cases. It also provides information on the decision process that could be used by an organization when considering deploying SDN in their environment. The final version of this report consolidates all the interim reports generated by the project into a final report. It also draws from PNNL’s experience in deploying SDN to make recommendations on how SDN could be deployed in a utility environment, and provides rationale for those decisions allowing individual utilities to make risk-based and knowledge-based decisions on how to best deploy SDN in their own environment

97 MATHEMATICS AND COMPUTING↗

Software-defined Networking for Energy Delivery Systems (SDN4EDS): An Architectural Blueprint (Final Summary Report)

This is the initial version of a reference for suppliers and energy companies of all sizes to deploy networks based on software-defined networking technology (SDN) to improve reliability, reduce cyber security attack surface, and facilitate mitigation of adversarial behavior. It is a living document and will progress over the life cycle of the Software-Defined Networking for Energy Delivery Systems (SDN4EDS) project. Version 2 of this report provides information on the Red Team tabletop assessment performed against the initial reference architecture. Version 3 of this report updates the reference architecture with lessons learned from the Red Team tabletop assessment, as well as provides additional details for the use cases. It also provides information on the decision process that could be used by an organization when considering deploying SDN in their environment. The final version of this report consolidates all the interim reports generated by the project into a final report. It also draws from PNNL’s experience in deploying SDN to make recommendations on how SDN could be deployed in a utility environment, and provides rationale for those decisions allowing individual utilities to make risk-based and knowledge-based decisions on how to best deploy SDN in their own environment. This summary report provides a higher-level overview of the project reports. Readers interested in additional detail, including results of the Red Team assessments and the final configuration, are encouraged to read the full final report.

97 MATHEMATICS AND COMPUTING↗

A Distributed Trust Model Simulator for Energy Grid of Things Distributed Energy Resource Management System

The evolution of networks into more distributed, self-reliant nodes has mitigated single-point failures that plagued traditional centralized networks. Applied to power grids, distributed systems can increase the integrity and availability of grid services while also offering a power management solution. However, while distributed networks provide scalability, security, and sustainability compared to centralized networks, their distributed nature makes them harder for anomaly detection and prevention. Incorporating a Distributed Trust Model (DTM) System into an Energy Grid of Things Distributed Energy Resource Management System (EGOT DERMS) allows grid participants to be characterized and their communication to be analyzed for possible attacks. A Trust Model simulator is needed to evaluate and improve the DTM System.Trustworthiness is calculated using a Trust Model. While many trust models exist, most only consider 2-3 matrices to evaluate trust. The TM proposed in this thesis uses a Metric Vector of Trust (MVoT) monitoring 17 parameters when assessing trust. Moreover, unlike standard trust models, the proposed trust model establishes a method to test the trust between various actors within the network and probe the trust model itself. Using a Trust Model Simulator, MVoT calaculations, initial values, and parameters are fine-tuned to achieve high-confidence message classifications and minimize false positives. The DTM System and Trust Mode Simulation Suite allow for distributed trust evaluation with a real-time classification of EGOT DERMS actors, providing additional security for distributed systems.

32 ENERGY CONSERVATION, CONSUMPTION, AND UTILIZATI↗

Multicontinuum Flow Models for Assessing Two-Phase Flow in Containment Science

We present a new pre-processor tool written in Python that creates multicontinuum meshes for PFLOTRAN to simulate two-phase flow and transport in both the fracture and matrix continua. We discuss the multicontinuum modeling approach to simulate potentially mobile water and gas in the fractured volcanic tuffs at Aqueduct Mesa, at the Nevada National Security Site.

58 GEOSCIENCES↗

Avatar Tools

Supervised machine learning is the process of using past experience to predict the future. "Ensembles" are a machine-learning meta-method that can be applied to most machine learning algorithms. Ensembles generally greatly improve accuracy, reduce or remove most of the design issues presented by machine learning, and are admirably suited to parallel and distributed computation. The Avatar Tools codes are an implementation of ensembles specifically for decision trees. Some features that distinguish Avatar Tools from other "ensembles for decision trees" codes are: (1) Does the bookkeeping necessary for out of bag (OOB) validation. (2) Can use OOB validation to automatically determine optimal ensemble size. (3) Provides an MPI-based parallel implementation, for distributed operation. (4) Provides convenient tools for cross-validation, to assess the accuracy provided by a training set. SAND2020-3858 M Sandia National Laboratories is a multimission laboratory managed and operated by National Technology & Engineering Solutions of Sandia, LLC, a wholly owned subsidiary of Honeywell International Inc., for the U.S. Department of Energy’s National Nuclear Security Administration under contract DE-NA0003525.

Siefert, Christopher↗

Precursor Analysis Report: Doppelpaymer Ransomware Attack on Petroleos Mexicanos (PEMEX) 2019

The DoppelPaymer Ransomware Attack on Petroleos Mexicanos (PEMEX) 2019 Precursor Analysis Report leverages publicly available information about the PEMEX cyber attack and catalogs anomalous observables for each technique employed in the attack. This analysis is based upon the methodology of the Cybersecurity for the Operational Technology Environment (CyOTE) program. The 2019 DoppelPaymer ransomware attack on PEMEX, Mexico’s nationalized petroleum corporation, highlights a unique threat that ransomware and cybercriminal extortion poses to Operational Technology (OT) environments in critical infrastructure. The incident began with an employee downloading commodity malware that allowed adversaries to gain initial access to PEMEX’s enterprise environment. After conducting privilege escalation, tool ingress, and data exfiltration, the adversaries deployed DoppelPaymer ransomware throughout the PEMEX enterprise environment, resulting in the company having to take dozens of systems offline for at least several days. Although PEMEX stated that their operations were not affected, the data exfiltrated from PEMEX was made available for download on DoppelPaymer’s leak site, as well as on other illicit criminal forums. This stolen data included not only company information, but also sensitive OT-specific configuration data. This incident showcases how cybercriminal exfiltration and posting of sensitive OT architecture documentation can pose security concerns for the targeted organization for years due to the long lifespan of OT assets and architectures. Researchers and analysts identified 18 unique techniques utilized during the attack with a total of 190 observables using MITRE ATT&CK® for Industrial Control Systems. The CyOTE program assesses observables accompanying techniques used prior to the triggering event to identify opportunities to detect malicious activity. If observables accompanying the attack techniques are perceived and investigated prior to the triggering event, earlier comprehension of malicious activity can take place. Fifteen of the identified techniques used during the DoppelPaymer ransomware attack were precursors to the triggering event. Analysis identified 163 observables associated with these precursor techniques, 34 of which were assessed to have an increased likelihood of being perceived in the 60 days preceding the triggering event. The response and comprehension time could have been reduced if the observables had been identified earlier. The information gathered in this report contributes to a library of observables tied to a repository of artifacts, data sources, and technique detection references for practitioners and developers to support the comprehension of indicators of attack. Asset owners and operators can use these products if they experience similar observables or to prepare for comparable scenarios.

45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗