Results for “systems security” — Page 32

DOE OSTI2025

Security Analysis of a Class of Spread Spectrum Systems Presentation

A method of adding physical layer security to a class of spread spectrum systems has been recently proposed. In this paper, we look into the rate at which an eavesdropper may gain information about the system to decipher the data symbols. The Shannon mutual information is used to measure the rate of information that may be gained by an eavesdropper. The k-nearest neighbors (k-NN) method is used to obtain estimates of relevant entropy values, which will then be used to quantify the rate of information recovery as more data is transmitted. It turns out that such information recovery requires the adoption of special methods that avoid any destructive bias in the estimates. Details of these methods are also presented.

97 - MATHEMATICS AND COMPUTING↗

DOE OSTI2020

A Flexible and Secure Evaluation Platform for Overvoltage Protection in Power Electronics Systems

This paper summarizes the fault mechanisms specifically for the overvoltage protection schemes in power electronic converters and the resulted power electronics enabled systems. A flexible and secure evaluation platform for overvoltage protection, has also been presented based on this conceptual mechanism. The proposed platform aims at testing the protection performance of distinctive overvoltage protection schemes. It would be applied to verify the effectiveness, identify potential strengths and weaknesses, and obtain the most critical protection response time to provide sufficient engineering insights for the designer. The operation principle and detailed design guideline have been presented first. The comprehensive component stress has been analyzed. An intensive set of LTSpice simulations have been conducted to show the validity of the proposed assessment approach.

Zheng, Sheng↗

DOE OSTI2018

Detection of counterfeit and compromised devices using system and function call tracing techniques

Frameworks, methods, and systems for securing a smart grid are provided. A framework can include data collection, call tracing techniques, and preparing call lists to detect counterfeit or compromised devices. The call tracing techniques can include call tracing and compiling all system and function calls over a time interval. The framework can further include data processing, in which a genuine device is identified and compared to unknown devices. A first statistical correlation can be used for resource-rich systems, and a second statistical correlation can be used for resource-limited systems. Threats of information leakage, measurement poisoning and store-and-send-later can be considered.

Babun, Leonardo↗

DOE OSTI2014

Centralized Cryptographic Key Management and Critical Risk Assessment - (CRADA Final Report)

The Department of Energy Office of Electricity Delivery and Energy Reliability (DOE-OE) Cyber Security for Energy Delivery Systems (CSEDS) industry led program (DE-FOA-0000359) entitled "Innovation for Increasing Cyber Security for Energy Delivery Systems (12CSEDS)," awarded a contract to Sypris Electronics LLC to develop a Cryptographic Key Management System for the smart grid (Scalable Key Management Solutions for Critical Infrastructure Protection). Oak Ridge National Laboratory (ORNL) and Sypris Electronics, LLC as a result of that award entered into a CRADA (NFE-11-03562) between ORNL and Sypris Electronics, LLC. ORNL provided its Cyber Security Econometrics System (CSES) as a tool to be modified and used as a metric to address risks and vulnerabilities in the management of cryptographic keys within the Advanced Metering Infrastructure (AMI) domain of the electric sector. ORNL concentrated our analysis on the AMI domain of which the National Electric Sector Cyber security Organization Resource (NESCOR) Working Group 1 (WG1) has documented 29 failure scenarios. The computational infrastructure of this metric involves system stakeholders, security requirements, system components and security threats. To compute this metric, we estimated the stakes that each stakeholder associates with each security requirement, as well as stochastic matrices that represent the probability of a threat to cause a component failure and the probability of a component failure to cause a security requirement violation. We applied this model to estimate the security of the AMI, by leveraging the recently established National Institute of Standards and Technology Interagency Report (NISTIR) 7628 guidelines for smart grid security and the International Electrotechnical Commission (IEC) 63351, Part 9 to identify the life cycle for cryptographic key management, resulting in a vector that assigned to each stakeholder an estimate of their average loss in terms of dollars per day of system operation. To further address probabilities of threats, information security analysis can be performed using game theory implemented in dynamic Agent Based Game Theoretic (ABGT) simulations. Such simulations can be verified with the results from game theory analysis and further used to explore larger scale, real world scenarios involving multiple attackers, defenders, and information assets. The strategy for the game was developed by analyzing five electric sector representative failure scenarios contained in the AMI functional domain from NESCOR WG1. From these five selected scenarios, we characterized them into three specific threat categories affecting confidentiality, integrity and availability (CIA). The analysis using our ABGT simulation demonstrated how to model the AMI functional domain using a set of rationalized game theoretic rules decomposed from the failure scenarios in terms of how those scenarios might impact the AMI network with respect to CIA.

24 POWER TRANSMISSION AND DISTRIBUTION↗

DOE OSTI2018

Renovation of Thermal Vacuum Chambers at Idaho National Laboratory (INL) for Testing of Radioisotope Power Systems (RPS)

The Radioisotope Power Systems (RPS) program at Idaho National Laboratory (INL) fuels and performs environmental testing of RPS in support of National Aeronautics and Space Administration (NASA) missions. Recently the programs’ thermal vacuum chambers, housed within INL’s Space and Security Power Systems Facility (SSPSF), underwent successful renovations to improve functional capabilities and system control in support of customer missions. Thermal vacuum system renovations focused primarily on three core functions. The first focus area was integration of semi-automated Programmable Logic Controllers (PLC) to enhance operational feedback and process control. This included the use of numerically controlled vacuum valves and integration of real time feedback from process pressure transducers. Improvements to the system high vacuum pumping technology was the second priority focus. Legacy diffusion pumps were replaced with turbo-molecular and cryogenic pumps to help mitigate the possibility of back streaming diffusion pump oil onto the surface of the test article or radiative cooling surfaces located within the chambers. The third and final core function involved meeting emergent customer thermal requirements. This led to retro-fitting one of the vacuum chambers with a cryogenically cooled Thermal Conditioning Unit (TCU) and thermal shrouds. The TCU utilizes gaseous nitrogen to heat or cool a cylindrical shroud to maintain a set temperature with a programmable range of -I85 °C to I00 °C. With the successful completion of RPS acceptance testing, the newly renovated thermal vacuum chamber systems are operational and better equipped to support testing of Radioisotope Power Systems for space exploration missions.

42 ENGINEERING↗

DOE OSTI2018

Renovation of Thermal Vacuum Chambers at Idaho National Laboratory for Testing of Radioisotope Power Systems

The Radioisotope Power Systems (RPS) program at Idaho National Laboratory (INL) fuels and performs environmental testing of RPS in support of National Aeronautics and Space Administration (NASA) missions. Recently the programs’ thermal vacuum chambers, housed within INL’s Space and Security Power Systems Facility (SSPSF), underwent successful renovations to improve functional capabilities and system control in support of customer missions. Thermal vacuum system renovations focused primarily on three core functions. The first focus area was integration of semi-automated Programmable Logic Controllers (PLC) to enhance operational feedback and process control. This included the use of numerically controlled vacuum valves and integration of real time feedback from process pressure transducers. Improvements to the system high vacuum pumping technology was the second priority focus. Legacy diffusion pumps were replaced with turbo-molecular and cryogenic pumps to help mitigate the possibility of back streaming diffusion pump oil onto the surface of the test article or radiative cooling surfaces located within the chambers. The third and final core function involved meeting emergent customer thermal requirements. This led to retro-fitting one of the vacuum chambers with a cryogenically cooled Thermal Conditioning Unit (TCU) and thermal shrouds. The TCU utilizes gaseous nitrogen to heat or cool a cylindrical shroud to maintain a set temperature with a programmable range of -I85 °C to I00 °C. With the successful completion of RPS acceptance testing, the newly renovated thermal vacuum chamber systems are operational and better equipped to support testing of Radioisotope Power Systems for space exploration missions.

42 ENGINEERING↗

DOE OSTI2018

Renovation of Thermal Vacuum Chambers at Idaho National Laboratory (INL) for Testing of Radioisotope Power Systems (RPS)

The Radioisotope Power Systems (RPS) program at Idaho National Laboratory (INL) fuels and performs environmental testing of RPS in support of National Aeronautics and Space Administration (NASA) missions. Recently the programs’ thermal vacuum chambers, housed within INL’s Space and Security Power Systems Facility (SSPSF), underwent successful renovations to improve functional capabilities and system control in support of customer missions. Thermal vacuum system renovations focused primarily on three core functions. The first focus area was integration of semi-automated Programmable Logic Controllers (PLC) to enhance operational feedback and process control. This included the use of numerically controlled vacuum valves and integration of real time feedback from process pressure transducers. Improvements to the system high vacuum pumping technology was the second priority focus. Legacy diffusion pumps were replaced with turbo-molecular and cryogenic pumps to help mitigate the possibility of back streaming diffusion pump oil onto the surface of the test article or radiative cooling surfaces located within the chambers. The third and final core function involved meeting emergent customer thermal requirements. This led to retro-fitting one of the vacuum chambers with a cryogenically cooled Thermal Conditioning Unit (TCU) and thermal shrouds. The TCU utilizes gaseous nitrogen to heat or cool a cylindrical shroud to maintain a set temperature with a programmable range of -I85 °C to I00 °C. With the successful completion of RPS acceptance testing, the newly renovated thermal vacuum chamber systems are operational and better equipped to support testing of Radioisotope Power Systems for space exploration missions.

42 ENGINEERING↗

DOE OSTI2022

Two-Stage Optimization Framework for Detecting and Correcting Parameter Cyber-Attacks in Power System State Estimation

One major tool of Energy Management Systems for monitoring the status of the power grid is State Estimation. Since the results of state estimation are used within the energy management system, the security of the state estimation process is most important. The focus research in this area is on detecting False Data Injection attacks on measurements. While this is important, State Estimation also rely on database that are used to describe the relationship between measurements and systems' states. This paper presents a two-stage programming framework to detect and correct attacks in the parameters of the measurement model used by the state estimation process in the Energy Management System. In the first stage, an estimate of the line parameters ratios are obtained. In the second stage, the estimated ratios from stage I are used in a Bi-Level model for obtaining a final estimate of the measurements' model parameters. Hence, the presented framework does not only unify the detection and correction in a single optimization run, but also provide a monitoring scheme for the SE database that is typically considered static. In addition, in the two stages, linear programming framework is preserved. For validation, the IEEE 118 bus system is used for implementation. The results of this paper illustrate the effectiveness of the proposed model for detecting attacks in the database used in the state estimation process.

state estimation, two-stage optimization, cyber-ph↗

NASA NTRS1987

The hack attack - Increasing computer system awareness of vulnerability threats

The paper discusses the issue of electronic vulnerability of computer based systems supporting NASA Goddard Space Flight Center (GSFC) by unauthorized users. To test the security of the system and increase security awareness, NYMA, Inc. employed computer 'hackers' to attempt to infiltrate the system(s) under controlled conditions. Penetration procedures, methods, and descriptions are detailed in the paper. The procedure increased the security consciousness of GSFC management to the electronic vulnerability of the system(s).

Quann, John↗

DOE OSTI2022

Irradiation Experiments and Thermal Analysis for Reactor System Design and Analysis at INL

Idaho National Laboratory (INL) is the nation's lead nuclear laboratory working to enhance reactor systems' safety, security, economics, and efficiency. Research and development (R&D) programs at INL support the current fleet of nuclear reactors for safer operation and newer reactors technology design, development, demonstration, and deployment. A major focus of INL's mission is the reactor system design and analysis supported by the irradiation experiments and thermal analysis of advanced and current-generation nuclear fuels and materials. The irradiation experiments and thermal analysis provide a deeper understanding of basic radiation damage processes that can determine the basis for performance improvements and verification of modeling assumptions. These experiments and analyses include experiment management: design, fabrication, characterization, irradiation, and post-irradiation examination. This research involves thermal, neutronic, and material investigation using the INL's Advanced Test Reactor (ATR) and Transient Reactor Test (TREAT) facilities. The results from these experiments and analysis are required to develop the regulatory basis for deploying new or modified fuels and materials. This seminar talk will also provide a general overview of the INL's research facilities, ongoing research programs, core capabilities, and opportunities for students and faculties.

73 NUCLEAR PHYSICS AND RADIATION PHYSICS↗

DOE OSTI2019

Local Feature Sufficiency Exploration for Predicting Security-constrained Generation Dispatch in Multi-Area Power Systems

Deriving generation dispatch is essential for efficient and secure operation of electric power systems. This is usually achieved by solving a security-constrained optimal power flow(SCOPF) problem, which is by nature non-convex, nonlinear and thus computational intensive. The state-of-the-art optimization approaches are not able to solve this problem for large-scale power systems within power system operation time window (usually 5 minutes). In this work, we developed supervised learning approaches to determine security-constrained generation dispatch within much shorter time window. More importantly, the physical constrain of only accessing to local measurements and other information in most utilities’ real-time operation can not be ignored for the predictive models.The feasibility and accuracy of utilizing only local features(measurements and grid information in one area) to predict optimal local generation dispatch (dispatch of all generators in the corresponding area) in multi-area power systems has been explored. The results showed optimal local generation dispatch can be predicted with local features with high accuracy, which is comparable to the results obtained with global features.

Sun, Yixuan↗

DOE OSTI2025

Open Source Intelligence for Cybersecurity Events via Twitter Data

Open-Source Intelligence (OSINT) is largely regarded as a necessary component for cybersecurity intelligence gathering to secure network systems. With the advancement of artificial intelligence (AI) and increasing usage of social media, like Twitter, we have a unique opportunity to obtain and aggregate information from social media. In this study, we propose an AI-based scheme capable of automatically pulling information from Twitter, filtering out security-irrelevant tweets, performing natural language analysis to correlate the tweets about each cybersecurity event (e.g., a malware campaign), and validating the information. This scheme has many applications, such as providing a means for security operators to gain insight into ongoing events and helping them prioritize vulnerabilities to deal with. To give examples of the possible uses, we present three case studies demonstrating the event discovery and investigation processes. We also examine the potential of OSINT for identifying the network protocols associated with specific events, which can aid in the mitigation procedures by informing operators if the vulnerability is exploitable given their system’s network configurations.

Dale, Dakota↗

DOE OSTI2022

CRADA NO. NFE-22-00001 Between CNS and Northrop Grumman Systems Corporation

Consolidated Nuclear Security, LLC (CNS) and Northrop Grumman Systems Corporation (NGC) have established a partnership through the subject Cooperative Research and Development Agreement (CRADA) in three areas of collaboration: (1) Additive Manufacturing (AM) of manufactured carbon-carbon composite materials, (2) modeling and simulation, and (3) specialized chip and circuit board manufacturing for supply chain assurance.

36 MATERIALS SCIENCE↗

NASA NTRS1995

An Overview of ANN Application in the Power Industry

The paper presents a survey on the development and experience with artificial neural net (ANN) applications for electric power systems, with emphasis on operational systems. The organization and constraints of electric utilities are reviewed, motivations for investigating ANN are identified, and a current assessment is given from the experience of 2400 projects using ANN for load forecasting, alarm processing, fault detection, component fault diagnosis, static and dynamic security analysis, system planning, and operation planning.

artificial neural networks ANN electric power syst↗

DOE OSTI2021

Position Papers for the ASCR Workshop on Cybersecurity and Privacy for Scientific Computing Ecosystems

At the request of the Department of Energy's (DOE) Office of Advanced Scientific Computing Research (ASCR), this program committee has been tasked with organizing a workshop to identify basic research needs in cybersecurity and privacy to better support DOE's science and energy mission. As part of the process, the program committee is soliciting community input in the form of position papers to help identify significant use cases, facility issues, and other barriers to enabling verifiably trustworthy computational science while preserving data confidentiality as appropriate for scientific workflows of interest to DOE. The program committee will review these position papers and based on the fit of their area of expertise and interest, selected contributors will have the opportunity to participate in the workshop currently planned as a virtual event November 3-5th, 2021. The thrust areas that will be explored by this workshop are the following: (1) Algorithms for secure, scalable, privacy-enhancing technologies and frameworks, including: Federated AI/ML, Differential privacy, Randomized algorithms, Adversarial modeling & simulation, Graph algorithms, and Formal methods; (2) Platforms to support the entire scientific-computing ecosystem, including edge computing for large-scale experiments, focusing on heterogeneous systems and distributed systems, including: Heterogeneous computing systems, Distributed computing systems, and Secure data architectures; and (3) Data workflows to allow agile use of data while preserving integrity and privacy, making the important properties verifiable either at runtime or post-computation, including: Integrity and provenance and Data management infrastructure. Topics that are out-of-scope for the workshop include discussing specific proposed solutions or areas that are clearly out of DOE's fundamental and applied-sciences mission scope, e.g., cryptography, enterprise security, and general-operations technology.

97 MATHEMATICS AND COMPUTING↗

DOE OSTI2014

Security in the CernVM File System and the Frontier Distributed Database Caching System

Both the CernVM File System (CVMFS) and the Frontier Distributed Database Caching System (Frontier) distribute centrally updated data worldwide for LHC experiments using http proxy caches. Neither system provides privacy or access control on reading the data, but both control access to updates of the data and can guarantee the authenticity and integrity of the data transferred to clients over the internet. CVMFS has since its early days required digital signatures and secure hashes on all distributed data, and recently Frontier has added X.509-based authenticity and integrity checking. In this paper we detail and compare the security models of CVMFS and Frontier.

Dykstra, D.↗

DOE OSTI2020

Desalination for a circular water economy

Today's water systems are enabled by ample fresh water sources, low-cost centralized treatment, and facile wastewater disposal. Climatic change, aging infrastructure, and source water contamination have exposed the vulnerabilities of this linear water paradigm. While seawater desalination enables coastal communities to augment their supply, more broadly securing water systems for municipal, industrial, and agricultural water users will require distributed desalination and fit-for-purpose reuse of nontraditional water sources. Our linear water economy must evolve into a resilient circular water economy, where water is continuously reused and “contaminants” become the feedstocks for other economically valuable processes. Additionally, technology innovation is needed to deliver autonomous, precise, resilient, intensified, modular, and electrified desalination systems that reduce the cost, improve the performance, and enhance the resilience of nontraditional water reuse systems. Meanwhile, strong federal leadership and coordination is needed to accelerate desalination research, promote information gathering efforts to direct technology development, and create an expanded role for non-profit organizations in knowledge dissemination.

29 ENERGY PLANNING, POLICY, AND ECONOMY↗

DOE OSTI2017

Identification of the accident-related critical digital assets based on probabilistic safety analysis results - 225

Digital I and C systems have been developed and installed in nuclear power plants, and due to installation of the digital I and C systems, cyber security concerns are increasing in nuclear industry. However, there are too many critical digital assets (CDAs) to be inspected in digitalized NPPs. In order to reduce the inefficiency of regulation in nuclear facilities, the critical digital assets that are directly related to an accident are elicited by using the probabilistic safety assessment results. Target initial events are selected, and their heading are analyzed through event tree analysis. Among the headings, the headings that can be proceeded directly to the core damage by the cyber-attack are finally selected as the target of deriving the minimum cut-sets. Based on success criteria of each heading, we analyze the fault trees and derive the minimum set-cuts. In terms of original PSA, the value of probability for the cut-sets is important but the probability is not important in terms of cyber security of NPPs. The important factors is the number of basic events consisting of the minimal cut-sets that is proportional to vulnerability. Finally, the process for identifying accident-related CDAs is suggested based on PSA results. The results of this study are expected to be used to derive the linkage between cyber-attack and accident, and to develop the final core digital asset identification methodology and effective regulatory method. (authors)

22 GENERAL STUDIES OF NUCLEAR REACTORS↗