Assessing the security of a mission-critical software system
Explore the source record for details and available documents.
model checking security verification↗
SEARCH · Engineering Papers
Results for “System Security”
Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.
Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.
Secure generation and inversion of tokens
Described herein are various technologies related to secure generation of tokens and secure inversion of tokens. A tokenization system executes in a secure execution environment, and is configured to receive a string and an encrypted tokenization function. The tokenization system decrypts the encrypted tokenization function, and executes the tokenization function over the string to generate a token. The token is transmitted to a logically separate computing environment, and the tokenization system deletes the tokenization function and the string.
Solis, John Hector↗
An Analysis of the Effects of Renewable Energy Intermittency on the 2030 Korean Electricity Market
Republic of Korea has unique geographical characteristics similar to those of an island, resulting in an isolated power system. For this reason, securing sufficient operating reserves for the system’s stability and reliability in the face of the intermittency of increasing variable renewable energy (VRE) is paramount, and this will pave the way to achieving the nation’s decarbonization target and carbon neutrality. However, the current reserve-operation method in Republic of Korea does not take into account energy-system conditions, such as the intermittency of the VRE. Therefore, this paper presents an analysis of the impact of changes in reserve-operation methods on the electricity market in the future Republic of Korean power system, with the increased levels of VRE that are currently envisioned. Specifically, three reserve-operation methods, including Korea’s current reserve-power-operation standards, were applied to the two power-system plans announced by the Korean government to analyze the annual generator operation and costs. The analysis results show that securing reserves proportional to the VRE would exert negative effects, such as increased power-generation costs and the curtailment of nuclear and VRE generation. These results can contribute to the estimation of operational reserves needed for high levels of VRE and to the design of new the Korean reserve market, to be introduced in 2025.
24 POWER TRANSMISSION AND DISTRIBUTION↗
Energy Resilience Through Grid Modernization and Renewables Integration
The National Renewable Energy Laboratory (NREL) is studying renewable energy system integration and security and resilience planning as part of the U.S. Department of Energy's Grid Modernization Initiative. Some recent work focused on incorporating the Value of Resilience into the decision making process for investing in distributed, behind-the-meter energy systems to meet critical loads during grid outages. Cost / benefit analyses show how accounting for the Value of Resilience as a benefit changes solar PV and battery energy storage system capacities for maximum owner benefit.
29 ENERGY PLANNING, POLICY, AND ECONOMY↗
EVs-at-RISC: A Secure and Resilient Interoperable SCM Control System Architecture for Electric Vehicle’s-at-Scale (Final Technical Report)
The EVs-at-RISC project was a five-year research, development, and demonstration initiative to create foundational tools for utility-scale fleet aggregation and Smart Charge Management (SCM) of Electric Vehicles (EV), Electric Vehicle Charging Infrastructure (EVCI), and related Distributed Energy Resources (DER). Rather than seeking to develop and demonstrate highly perfected SCM algorithms and control strategies, this project instead focused on creating foundational software solutions that enable unprecedented digital interoperability across the communications technologies and vendor platforms used to manage EV , EVCI, and DER, as well as existing energy management infrastructure operated by utilities, grid operators, and aggregators. This project then extends these novel interoperability capabilities to develop and deploy powerful middleware abstractions across grid edge networks and EVCI/DER fleet aggregations incorporating modern software tools and best practices, such as CI/CD, to bring the immense capabilities of infrastructure-as-code and policy-as-code to modern grid edge network environments. This addresses the foremost systemic issues preventing realization of any net operational benefits from scaled deployment of behind-the-meter EV, EVCI, and DER assets in electric power grids and markets today. The results of this approach and project unlock massive potential for new SCM capabilities to be easily prototyped, evaluated, and deployed at-scale within the existing grid edge network infrastructure and EVCI/DER technology ecosystem. The EVs-at-RISC project achieves this by extending Open Field Message Bus (OpenFMB), a conceptual model for digital interoperability and distributed intelligence in traditional front-of-meter utility SCADA networks, validating our hypothesis that OpenFMB could be similarly used to solve systemic digital interoperability issues in behind-the-meter environments and unlock real-world utility-scale SCM capabilities without requiring any new proprietary vendor solutions or significant infrastructure reconfiguration.
24 POWER TRANSMISSION AND DISTRIBUTION↗
Lightweight Thermal-Protection System
Hexagonal honeycomb panels secured by Y-shaped plates form lightweight, easily-maintained thermal-protection system. Honeycomb outer panel and fastener materials are selected to match local heating rates. Typical materials include composites, titanium, superalloys, and refractory metals. Advantages include complete symmetry of components--there are no left- or right-hand parts and no asymmetry in thermal expansion.
Macconochie, I. O.↗
Quantum communications system with integrated photonic devices
Security is increased in quantum communication (QC) systems lacking a true single-photon laser source by encoding a transmitted optical signal with two or more decoy-states. A variable attenuator or amplitude modulator randomly imposes average photon values onto the optical signal based on data input and the predetermined decoy-states. By measuring and comparing photon distributions for a received QC signal, a single-photon transmittance is estimated. Fiber birefringence is compensated by applying polarization modulation. A transmitter can be configured to transmit in conjugate polarization bases whose states of polarization (SOPs) can be represented as equidistant points on a great circle on the Poincare sphere so that the received SOPs are mapped to equidistant points on a great circle and routed to corresponding detectors. Transmitters are implemented in quantum communication cards and can be assembled from micro-optical components, or transmitter components can be fabricated as part of a monolithic or hybrid chip-scale circuit.
36 MATERIALS SCIENCE↗
Wide-Band, High-Quantum-Efficiency Photodetector
A design has been proposed for a photodetector that would exhibit a high quantum efficiency (as much as 90 percent) over a wide wavelength band, which would typically be centered at a wavelength of 1.55 m. This and similar photodetectors would afford a capability for detecting single photons - a capability that is needed for research in quantum optics as well as for the practical development of secure optical communication systems for distribution of quantum cryptographic keys. The proposed photodetector would be of the hot-electron, phonon-cooled, thin-film superconductor type. The superconducting film in this device would be a meandering strip of niobium nitride. In the proposed photodetector, the quantum efficiency would be increased through incorporation of optiA design has been proposed for a photodetector that would exhibit a high quantum efficiency (as much as 90 percent) over a wide wavelength band, which would typically be centered at a wavelength of 1.55 m. This and similar photodetectors would afford a capability for detecting single photons - a capability that is needed for research in quantum optics as well as for the practical development of secure optical communication systems for distribution of quantum cryptographic keys. The proposed photodetector would be of the hot-electron, phonon-cooled, thin-film superconductor type. The superconducting film in this device would be a meandering strip of niobium nitride. In the proposed photodetector, the quantum efficiency would be increased through incorporation of opti-
Jackson, Deborah↗
LLNS Request for Permanent Variance from 10 CFR 851 for the Construction of Commercial Type Structures and Systems
Lawrence Livermore National Security, LLC (LLNS) requests variance from10 CFR 851 (the Rule) for the construction of commercial type structures and systems. The request is based upon successful application of similar variances granted to LLNS in continued support of the National Nuclear Security Administration (NNSA) initiative to streamline the delivery of commercial type line-item construction projects under $50 million. This request is aligned with the approved NA-50 safety approach.
99 GENERAL AND MISCELLANEOUS↗
A Four-Layer Cyber-Physical Security Model for Electric Machine Drives Considering Control Information Flow
Despite the IEEE Power Electronics Society (PELS) establishing Technical Committee 10 on Design Methodologies with a focus on the cyber-physical security of power electronics systems, a holistic design methodology for addressing security vulnerabilities remains underdeveloped. This gap largely stems from the limited integration of computer science and power/control engineering studies in this interdisciplinary field. Addressing the inadequacy of unilateral cyber or control perspectives, this article presents a novel four-layer cyber-physical security model specifically designed for electric machine drives. Central to this model is the innovative control information flow (CIF) model, residing within the control layer, which serves as a pivotal link between the cyber layer's vulnerable resources and the physical layer's state-space models. By mapping vulnerable resources to control variable space and tracing attack propagation, the CIF model facilitates accurate impact predictions based on tainted control laws. The effectiveness and validity of this proposed model are demonstrated through hardware experiments involving two typical cyber-attack scenarios, underscoring its potential as a comprehensive framework for multidisciplinary security strategies.
97 MATHEMATICS AND COMPUTING↗
Systems-To-Atoms (S2A): enabling hydrogen for climate security
The project addresses a critical gap in hydrogen infrastructure by integrating system-level energy models with atomic-scale material simulations in a unified Systems-to-Atoms (S2A) framework. The motivation stems from the need to develop efficient, cost-effective, and durable hydrogen transport and utilization technologies to support decarbonization of hard-to-electrify sectors such as heavy-duty transportation. Current system models lack awareness of material performance mechanisms, while material-scale models do not account for system-level usage and variability. To bridge this divide, the team developed a co-simulation capability linking techno-economic analyses, reactor/process-flow modeling, and molecular-scale catalysis simulations. Applied to hydrogen delivery in California, the framework enabled comparative evaluations of compressed, cryogenic, and liquid organic hydrogen carrier (LOHC) pathways, highlighting how catalyst operation and unit process efficiency influence overall performance. The results demonstrate that no single material or transport mode is universally optimal; instead, heterogeneous solutions tuned to specific operational contexts deliver better performance. The project delivers a new capability for cross-scale material co-design, advancing hydrogen infrastructure readiness and informing DOE and LLNL missions in climate and energy resilience.
organic↗
Signal Decomposition for Intrusion Detection in Reliability Assessment in Cyber Resilience (Summary Report)
The complexity of assuring cyber resilience for physical process interactions in connected systems such as energy grids increases dramatically as the coupling between processes becomes more direct and responsive. An example of this growing complexity is provided by Integrated Energy Systems (IES), in which various processes such as nuclear heat generation and commodity production are being directly coupled for increased responsiveness to highly variable signals such as market pricing or electricity demand. As such, the potential attack surface of the coupled processes is larger than the two processes independently. Securing these complex systems requires two-fold monitoring: cybersecure monitoring for potential malicious incursion, and physics monitoring for system tampering. Physics monitoring includes analyzing the behavior of the signals within the system for anomalous behavior. This analysis has been shown to be insufficient if approached by only data-driven machine learning and artificial intelligence (MLAI) techniques or only low-level model comparison. Previous efforts at Purdue University suggested combining high-fidelity models with MLAI algorithms as a basis for a software tool for detecting anomalies in physical processes. This work built on that suggestion, developing an advanced library for signal decomposition and analysis using both MLAI and high-fidelity physics algorithms for greatly improved anomaly detection, especially false data injection. This software can be used as part of a secure imbedded intelligence (SEI) system designed under Consequence-driven Cyber-informed Engineering (CCE) for complex coupled systems. This library established a foundation for online and posteriori analysis of digital signals for the purpose of detecting potential malicious tampering in digital signals representing physical processes. Demonstrations carried out throughout the development highlight the effective use of characterization algorithms to detect signal perturbations, particularly triangle attack-style perturbations, in three wide-ranging applications: seismic monitoring, nuclear thermal hydraulics system simulation, and custom manufacturing.
97 MATHEMATICS AND COMPUTING↗
Rapid neutron and gamma-ray source localization using machine learning
Rapid localization of radiation sources is critical for applications including nuclear emergency response, safeguards, and security. However, conventional imaging systems such as neutron scatter cameras and Compton cameras depend on rare coincidence events, which often result in long acquisition times. In this work, we address the challenge of rapid source localization by developing a machine learning approach to predict the direction of a single radiation source using only count rates from an array of neutron and gamma-ray detectors. The proposed model is a fully connected neural network (FCNN) trained using Monte Carlo simulation data from a 252 Cf source. The model hyperparameters are optimized with a small set of routine 252 Cf measurements. We benchmarked the performance of the trained and optimized machine learning model using additional 252 Cf , 137 Cs , and PuBe measurements under laboratory conditions with varying source-detector configurations. For these measurements, the machine learning model achieved a mean localization error smaller than 30° with 3 x 10 3 system counts, corresponding to 8 s measurement time for the imaging system used in this work. In this low-statistics regime, the method outperformed traditional scatter-based imaging by more than 75% in localization accuracy for the evaluated measurement configurations. These results demonstrate that a machine learning-based approach can significantly reduce the time required for accurate single-source localization, providing a robust and computationally efficient alternative to traditional imaging systems in time-critical nuclear security and emergency response scenarios.
Gamma-ray imaging↗
Cyber Security Concerns for Sharing Distributed Antenna Systems
Wireless access to data is a challenge for environments with poor radio frequency coverage such as nuclear power plants. An 802.11 Wi-Fi data network is often not a cost-effective solution not a cost-effective solution due to the requirement for extensive antenna outlays in large nuclear facilities and poor signal penetration due to thick concrete walls. Combining commercial Long-Term Evolution (LTE) with an existing distributed antenna system’s (DAS) resources and infrastructure is an attractive solution due to and lower cost of implementation and likely coverage increases. A 2017 technical report by EPRI has demonstrated that multiple systems such as Land Mobile Radio (LMR) and LTE can be operated using the same DAS and by sharing the leaky coaxial cabling and indoor antenna systems (Reference 1). Since the radio frequency (RF) bands used by the two wireless systems are specified to be non-overlapping, it is believed that the systems are isolated from each other. No extensive analysis has been conducted to determine whether RF signals from one system sharing antennas and coaxial cable can influence another. This paper investigates the assumption of isolation between the two wireless systems and provides recommendations for future needed work to identify specific vulnerabilities and potential mitigations.
97 MATHEMATICS AND COMPUTING↗
Integrating Data Sources for Improved Safeguards and Accountancy of Electrochemical Fuel Reprocessing Systems. Final Report
Electrochemical reprocessing (also commonly known as “pyroprocessing”) of used nuclear fuel is an alternative to aqueous reprocessing that confers a number of advantages, including the ability to process more recently-discharged fuel, smaller resultant waste volumes, and the lack of isolation of plutonium in the product stream. While electrochemical reprocessing systems have seen a significant research and development effort, nuclear safeguards and security of these systems remains under-developed, particularly given the significant differences in operating environment and process flowsheet compared with established aqueous methods. Objective 4 of DOE’s nuclear energy research and development activities in Nuclear Energy Research and Development Roadmap is: “Understand and minimize the risks of nuclear proliferation and terrorism.” Material Control & Accountancy (MC&A) programs at nuclear processing plants deter and detect theft and diversion of nuclear material by both outside and inside adversaries. Empirical modeling and data analytics of online measurements and state indicators can improve the timeliness of detection and reduce the uncertainty in accountancy measures. To support the development and demonstration of such methods, data are needed that capture expected measurement values collected throughout electrochemical reprocessing facilities. A review of the available literature of current research in measurements for electrochemical reprocessing systems identified twenty-two candidate measurement methodologies, which characterize fuel/salt composition, concentrations of various isotopes and elements, and operational parameters throughout the reprocessing facility. Four primary measurement methodologies have been simulated based on either physical simulations or empirical correlations: gamma emissions, neutron emissions, hybrid k-edge densitometry (HKED), and cyclic voltammetry. Initial investigation into the use of these measures for process monitoring and detection suggests the approach is viable and worthy of further investigation. This report summarizes efforts to generate signatures of key measurements during operation of electrochemical reprocessing facilities and initial investigation of data analytics to support process monitoring, diversion detection, and accountancy.
11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗
Automated Cyber Security Testing Platform for Industrial Control Systems.
Abstract not provided.
Hahn, Andrew Stuart↗