Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “Secure by Design”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 667 records · Page 37
All sourcesNASA NTRSDOE OSTI
NASA NTRSDate not supplied

Architecting Safer Autonomous Aviation Systems

The aviation literature gives relatively little guidance to practitioners about the specifics of architecting systems for safety, particularly the impact of architecture on allocating safety requirements, or the relative ease of system assurance resulting from system or subsystem level architectural choices. As an exemplar, this paper considers common architectural patterns used within traditional aviation systems and explores their safety and safety assurance implications when applied in the context of integrating artificial intelligence (AI) and machine learning (ML) based functionality. Considering safety as an architectural property, we discuss both the allocation of safety requirements and the architectural trade-offs involved early in the design lifecycle. This approach could be extended to other assured properties, similar to safety, such as security. We conclude with a discussion of the safety considerations that emerge in the context of candidate architectural patterns that have been proposed in the recent literature for enabling autonomy capabilities by integrating AI and ML. A recommendation is made for the generation of a property-driven architectural pattern catalogue.

Architecture patterns↗
DOE OSTI2025

2025 Intern Poster

The Hot Fuel Examination Facility (HFEF) at the Materials and Fuels Complex (MFC) houses the largest U.S. inert atmosphere hot cell for nuclear material research. Key features include the precision gamma scanning (PGS), Fuel Accident Condition Simulator (FACS), Neutron Radiography Reactor (NRAD), and the focus of this project, the Metallograph Loading Cell (MET Cell). The MET Cell performs tests on spent nuclear fuel, such as microhardness testing, microscopy, and neutron radiography. However, the MET Cell’s existing pressure and lighting control systems are outdated and inefficient, with inadequate documentation for system changes over time. This project aims to design a new automated control system for the MET Cell, ensuring longevity (minimum ten years), ease of troubleshooting/repair, and integration into the building monitoring system. The design process addressed challenges such as space restrictions, varied voltages within enclosures, sourcing new components, and security limitations. Compliance with NFPA 70, UL508A, MFC Physical Security, and INL Engineering standards was essential. The project involves repurposing an existing PLC to manage lighting and pressure control using digital and analog signals, simplifying wiring, and ensuring thorough documentation for future reference.

42 - ENGINEERING↗
DOE OSTI2021

Safeguards by Design Projects (Final Report FY2021)

This University Engagement project challenged engineering students at universities, that do not have Bachelor degrees in nuclear engineering but do have research reactors and some nuclear engineering coursework, to incorporate Safeguards by Design concepts into their Senior Capstone Design Project. This University Engagement project was part of the U. S. Department of Energy’s (DOE) National Nuclear Security Administration (NNSA), Office of Defense Nuclear Nonproliferation, Office of International Nuclear Safeguards, Next Generation Safeguards Initiative, Human Capital Development: University Engagement Program. This program exposed university students with Mechanical Engineering majors and Nuclear Engineering minors to the concepts of international nuclear safeguards.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗
DOE OSTI2023

Workshop on Establishing and Operating a National Nuclear Security Support Centre Hypothetical Scenario: “Centralia Nuclear Security Support Centre Strategy Implementation Plan”

[This is part of a hypothetical scenario-based exercise for workshop participants, based on the fictitious country "Centralia."] In prior years, as a part of efforts to strengthen and better sustain nuclear security within the State, Centralia requested through the Integrated Nuclear Security Support Plan (INSSP) framework that the International Atomic Energy Agency (IAEA) conduct an expert mission on establishing and operating a national nuclear security support centre (NSSC). After the IAEA conducted the NSSC expert mission, members of the Centralia Committee on Nuclear Security (CNS) agreed to initiate the feasibility determination phase of establishing an NSSC, in line with the systematic process recommended by the IAEA. Centralia Nuclear Regulatory Authority (CNRA), as the designated lead organization for coordinating the feasibility determination process, prepared a Feasibility Report in collaboration with members of the CNS and based on input gathered among relevant national stakeholders. The report was presented to the National Security Advisor (NSA), who reviewed and approved the proposal for Centralia to proceed with establishing an NSSC. After Centralia moved into the planning phase for the Centralia Nuclear Security Support Centre (CNSSC), per REF, the primary stakeholders of the centre jointly developed this strategy implementation plan, which provides an outline of the organizational structure, needs analysis, programme objectives, financial and project management, risk management, and other key aspects of the centre. This document will be reviewed and updated as necessary on a semi-annual basis during the project implementation period of establishing CNSSC.

29 ENERGY PLANNING, POLICY, AND ECONOMY↗
NASA NTRS2016

Reliable Design Versus Trust

This presentation focuses on reliability and trust for the users portion of the FPGA design flow. It is assumed that the manufacturer prior to hand-off to the user tests FPGA internal components. The objective is to present the challenges of creating reliable and trusted designs. The following will be addressed: What makes a design vulnerable to functional flaws (reliability) or attackers (trust)? What are the challenges for verifying a reliable design versus a trusted design?

Field Programmable Gate Aray (FPGA)↗
DOE OSTI2022

Networked Microgrid Cybersecurity Architecture Design Guide: A New Jersey TRANSITGRID Use Case

Microgrids require reliable communication systems for equipment control, power delivery optimization, and operational visibility. To maintain secure communications, Microgrid Operational Technology (OT) networks must be defensible and cyber-resilient. The communication network must be carefully architected with appropriate cyber-hardening technologies to provide security defenders the data, analytics, and response capabilities to quickly mitigate malicious and accidental cyberattacks. In this work, we outline several best practices and technologies that can support microgrid operations (e.g., intrusion detection and monitoring systems, response tools, etc.). Then we apply these recommendations to the New Jersey TRANSITGRID use case to demonstrate how they would be deployed in practice.

24 POWER TRANSMISSION AND DISTRIBUTION↗
NASA NTRS2004

Securing Safety with Sensors

The Robot Systems Technology Branch at NASA's Johnson Space Center collaborated with the Defense Advanced Research Projects Agency to design Robonaut, a humanoid robot developed to assist astronauts with Extra Vehicular Activities (EVA) such as space structure assembly and repair operations. By working side-by-side with astronauts or going where risks are too great for people, Robonaut is expected to expand the Space Agency s ability for construction and discovery. NASA engineers equipped Robonaut with human-looking, dexterous hands complete with five fingers to accomplish its tasks. The Robonaut hand is one of the first being developed for space EVA use and is the closest in size and capability to a suited astronaut s hand. As part of the development process, an advanced sensor system was needed to provide an improved method to measure the movement and forces exerted by Robonaut s forearms and hands.

Source record↗
NASA NTRS2003

The HYDROS Mission: Requirements and Baseline System Design

The HYDROS mission is under development by NASA as part of its Earth System Science Pathfinder (ESSP) program. HYDROS is designed to provide global maps of the Earth's soil moisture and freezel/thaw state every 2-3 days, for weather and climate prediction, water and carbon cycle studies, natural hazards monitoring, and national security applications. HYDROS uses a unique active and passive L-band microwave system that optimizes measurement accuracy, spatial resolution, and coverage. It provides measurements in nearly all weather conditions, regardless of solar illumination. The designs of the radar and radiometer electronics, antenna feedhorn and reflector, and science data system, are driven by specific mission and science objectives. These objectives impose requirements on the frequencies, polarizations, sampling, spatial resolution, and accuracy of the system. In this paper we describe the HYDROS mission requirements, baseline design, and measurement capabilities.

soil moisture↗
DOE OSTI2025

Tactical Analysis for Calculating Contextual Risk at Boundaries: Summary of Laboratory Directed Research & Development Effort

The Tactical Analysis for Calculating Contextual Risk at Boundaries (TACCRAB) tool is an innovative digital twin (DT) platform and automated risk algorithm designed to transform operational decision-making in structured screening environments, with an initial focus on Southern Border Land Ports of Entry (POEs). The invention provides integration points for advanced artificial intelligence, predictive modeling, and real-time data analysis to produce a comprehensive risk management tool that enables proactive, data-informed security strategies. The core inventive features of TACCRAB center on its unique risk algorithm, which dynamically calculates contextual risk by synthesizing historical data, near real-time streaming data from the checkpoints themselves, and AI-generated predictions. Unlike traditional risk assessment methods, TACCRAB utilizes a DT to provide comprehensive operational insights, allowing stakeholders to visualize, simulate, and optimize checkpoint configurations with unprecedented speed and contextual awareness. TACCRAB's key innovation lies in its ability to combine multiple complex inputs - including technology detection probabilities, resource availability, screening pathway characteristics, and threat actor behavioral patterns - into a unified risk calculation and update these inputs based on changing operational and environmental conditions. By leveraging a DT that continuously updates and learns from linked data, TACCRAB can suggest adaptive mitigation strategies that minimize risk while maintaining operational efficiency. Particularly novel is the platform's approach to decision support, which goes beyond static risk assessment. The DT provides dynamic metrics such as wait times, resource allocation effectiveness, and potential emerging threat scenarios, enabling users to view sophisticated, relevant what-if simulations and optimize checkpoint operations in near real-time. The system's architecture allows for generalized application across different screening environments, such as secure facilities, ports of entry, and soft targets, making it a versatile tool for security and operational management. The invention distinguishes itself through its comprehensive integration of predictive modeling, AI-driven pattern discovery, and user-friendly interface design. By combining these elements, TACCRAB transforms complex risk data into actionable insights, supporting decision-makers at various organizational levels - from booth agents making split-second screening decisions to checkpoint managers optimizing the day's resource allocation to strategic planners managing long-term investments.

45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗
DOE OSTI2021

Universal Utility Data Exchange (UUDEX) Phase 4 Demonstration Environment and Results

This report provides an overview of the environment used by the Pacific Northwest National Laboratory (PNNL) in the Universal Utility Data Exchange (UUDEX) Phase 4 demonstration, and description of the demonstrations performed in the environment. The UUDX Phase 4 demonstration took place on March 31, 2021, with representatives from PNNL and the two project sub-contractors, OATI and MITRE, performing the demonstration for members of the UUDEX Industry Advisory Board (IAB). The demonstration tasks were based on the previous Phase 3 demonstration but conducted in a multi-site environment. Additional demonstrations showed features that were developed since the Phase 3 demonstration. The development environment was constructed by PNNL programming staff using the previously developed UUDEX Functional Design, Protocol Design, and Workflow Design documents as a starting point. The environment was augmented with subject creation management and access control security data structures and workflows, and data exchange structure documents developed as part of Phase 3 and Phase 4.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2023

Effect of Lateral Conduction in a Rectangular Fuel Plate and Optimum Stripe Widths for the OPAL Reactor

The impetus for this work is the Proliferation Resistance Optimization (PRO-X) program, which was created by the National Nuclear Security Administration (NNSA) of the US Department of Energy (DOE) to provide a framework for developing reactor designs that minimize the production of special nuclear materials while maximizing performance for peaceful uses. The Argentine company INVAP and Argonne National Laboratory collaborated to share knowledge and expertise regarding the thermal analysis of research reactors. Working together, they designed a series of test problems based on the Open Pool Australian Light Water (OPAL) reactor, whose fuel is in the form of flat plates cooled by water flowing through narrow rectangular channels. ANL used their PLTEMP/ANL code. INVAP used their TERMIC code (and its new multi-plate version, TERMIC-MP). Then, INVAP and ANL compared the two sets of results. 1-D models were used during the collaboration since for research reactor analysis, largely 1-D thermal-hydraulics models are commonly used because they are simple to apply and technically defendable. The collaboration between the two organizations aims for improvements in thermal-hydraulic models. Improvements to methods and models can reduce modeling uncertainties and excessive conservatism, allowing greater reactor performance without reducing predicted safety margins. Therefore, these improvements potentially expand the design space, making additional designs feasible, which, in turn, may achieve better fuel utilization and proliferation resistance in the designs. This report provides justification for the lateral node size (stripe width) chosen for the 1-D computer models during the collaboration. The lateral heat conduction in OPAL fuel plates is evaluated using the two-dimensional conduction capability of PLTEMP/ANL to determine a representative hot-stripe width that can be conservatively used for one-dimensional steady-state thermal-hydraulic analysis. Basically, a representative hot-stripe width needs to be selected so that the actual heat flux averaged over this stripe width is greater than or equal to the maximum heat flux obtained by the two-dimensional analysis. Detailed results in this report show that a hot-stripe width of 8.125 mm can be conservatively used for the one-dimensional thermal-hydraulics analysis of all plates. Therefore, eight equal stripes (8.125 mm each) are recommended to be modeled in the MCNP and PLTEMP/ANL full core models of the OPAL reactor.

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗
NASA NTRS1991

Review of Estelle and LOTOS with respect to critical computer applications

Man rated NASA space vehicles seem to represent a set of ultimate critical computer applications. These applications require a high degree of security, integrity, and safety. A variety of formal and/or precise modeling techniques are becoming available for the designer of critical systems. The design phase of the software engineering life cycle includes the modification of non-development components. A review of the Estelle and LOTOS formal description languages is presented. Details of the languages and a set of references are provided. The languages were used to formally describe some of the Open System Interconnect (OSI) protocols.

Bown, Rodney L.↗
NASA NTRS1992

Rolling-Friction Robotic Gripper

Robotic gripper using rolling-friction fingers closes in on object with interface designed to mate with rollers somewhat misaligned initially, aligns object with respect to itself, then holds object securely in uniquely determined position and orientation. Operation of gripper causes minimal wear and burring of gripper and object. Exerts minimal friction forces on object when grasping and releasing. Releases object easily and reliably even when side forces and torques are between itself and object.

Vranish, John M.↗
NASA NTRS2001

Enabling Advanced Automation in Spacecraft Operations with the Spacecraft Emergency Response System

True autonomy is the Holy Grail of spacecraft mission operations. The goal of launching a satellite and letting it manage itself throughout its useful life is a worthy one. With true autonomy, the cost of mission operations would be reduced to a negligible amount. Under full autonomy, any problems (no matter the severity or type) that may arise with the spacecraft would be handled without any human intervention via some combination of smart sensors, on-board intelligence, and/or smart automated ground system. Until the day that complete autonomy is practical and affordable to deploy, incremental steps of deploying ever-increasing levels of automation (computerization of once manual tasks) on the ground and on the spacecraft are gradually decreasing the cost of mission operations. For example, NASA's Goddard Space Flight Center (NASA-GSFC) has been flying spacecraft with low cost operations for several years. NASA-GSFC's SMEX (Small Explorer) and MIDEX (Middle Explorer) missions have effectively deployed significant amounts of automation to enable the missions to fly predominately in 'light-out' mode. Under light-out operations the ground system is run without human intervention. Various tools perform many of the tasks previously performed by the human operators. One of the major issues in reducing human staff in favor of automation is the perceived increased in risk of losing data, or even losing a spacecraft, because of anomalous conditions that may occur when there is no one in the control center. When things go wrong, missions deploying advanced automation need to be sure that anomalous conditions are detected and that key personal are notified in a timely manner so that on-call team members can react to those conditions. To ensure the health and safety of its lights-out missions, NASA-GSFC's Advanced Automation and Autonomy branch (Code 588) developed the Spacecraft Emergency Response System (SERS). The SERS is a Web-based collaborative environment that enables secure distributed fault and resource management. The SERS incorporates the use of intelligent agents, threaded discussions, workflow, database connectivity, and links to a variety of communications devices (e.g., two-way paging, PDA's, and Internet phones) via commercial gateways. When the SERS detects a problem, it notifies on-call team members, who then can remotely take any necessary actions to resolve the anomalies.The SERS goes well beyond a simple '911' system that sends out an error code to everyone with a pager. Instead, SERS' software agents send detailed data (i.e., notifications) to the most appropriate team members based on the type and severity of the anomaly and the skills of the on-call team members. The SERS also allows the team members to respond to the notifications from their wireless devices. This unique capability ensures rapid response since the team members no longer have to go to a PC or the control center for every anomalous event. Most importantly, the SERS enables safe experimentation with various techniques for increasing levels of automation, leading to robust autonomy. For the MIDEX missions at NASA GSFC, the SERS is used to provide 'human-in-the-loop' automation. During lights-out operations, as greater control is given to the MIDEX automated systems, the SERS can be configured to page remote personnel and keep them informed regarding actions taking place in the control center. Remote off-duty operators can even be given the option of enabling or inhibiting a specific automated response in near real time via their two-way pagers. The SERS facilitates insertion of new technology to increase automation, while maintaining the safety and security of mission resources. This paper will focus on SERS' overall functionality and how SERS has been designed to handle the monitoring and emergency response for missions with varying levels of automation. The paper will also convey some of the key lessons learned from SERS' deployment across of variety of missions, highlighting this incremental approach to achieving 'robust autonomy'.

Breed, Julie↗
NASA NTRS2000

A Faster Fastener

A licensing agreement between Marshall Space Flight Center and M&A Screw and Machineworks has brought the quick connect nut to the commerical market. Originally designed as part of a project seeking in-space assembly techniques, the quick connect nut is secured around a bolt merely by pushing it onto the bolt and giving it a single twist. Applications for the nuts include oil drilling platforms, mining industry, and other practices that rely on speedy assembly for success.

Source record↗
NASA NTRS2016

Verification of Triple Modular Redundancy Insertion for Reliable and Trusted Systems

If a system is required to be protected using triple modular redundancy (TMR), improper insertion can jeopardize the reliability and security of the system. Due to the complexity of the verification process and the complexity of digital designs, there are currently no available techniques that can provide complete and reliable confirmation of TMR insertion. We propose a method for TMR insertion verification that satisfies the process for reliable and trusted systems.

Verification↗
DOE OSTI2022

Licensing, Regulations and Developing Guidance for Nuclear Technology Deployment for Embarking countries in Africa

The African region is witnessing an increased number of countries at different stages of implementing or considering the introduction of peaceful nuclear power programs to meet the demand of their rapidly growing economies as well as clean energy needs. Grid size, cost, licensing, and regulations will be some of the challenges to deploying larger power reactors. A key element of the regulatory framework will be the inclusion of nuclear security information and assurance that security is integrated into the license review process.As each country continue to implement and consider different reactor designs from several vendors, the significance of customer knowledge of licensing, Regulations, and guidance document to facilitate the deployment and operational needs for nuclear technology cannot be over-emphasized. This special session will bring together a selected panel of key stakeholders and policymakers from embarking countries in Africa to participate in a panel discussion to share their experience in the licensing, regulations, and development of guidance for power plant deployment. The session will also consider and identify potential gaps that may affect the licensing and regulatory applications for the future nuclear infrastructure. As well, the panel will promote regional networking and communication to increase capacities in readiness for the potential deployment of additional technology, such as Small Modular Reactors.

Dahunsi, Stephen↗
DOE OSTI2020

Optimization of the Post-Operational Phase on Two Belgian Multi-Unit Nuclear Power Plants: the Case of the Non-Fissile Irradiated Core Items - 20156

The current legal framework in Belgium foresees the progressive phase out of nuclear power between October 2022 (Doel 3) and December 2025 (Doel 2). Upon its definitive shutdown, each unit of the Tihange and Doel sites will enter a Post-Operational Phase (POP) and be prepared for its Decontamination and Decommissioning (D and D). Prior to obtaining the D and D license, the Operator Electrabel is legally required to remove any non-fissile irradiated core items stored in the deactivation pools. The non-fissile irradiated core items consist essentially of control rods, poison rods and source thimbles as well as thimble plugs and foreign materials irradiated during operation: - Their significant content in highly radiant radionuclides (up to 6 TBq of Co-60 per kg of irradiated material) renders all existing operational waste management processes inadequate due to insufficient biological shielding; - Their high concentrations in long-lived radionuclides call for their disposal in a geological repository for which no final design nor waste acceptance criteria are expected prior to 2050. Uncertainties in the Belgian energy supply and security, however, require the Operator to be prepared for a partial nuclear phase out, where one or more units would benefit from lifetime extension while the remaining units would undergo decommissioning. The present paper aims at presenting how Electrabel, in partnership with Tractebel, addressed this challenge by maximizing the use of synergies within the respective sites as well as between both sites themselves, all the while accounting for site specificities. The most recent results and state of progress of the project will be detailed and the first lessons learned will be shared. The project has been split in multiple tasks and phased as follows: - An inventory phase aimed at mapping the contents, origin, composition and history of the non-fissile irradiated core items; - A pre-characterization phase based on neutron activation models; - A waste sorting phase aimed at separating waste forms for which an evacuation route exists from those for which such route does not exist; - A feasibility phase aimed at exploring all possible scenarios for the management of non-fissile irradiated core items and identifying the optimal feasible solution for each site; - A preparation phase (currently ongoing), developing further the optimal solution and ensuring that back-up solutions are available for any foreseeable change of context (licensing issue, modification in the nuclear phase-out program, etc.) and initiating early contacts with potential subcontractors for segmentation works and cask manufacturers, as well as the Belgian regulatory body and waste management agency. This phase also foresees the investigation of destructive and non-destructive radiological measurements to support the detailed characterization of the waste forms; - A realization phase (future work). (authors)

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗