Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “Secure by Design”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 685 records · Page 38
All sourcesNASA NTRSDOE OSTI
DOE OSTI2020

Sequim Campus Master Plan

Based in Richland, Washington, Pacific Northwest National Laboratory (PNNL) is one of ten U.S. Department of Energy (DOE) Office of Science (SC) national laboratories. PNNL is DOE’s premier chemistry, earth sciences, and data analytics laboratory, delivering vital mission impacts in energy resiliency and national security. PNNL has 19 core capabilities, each a powerful combination of world-class staff, state-of-the- art equipment, and mission-ready facilities. These capabilities represent a collective set of skills and a body of world-leading scientific and engineering work that provides exceptional value and mission delivery to DOE, the National Nuclear Security Administration (NNSA), the U.S. Department of Homeland Security (DHS), and other federal agencies and industry through strategic partnership projects on a not-to-interfere basis. Currently operated by Battelle Memorial Institute, PNNL occupies more than 2.3 million gross square feet (GSF) of buildings and employs approximately 4,700 staff members. PNNL has implemented a rolling 10-year campus strategy, initiated in fiscal year 2013, designed to deliver the foundation for the multidisciplinary science and engineering expertise, equipment, instrumentation, facilities, and infrastructure required to continue providing exceptional value and mission delivery. This strategy is incorporated into PNNL’s annual Laboratory Plan, which serves as DOE-SC’s equivalent of the Five- Year Site Plan required by DOE Order 430.1C Chg. 1, Real Property Asset Management. The PNNL Sequim Campus is located in Clallam County, just outside of Sequim, Washington. PNNL Sequim builds upon a rich history of research related to marine and coastal resources, environmental chemistry, water resources modeling, ecotoxicology, biotechnology, and national security. Facilities at the PNNL Sequim Campus were designed to take advantage of two unique locational assets: the pristine coastal ocean water in Sequim Bay and the region’s exceptionally clean air. Research facilities on the waterfront are supplied with up to 200 gallons per minute (gpm) of seawater and/or groundwater that enables research on aquatic systems ranging from fully seawater to fresh water, with an onsite water treatment system that removes all biological and hazardous chemical residues prior to discharge. Multiple large seawater tanks outside the waterfront laboratories, along with a boat ramp, pier, and floating dock, enable lab-to-field research. The uplands facility takes advantage of the amazing air quality and is built and operated to enable ultratrace chemical/radiological analytical chemistry. This combination of capabilities is not available at any other marine laboratory in the nation.

37 INORGANIC, ORGANIC, PHYSICAL, AND ANALYTICAL CH↗
DOE OSTI2021

Digital data provenance for the power grid based on a Keyless Infrastructure Security Solution

In this work a data provenance system for grid-oriented applications is presented. The proposed Keyless Infrastructure Security Solution (KISS) provides mechanisms to store and maintain digital data fingerprints that can later be used to validate and assert data provenance using a time-based, hash tree mechanism. The developed solution has been designed to satisfy the stringent requirements of the modern power grid including execution time and storage necessities. Its applicability has been tested using a lab-scale, proof-of-concept deployment that secures an energy management system against the attack sequence observed on the 2016 Ukrainian power grid cyberattack. The results demonstrate a strong potential for enabling data provenance in a wide array of applications, including speed-sensitive applications such as those found in control room environments.

Sebastian Cardenas, David J.↗
DOE OSTI2024

FiberFlex: Real-time FPGA-based Intelligent and Distributed Fiber Sensor System for Pedestrian Recognition

In recent years, security monitoring of public places and critical infrastructure has heavily relied on the widespread use of cameras, raising concerns about personal privacy violations. To balance the need for effective security monitoring with the protection of personal privacy, we explore the potential of optical fiber sensors for this application. This article proposes FiberFlex, an intelligent and distributed fiber sensor system. Ultizing Field Programmable Gate Arrays (FPGA) high-level synthesis (HLS) acceleration, FiberFlex offers real-time pedestrian detection by co-designing the entire pipeline of optical signal acquisition, processing, and recognition networks based on the principles of optical fiber sensing. As a promising alternative to traditional camera-based monitoring systems, FiberFlex achieves pedestrian detection by analyzing the vibration patterns caused by pedestrian footsteps, enabling security monitoring while preserving individual privacy. FiberFlex comprises three modules: First , fiber-optic sensing system: A fiber-optic distributed acoustic sensing (DAS) system is built and used to measure the ground vibration waves generated by people walking. Second , algorithms: We first collect the training data by measuring the ground vibration waves, label the data, and use the data to train the neural network models to perform pedestrian recognition. Third , hardware accelerators: We use HLS tools to design hardware modules on FPGA for data collection and pre-processing and integrate them with the downstream neural network accelerators to perform in-line real-time pedestrian detection. The final detection results are sent back from FPGA to the host CPU. We implement our system FiberFlex with the in-house built DAS system and AMD/Xilinx Kintex7 FPGA KC705 board and verify the whole system using the real-world collected data. We conduct recognition tests on five test subjects of varying ages, heights, and weights in a fixed sensing area. Each subject experienced 20 real-time recognition tests using their daily walking habits, and the subjects were given adequate rest between tests. After 100 tests on five test subjects, the overall real-time recognition accuracy exceeded \(88.0\%\) . The whole system uses 55 W of power, 33 W in the optical DAS system and 22 W in the FPGA. Relying on its end-to-end interdisciplinary design, FiberFlex seamlessly combines fiber-optic sensors with FPGA accelerators to enable low-power real-time security monitoring without compromising privacy, making it a valuable addition to the existing security monitoring network. According to FiberFlex, more valuable research can be conducted in the future, such as fall monitoring for the elderly, migration of identification networks between different application scenarios, and improvement of anti-interference performance in more complex environments. In future perception networks, where the “eyes” are not feasible, let’s use fiber optic touch instead.

Distributed↗
NASA NTRS1997

Optical Verification Laboratory Demonstration System for High Security Identification Cards

Document fraud including unauthorized duplication of identification cards and credit cards is a serious problem facing the government, banks, businesses, and consumers. In addition, counterfeit products such as computer chips, and compact discs, are arriving on our shores in great numbers. With the rapid advances in computers, CCD technology, image processing hardware and software, printers, scanners, and copiers, it is becoming increasingly easy to reproduce pictures, logos, symbols, paper currency, or patterns. These problems have stimulated an interest in research, development and publications in security technology. Some ID cards, credit cards and passports currently use holograms as a security measure to thwart copying. The holograms are inspected by the human eye. In theory, the hologram cannot be reproduced by an unauthorized person using commercially-available optical components; in practice, however, technology has advanced to the point where the holographic image can be acquired from a credit card-photographed or captured with by a CCD camera-and a new hologram synthesized using commercially-available optical components or hologram-producing equipment. Therefore, a pattern that can be read by a conventional light source and a CCD camera can be reproduced. An optical security and anti-copying device that provides significant security improvements over existing security technology was demonstrated. The system can be applied for security verification of credit cards, passports, and other IDs so that they cannot easily be reproduced. We have used a new scheme of complex phase/amplitude patterns that cannot be seen and cannot be copied by an intensity-sensitive detector such as a CCD camera. A random phase mask is bonded to a primary identification pattern which could also be phase encoded. The pattern could be a fingerprint, a picture of a face, or a signature. The proposed optical processing device is designed to identify both the random phase mask and the primary pattern [1-3]. We have demonstrated experimentally an optical processor for security verification of objects, products, and persons. This demonstration is very important to encourage industries to consider the proposed system for research and development.

Javidi, Bahram↗
NASA NTRSDate not supplied

Experiments for Securing Air Traffic Against Cyber-Physical System Attacks

This presentation describes experiments conducted with single board computers to investigate methods for creating trust for enabling the development of cyber-resilient air transportation systems. Methods included secure communication to prevent unauthorized access to data, consistency of data obtained via sensors and by processing, and built-in safeguards to prevent mission failure. The motivation for this work are the following. The future air transportation system needs to ensure availability, integrity, confidentiality and safety of operations. Safety of vehicles and operations is paramount for successful integration of Urban Air Mobility (UAM), Unmanned Aerial Systems (UAS), supersonic aircraft and launch vehicles with conventional aviation operations in the National Airspace System. Security is becoming critical because the sensors, networks and computers are far more vulnerable to bad actors than their mechanical or human predecessors. The goal therefore is to design and develop cyber-resilient systems that continue to function even in degraded states. The main findings are (1) off-the-shelf hardware can support development of cyber-resilient onboard flight computers and (2) trust in system design and implementation can be accomplished by integrating layers in depth (detail) and in breadth (scope).

cyber-resilient autonomy, trust, secure communicat↗
DOE OSTI2020

Considerations when Implementing Shift Work in Nuclear Operations

Many domestic and international nuclear facilities have processes that require personnel to work on some type of shift. Shift work has many different schedules such as night, morning, swing, and rotating shift. Some common shifts are DuPont, Pitman, and Panama. There are many psychological and physiological impacts to a person working shifts. These impacts can affect work performance, safety, and security within an organization. A well-established nuclear organization relies on a strong security culture that implements a trustworthiness or reliability program. The IAEA defines this type of program as individuals meeting the highest standards of reliability, trustworthiness, and physical and mental suitability. Psychological and physiological impacts that apply to a Trustworthiness Program are reliability (an individual’s ability to adhere to security and safety rules and regulations) and physical and mental suitability. If shift work isn’t properly implemented in Facility Operations, then several issues or human factors can arise. An employee that suffers from a poorly designed shift, gets overworked, or doesn’t have the proper rest period implemented, may suffer from shift work disorder, acute fatigue, or cumulative fatigue. Introducing fatigue into Facility Operations can have severe consequences to security, safety, production, and cost. Another challenge of shiftwork within a facility is laziness and complacency. Creating an atmosphere where the employee is willing to admit fatigue to his or her supervisor is a challenge. It is up to the organization to do the needed research on shift work and to implement the best shift for their facility and personnel.

Stockwell, Brandon↗
DOE OSTI2026

USABILITY EXTENSION OF THE ŠKODA VPVR/M CASK FOR TRANSPORTING IRRADIATED FUEL ASSEMBLIES

New abstract from the final version being submitted now: This paper discusses the evolution and enhanced usability of the ŠKODA VPVR/M cask for the transport of irradiated fuel assemblies, particularly within the context of the demand for the delivery of newly appearing irradiated HEU fuel types for which the cask did not yet have a license to transport. Over time, the cask’s internal basket construction has demonstrated notable adaptability to accommodate various exotic HEU fuel types from research reactors of differing origins. The paper outlines sever-al custom internal baskets developed for specific fuel types, including those from Belarus and Serbia, as well as from Georgia, Uzbekistan, and MNSR cores, as well as a recently designed basket for MTR and TRIGA assemblies. The findings high-light the high flexibility and adaptability of the cask, supported by successful rede-signs and licensing efforts, underscoring its value for the safe and secure transport of nuclear material. Old abstract from the draft version that was already approved: The Russian Research Reactor Fuel Return (RRRFR) program, since its inception, has continuously used the ŠKODA VPVR/M Cask fleet designed for the repatriation of irradiated highly enriched uranium (HEU) fuel. As the program progressed (from shut-down and a quasi-abandoned reactor, and/or as it began to include fuels of Chinese and US origin), new challenges emerged for the transport Cask. These were fuel types that had not yet been licensed for the Cask. Although these requirements did not arise during the design of the basic ŠKODA VPVR/M Cask, as revealed by the retrospective analyses, the Internal Basket of the ŠKODA VPVR/M Cask gives a high degree of flexibility to accommodate additional fuel types. This paper provides a brief overview of the ŠKODA VPVR/M Cask, which holds a B(U) type license, and introduces the different types of Internal Baskets that have already been licensed to transport so-called exotic irradiated HEU fuel types, in addition to the original license. The paper presents a new Internal Basket design for accommodating MTR-type and TRIGA-type irradiated HEU fuel assemblies. This includes a detailed presentation of the design basis and the new MTR-TRIGA Internal Basket, as well as the licensing matters of the package under the name ŠKODA MTR-TRIGA Cask, and the conformity test (dry- and wet-run) operations made to verify compliance with the new Internal Basket. Then, as a summary, the usage record for the Cask fleet is presented, and finally, the paper concludes with the consolidated experiences gained during the utilization of the ŠKODA VPVR/M Cask fleet, emphasizing the high degree of Cask flexibility ensured by the Internal Basket’s construction.

42 - ENGINEERING↗
NASA NTRS1988

TABLET: The personal computer of the year 2000

The University of Illinois design of the TABLET portable computer extends the freedom of pen and notepad with a machine that draws on the projected power of 21st century technology. Without assuming any new, major technological breakthroughs, it seeks to balance the promises of today's growing technologies with the changing role of computers in tomorrow's education, research, security, and commerce. It seeks to gather together in one basket the matured fruits of such buzzword technologies as LCD, GPS, CCD, WSI, and DSP. The design is simple, yet sleek. Roughly the size and weight of a notebook, the machine is a dark, featureless monolith with no moving parts. Through magneto-optics, a simple LaserCard provides exchangeable, mass data storage. Its I/O surface, in concert with built-in infrared and cellular transceivers, puts the user in touch with anyone and anything. The ensemble of these components, directed by software that can transform it into anything from a keyboard or notepad to an office or video studio, suggests an instrument of tremendous power and freedom.

Mel, Bartlett W.↗
DOE OSTI2021

Massachusetts Institute of Technology Reactor LEU Fuel Element Flow Test Conceptual Design – Hydraulic Reactor Design Parameters

The Massachusetts Institute of Technology Reactor (MITR-II, also referred to as MITR) is one of six U.S. high performance research reactors (USHPRR), including one critical facility, that is actively collaborating with the U.S. National Nuclear Security Administration (NNSA) Material Management and Minimization (M 3 ) Reactor Conversion Program to convert to the use of low-enriched uranium (LEU, < 20 wt% 235 U) fuel. The MIT Nuclear Reactor Laboratory has been working with the USHPRR Reactor Conversion (RC) Pillar at Argonne National Laboratory to perform fuel element design and fuel cycle performance analyses, steady-state thermal hydraulics safety analyses, and accident safety analyses in preparation for the conversion of MITR and support a preliminary Safety Analysis Report (SAR) for conversion to LEU fuel.

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗
DOE OSTI2023

Spectroscopy of QUBRICS quasar candidates: 1672 new redshifts and a golden sample for the Sandage test of the redshift drift

ABSTRACT The QUBRICS (QUasars as BRIght beacons for Cosmology in the Southern hemisphere) survey aims at constructing a sample of the brightest quasars with $z \lower.5ex\hbox{$\,\, \buildrel\gt \over \sim \,\,$}2.5$, observable with facilities in the Southern Hemisphere. QUBRICS makes use of the available optical and IR wide-field surveys in the South and of Machine Learning techniques to produce thousands of bright quasar candidates of which only a few hundred have been confirmed with follow-up spectroscopy. Taking advantage of the recent Gaia Data Release 3, which contains 220 million low-resolution spectra, and of a newly developed spectral energy distribution fitting technique, designed to combine the photometric information with the Gaia spectroscopy, it has been possible to measure 1672 new secure redshifts of QUBRICS candidates, with a typical uncertainty of σz = 0.02. This significant progress of QUBRICS brings it closer to (one of) its primary goals: providing a sample of bright quasars at redshift 2.5 < z < 5 to perform the Sandage test of the cosmological redshift drift. A Golden Sample of seven quasars is presented that makes it possible to carry out this experiment in about 1500 h of observation in 25 yr, using the ANDES spectrograph at the 39m ELT, a significant improvement with respect to previous estimates.

Cristiani, Stefano (ORCID:0000000221155234)↗
DOE OSTI2022

National Security Research Center (NSRC) Overview

The National Security Research Center (NSRC) is Los Alamos' classified library. It houses 75+ years of scientific and engineering research, designs, procedures, videos, photos, and other reports.

96 KNOWLEDGE MANAGEMENT AND PRESERVATION↗
DOE OSTI2026

Radiological Releases from Novel Fuel Forms in Advanced Reactors During Severe Accidents for Consequence Analyses

Various advanced reactor developers are exploring the potential for reductions in the size of physical security forces and emergency planning zones. These reductions are based on robust fuel forms and inherently safe reactor designs. However, such reductions in physical protection measures could increase the risk of sabotage. To assess the possibility of reducing these measures, sabotage-induced radiological consequence analyses were carried out. These analyses considered accident scenarios that were beyond design basis accidents and overly conservative (Shah, 2025a; Shah, 2025b; Shah and Hartanto, 2026), yielding very large release fractions. These fractions, which can be used to evaluate physical protection and emergency planning requirements, have been crudely determined and applied as demonstrations for a sodium-cooled fast reactor (SFR) (Shah and Hartanto, 2025a), a high-temperature gas-cooled reactor (HTGR) (Shah and Hartanto, 2025b), a heat pipe–cooled reactor (HPR) (Shah and Hartanto, 2025c), and a molten salt–cooled reactor (MSR) (Shah et al., 2026). A Sandia National Laboratories (SNL) team used MELCOR—a fully integrated severe accident analysis code—to demonstrate the code’s capability to analyze advanced (i.e., not light water–cooled) reactors (including a fluoride salt–cooled high-temperature reactor [FHR]) and calculate radiological releases to the environment during severe accidents (Wagner et al., 2022a, 2022b, 2022c, 2023a, and 2023b). Although the analyses were carried out to demonstrate MELCOR’s growing capability, the release source terms were estimated for advanced reactors, providing valuable insights into the accident progression and radiological releases. These findings from prior SNL studies, including estimated source terms and related sensitivity studies, were leveraged to derive source terms for postulated sabotage-induced accidents. Insights from these sensitivity studies informed the scaling of SNL’s estimated source terms for the defined accident scenarios. The derived release fractions for the severe accident scenarios for the respective reactor designs can be used to perform more nuanced dose consequence analyses to evaluate the reactors’ physical protection and emergency planning zone requirements. These analyses are in accordance with the risk-informed, performance-based approach proposed under 10 CFR Part 53. This study builds on the prior source term analyses and associated sensitivity studies by SNL to derive time-dependent and design-informed release fractions. Section 2 describes the diverse advanced reactor designs analyzed by the SNL team. Section 3 discusses the severe accident analyses, the release fractions calculated, and the limitations and assumptions of the demonstration project. Section 4 presents the release percentages derived for the hypothetical sabotage-induced severe accidents at the advanced reactors. Section 5 summarizes the study’s findings and conclusions.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗
NASA NTRS1987

Documenting the Development of Software

Some routine supervisory functions performed automatically. Program Management Facility (PMF) computer program integrated software-development and control system. Applicable to large software systems involving as many as several hundred programmers and one million lines of codes, it ensures timely and orderly planning, development, implementation, and documentation of software. Designed as support tool. Has many features providing efficient processing and utilization of space for development programmer. Incorporates security system to prevent improper maintenance. Provides full set of cross-referenced reports and supervisory functions for detailed management information. Written in assembler. IBM program TSO required.

Source record↗
NASA NTRS1999

A Design Heritage-Based Forecasting Methodology for Risk Informed Management of Advanced Systems

The development of next generation systems often carries with it the promise of improved performance, greater reliability, and reduced operational costs. These expectations arise from the use of novel designs, new materials, advanced integration and production technologies intended for functionality replacing the previous generation. However, the novelty of these nascent technologies is accompanied by lack of operational experience and, in many cases, no actual testing as well. Therefore some of the enthusiasm surrounding most new technologies may be due to inflated aspirations from lack of knowledge rather than actual future expectations. This paper proposes a design heritage approach for improved reliability forecasting of advanced system components. The basis of the design heritage approach is to relate advanced system components to similar designs currently in operation. The demonstrated performance of these components could then be used to forecast the expected performance and reliability of comparable advanced technology components. In this approach the greater the divergence of the advanced component designs from the current systems the higher the uncertainty that accompanies the associated failure estimates. Designers of advanced systems are faced with many difficult decisions. One of the most common and more difficult types of these decisions are those related to the choice between design alternatives. In the past decision-makers have found these decisions to be extremely difficult to make because they often involve the trade-off between a known performing fielded design and a promising paper design. When it comes to expected reliability performance the paper design always looks better because it is on paper and it addresses all the know failure modes of the fielded design. On the other hand there is a long, and sometimes very difficult road, between the promise of a paper design and its fulfillment; with the possibility that sometimes the reliability promise is not fulfilled at all. Decision makers in advanced technology areas have always known to discount the performance claims of a design to a degree in proportion to its stage of development, and at times have preferred the more mature design over the one of lesser maturity even with the latter promising substantially better performance once fielded. As with the broader measures of performance this has also been true for projected reliability performance. Paper estimates of potential advances in design reliability are to a degree uncertain in proportion to the maturity of the features being proposed to secure those advances. This is especially true when performance-enhancing features in other areas are also planned to be part of the development program.

Maggio, Gaspare↗
NASA NTRS2006

Biologically-Inspired Concepts for Autonomic Self-Protection in Multiagent Systems

Biologically-inspired autonomous and autonomic systems (AAS) are essentially concerned with creating self-directed and self-managing systems based on metaphors &om nature and the human body, such as the autonomic nervous system. Agent technologies have been identified as a key enabler for engineering autonomy and autonomicity in systems, both in terms of retrofitting into legacy systems and in designing new systems. Handing over responsibility to systems themselves raises concerns for humans with regard to safety and security. This paper reports on the continued investigation into a strand of research on how to engineer self-protection mechanisms into systems to assist in encouraging confidence regarding security when utilizing autonomy and autonomicity. This includes utilizing the apoptosis and quiescence metaphors to potentially provide a self-destruct or self-sleep signal between autonomic agents when needed, and an ALice signal to facilitate self-identification and self-certification between anonymous autonomous agents and systems.

Sterritt, Roy↗
NASA NTRS2008

IPv6 and IPsec Tests of a Space-Based Asset, the Cisco Router in Low Earth Orbit (CLEO)

This report documents the design of network infrastructure to support testing and demonstrating network-centric operations and command and control of space-based assets, using IPv6 and IPsec. These tests were performed using the Cisco router in Low Earth Orbit (CLEO), an experimental payload onboard the United Kingdom – Disaster Monitoring Constellation (UKDMC) satellite built and operated by Surrey Satellite Technology Ltd (SSTL). On Thursday, 29 March 2007, NASA Glenn Research Center, Cisco Systems and SSTL performed the first configuration and demonstration of IPsec and IPv6 onboard a satellite in low Earth orbit. IPv6 is the next generation of the Internet Protocol (IP), designed to improve on the popular IPv4 that built the Internet, while IPsec is the protocol used to secure communication across IP networks. This demonstration was made possible in part by NASA’s Earth Science Technology Office (ESTO) and shows that new commercial technologies such as mobile networking, IPv6 and IPsec can be used for commercial, military and government space applications. This has direct application to NASA’s Vision for Space Exploration. The success of CLEO has paved the way for new space-based Internet technologies, such as the planned Internet Routing In Space (IRIS) payload at geostationary orbit, which will be a U.S. Department of Defense Joint Capability Technology Demonstration. This is a sanitized report for public distribution. All real addressing has been change to psueco addressing.

Communication↗
DOE OSTI2020

Impact of Wide-Area Oscillation Damping Control using Measurement-Driven Approach on System Separation - Saudi Grid Case Study

In any interconnected power grid, low-frequency oscillations is a major problem that can limit the power transfer capability and deteriorate power system security due to potential low-damped or even undamped oscillations. Synchronized measurements provided by PMUs enable the design and development of wide-area oscillation damping controllers (WADC) based on measurement-driven model to overcome the limitations of traditional controllers. This work focuses on the impact of a W ADC based on a measurement-driven approach on system separation for the Saudi Electricity Company (SEC) grid. A grid model is provided by SEC for this study. Modal analysis is performed to identify the oscillation mode of interest for which the controller is designed. Damping the dominant oscillation mode helps slightly to improve transient stability of the system. Considering bus frequency at different locations in SEC's system as the candidate observation signals, the optimal observation signal is chosen for the W ADC by using the FFT method. The system transfer function model is constructed by utilizing probing measurements. Then, the W ADC parameters are calculated based on the identified model. The performance of the designed W ADC is tested under different contingencies.

Altarjami, Ibrahim↗