Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “security systems”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 685 records · Page 38
All sourcesNASA NTRSDOE OSTI
DOE OSTI2023

AI-based Detection and Defense Against Cyberattacks in Distributed Energy Resources

This study will provide comprehensive artificial intelligence (AI)-based solution tools for network security, malware prevention, and sensor data anomaly detection for distributed energy resource (DER) research, development, and demonstration. DER technologies are energy systems (e.g., solar panels, wind turbines, and energy storage systems) that are often connected to the internet and thus vulnerable to cyberattacks. Cybersecurity should be of primary concern for DERs, which is why we propose an integrated multi-layer cyber-defense system for DERs. This system encompasses risk assessments, network security, malware prevention, and detection of anomalies in the sensor data. Implementation of a comprehensive risk assessment with an overview of the model architecture should be the primary step, and should include the potential impact of experiencing, at a given time, one or more cyberattacks on the system. The second step is to ensure that the network security includes firewalls, intrusion detection, and malware prevention. The third step is to provide solution tools that enable sensor data anomaly detection for DERs. By incorporating these considerations into DER research, development, and demonstration, organizations can help ensure the safety and security of their systems and protect against potential cyberattacks.

20 FOSSIL-FUELED POWER PLANTS↗
DOE OSTI2025

Internship Presentation: Reactor System Facility Modification to Detect Compromised Human Machine Interfaces

This study presents a multi-layered Industrial Control System (ICS)/Operational Technology (OT) security architecture aimed at detecting and mitigating compromised Human Machine Interface (HMI) and Instrumentation & Control (I&C) systems within the Flowing Autoclave System (FAS) at Idaho National Laboratory (INL). The approach combines network security solutions, hash-based algorithms, and blockchain technologies to verify system integrity and provide an immutable record of network activity. This integrated three-pronged strategy enhances the detection of system compromises, enabling preemptive action before significant damage occurs.

21 - SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLAN↗
DOE OSTI2023

Transactive Energy System Deployment Over Insecure Communication Links

Here, in this paper, the privacy and security issues associated with the transactive energy system (TES) deployment over insecure communication links are addressed. In particular, it is ensured that 1) individual agents’ bidding information is kept private throughout hierarchical market-based interactions; and 2) any extraneous data injection attack can be quickly and easily detected. An implementation framework is proposed to enable the cryptography-based enhancement of privacy and security for the deployment of any general hierarchical systems including TESs. Under the proposed framework, a unified cryptography-based approach is developed to achieve both privacy and security simultaneously. Specifically, privacy preservation is realized by an enhanced Paillier encryption scheme, where a block design is proposed to significantly improve computational efficiency. Attack detection is further achieved by an enhanced Paillier digital signature scheme, where a stamp-concatenation mechanism is proposed to enable detection of data replace and reorder attacks. Simulation results verify the effectiveness of the proposed cyber-resilient design for transactive energy systems. Note to Practitioners—This paper is motivated by addressing the issues of cyber resiliency for practically deploying transactive energy system (TES) but it is also applicable to the problem of enhancing the privacy and security for any general hierarchical control systems. TES is an emerging control approach that engages energy suppliers and customers through market operations and uses the price to optimally allocate energy resources. While it has been shown to be promising for power system applications, the underlying market-based interactions raise significant concerns of privacy (data leakage) and security (data tampering). However, existing TES works only focus on the coordination mechanism instead of privacy and security issues. This paper proposes a new cryptography-based TES design for practical deployment. Specifically, to protect privacy, individual supply and demand amounts to be exchanged are all encrypted in a particular way such that the original amounts cannot be inferred from the encrypted amounts, while the desired computation for setting the market clearing price can be carried out over the encrypted amounts, thus generating an encrypted result which, when decrypted, matches that of the same computation over the original amounts. To achieve security, for each exchanged data, its sender generates a particular digital signature which is exchanged together with the data. This enables the receiver to automatically detect the integrity by checking whether a mathematical relationship holds for the pair of data and signature. In our future research, we will investigate more challenging scenarios where some suppliers and customers themselves could be corrupted and purposely submit distorted amounts.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2019

Identity-based quantum signature scheme with strong security

Recently, Chen et al. proposed an identity-based quantum signature scheme (IDQSS). Their scheme has the advantages of the classical identity-based signature (IDS) scheme. However, Chen et al.’s scheme cannot resist against the private key generator (PKG)’s forgery attack. On the other hand, in their scheme, many rounds of quantum swap tests have to be performed by the verifier during the signature verification phase. To improve the security and efficiency of the IDQSS, a new IDQSS is proposed. In our scheme, the private key of the signer is generated by PKG according to the signer’s identity, which is used as the corresponding public key. The signer generates a quantum signature with her private key and the secret parameters shared with the verifier. Anyone can verify the quantum signature with the identity of the signer. Our scheme overcomes the security drawback of Chen et al.’s scheme and inherits the merits of the classical IDS system. It has the security properties such as information-theoretical security, non-repudiation and unforgeability. At the same time, in our scheme, the verifier need not perform any quantum swap test. Therefore, our IDQSS is more secure and efficient.

71 CLASSICAL AND QUANTUM MECHANICS, GENERAL PHYSIC↗
DOE OSTI2021

Design and Operation of Energy Systems with Large Amounts of Variable Generation: IEA Wind TCP Task 25 (Final Summary Report)

This report summarizes findings on wind integration from the 17 countries or sponsors participating in the International Energy Agency Wind Technology Collaboration Program (IEA Wind TCP) Task 25 from 2006-2020. Both real experience and studies are reported. Many wind integration studies incorporate solar energy, and most of the results discussed here are valid for other variable renewables in addition to wind. The national case studies address several impacts of wind power on electric power systems. In this report, they are grouped under long-term planning issues and short-term operational impacts. Long-term planning issues include grid planning and capacity adequacy. Short-term operational impacts include reliability, stability, reserves, and maximizing the value of wind in operational timescales (balancing related issues). The first section presents the variability and uncertainty of power system-wide wind power, and the last section presents recent studies toward 100% shares of renewables. The appendix provides a summary of ongoing research in the national projects contributing to Task 25 for 2021-2024. The design and operation of power and energy systems is an evolving field. As ambitious targets toward net-zero carbon energy systems are announced globally, many scenarios are being made regarding how to reach these future decarbonized energy systems, most of them involving large amounts of variable renewables, mainly wind and solar energy. The secure operation of power systems is increasingly challenging, and the impacts of variable renewables, new electrification loads together with increased distribution system resources will lead to somewhat different challenges for different systems. Tools and methods to study future power and energy systems also need to evolve, and both short-term operational aspects (such as power system stability) and long-term aspects (such as resource adequacy) will probably see new paradigms of operation and design. The experience of operating and planning systems with large amounts of variable generation is accumulating, and research to tackle the challenges of inverter-based, nonsynchronous generation is on the way. Energy transition and digitalization also bring new flexibility opportunities, both short and long term.

24 POWER TRANSMISSION AND DISTRIBUTION↗
NASA NTRS1990

Considerations of persistence and security in CHOICES, an object-oriented operating system

The current design of the CHOICES persistent object implementation is summarized, and research in progress is outlined. CHOICES is implemented as an object-oriented system, and persistent objects appear to simplify and unify many functions of the system. It is demonstrated that persistent data can be accessed through an object-oriented file system model as efficiently as by an existing optimized commercial file system. The object-oriented file system can be specialized to provide an object store for persistent objects. The problems that arise in building an efficient persistent object scheme in a 32-bit virtual address space that only uses paging are described. Despite its limitations, the solution presented allows quite large numbers of objects to be active simultaneously, and permits sharing and efficient method calls.

Campbell, Roy H.↗
DOE OSTI2024

End-to-End Encryption for Cyber-Physical Systems Using Fully Homomorphic Encryption

Cyber-physical systems require reliable, safe, and secure control of critical infrastructure, combining computational and networking capabilities, which heighten the risk of cyber attacks. These attacks can disrupt the physical process, causing unforeseen consequences. One solution is the use of fully homomorphic encryption (FHE) to protect the control loop, allowing for secure computations and communications without compromising signal and control system privacy. The challenge with FHE, however, is its requirement for inputs to be integers. This presentation introduces a modified Learning With Errors (LWE) FHE approach that encodes control system dynamics and signals into integers. Our proposed scheme leverages a generalized LWE encoding function and modifies the Gentry-Sahai-Waters gadget decomposition tool to encrypt the control system. Using the modified LWE scheme, we formalize a fully encrypted control system, supported by simulated results.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2023

Designing an Intrusion Detection for an Adjustable Speed Drive System Controlling a Critical Process

In this article, we address the cyber-security problem of industrial control systems (ICSs) when their sensor measurements may be compromised due to an attacker who has intercepted those measurements via a network. We introduce a general-purpose method “Dynamic Watermarking (DW)” to detect potential cyber-intrusions on speed sensor measurements within industrial control systems, which deploy an adjustable speed drive (ASD) to control a critical process. The DW method is injecting a random private low-amplitude signal with a zero mean Gaussian distribution, “watermark”, into one of the input phase voltages powering the ASD system. The watermark signal propagates through the system including pulse width modulation (PWM) power conversion stage and motor, then ultimately appears in the speed sensor measurements. By deploying two statistical DW tests with two proper thresholds, the system can detect potential cyber-intrusions or unobservable cyber-attacks such as replay attacks and false data injection attacks (FDIA). The DW method tested on a laboratory-scale ASD system experimentally to protect the system against cyber-intrusions. This system, powered by a commercial PWM drive operating at 208 V, 3-phase, and 3.7 kW, served as our experimental platform.

42 ENGINEERING↗
DOE OSTI2022

Demonstrating Advanced Nuclear Energy Solutions for Net Zero

Background/Objectives. The aggressive goals being set by nation states, communities, and private industry for decarbonization of grid electricity, industrial heat sources, and transportation around the world are imperative to mitigating the devastating effects that we are seeing from climate change. Although many of these goals focus on accomplishments by 2035 or 2050, the decisions that we make today won’t just impact the landscape of energy systems for the next 20 or 30 years—they will shape the world’s environment for centuries to come. That means that we can’t just focus on technologies that will get us to 2050, but technologies that will withstand our energy demands over that long-ranging future. Success will require us to utilize all of the clean energy resources that we have available to meet demands for electricity, heat, and steam, and we will need energy carriers such as hydrogen that do not emit additional greenhouse gases at the point of use. Nuclear energy, ranging from technologies in service today to advanced, higher temperature and modular systems that will be in service this decade, will provide a robust complement to renewable energy resources that operate variably. Researchers across the U.S. Department of Energy laboratory complex are working to advance multiple aspects of these clean energy solutions, with many focusing on integrated energy system solutions that leverage all available clean energy assets to meet wide-ranging energy demands. Approach/Activities. Nuclear energy is a proven, zero-emission option during operation that can provide consistent, dispatchable power to meet electricity demands while also providing high-quality heat that can meet energy demands beyond the electricity sector. Energy system design should seek to maximize these assets. As a dispatchable energy source with a small land utilization footprint, nuclear energy can be collocated with renewable resources, and the smaller systems that will be deployed this decade (ranging from a few megawatts to hundreds of megawatts) can be installed right where that energy is needed. Integrated nuclear and renewable systems will enhance power grid reliability and resilience, and they will help stabilize the grid through their increasingly flexible operation. Licensing, installation, and broad adoption of these advanced nuclear energy systems are expected to progress significantly in the 2020s, but this may be longer than desired by some stakeholders wishing to implement impactful clean energy decisions today. However, one must recall that nuclear energy systems will operate for 80 or more years, as is being demonstrated by current fleet nuclear systems. The nuclear community is extremely thorough in reviewing these systems with regard to safety and security; these efforts ensure that the deployed systems will continue to provide reliable, resilient energy over that operational lifetime. That investment of time up front will ensure that we can support energy demands over the centuries to come. While advanced nuclear technologies move through this process, communities and private industry may choose to install renewable generation systems that can later be coupled to the complementary nuclear systems as they become available—thus moving closer to the net zero goals in the near term. Choosing technologies and deployment configurations that allow small modular nuclear powerhouses to be added to these “energy parks” as they become available will ensure that advanced technologies can be readily adopted to support growing demands for clean energy. Results/Lessons Learned. The primary focus of integrated energy systems (IES) research is to assess the technical and economic potential of novel multi-input, multioutput solutions that are expected to enhance energy system flexibility, reliability, and resilience as we pursue a clean energy transition. Various energy applications and product streams beyond electricity are being evaluated, ranging from generation of potable water to production of hydrogen, fertilizers, synthetic fuels, and various chemicals. In early FY23 Idaho National Laboratory (INL) will commission thermal energy generation systems that emulate nuclear fission energy input using electric heating and will allow for integrated system testing with thermal energy storage, hydrogen production via high temperature electrolysis (HTE), and power systems hardware to demonstrate operation of a clean energy park within a microgrid or larger grid infrastructure, supporting up to 450 kW of heat input via electric heating and demonstrating operation of HTE systems at the multi-hundred kW scale. This presentation will highlight the wide array of RD&D being conducted at INL and partner laboratories to develop and deploy nuclear and renewable-based IES that will be key to achieving our net zero goals, including both computational and experimental demonstrations. By working with key collaborators in industry, analytical st

08 HYDROGEN↗
DOE OSTI2024

Water Security: Trends, Capabilities, and Research Directions to Secure Water Infrastructure

Water and wastewater sector is target rich and resource poor ~153k water utilities, serve 80% of US population ~16k publicly-owned wastewater systems in the US serve 75% of the population Need scalable solutions to fit small and medium to large systems Federal attention to critical infrastructure continues to grow – particularly in the water sector Increase in water sector incidents and threats for large scale disruption – particularly by nation-state actors and their proxies EPA is the SRMA DHS CISA focuses on critical infrastructure protection across sectors They must work together to secure WWW systems Research capabilities to enable secure water systems Current and future threats Resilience – natural disasters, accidents, cyber-physical attacks

99 - GENERAL AND MISCELLANEOUS↗
NASA NTRS2018

Securing and Auto-Synchronizing Communication over Free-Space Optics Using Quantum Key Distribution and Chaotic Systems

Free-Space Optical (FSO) communication provides very large bandwidth, relatively low cost, low power, low mass of implementation, and improved security when compared to conventional Free-Space Radio-Frequency (FSRF) systems. In this paper, we demonstrate a communication protocol that demonstrates improved security and longer-range FSO communication, compared to existing FSO security techniques, such as N-slit interferometers. The protocol integrates chaotic communications with Quantum Key Distribution (QKD) techniques. A Lorenz chaotic system, which is inherently secure and auto-synchronized, is utilized for secure data communications over a classical channel, while QKD is used to exchange crucial chaotic system parameters over a secure quantum channel. We also provide a concept of operations for a NASA mission combining chaotic communications and QKD operating synergistically in an end-to-end space communications link. The experimental simulation results and analysis are favorable towards our approach.

Chaotic Communication↗
NASA NTRS1979

Private sector involvement in civil space remote sensing. Volume 1: Report

A survey of private sector developers, users, and interpreters of Earth resources data was conducted in an effort to encourage private investment and participation in remote sensing systems. Results indicate positive interest in participation beyond the current hardware contracting level, however, there is a substantial gap between current market levels and system costs. Issues identified include the selection process for an operating entity, the public/private interface, data collection and access policies, price and profit regulation in a subsidized system, international participation, and the responsibility for research and development. It was agreed that the cost, complexity, and security implications of integrated systems need not be an absolute bar to their private operation.

Source record↗
NASA NTRS2004

Education, Technology, and Media: A Peak into My Summer Internship at NASA Glenn Research Center in Cleveland, Ohio

My name is James Moon and I am a senor at Tennessee State University where my major is Aeronautical and Industrial Technology with a concentration in industrial electronics. I am currently serving my internship in the Engineering and Technical Services Directorate at the Glenn Research Center (GRC). The Engineering and Technical Service Directorate provides the services and infrastructure for the Glenn Research Center to take research concepts to reality. They provide a full range of integrated services including engineering, advanced prototyping and testing, facility management, and information technology for NASA, industry, and academia. Engineering and Technical Services contains the core knowledge in Information Technology (IT). This includes data systems and analysis, inter and intranet based systems design and data security. Including the design and development of embedded real-time sohare applications for flight and supporting ground systems, Engineering and Technical Services provide a wide range of IT services and products specific to the Glenn Research Center research and engineering community.

Moon, James↗
DOE OSTI2023

CRITICAL FUNCTION ASSURANCE: Understanding Critical Function and Critical Function Delivery is Foundational for Meaningful ICS Security Improvement and Policy Efforts

Modern life is enabled by a complex and interdependent web of critical functions, including energy, communications, transportation, food, and water. Automation has significantly reduced or replaced human interactions in the delivery of these functions, resulting in a web of goods and services that are made available 24/7 only through unique and intentional deployments of microprocessors, software, and firmware technologies. The prospect of cyber-enabled sabotage of these processes disrupts traditional risk determination models. Critical Function Assurance (CFA) is a foundational approach to identifying, prioritizing, and mitigating the risk that is inherent in the delivery of critical functions that depend on digital technology. It provides rapid focus to what matters most and illuminates elements and areas of risk that otherwise are often overlooked. This focus enables effective application of available security resources and optimizes security strategy and policy efforts. This paper introduces CFA to decision makers and risk executives (including CEOs, COOs, CFOs, and CISOs) whose organizations support and deliver the critical functions that underpin national defense, societal health and safety, and a vibrant economy.

29 ENERGY PLANNING, POLICY, AND ECONOMY↗
NASA NTRSDate not supplied

Improving Drought Monitoring for the Middle East and North Africa Region via Data Assimilation Using the NASA Land Information System (LIS)

Food and water security become an increasingly pressing concern for countries within the Middle East and North Africa (MENA) region under climate change. Droughts are among the most important issues facing this region in both economic and social terms, which have become much more severe in recent decades. An effective drought monitoring and early warning system is, therefore, critical to support drought impact assessment and risk management. This presentation describes the effort to improve the simulation of hydrological conditions for such semi-arid environment by Noah Multi-parameterization Land Surface Model within the NASA Land Information System (LIS) via assimilating remotely sensed leaf area index and soil moisture in the presence of irrigation. Multi-source satellite evapotranspiration products are used to evaluate the model performance under the impact of the choice of met-forcings, the presence of irrigation and data assimilation. The improved model configuration is aimed to deliver a better soil moisture estimation for the composite drought indicator (CDI) for drought monitoring and to provide a better initial condition in support for hydrological drought forecasting.

Wanshu Nie↗
DOE OSTI2024

PLC Vulnerabilities and Mitigations

Programmable Logic Controllers (PLCs) are used extensively in many high-importance industrial and nonindustrial settings including controlling elevators, manufacturing machines, and utility facilities such as power and natural gas, however cybersecurity protection for them has been neglected. Within recent years, PLCs have been put under more security scrutiny and experts have advocated for changes from the addition of protocol encryption and network segmentation to intrusion detection systems on the PLCs themselves. While PLC security is critical, a large portion of the PLCs available today will never receive these changes due to being legacy or the difficulty of overhauling the security on existing systems. Due to the infeasibility of applying many recommended security measures towards currently available machines, we aim to provide realistic and affordable best practices for hardening PLCs. We will first conduct security analysis and consider attack vectors within our target PLC. Once we’ve analyzed the device’s security, we will evaluate a variety of mitigation methods and create guidelines to effectively reduce the threat posed by PLC attacks with minimal disruption to operations.

42 ENGINEERING↗
DOE OSTI2024

Investigate the Security of Electric Vehicle (EV) Ecosystem Applications

Apps that run on mobile devices are one of critical components of the electric vehicle (EV) ecosystem and pose possible threat actor points of entry that may impact the trust and security of EV charging systems in the future. Mobile apps often rely on communication between cloud servers and users, thereby creating potential points of entry for cyberattacks. Although app stores such as Apple App Store or Google Play Store generally test the security of apps, the cyber aspects may not be sufficient for many entities including DOD, federal fleets, and commercial entities. A more thorough inspection and the ability to influence developers is imminently needed. This research studies security attributes and vulnerabilities of a sample of mobile applications that support key user functions in the EV ecosystem. The study shows that all analyzed apps have security risks, categorized as either high or medium or both and a comprehensive cybersecurity guideline for developing mobile apps is necessary.

33 ADVANCED PROPULSION SYSTEMS↗