Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “Physical security”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 703 records · Page 39
All sourcesNASA NTRSDOE OSTI
DOE OSTI2020

A PROVEN APPROACH FOR EFFECTIVE COMPUTER SECURITY SELF-ASSESSMENTS AT NUCLEAR FACILITIES

A proven method for conducting cybersecurity self-assessments at nuclear power plants is now available for international use. This method was originally developed by Pacific Northwest National Laboratory, under the sponsorship of the U.S. Nuclear Regulatory Commission (NRC), for use at U.S. nuclear power plants. The “Method,” described in NUREG/CR-6847 “Cyber Security Self-Assessment Method for U.S. Nuclear Power Plants,” was originally a limited release document that was withheld from public disclosure but is now publicly available. The Method provides a systematic, phased, and risk-informed approach to help decision makers and security specialists understand their relative cybersecurity posture. Completed Method assessments may be used to support or validate selection of computer security controls to mitigate cyber threats as well as demonstrate compliance with regulations or statutes enacted by competent authorities. The Method assesses the cybersecurity posture of key systems at a nuclear facility with a focus on protection of design base functions. It considers both physical and digital elements of system vulnerabilities and the resulting potential consequences from exploitation. It is well-suited for addressing blended cyberattacks. A semi-quantitative analytical approach is used in the evaluation of potential vulnerabilities, consequences, and risks and provides a technical basis for the selection of security controls to mitigate cyberattacks. The Method’s application at U.S. nuclear power plants has been very encouraging. The only nuclear plant in the United States that did not have adverse findings during its initial NRC computer security inspection prepared for inspection through the diligent application of this self-assessment method and the implementation of recommendations that came out of that self-assessment. Nuclear facilities around the world might find application of the Method extremely helpful for making cost-effective, risk-based decisions regarding computer security and for preparing to pass computer security inspections by their competent authorities.

Cyber security, Nuclear security, Self-assessment↗
DOE OSTI2021

Cyber Physical Grid-Interactive Distributed Energy Resources Control for VPP Dispatch and Regulation

This paper presents a cyber-physical algorithm for grid-interactive Distributed Energy Resource (DER) control to enable two features of Virtual Power Plants (VPPs) dispatch and grid voltage regulation, considering the communication and security impacts. We first formulate the DER dispatch problem as a real-time, iterative, and grid-interactive DER control problem. Thereafter, we consider a probabilistic traffic model to characterize packet delays and loss in a communication network, and study how the delays enter the process of information exchange among the grid measurement units, local DER controllers and the grid control center that coordinately execute this dispatch algorithm. Finally, a strategy combining delay threshold and modified message update rules is proposed to immune the asynchrony resulting from the communications network traffic and it avoids possible numerical instabilities and sensitivities of the tracking and regulation capabilities of this DER control algorithm. By implementing the proposed cyber-physical algorithm on the modified IEEE 37-node system, our preliminary results exhibit that the uncertainties of the underlying communications infrastructure must be considered for the VPP tracking and regulation capabilities of any DER in a generic Cyber-Physical System (CPS), because the delayed voltage measurements in the uplink/bi-link cases result in the off-track in VPP dispatch and jittery in voltage regulation.

cyber-physical algorithm↗
DOE OSTI2023

The research challenges in security and safeguards for nuclear fission batteries

This paper discusses the nuclear security and safeguards research challenges presented by the development and deployment of nuclear fission batteries. These are defined as easily transportable and deployable nuclear systems which are designed to operate either unattended or autonomously. We start by defining the current landscape of domestic and international safeguards and security and discuss how it can be affected by the introduction these new nuclear systems. We then specifically discuss the technology gaps and technologies to be developed to facilitate their practical deployment. We find that, as expected, we can leverage conclusions from existing security and safeguards studies for small modular rectors and develop bespoke target set analyses to inform security postures based on probabilistic risk assessment. We find also that specific fission battery security economic analysis tools are needed and security by design must be applied early. However, the most important finding is that these new systems will require a new comprehensive set of cyber tools covering transportation, installation, operation, maintenance security of the fission battery systems. Altogether, we find that the development of the necessary security and safeguards requirements at the design phase of such a technology will be of great benefit in the smooth deployment of this modern nuclear energy system.

21 SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLANTS↗
DOE OSTI2022

Resilient Hierarchical Networked Control Systems: Secure Controls for Critical Locations and at Edge

Integration of information and communication technology (ICT) offers new opportunities in improving the management and operation of critical infrastructures such as power systems as it allows connection of different sensors and control components via a communication network, leading to the so-called networked control systems (NCS). However, the use of open and pervasive ICT such as the Internet or wireless communication technologies comes at a price of making NCS vulnerable to cyber intrusions/attacks which may cause physical damage. Here, this chapter presents control algorithms to ensure resilient and safe operation of NCS under unknown cyberattacks. Specifically, a variant of dynamic watermarking strategies is presented by embedding encoding/decoding components of chaotic signals into the NCS for secure control for critical locations where the measurement/control signals are transmitted to/from the control center via a communication network. In addition, resilient cooperative control algorithms are discussed to ensure safe operation at edge of the NCS which consists of a large number of distributed controllable devices. Several numerical examples are provided to illustrate the proposed control strategies.

96 KNOWLEDGE MANAGEMENT AND PRESERVATION↗
DOE OSTI2020

Introducing the Journal of Chemical Education’s Special Issue on Chemical Security

Chemical security can be described as the practice of protecting chemicals from people. This editorial introduces the Special Issue on Chemical Security. In this article, we present a concise history of the use of chemicals as weapons and briefly describe consolidated global approaches needed to decrease the security risks from chemicals. We briefly introduce the contributions to this Special Issue from scientists and educators around the world on the topic of chemical security. Given recent high-profile global events that involved chemicals as weapons, improving chemical security awareness and competency is a critical need. We hope this Special Issue continues to generate conversation and collaboration on this important topic and enables educators to teach chemical security principles in their classrooms and laboratories.

37 INORGANIC, ORGANIC, PHYSICAL, AND ANALYTICAL CH↗
DOE OSTI2020

The Chemical Management System (CMS): A Useful Tool for Inventory Management

Comprehensive inventory management is central to the efficient operation of any facility that uses and stores chemicals. There are numerous software packages available that perform this function satisfactorily. Most commercially available inventory management software is regulatory or procurement focused and usually comes with upfront or monthly fees. Finally, this report describes freely downloadable software developed at Sandia National Laboratories that delivers an effective inventory management system with an additional focus on chemical security.

37 INORGANIC, ORGANIC, PHYSICAL, AND ANALYTICAL CH↗
DOE OSTI2024

Massively scalable workflows for quantum chemistry: BigChem and ChemCloud

Electronic structure theory, i.e., quantum chemistry, is the fundamental building block for many problems in computational chemistry. Here we present a new distributed computing framework (BigChem), which allows for an efficient solution of many quantum chemistry problems in parallel. BigChem is designed to be easily composable and leverages industry-standard middleware (e.g., Celery, RabbitMQ, and Redis) for distributed approaches to large scale problems. BigChem can harness any collection of worker nodes, including ones on cloud providers (such as AWS or Azure), local clusters, or supercomputer centers (and any mixture of these). BigChem builds upon MolSSI packages, such as QCEngine to standardize the operation of numerous computational chemistry programs, demonstrated here with Psi4, xtb, geomeTRIC, and TeraChem. BigChem delivers full utilization of compute resources at scale, offers a programable canvas for designing sophisticated quantum chemistry workflows, and is fault tolerant to node failures and network disruptions. We demonstrate linear scalability of BigChem running computational chemistry workloads on up to 125 GPUs. Finally, we present ChemCloud, a web API to BigChem and successor to TeraChem Cloud. ChemCloud delivers scalable and secure access to BigChem over the Internet.

37 INORGANIC, ORGANIC, PHYSICAL, AND ANALYTICAL CH↗
DOE OSTI2023

Flexible visualization of a 3rd party Intrusion Prevention (Security) tool: A use case with the ELK stack

A difficult aspect of cyber security is the ability to achieve automated real time intrusion prevention across various sets of systems. To this extent, several companies are offering comprehensive solutions that leverage an "accuracy of scale" and moving much of the intelligence and detection on the Cloud, relying on an ever-growing set of data and analytics to increase decision accuracy. Often, they provide tools to visualize the decision workflows in attack prevention (as well as tune the algorithm) but those solutions are not always practical as companies see the problem as "global" that is, from a unified Cyber-security standpoint. However, a key to a successful Cyber-security program is transparency and trust: from an experimental team viewpoint, this specifically means having the ability to immediately see what and from where, who has been blocked and being able to inform the community in case of a revoked access without the need for filing a "ticket" (that may eventually be answered) – in other words, rapid response to their user-base is essential but solutions targeting "sub-groups" in an organization are not often available. We have come up with a versatile solution leveraging the ELK stack (Elasticsearch, Logstash, & Kibana) and an IPS (Intrusion Prevention System) based WAF (Web Application Firewall) from Signal Sciences. Signal Science allows the streaming of detailed logs in a Logstash format suitable for custom solutions for visualization. By combining these two tools, we have strengthened our security posture and enabled individual experiments to monitor their own traffic. Specifically, the IPS WAF provides unique data such as country of origin, protocol, response code, source IP, and paths accessed. In this contribution, we will show how we engineered a visualization solution so experiment groups could access a dashboard with predefined graphs but also, where they can create individual customizable dashboards used to display blocked traffic and troubleshoot latency issues. We will discuss the details and procedures for developing and configuring these tools and how it benefits cyber security postures across our scientific based environment.

73 NUCLEAR PHYSICS AND RADIATION PHYSICS↗
DOE OSTI2020

Establishing a sustainable regulatory framework for the security of radioactive sources through harmonization with a safety regulatory framework

In order to establish and maintain sustainable nuclear security regulatory infrastructures for radioactive sources, it is important for States to develop nuclear security regulations with regulatory requirements and relevant criteria for security, which are consistent and well integrated with those for radiation safety. In establishing national regulations, experts worldwide follow the international recommendations on safety and security of radioactive sources published by the International Atomic Energy Agency (IAEA). Within the IAEA publications on safety and security of radioactive sources, some international recommendations are identical or very similar for both safety and security, for example, the requirement for the establishment of a national registry of radioactive sources. However, some other international recommendations are unique to the security area, such as the recommendation to examine the trustworthiness of employees, or to the safety area, such as the need to establish public exposure controls. Additionally, many international recommendations fall somewhere in between, such as the need for effective authorization of facilities and activities, a regulatory inspection and enforcement regime and the graded approach to establish and apply regulatory requirements. This paper examines how the IAEA international recommendations for establishing regulatory frameworks for safety and security relate to one another.

98 NUCLEAR DISARMAMENT, SAFEGUARDS, AND PHYSICAL P↗
DOE OSTI2025

Portal Monitoring Considerations for Treaty Verification Applications

Portal monitoring is one method in a suite of options for treaty verification and can assist in verification of treaty accountable items (TAIs). Portal monitor technology spans a wide range of sensors, including radiation detectors, break-beams, or weight sensors. For radiation-detecting portal monitors, they are able to confirm absence / presence of a radiological signature and to track TAI direction of motion. Portal monitoring uses measurements from strategically placed sensors (e.g., radiation detectors) to record the entry or egress of TAIs. The implementation of portal monitoring relies on three key elements: perimeter definition, portal locations, and sensor technology, and can be implemented in either time-bound or continuous operations depending on what is permitted by the Treaty.

98 NUCLEAR DISARMAMENT, SAFEGUARDS, AND PHYSICAL P↗
DOE OSTI2025

Capability Building Progression of an Insider Threat Mitigation Program at an International Nuclear Power Plant (Rev. 1)

With threats to nuclear facilities continuously evolving, the development and implementation of insider threat mitigation programs (ITMPs) are increasingly important. The Office of International Nuclear Security (INS) within the U.S. Department of Energy’s National Nuclear Security Administration (DOE/NNSA’s) developed Capability Building Progression of an Insider Threat Mitigation Program at an International Nuclear Power Plant to assist newcomers and existing nuclear power plant (NPP) operators in addressing insider threats and establishing effective response measures for insider activities.

98 NUCLEAR DISARMAMENT, SAFEGUARDS, AND PHYSICAL P↗
DOE OSTI2026

A Benchmarking Framework for Evaluating Large Language Model Capabilities in Nuclear Reactor Safety Applications

Large language models (LLMs) are increasingly capable of answering technical questions, synthesizing domain knowledge, and supporting engineering workflows. For nuclear science and engineering, these capabilities require careful, domain-specific evaluation before they can be credibly incorporated into safety-related activities, regulatory review, or technical decision support. This paper presents preliminary results from benchmarking framework for evaluating LLM capabilities in nuclear contexts. The framework is organized into three evaluation categories: nuclear fundamentals, general dual-use knowledge, and plant specific knowledge. These categories are intended to distinguish general nuclear engineering competence from broader technical reasoning and more context-dependent nuclear knowledge. Initial evaluations focus on nuclear fundamentals using questions representative of the knowledge expected of a nuclear professional engineer. Results indicate that contemporary frontier models perform at a high level and substantially exceed the performance of older model generations, with some models approaching saturation of the current benchmark. These findings suggest both the rapid improvement of LLM capabilities in specialized technical domains and the need for more discriminating evaluation methods. The paper presents the benchmark structure, preliminary model-comparison results, and ongoing work. This work supports development of verifiable, responsible, and safety-conscious methods for assessing AI systems in nuclear engineering applications.

21 - SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLAN↗
DOE OSTI2023

A Cybersecurity Testbed for Smart Buildings

Smart buildings are equipped with a plethora of cyber-physical systems, such as Internet of Things (IoT) devices and building automation systems. These devices, especially in commercial buildings, use legacy communications and hardware that were not designed with cybersecurity in mind. With increasing cyber threats in recent years, smart buildings have become an increasing target for attacks, but not enough published data are available from these incidents to study or replicate the scenarios to defend buildings. As part of the U.S. Department of Energy-funded project focusing on developing the Building Intelligence with Layered Defense Using Security-Constrained Optimization and Security Risk Detection (BUILD-SOS) platform, we developed a cybersecurity test bed for smart buildings. This test bed includes a building simulation tool, virtual devices, emulated operational technology networks, and remote hardware-in-the-loop. Using this test bed, we performed different cyberattacks on the smart building model and collected both physical building data, to understand the impacts on the building, and network data, to aid in separating mechanical faults from cyberattacks during the detection. This test bed is a significant tool in protecting smart buildings from cyberattacks because it can aid in both cybersecurity analysis and the evaluation of other cyberattack detection tools by testing the tools in a secure environment without impacting the building operations.

cyber-physical systems↗
DOE OSTI2024

Fracture Network Prediction Using Physics-based Machine Learning Algorithms

In recent years, systematic CO2 injection into geological reservoirs across the U.S. has gained traction as a strategy to mitigate greenhouse gas emissions. This approach necessitates precise monitoring to ensure secure containment, minimize risks, and optimize storage management. Our study leverages machine learning (ML) techniques to advance the understanding of CO2 injection processes, focusing on the Illinois Basin. Over a three-year injection period, we analyzed microseismic data, identifying 19 temporal intervals with significant bottom-hole pressure changes. By partitioning microseismic events into these intervals and estimating b-values, we revealed over 100 clusters of events related to fracture initiation or reactivation. Advanced spatial analysis highlighted horizontally-oriented fractures along the NNW-SSE axis. This quantification of fracture networks informs dynamic injection scheduling, work-over strategies, and risk assessments, enhancing carbon capture, utilization, and storage (CCUS) operations. Additionally, our methodology offers valuable insights for oil and gas operations and geothermal development, supporting fracture-based monitoring and risk mitigation.

Kumar, Abhash↗
DOE OSTI2025

High Flux Isotope Reactor Low-Enriched Uranium High Density Silicide Fuel Preliminary Design Update: System Transient Analysis

As a part of conversion efforts from highly enriched uranium (HEU) to low-enriched uranium (LEU) fuel under direction of the National Nuclear Security Administration of the U.S. Department of Energy, multiple proposed designs of the High Flux Isotope Reactor (HFIR) have been created and assessed regarding reactor physics performance metrics, including designs utilizing uranium silicide dispersion fuel (U3Si2-Al). This report updates the previous analyses that evaluated the nuclear safety performance of LEU fuel designs with respect to selected accident events from the HFIR Safety Analysis Report (SAR). Both the Low Density (LD) and High Density (HD) Optimized designs’ reactivity initiated accident fuel performance improved relative to the HEU fuel, attributed to greater 238 U negative Doppler feedback. However, the thermal margins for primary coolant system accidents were reduced with some acceptance criteria unable to be met. The need to resolve reduced thermal margin, open modeling items, and unresolved assumptions was identified.

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗
NASA NTRS2011

Computer Network Security- The Challenges of Securing a Computer Network

This article is intended to give the reader an overall perspective on what it takes to design, implement, enforce and secure a computer network in the federal and corporate world to insure the confidentiality, integrity and availability of information. While we will be giving you an overview of network design and security, this article will concentrate on the technology and human factors of securing a network and the challenges faced by those doing so. It will cover the large number of policies and the limits of technology and physical efforts to enforce such policies.

Scotti, Vincent, Jr.↗
DOE OSTI2022

The Dual-Axis Radiographic Hydrodynamic Test Facility Capability eXpansion (DCX) Strategy

The Dual-Axis Radiographic Hydrodynamic Test (DARHT) facility is a vital and important part of the Nation’s nuclear security enterprise. The Department of Energy/National Nuclear Security Administration (DOE/ NNSA) Stockpile Stewardship Management Plan (SSMP) identifies DARHT as a weapons mission critical facility along with the need to modernize DARHT to support weapons modernization efforts. With more than two decades of operations, DARHT has a storied history. Conceived in the 1970s, constructed in the 1990s, and operational since 2000, DARHT has advanced from open-air hydrodynamic experiments (hydros) to foam-confined hydros, to vessel-confined hydros, and in 2022, the 75 th hydro was successfully completed. Radiography has advanced from a single-axis, single-pulse system to a dual-axis, multi-pulse capability to variable fields of view (VFV) on both accelerators. The culmination of these experiences, accomplishments, and advancements has brought us to a very important question: What do the next two decades at DARHT look like? The world is not the same place it was in the 1990s when construction at DARHT was in progress. Evolving threats, an expanding mission, and technology changes necessitate adaptation. The 2018 Nuclear Posture Review (NPR) states that the nuclear weapons infrastructure has suffered the effects of age and underfunding with no margin for further delay in recapitalizing the physical infrastructure. To adapt, the aging facility, accelerators, vessels, and detector systems require improvements to ensure DARHT remains the Nation’s hydrodynamic data foundation for stockpile certification, safety, surety, and global security threats.

98 NUCLEAR DISARMAMENT, SAFEGUARDS, AND PHYSICAL P↗