Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “data security defense”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 73 records · Page 4
All sourcesNASA NTRSDOE OSTI
DOE OSTI2026

Life Cycle Inventories and Data Gap Analysis for Rare Earth Elements: Neodymium and Dysprosium from Mining to Magnets

The United States demand for Neodymium-Iron-Boron (NdFeB) magnets, produced from rare earth elements (REEs) such as (Nd) and Dysprosium (Dy), far exceeds its nascent domestic production capacity, rendering it reliant on vulnerable global supply chains dominated by China. To guide research and development investments in securing U.S. REE supply, defensible benchmark metrics across environmental, economic, and social dimensions are needed. In this study, we built globally-representative, process-based cradle-to-cradle life cycle inventories for Nd and Dy in NdFeB magnets lifecycles, encompassing primary material acquisition, beneficiation, smelting and refining, metal processing, specialty alloy and chemical transformation, subcomponent manufacturing, consumer application (use phase) and end-of-life management. We carried out detailed literature review, and applied process engineering principles to build industry-representative upscaled life cycle inventories for both metals. We used these models to conduct bottom-up literature review and gap analysis on existing literature, compilation of data sources for each life cycle stage (and transformations where necessary), and a preliminary technoeconomic analysis (TEA)/life cycle costing analysis (LCCA). Findings from this work emphasize the need for metal specific, representative REE LCIs to establish robust benchmarks for advancing sustainable REE technologies and guiding R&D in REE supply chains.

29 ENERGY PLANNING, POLICY, AND ECONOMY↗
DOE OSTI2023

A Proactive Stochastic Framework for Cyber-Physical Power Systems Security

This paper presents a framework for cyberphysical power systems security in which defensive action is proactive, striving to mitigate the harm from strategic cyber attacks before they occur. The prospect is formulated in a previously-studied context of state estimation via the Kalman filter under false data injection attacks. Assuming a cognitive attacker who is both advanced and persistent, the proactive defense rests upon stochastically influencing the sensors, Phasor Measurement Units, such that subsequent falsification attacks are countered. Examples are crafted to illustrate both the efficacy of the proactive approach in ideal situations and the practical challenges implied by non-ideal situations.

El Mezyani, Touria↗
DOE OSTI2023

Index of Classified Reports Collection now available Vital resource for Weapons researchers, today’s mission work

The collection is made up of classified technical reports containing weapons data dating back to the start of the nuclear security enterprise. The information is compiled into reports, slides, handbooks and literature. It originated from Los Alamos, Lawrence Livermore, and Sandia Labs, as well as from the Department of Defense and likely every other organization involved in nuclear testing, including contractors and those that are now defunct.

96 KNOWLEDGE MANAGEMENT AND PRESERVATION↗
DOE OSTI2023

2022 Annual Site Environmental Report for Sandia National Laboratories, Albuquerque, New Mexico

Sandia National Laboratories is a multimission laboratory managed and operated by National Technology & Engineering Solutions of Sandia, LLC, a wholly owned subsidiary of Honeywell International Inc., for the U.S. Department of Energy’s National Nuclear Security Administration. The National Nuclear Security Administration’s Sandia Field Office administers the contract and oversees contractor operations at Sandia National Laboratories, New Mexico. Activities at the site support research and development programs with a wide variety of national security missions, resulting in technologies for nonproliferation, homeland security, energy and infrastructure, and defense systems and assessments. The U.S. Department of Energy and its management and operating contractor are committed to safeguarding the environment, assessing sustainability practices, and ensuring the validity and accuracy of the monitoring data presented in this annual site environmental report. This report summarizes the environmental protection and monitoring programs in place at Sandia National Laboratories, New Mexico, during calendar year 2022. Environmental topics include cultural resource management, chemical management, air quality, ecology, environmental restoration, oil storage, site sustainability, terrestrial surveillance, waste management, water quality, and implementation of the National Environmental Policy Act. This report is prepared in accordance with and as required by DOE O 231.1B, Admin Change 1, Environment, Safety and Health Reporting, and has been approved for public distribution.

54 ENVIRONMENTAL SCIENCES↗
DOE OSTI2024

2023 Annual Site Environmental Report for Sandia National Laboratories, Albuquerque, New Mexico

Sandia National Laboratories is a multimission laboratory managed and operated by National Technology & Engineering Solutions of Sandia, LLC, a wholly owned subsidiary of Honeywell International Inc., for the U.S. Department of Energy’s National Nuclear Security Administration. The National Nuclear Security Administration’s Sandia Field Office administers the contract and oversees contractor operations at Sandia National Laboratories, New Mexico. Activities at the site support research and development programs with a wide variety of national security missions, resulting in technologies for nonproliferation, homeland security, energy and infrastructure, and defense systems and assessments. The U.S. Department of Energy and its management and operating contractor are committed to safeguarding the environment, assessing sustainability practices, and ensuring the validity and accuracy of the monitoring data presented in this annual site environmental report. This report summarizes the environmental protection and monitoring programs in place at Sandia National Laboratories, New Mexico, during calendar year 2023. Environmental topics include cultural resource management, chemical management, air quality, ecology, environmental restoration, oil storage, site sustainability, terrestrial surveillance, waste management, water quality, and implementation of the National Environmental Policy Act. This report is prepared in accordance with and as required by DOE O 231.1B, Admin Change 1, Environment, Safety and Health Reporting, and has been approved for public distribution.

54 ENVIRONMENTAL SCIENCES↗
DOE OSTI2025

Improving Cyber Situational Understanding

Effective cybersecurity operations require the ability to analyze large amounts of information to assess security risks and formulate defensive strategies against adversaries. This has become more complex in recent years as the sprawl and interconnectivity of devices grows through implementation of virtualization, cloud computing, and Internet of Things (IoT). The amount of data and analysis required for effective cybersecurity command and control decisions far exceeds humans’ capacity to perform manually. We characterize the analysis problem as cyber situational understanding. The research presented to improve cyber situational understanding focuses on vulnerability analysis and threat intelligence. Regarding vulnerabilities, entities must analyze and plan work for between thousands and tens of thousands of software vulnerabilities annually. Entities heavily use network firewalls to limit vulnerability exposure. As a result, some of these vulnerabilities permit exposure to adversarial exploitation, whereas others are inaccessible and therefore present negligible risk of exploitation. Distinguishing between high and low risk software vulnerabilities requires a deep understanding of the vulnerability, network firewall protection, and characteristics of the targeted device. This problem is solved by extracting network service features from vulnerability data features using both machine-learning and natural language processing. Then, the network firewall topology is parsed to determine which vulnerabilities are reachable by adversaries. Ultimately, a state-based safety analysis ascertains which vulnerabilities are unsafe. A related vulnerability analysis problem occurs in cybersecurity operations when associating an entity’s hardware and software assets to public vulnerability databases. Assets often reveal hardware and software through installation artifacts and network service identification, and entities store these artifacts in inventory databases. However, software and hardware vendors apply a standard Common Platform Enumeration (CPE) naming convention when publicly reporting vulnerabilities. Associating these two datasets often requires many hours to days of manual inspection. The proposed solution automates the mapping approach of human analysts using fuzzy matching techniques, natural language processing, and, ultimately, machine learning to present a small set of recommendations for mapping the two datasets. The result significantly reduces human analysis time and reduces the occurrence of false positives in vulnerability notifications. Finally, cyber threat intelligence (CTI) requires associating cyber observable artifacts, such as IP addresses, URIs, and file hashes, with cyber threat tactics, techniques, and procedures. Unfortunately, most CTI data is compartmentalized across multiple organizations and cannot be shared due to the legal and reputational risk with cyber threat being associated with the entity. The approach to solving this problem inovlves using a distributed ledger with anonymous token spending and authentication. This allows a consortium of semi-trusted entities to share the workload of curating CTI for a threat sharing community’s cooperative benefit.

Huff, Philip↗
DOE OSTI2023

Natural Language Processing for Text Based Event Extraction: Identifying Events of Interest Related to Worldwide State-Sponsored Civil Nuclear Power

Beginning in FY20, SRNL was funded by the National Nuclear Security Administration’s Office of Defense Nuclear Non-Proliferation Research and Development to develop a prototype natural language processing/natural language understating machine learning-based modeling and analysis pipeline to extract and forecast events of interest from massive open data sources. The working hypothesis within the approach is that contextual shifts in key words and phrases act as indicators of events of interest over time. Therefore, by identifying points in time where contextual shifts occur, events of interest can be extracted along with explicit and implicit connections of entities and activities. The development of the preliminary prototype pipeline proved successful, meriting further testing of the pipeline on more broad topical domains and in a worldwide data environment. Therefore, SRNL, in collaboration with the Sanghani Center for Artificial Intelligence and Data Analytics at Virginia Tech, have continued development with a test case of identifying events of interest related to worldwide state-sponsored civil nuclear power in open data sources. In the first year of this follow-on effort, the team has curated domain-specific data corpuses using an automated scheme and applied the modeling and analysis pipeline. This robust, focused, and efficient approach consists of an ensemble of analyses applied to time dependent word embedding models that are trained on the data corpuses. In this report, the team has demonstrated the capability of the existing pipeline (as development has continued in parallel) by exploring several specific case-studies centered around Rosatom’s international activities regarding the planning, construction, operation, and/or shutdown of nuclear reactors. A basic timeline events has been generated by manually cataloging known “milestone” events that have occurred at reactors in Turkey, Finland, Hungary, and Egypt and compared with the output of the modeling pipeline. In this approach, the team has characterized the lead time using the prototype pipeline, as well as the ability to capture relevant information, which proved 100% successful. A deep dive example of the Akkuyu reactor (Turkey) is presented that shows the breadth of information that can be captured using the approach. In this case study, events were extracted pertaining to the planning/construction of Akkuyu including protests from the population, information campaigns in response to the protests, forged regulatory documents and lawsuits, budgetary/shareholder information, geopolitical tensions, and the various construction milestones. This has demonstrated the pipeline’s utility as a research aid or real-time event extraction tool, where summary-level information and detailed text extractions from millions of articles or Tweets across long time periods can be generated with significantly less effort than current techniques.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗
DOE OSTI2022

Feasibility of critical infrastructure protection using network functions for programmable and decoupled ICS policy enforcement over WAN

Industrial control systems (ICS) represent a major component of our critical infrastructure. With the increasing need for more control and monitoring of such systems, ICS have seen an increase in connectivity to wide area networks (WAN) exposing aging equipment to rapidly evolving cybersecurity threats. Furthermore, the ICS data requires a reliability measure from the networks for critical functions for infrastructure monitoring and control. Especially when remote plant sites are involved such as pipelines, energy distribution networks, and transportation, WAN transport impairments most often provide a best effort delivery with no strict reliability guarantees. Network functions can provide a vendor agnostic, programmable critical infrastructure protection with a single maintenance, policy determination, and reliability assurance surface. A network function (NF) can be utilized for policy enforcement over the communication between remote entities and the main control office. This paper presents the research on transparent integration with existing ICS without disrupting communications, resulting in minimal downtime while decoupling the fast paced evolution of defensive security measures from the upgrade cycle of expensive long term hardware. We report our measurements on the resource requirements and overhead in the network for successful NF insertion under a wide variety of network impairments (network packet delay, reordering, and loss). Our paired NF implementation provides a policy enforcement platform extensible to cover myriad cybersecurity-related communication goals, including packet signing for verification, encryption for data privacy, packet filtering and data diode operation (i.e. protecting against eavesdropping, packet injection, and denial-of-service). Furthermore, bundling communication specifications into packet flows allows for tunability in applying policies as coarse- or fine-grained as the needs of the operator. We report on network function resource requirements in the form of required queue depth and network utilization overhead to inform the decision making against hardware cost constraints.

42 ENGINEERING↗
DOE OSTI2019

Enhancing Lifeline Infrastructure Resilience

Establish operational critical infrastructure research environment with focus on control systems security Continue enhancement of critical infrastructure cyber-physical interdependency analysis and knowledge management capabilities

45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗
DOE OSTI2025

Hands-On, Heads-Up: Blending Cyber T&E with Data Science-Driven Training in Jupyter Notebooks

In an era of increasingly sophisticated threats to critical infrastructure, cybersecurity professionals must be more than just aware; they must be immersed, agile, and equipped to operate in environments where failure is not an option. Nowhere is this truer than in the nuclear sector, where cyber-physical systems, regulatory scrutiny, and insider threat potential demand a new generation of hands-on, technically fluent defenders. This paper presents a unified training approach that integrates Cybersecurity Test and Evaluation (T&E) with data science techniques using Jupyter Notebooks as the interactive lab environment. The program centers on a modular, scenario-driven curriculum designed to build not just knowledge but practical capability in the assessment and defense of radiation detection systems, firmware interfaces, and operational security postures.

98 - NUCLEAR DISARMAMENT, SAFEGUARDS, AND PHYSICAL↗
DOE OSTI2018

Automated Behavior Analysis of Malware: A Case Study of WannaCry Ransomware

Ransomware, a class of self-propagating malware that uses encryption to hold the victims’ data ransom, has emerged in recent years as one of the most dangerous cyber threats, with widespread damage; e.g., zero-day ransomware WannaCry has caused world-wide catastrophe, from knocking U.K. National Health Service hospitals offline to shutting down a Honda Motor Company in Japan [1]. Our close collaboration with security operations of large enterprises reveals that defense against ransomware relies on tedious analysis from high-volume systems logs of the first few infections. Sandbox analysis of freshly captured malware is also commonplace in operation. We introduce a method to identify and rank the most discriminating ransomware features from a set of ambient (non-attack) system logs and at least one log stream containing both ambient and ransomware behavior. These ranked features reveal a set of malware actions that are produced automatically from system logs, and can help automate tedious manual analysis. We test our approach using WannaCry and two polymorphic samples by producing logs with Cuckoo Sandbox during both ambient, and ambient plus ransomware executions. Our goal is to extract the features of the malware from the logs with only knowledge that malware was present. We compare outputs with a detailed analysis of WannaCry allowing validation of the algorithm’s feature extraction and provide analysis of the method’s robustness to variations of input data—changing quality/quantity of ambient data and testing polymorphic ransomware. Most notably, our patterns are accurate and unwavering when generated from polymorphic WannaCry copies, on which 63 (of 63 tested) antivirus (AV) products fail.

Chen, Qian↗
NASA NTRS1973

Future DCS objectives in communication network timing and synchronization

The Defense Communication System will be moving rapidly toward providing switched digital service to it's users within the next ten years. The principal driving force in the transition to a digital system is the requirement for high performance secure voice service. Additionally, the anticipated data requirements in this time frame can be handled most effectively by a digital network. The characteristics of a switched digital network which impose timing and synchronization requirements on the system design are presented. Several alternative approaches to implementing a timing subsystem suitable for a switched digital communications system have been considered. These include pulse stuffing, independent stable clocks, and clock correction techniques. The advantages and disadvantages of each approach are discussed relative to both the strategic and tactical communication system requirements.

Mensch, J. R.↗
DOE OSTI2019

An Overview of the United States Department of Energy's Nuclear Criticality Safety Program and Future Challenges

The United States (US) Department of Energy (DOE)/National Nuclear Security Administration (NNSA) Nuclear Criticality Safety Program (NCSP) was formally established in January 1998 as part of the Defense Nuclear Facility Safety Board (DNFSB) Recommendation 97-2 implementation plan. The NCSP was initially focused on seven NCSP tasks: Critical Experiments, Benchmarking, Analytical Methods, Nuclear Data, Training and Qualification, Information Preservation and Dissemination, and Applicable Ranges of Bounding Curves and Data. The first NCSP 5-year plan was published in August 1999. Now, more than 20 years later, NCSP continues to serve the United States and the nuclear criticality safety (NCS) community around five technical program elements (TPEs): Analytical Methods, Information Preservation and Dissemination, Integral Experiments, Nuclear Data, and Training and Education. NCSP has three chartered support groups, the Criticality Safety Support Group, the Nuclear Data Advisory Group, and the DOE Criticality Safety Coordinating Team, all of which provide technical advisement to the NCS community, to DOE, and to the NCSP manager. NCSP has a comprehensive mission and vision document that provides technical and budget priorities for TPE attributes and goals to ensure that the needs of the NCS community and DOE NCS are prioritized appropriately to meet the goals defined by the 1998 DNFSB recommendation. Like any DOE/NNSA program, NCSP faces significant challenges in the future that involves program funding, rising nuclear facility costs, aging critical assembly infrastructure, knowledge retention, and other issues. This paper discusses NCSP and provides some insights into these and other challenges moving into the future.

Bowen, Douglas G.↗
DOE OSTI2019

A Multidimensional Holistic Framework for the Security of Distributed Energy and Control Systems

The digitization of smart grid distributed generation and industrial control systems has prompted utilities to deploy tools with ubiquitous communications that potentially widen the attack surface. The utilities still continue to rely on the traditional cybersecurity technologies, such as firewalls, anti-malware tools, and passwords that do not ensure security across all dimensions of the information assurance model required for a strong cybersecurity business process. This paper proposes a multidimensional holistic framework that addresses this gap through advanced technologies, intelligent algorithms, and continued assessments. To show proof, the layered defense model, a solution dimension of the framework, is integrated into the National Renewable Energy Laboratory's Security and Resilience Testbed to replicate a utility's enterprise and substation networks. The model is used to evaluate the security and resilience of microgrid control systems, and, based on the insights gathered, recommend best practices for utility cybersecurity analysts for a strong business process. Here, with this baseline, the paper conceptually introduces intelligence-driven solutions comprising contextual data analysis and machine learning to respond to advanced persistent threats sponsored by campaign efforts.

24 POWER TRANSMISSION AND DISTRIBUTION↗
DOE OSTI2020

Artificial Intelligence for Digital Security and Protections

Proper functioning of nuclear power plants relies on a mix of well-regulated human and machine-driven workflows. This regulation supports nuclear safety through a series of processes and many of the tasks that support these processes have a repetitive nature that make artificial intelligence (AI) informed by machine learning (ML) a potential aid in a variety of tasks. AI is being evaluated for activities that include inspections, fuel processing, monitoring, and other activities. The introduction of any new technology presents a potential new attack vector. In the case of AI/ML, there are many attacks that have already been discovered and over time the attacks can be expected to follow the growth pattern observed in cyber security. While future planning is necessary, current efforts need to be established now to predict the threat emergence over the next year 10 years and mitigate potential threats. Based on these observations, AI/ML will need to become trustworthy, which corresponds to techniques and procedures that emphasize AI explainability along with resilience techniques to data, algorithms, models, and systems. This kind of system robustness is the foundation for defenses against AI/ML-specific attacks. Attempting to look forward and take a broad view of capabilities provides input to research roadmaps and the ability to distill vulnerabilities into specific use cases may provide greater assistance in understanding the technology benefits while introducing new risks. The impact of current and future AI in three areas—capabilities, challenges, and recovery strategies—represents an initial attempt at balancing both.

45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗
DOE OSTI2021

Titan on the Red (advanced AI / ML system) [Slides]

Born out of a need to make LANL Weapons Program archival material available to scientists and engineers. Material is the end result of decades of consolidation of mini-libraries and mini archives at LANL. Latest consolidation brought together LANL’s digital archives and physical archives. This houses over 75 years of nuclear weapons research, designs, procedures, videos, photos, and other reports. For the Titan on the Red machine learning project, the system must be able to automatically extract metadata from digitized documents, perform natural-language search, enforce security classification and NTK protocols, be expandable to ingest various data stores (Online Vault, PDMLink, shared drives, SharePoint, etc.), and utilize commercial, public domain, and LANL ontologies.

45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗
DOE OSTI2022

Applied ML Needs in Uncrewed Aerial Systems [Slides]

We have an urgent need to optimize data analyses and UAS operations to better position its use in sensitive and high-consequence national security applications. LANL has a mature, robust, and multidisciplinary UAS deployment capability with proficiency in single and multi-modal data acquisition for signature detection.

45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗
DOE OSTI2016

Nevada National Security Site Underground Radionuclide Inventory, 1951-1992: Accounting for Radionuclide Decay through September 30, 2012

This report is an update of report LA-13859-MS (Bowen et al., 2001). In that original report, the underground radionuclide inventory at the Nevada National Security Site (NNSS) was decay corrected to September 23, 1992, the date of the last underground nuclear test at the NNSS. In this report, the inventory is updated to account for the decay of radionuclides over two additional decades (1992-2012) and revised tritium, fission product and actinide inventory figures and tables are presented. The maximum contaminant levels for radionuclides were also updated to Safe Drinking Water Act Maximum Contaminant Levels (MCLs) (CFR, 2013). Also, a number of minor errata found in the original publication were corrected. An inventory of radionuclides produced by 828 underground nuclear tests conducted at the NNSS by the Lawrence Livermore National Laboratory, the Los Alamos National Laboratory, and the Department of the Defense from 1951 to 1992 includes tritium, fission products, actinides, and activation products. The inventory presented in this report provides an estimate of radioactivity remaining underground at the NNSS after nuclear testing. The original test inventory is decayed to September 30, 2012, and predictions of inventory decay over the subsequent 1000 years are presented. For the purposes of summary and publication, the Los Alamos National Laboratory and Lawrence Livermore National Laboratory authors of this report subdivided the inventory into five areas corresponding to the principal geographic test centers at the NNSS. The five areas roughly correspond to Underground Test Area “Corrective Action Units” (CAUs) for remediation of groundwater. In addition, the inventory is further subdivided for the Yucca Flat region by tests where the working point depth is more than 328 feet (100 meters) above the water table and tests that were detonated below that level. Water levels used were those from the U. S. Department of Energy, Nevada Operations Office (1997), now called the Nevada Field Office. Curie activities and atoms are reported as of September 30, 2012. This inventory is strictly a compilation of the residual radiologic inventory remaining from the underground nuclear tests conducted by Lawrence Livermore National Laboratory, Los Alamos National Laboratory and the Department of the Defense from 1951 to 1992 and does not include radioactivity from other types of nuclear testing (e.g., atmospheric, reactors, rocket engines). A companion classified report (Miller et al., 2002) contains test-specific data for each test performed at the NNSS. This work has been sponsored by the U. S. Department of Energy, National Nuclear Security Administration Nevada Field Office.

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗