Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “System Security”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 721 records · Page 40

Structural Health Monitoring with Fiber Bragg Grating and Piezo Arrays

Structural health monitoring (SHM) is one of the most important tools available for the maintenance, safety, and integrity of aerospace structural systems. Lightweight, electromagnetic-interference- immune, fiber-optic sensor-based SHM will play an increasing role in more secure air transportation systems. Manufacturers and maintenance personnel have pressing needs for significantly improving safety and reliability while providing for lower inspection and maintenance costs. Undetected or untreated damage may grow and lead to catastrophic structural failure. Damage can originate from the strain/stress history of the material, imperfections of domain boundaries in metals, delamination in multi-layer materials, or the impact of machine tools in the manufacturing process. Damage can likewise develop during service life from wear and tear, or under extraordinary circumstances such as with unusual forces, temperature cycling, or impact of flying objects. Monitoring and early detection are key to preventing a catastrophic failure of structures, especially when these are expected to perform near their limit conditions.

Black, Richard J.↗

Remote Monitoring System Design Requirements for Accountable Nuclear Materials at the Nevada National Security Site

The Nevada National Security Site (NNSS) worked with other sites within the Department of Energy National Nuclear Security Administration weapons complex to develop design requirements for a Remote Monitoring System. System objectives include: • Continuous monitoring of packaging (containers) within a Facility's buildings to meet Material Control and Accountability (MC&A) inventory requirements. • Remotely access and receive monitoring data for tamper detection/alarm, tracking information, environmental conditions, equipment metadata (serial number, date of manufacturer, etc.), and assessment video feeds. • All data processing, storage/retrieval, and communications will be protected in a manner commensurate with its trust level and classification. • Remotely collected and processed data will be securely stored, backed up, and archived. • Current and historical data will accessible within and outside of a Building (location). • Automated creation of reports and data visualization. • Design features to facilitate the potential future integration with the Facility's physical security alarm and display system. The requirements may be used to develop an integrated conceptual design or may be used in a modular fashion to inform separate designs. The guiding principles in developing the system objectives include: • For MC&A needs, remotely perform the physical inventory and evidence collection of tamper for Security Category I and II packaged material within a facility and be capable of satisfying guidelines establish by DOE M 470.4-6, “Nuclear Material Control and Accountability.” • For personnel safety needs: o Meet/satisfy Nuclear Explosive Safety requirements. o Minimize the exposure of personnel to radiation to be as low as reasonably achievable (ALARA) in accordance with NSTec Radiological Controls Manual (Ref TBD). • For DOE nuclear materials, Building environment shall be controlled to meet requirements for packaged nuclear materials specified in weapons laboratory literature.

99 GENERAL AND MISCELLANEOUS↗

Remote Monitoring System Design Requirements for Accountable Nuclear Materials at the Nevada National Security Site

The Nevada National Security Site (NNSS) worked with other sites within the Department of Energy National Nuclear Security Administration weapons complex to develop design requirements for a Remote Monitoring System. System objectives included: Continuous monitoring of packaging (containers) within a Facility's buildings to meet Material Control and Accountability (MC&A) inventory requirements. Remotely access and receive monitoring data for tamper detection/alarm, tracking information, environmental conditions, equipment metadata (serial number, date of manufacture, etc.), and assessment video feeds. All data processing, storage/retrieval, and communications will be protected in a manner commensurate with its trust level and classification. Remotely collected and processed data will be securely stored, backed up, and archived. Current and historical data will accessible within and outside of a Building (location). Automated creation of reports and data visualization. Design features to facilitate the potential future integration with the Facility's physical security alarm and display system. The requirements may be used to develop an integrated conceptual design or may be used in a modular fashion to inform separate designs. The guiding principles in developing the system objectives include: For MC&A needs, remotely perform the physical inventory and evidence collection of tamper for Security Category I and II packaged material within a facility and be capable of satisfying guidelines establish by DOE M 470.4-6, “Nuclear Material Control and Accountability.” For personnel safety needs: Meet/satisfy Nuclear Explosive Safety requirements. Minimize the exposure of personnel to radiation to be as low as reasonably achievable (ALARA) in accordance with NSTec Radiological Controls Manual. For DOE nuclear materials, Building environment shall be controlled to meet requirements for packaged nuclear materials specified in weapons laboratory literature.

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗

FALCON: Framework for Anomaly Detection in Industrial Control Systems

Industrial Control Systems (ICS) are used to control physical processes in critical infrastructure. These systems are used in a wide variety of operations such as water treatment, power generation and distribution, and manufacturing. While the safety and security of these systems are of serious concern, recent reports have shown an increase in targeted attacks aimed at manipulating physical processes to cause catastrophic consequences. This trend emphasizes the need for algorithms and tools that provide resilient and smart attack detection mechanisms to protect ICS. In this paper, we propose an anomaly detection framework for ICS based on a deep neural network. The proposed methodology uses dilated convolution and long short-term memory (LSTM) layers to learn temporal as well as long term dependencies within sensor and actuator data in an ICS. The sensor/actuator data are passed through a unique feature engineering pipeline where wavelet transformation is applied to the sensor signals to extract features that are fed into the model. Additionally, this paper explores four variations of supervised deep learning models, as well as an unsupervised support vector machine (SVM) model for this problem. The proposed framework is validated on Secure Water Treatment testbed results. This framework detects more attacks in a shorter period of time than previously published methods.

97 - MATHEMATICS AND COMPUTING↗

Recent results from a testbed for the reliability of the digital instrumentation and control systems and cybersecurity in nuclear power plants - 392

Transition from analog to digital instrumentation and control systems requires a systematic study of the modifications, and assessment of their reliability. Such studies are often carried out on a test bed. The test bed developed earlier includes a commercially available triple modular redundant (TMR) programmable logic controller (PLC) for testing not only the reliability of the digital I and C but also the cyber-security of the system during plant operation. This paper reports results of our preliminary analyses carried out using the test bed following the injection of faults mimicking faulty sensors. The fault injection tool generates faulty signals in single or multiple sensors located in the primary loop. These scenarios studied under steady-state operation conditions simulate a bad sensor, a cut wire, noise, etc. The faults injected can lead to information being displayed in the main control room (MCR) to not match the conditions in the plant. In addition to a fault injection module, a result analyzer module is also a part of this testbed. Operator actions can be based on information displayed in the MCR, or they can be informed by the result analyzer. Potential operator actions following these single- or multiple faulty signals are assessed. It is concluded that the result analyzer in some cases can be helpful in guiding operators to make the right decisions. (authors)

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

Secure Intra-Body Wireless Communications (SIWiC) System Project

SIWiC System is a project to investigate, design and implement future wireless networks of implantable sensors in the body. This futuristic project is designed to make use of the emerging and yet-to-emerge technologies, including ultra-wide band (UWB) for wireless communications, smart implantable sensors, ultra low power networking protocols, security and privacy for bandwidth and power deficient devices and quantum computing. Progress in each of these fronts is hindered by the needs of breakthrough. But, as we will see in this paper, these major challenges are being met or will be met in near future. SIWiC system is a network of in-situ wireless devices that are implanted to coordinate sensed data inside the body, such as symptoms monitoring collected internally, or biometric data collected of an outside object from within the intra-body network. One node has the capability of communicating outside the body to send data or alarm to a relevant authority, e.g., a remote physician.

Ahmad, Aftab↗

How Earth System Models Can Inform Key Dimensions of Marine Food Security in the Alaskan Arctic

The Arctic is home to several groups of Indigenous Peoples, each with distinct ways of interacting with their environment and ways of life. Arctic, Indigenous Peoples’ food sovereignty is tightly linked with food security. Subsistence harvesting activities provide nutritious and culturally vital foods for Alaska Native households and communities. Climate change is causing rapid and more unpredictable shifts in environmental conditions that impact three of the key aspects of food security, availability, stability, and accessibility. While communities monitor the abundance and health of food webs and environments as part of subsistence harvest practices, anticipating major transformations and changes in these systems is challenging. We explored the potential of Earth System Model output in helping anticipate or project physical or ecosystem changes relevant to Alaska Indigenous peoples’ food security needs. Through examples of model products, that provide measures of accessibility and availability of marine resources, we show that modern models, such as the Energy Exascale Earth System Model presented here, can provide estimates of a broad suite of variables relevant to food security. We investigate how Earth System Model output could contribute to exploring questions related to aspects of Arctic food security such as accessibility and availability and highlight present model shortcomings that, if addressed, would move Earth System Models closer to being a useful tool for understanding environmentally driven changes to the availability and accessibility of harvestable food resources. Our example model-derived food security indicators illustrate how Earth System Model output could be combined with relevant, non-model, information sources; These model products are meant only as a starting point and a tool for engaging community members and to present, in an accessible way, the model’s potential utility, or current lack thereof, to rights holders and stakeholders concerned about food security. We are hopeful that with example products in hand, additional model development efforts will have a higher likelihood of success in achieving an iterative discussion with stakeholders regarding feasible and desired products.

Gibson, Georgina A.↗

Supercapacitor to Provide Ancillary Services: Preprint

Supercapacitor technology has reached a level of maturity as a viable energy storage option available to support a modern electric power system grid; however, its application is still limited because of its energy capacity and the cost of the commercial product. In this paper, we demonstrate transient models of supercapacitor energy storage plants operating in coordination with run-of-the-river (ROR), doubly-fed induction generator hydropower plants (HPP) using a system control concept and architecture developed. A detailed transient model of a supercapacitor energy storage device is coupled with the grid via a three-phase inverter/rectifier and bidirectional DC-DC converter. In addition, we use a version of a 14-bus IEEE test case that includes the models of the supercapacitor energy storage device, ROR HPPs, and synchronous condensers that use the rotating synchronous generators of retired coal-powered plants. The purpose of the synchronous condensers is to enhance the system stability by providing voltage and reactive power control, provide power system oscillations damping, and maintain system inertia at secure levels. The control layer provides coordinated, decentralized operation of distributed ROR HPPs and energy storage as aggregate support to power system operations.

25 ENERGY STORAGE↗

Framework for Flexible Security in Group Communications

The Antigone software system defines a framework for the flexible definition and implementation of security policies in group communication systems. Antigone does not dictate the available security policies, but provides high-level mechanisms for implementing them. A central element of the Antigone architecture is a suite of such mechanisms comprising micro-protocols that provide the basic services needed by secure groups.

McDaniel, Patrick↗

Preliminary Thermal-Hydraulic Analysis of the UTA–2 Subcritical Linear Accelerator–Driven System

The National Nuclear Security Administration’s mission includes establishing a reliable supply of 99 Mo without highly enriched uranium. Oak Ridge National Laboratory (ORNL) supports this objective through collaborative research and development with industrial partners. Niowave Inc., a current partner, is currently designing a subcritical linear accelerator-driven system (ADS) and preparing for the US Nuclear Regulatory Commission’s licensing process. Niowave’s system has the potential to efficiently supply medical radioisotopes. The technology includes a superconducting electron accelerator and a pile of both natural and low-enriched uranium (LEU) targets. The process fissions uranium and many valuable isotopes can then be extracted from the targets. Niowave is currently iterating through conceptual and detailed design processes for several system sizes. This report discusses UTA–2, which is at the demonstration stage. UTA–2 will validate numerical modeling results with experimental measurements before progressing to the detailed design of UTA–3, the commercial-sized ADS. The thermal-hydraulic behavior of the UTA–2 core design was numerically investigated using STAR-CCM+, as described in this report. STAR-CCM+, a state-of-the-art computational fluid dynamics (CFD) software that was commercially developed by Siemens, has an extensive user base and a set of validation studies. It is also compliant with the American Society of Mechanical Engineers’ Nuclear Quality Assurance 1 standard. Three cases are investigated in this report. Case 1 quantified the temperature field within the UTA–2 assembly and water tank using only conduction as the method of thermal energy transport. This simplified approach was overly conservative and yielded wetted cladding temperatures above the coolant saturation temperature. In this case, the maximum temperature of the wetted cladding surface of the highest power rod exceeded the saturation temperature of water by 63.8°C. Because of the overly conservative approach taken in Case 1 and its negative subcooled margin, buoyancy-driven natural circulation flow physics were implemented in Case 2. Adding coolant motion significantly distributed the thermal energy of the system through convective heat transfer. This relatively small amount of convective heat transfer significantly reduced system temperatures and increased the subcooled margin from –63.8 to 61.3°C. This margin confirmed that no boiling was expected during normal operation of UTA–2 at 230 W. Case 3 had no additional physics models but considered an overpower event during which the power of each LEU and natural uranium rod was at its respective peak values. This resulted in a study with the total assembly power equal to 176% of the nominal power of 230 W considered in Cases 1 and 2. The resulting natural circulation flows were slightly enhanced. The subcooled margin decreased slightly to 46.3°C, which is still a significant margin to local boiling of the water within the tank. This margin confirmed that no boiling was expected during an abnormal operation of UTA–2 at 406 W.

07 ISOTOPE AND RADIATION SOURCES↗

Cybersecurity and Distributed Energy Resources

This fact sheet addresses cybersecurity for distributed energy resources (DERs) and identifies best practices in cybersecurity governance, technical management of cyber-physical systems, and physical security.

cybersecurity↗

Energy Management Information Systems Cybersecurity Best Practices

Energy management information systems (EMIS) are a broad and rapidly evolving family of tools that monitor, analyze, and control building energy use and system performance. Critical systems are often integrated with or operate on the same networks as EMIS scope systems, necessitating stable, continuous, and secure communication. When connecting EMIS to building automation and utility control systems, there are also many physical assets that could cause harm to the building and its occupants if a malicious act or human error were introduced. It is imperative to ensure all EMIS scope systems are connected securely to the EMIS and do not open vulnerable pathways to other facility networks and operations. The Federal Energy Management Program (FEMP) promotes best practices for impactful utilization of EMIS at federal facilities. This best practice document is part of a series of fact sheets created to help accelerate the market adoption and use of EMIS in the federal sector. It provides an overview of required EMIS cybersecurity standards for compliance and authority to operate along with additional recommendations.

Cybersecurity↗

Energy Management Information Systems Cybersecurity Best Practices

Energy management information systems (EMIS) are a broad and rapidly evolving family of tools that monitor, analyze, and control building energy use and system performance. Critical systems are often integrated with or operate on the same networks as EMIS scope systems, necessitating stable, continuous, and secure communication. When connecting EMIS to building automation and utility control systems, there are also many physical assets that could cause harm to the building and its occupants if a malicious act or human error were introduced. It is imperative to ensure all EMIS scope systems are connected securely to the EMIS and do not open vulnerable pathways to other facility networks and operations. The Federal Energy Management Program (FEMP) promotes best practices for impactful utilization of EMIS at federal facilities. This best practice document is part of a series of fact sheets created to help accelerate the market adoption and use of EMIS in the federal sector. It provides an overview of required EMIS cybersecurity standards for compliance and authority to operate along with additional recommendations.

cybersecurity↗

INS–Support for Formal Cyber Security Education in Brazil–After Action Report

The adoption of digital technology into Instrumentation and Control (I&C) systems in nuclear facilities fundamentally changes the nature of these systems. Greater interconnectivity of reprogrammable, and functionally interdependent control systems has given rise to the need for computer security consideration in digital I&C Systems. The cyber security of I&C systems presents a growing risk to nuclear facilities and requires the development of educational and research tools to ensure the safety of these facilities. Currently there is a major gap in formal educational offerings on cyber security for these Operational Technology (OT) systems. To provide formal cyber security education resources, DOE’s office of International Nuclear Security (INS) partnered with the University of São Paulo (USP) to develop a training course on the cyber security of nuclear facility I&C systems using the hypothetical Nuclear Power Plant, Asherah.

46 INSTRUMENTATION RELATED TO NUCLEAR SCIENCE AND ↗

Method for securing a network using cyber economic network transaction security (CENTS)

A method and system for administering an interactive computer network and more particularly to performing security in a network of interactive electronic components, such as a computer network using a currency-based transactional economy model where scarcity serves as a limiting factor to accessing and engaging in various activities within the system.

97 MATHEMATICS AND COMPUTING↗

A Moving Target Defense Control Framework for Cyber-Physical Systems

This paper considers the problem of efficiently and securely controlling cyber-physical systems that are operating in uncertain, and adversarial environments. To mitigate sensor, actuator attacks, and performance loss due to such attacks, we formulate a secure control algorithm that consists of a proactive and a reactive defense mechanism. The proactive mechanism, which is based on the principles of moving target defense, utilizes a stochastic switching structure to dynamically and continuously alter the parameters of the system, while hindering the attacker's ability to conduct successful reconnaissance to the system. The unpredictability of the current actuator and sensor is optimized using an information entropy measure, which is induced by probabilistic switching. The reactive mechanism on the other side, detects potentially attacked components, namely sensors and actuators, by leveraging online data to compute an integral Bellman error. A rigorous mathematical framework is presented to guarantee the stability of the equilibrium point of the closed-loop system, and provide a quantified bound on the performance loss when utilizing both reactive and proactive mechanisms. Simulation results show the efficacy of the proposed approaches on a benchmark aircraft model.

42 ENGINEERING↗

Secure Collaborative Environment for Seamless Sharing of Scientific Knowledge

In a secure collaborative environment, tera-bytes of data generated from powerful scientific instruments are used to train secure machine learning (ML) models on exascale computing systems, which are then securely shared with internal or external collaborators as cloud-based services. Devising such a secure platform is necessary for seamless scientific knowledge sharing without compromising individual, or institute-level, intellectual property and privacy details. By enabling new computing opportunities with sensitive data, we envision a secure collaborative environment that will play a significant role in accelerating scientific discovery. Several recent technological advancements have made it possible to realize these capabilities. In this paper, we present our efforts at ORNL toward developing a secure computation platform. We present a use case where scientific data generated from complex instruments, like those at the Spallation Neutron Source (SNS), are used to train a differential privacy enabled deep learning (DL) network on Summit, which is then hosted as a secure multi-party computation (MPC) service on ORNL’s Compute and Data Environment for Science (CADES) cloud computing platform for third-party inference. In this feasibility study, we discuss the challenges involved, elaborate on leveraged technologies, analyze relevant performance results and present the future vision of our work to establish secure collaboration capabilities within and outside of ORNL.

Yoginath, Srikanth↗

Dual load-path fastener

A fastener system is provided for securing a component to supporting structure. The fastener system comprises a pair of cooperating fastener modules. The first module includes a first stationary member attached to the supporting structure and a first bolt member threadedly engaged with the first stationary member. The second module includes a second stationary member also attached to the supporting structure and a second bolt member threadedly engaged with the second stationary member. The second bolt member also extends freely through a longitudinal bore in the first bolt member. Head members on the first and second head members are mutually engaged for their unitary rotation and the first head member engages the component. When the head members are rotated in one direction, they are advanced toward the supporting structure thereby drawing the component toward the supporting structure. Rotation in the opposite direction is effective to cause the head members to retract from the supporting structure and thereby separate the component from the supporting structure. With this construction, upon fracture either of the first fastener means at a location away from the first head member or of the second fastener means at a location away from the second head member, upon rotation of the first head member in the one direction, the first head member nevertheless continues to advance toward the supporting structure.

Driscoll, Timothy D.↗