Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “IT security”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 757 records · Page 42
All sourcesNASA NTRSDOE OSTI
DOE OSTI2023

Assessing the potential of composite confining systems for secure and long-term CO 2 retention in geosequestration

A potential geologic target for CO 2 storage should ensure secure containment of injected CO 2 . Traditionally, this objective has been achieved by targeting reservoirs with overlying seals-regionally extensive, low permeability units that have been proven capable of retaining buoyant fluid accumulations over geologic time. However, considering that the amount of CO 2 is limited by a decadal injection period, vertical migration of CO 2 can be effectively halted by a composite system of discontinuous shale/silt/mudstone barriers in bedded sedimentary rocks. Here, we studied the impact of depositional architectures in a composite confining system on CO 2 migration and confinement at reservoir scale. We stochastically generated lithologically heterogeneous reservoir models containing discontinuous barriers consistent with statistical distributions of net-sand-to-gross-shale ratio (NTG) and horizontal correlation lengths derived from well log data and observations of producing hydrocarbon fields in Southern Louisiana. We then performed an extensive suite of reservoir simulations of CO 2 injection and post-injection to evaluate the sensitivity of CO 2 plume migration and pressure response of the composite system to a series of geologic and fluid parameters including the lateral continuity of barriers, NTG, permeability anisotropy within the sand body, and capillary pressure contrast between the sand and shale facies. The results indicate that lateral continuity of barriers and NTG are the dominant controls on CO 2 plume geometry and pressure build-up in the reservoir, while the impact of NTG is particularly pronounced. The significance of intraformational barriers becomes apparent as they facilitate the local capillary trapping of CO 2 . Those barriers improve the pore space occupancy by promoting a more dispersed shape of the plume and ultimately retard the buoyancy-driven upward migration of the plume post injection.

58 GEOSCIENCES↗
DOE OSTI2022

NEFTSec: Networked federation testbed for cyber-physical security of smart grid: Architecture, applications, and evaluation

As today's power grid is evolving into a densely interconnected cyber-physical system (CPS), a high fidelity and multifaceted testbed environment is needed to perform cybersecurity experiments in a realistic grid environment. Traditional standalone CPS testbeds lack the ability to emulate complex cyber-physical interdependencies between multiple smart grid domains in a real-time environment. Therefore, there are ongoing research and development (R&D) efforts to develop an interconnected CPS testbed by sharing geographically dispersed testbed resources to perform distributed simulation while analysing simulation fidelity. This paper presents a networked federation testbed for cybersecurity evaluation of today's and emerging smart grid environments. Specifically, it presents two novel testbed architectures, including cyber federation and cyber-physical federation, identifies R&D applications, and also describes testbed building blocks with experimental case studies. It also presents a novel co-simulation interface algorithm to facilitate distributed simulation within cyber-physical federation. The resources available at the PowerCyber CPS security testbed at Iowa State University (ISU) and the US Army Research Laboratory are utilised to develop this platform for performing multiple experimental case studies pertaining to wide-area protection and control applications in power system. Finally, experimental results are presented to analyse the simulation fidelity and real-time performance of the testbed federation.

24 POWER TRANSMISSION AND DISTRIBUTION↗
DOE OSTI2020

A regional nuclear conflict would compromise global food security

A limited nuclear war between India and Pakistan could ignite fires large enough to emit more than 5 Tg of soot into the stratosphere. Climate model simulations have shown severe resulting climate perturbations with declines in global mean temperature by 1.8 °C and precipitation by 8%, for at least 5 y. Here we evaluate impacts for the global food system. Six harmonized state-of-the-art crop models show that global caloric production from maize, wheat, rice, and soybean falls by 13 (±1)%, 11 (±8)%, 3 (±5)%, and 17 (±2)% over 5 y. Total single-year losses of 12 (±4)% quadruple the largest observed historical anomaly and exceed impacts caused by historic droughts and volcanic eruptions. Colder temperatures drive losses more than changes in precipitation and solar radiation, leading to strongest impacts in temperate regions poleward of 30°N, including the United States, Europe, and China for 10 to 15 y. Integrated food trade network analyses show that domestic reserves and global trade can largely buffer the production anomaly in the first year. Persistent multiyear losses, however, would constrain domestic food availability and propagate to the Global South, especially to food-insecure countries. By year 5, maize and wheat availability would decrease by 13% globally and by more than 20% in 71 countries with a cumulative population of 1.3 billion people. In view of increasing instability in South Asia, this study shows that a regional conflict using <1% of the worldwide nuclear arsenal could have adverse consequences for global food security unmatched in modern history.

54 ENVIRONMENTAL SCIENCES↗
DOE OSTI2022

From legacy contamination to watershed systems science: a review of scientific insights and technologies developed through DOE-supported research in water and energy security

Abstract Water resources, including groundwater and prominent rivers worldwide, are under duress because of excessive contaminant and nutrient loads. To help mitigate this problem, the United States Department of Energy (DOE) has supported research since the late 1980s to improve our fundamental knowledge of processes that could be used to help clean up challenging subsurface problems. Problems of interest have included subsurface radioactive waste, heavy metals, and metalloids (e.g. uranium, mercury, arsenic). Research efforts have provided insights into detailed groundwater biogeochemical process coupling and the resulting geochemical exports of metals and nutrients to surrounding environments. Recently, an increased focus has been placed on constraining the exchanges and fates of carbon and nitrogen within and across bedrock to canopy compartments of a watershed and in river–floodplain settings, because of their important role in driving biogeochemical interactions with contaminants and the potential of increased fluxes under changing precipitation regimes, including extreme events. While reviewing the extensive research that has been conducted at DOE’s representative sites and testbeds (such as the Oyster Site in Virginia, Savannah River Site in South Carolina, Oak Ridge Reservation in Tennessee, Hanford in Washington, Nevada National Security Site in Nevada, Riverton in Wyoming, and Rifle and East River in Colorado), this review paper explores the nature and distribution of contaminants in the surface and shallow subsurface (i.e. the critical zone) and their interactions with carbon and nitrogen dynamics. We also describe state-of-the-art, scale-aware characterization approaches and models developed to predict contaminant fate and transport. The models take advantage of DOE leadership-class high-performance computers and are beginning to incorporate artificial intelligence approaches to tackle the extreme diversity of hydro-biogeochemical processes and measurements. Recognizing that the insights and capability developments are potentially transferable to many other sites, we also explore the scientific implications of these advances and recommend future research directions.

54 ENVIRONMENTAL SCIENCES↗
DOE OSTI2022

The Promise of Emergent Nanobiotechnologies for In Vivo Applications and Implications for Safety and Security

Nanotechnology, the multi-disciplinary field based on the exploitation of the unique physicochemical properties of nanoparticles (NPs) and nanoscale materials, has opened a new realm of possibilities for biological research and biomedical applications. The development and deployment of mRNA-NP vaccines for COVID-19, for example, may revolutionize vaccines and therapeutics. However, regulatory and ethical frameworks that protect the health and safety of the global community and environment are lagging, particularly for nanotechnology geared towards biological applications (i.e., bio-nanotechnology). Considering this, the following review, while not comprehensive, attempts to illustrate the breadth and promise of bionanotechnology developments, and how they may present future safety and security challenges. Specifically, we address current advancements to streamline the development of engineered NPs for in vivo applications and provide discussion on nano-bio interactions, NP in vivo delivery, nano-enhancement of human performance, nanomedicine, and the impacts of NPs on human health and the environment.

59 BASIC BIOLOGICAL SCIENCES↗
DOE OSTI2022

Evaluating Efficiency and Security of Connected and Autonomous Vehicle Applications

Evaluating efficiency and security of Connected and Autonomous Vehicles (CAVs) requires an environment that can support applications and measurements under real-world conditions. This work introduces our implementation and evaluation of a Connected and Autonomous Vehicle Research Environment (CAVRE). We implement and evaluate an existing CAV application called Cooperative Adaptive Cruise Control (CACC) using physical Vehicle-to-Vehicle (V2V) communications between a virtual agent and a real autonomous vehicle operating on a steerable dynamometer. CAVRE allows the follower to autonomously control longitudinal behavior on the dynamometer in order to maintain a steady following time gap from the leader. The effects of a wireless jamming attack on CACC and fuel efficiency is also evaluated. By executing attacks in a controlled environment, we learn how compromised communications can degrade CAV applications. We show that jamming V2V communications can impact CACC’s string stability and decrease fuel efficiency by more than 50%.

Taylor, Curtis↗
DOE OSTI2021

A Secure Learning Control Strategy via Dynamic Camouflaging for Unknown Dynamical Systems under Attacks

This paper presents a secure reinforcement learning (RL) based control method for unknown linear time-invariant cyber-physical systems (CPSs) that are subjected to compositional attacks such as eavesdropping and covert attack. We consider the attack scenario where the attacker learns about the dynamic model during the exploration phase of the learning conducted by the designer to learn a linear quadratic regulator (LQR), and thereafter, use such information to conduct a covert attack on the dynamic system, which we refer to as doubly learning-based control and attack (DLCA) framework. We propose a dynamic camouflaging based attack-resilient reinforcement learning (ARRL) algorithm which can learn the desired optimal controller for the dynamic system, and at the same time, can inject sufficient misinformation in the estimation of system dynamics by the attacker. The algorithm is accompanied by theoretical guarantees and extensive numerical experiments on a consensus multi-agent system and on a benchmark power grid model.

Mukherjee, Sayak↗
DOE OSTI2021

Cyber-physical security framework for Photovoltaic Farms

With the evolution of PV converters, a growing number of vulnerabilities in PV farms are exposing to cyber threats. To mitigate the influence of cyber-attack on PV farms, it is necessary to study attacks' impact and propose detection methods. To meet this requirement, a cyber-physical security framework is proposed for PV farms. Data integrity attacks (DIAs) are studied on different control loops. As μPMU is gaining in popularity, a lower sampling rate of μPMU data is applied to develop a detection algorithm. We have evaluated two data-driven methods, which are support vector machine (SVM) and long short-term memory (LSTM). Lastly, the data-driven methods verify the feasibility of μPMU data in attack detection.

Attack Impact Analysis↗
DOE OSTI2023

A Robust Method to Secure Multi-Inverter Grid Tied PV and Battery Energy Storage Systems Against Cyber Intrusions

This paper details a robust method to secure a multi-inverter grid tied system that interfaces photovoltaic (PV) and battery energy storage against potential cyber-attacks. The method can be applied to any third-party inverter systems without a need to modify their internal controls. A small random private excitation signal termed "watermark" is injected into the DC input voltage terminals (via a series transformer) connected to the PV/battery inverter system. An external robust cyber intrusion detector (CID) hardware consisting of a digital signal processor (DSP) generates the "watermark" and also receives the sensor signals that control the setpoints of the PV/battery grid tied system. The CID algorithm is shown to detect all possible cyber intrusions (such as false data injection(FDI)) on external sensor signals such as P and Q measured by a smart meter that control the overall system operation. The proposed CID computes online system ID and two variance tests in real time on each sensor signal and is able pinpoint intrusion location in a multi-inverter system. Results on a hardware in the loop (HIL) of a two-inverter grid connected system demonstrate effectiveness of the proposed CID system for FDI and unobservable FDI. Test results on a laboratory prototype will be discussed in the conference presentation.

Ibrahim, Hasan↗
DOE OSTI2023

A Proactive Stochastic Framework for Cyber-Physical Power Systems Security

This paper presents a framework for cyberphysical power systems security in which defensive action is proactive, striving to mitigate the harm from strategic cyber attacks before they occur. The prospect is formulated in a previously-studied context of state estimation via the Kalman filter under false data injection attacks. Assuming a cognitive attacker who is both advanced and persistent, the proactive defense rests upon stochastically influencing the sensors, Phasor Measurement Units, such that subsequent falsification attacks are countered. Examples are crafted to illustrate both the efficacy of the proactive approach in ideal situations and the practical challenges implied by non-ideal situations.

El Mezyani, Touria↗
DOE OSTI2025

Securing Smart Manufacturing: Detection of Cyber-Physical Attacks in CNC-Based Systems

As Industry 4.0 advances, the integration of computer numerical control (CNC) machines and advanced manufacturing technologies is transforming production into smart manufacturing systems that blend physical and digital processes as cyber-physical systems. However, this increased cyber-physical connectivity exposes manufacturing systems to cyber threats that can cause severe operational and financial disruptions. This paper presents a comparative study on cyber attacks and anomaly detection techniques in manufacturing, focusing on network traffic from CNC machines. The data extracted from network packets includes machine commands and control signals exchanged between the machine's interface and control system, crucial for maintaining operational integrity. We explore two types of cyber attacks, design modification and command injection, which pose substantial risks to CNC machine productivity and system integrity. Our investigation involves experiments on a real CNC system, highlighting the urgent need for effective detection mechanisms. To address these threats, we evaluate three anomaly detection methods: dynamic time warping (DTW), rolling average, and a deep learning, long short-term memory (LSTM) time-series-based autoencoder. Each is assessed for its effectiveness in identifying anomalous behaviors caused by the attacks. Our findings demonstrate the unique strengths and limitations of each detection technique, providing a deeper understanding of their applicability in realworld manufacturing environments. The comparative analysis indicates that while certain methods are highly effective against specific attack types, others offer broader applicability across different attacks. This study contributes to the accurate detection of anomalies in CNC machining processes, thereby enhancing the reliability and security of smart manufacturing systems against diverse cyber threats.

Williams, Bethanie [Tennessee Technological Univer↗
DOE OSTI2025

An Introduction to the Federated Architecture for Secure and Transactive Distributed Energy Management Solutions (FAST-DERMS)

Deployment and capability of distributed energy resources (DER) in power systems is growing rapidly. These resources present an opportunity for low-cost provision of energy and grid services. The Federal Energy Regulatory Commission recently provided rulings to enable market participation of these distribution-connected resources, but the prevailing strategies for their management may not scale well to meet future needs. This paper introduces the Federated Architecture for Secure and Transactive Distributed Energy Management Solutions (FAST-DERMS) which was designed to address this need. In it we describe the architectural features of the approach, and a reference controls implementation employing a hierarchical coordination that includes stochastic optimization, model predictive control, and a simple real-time management scheme. Sample results from simulation show firm transmission-level service provision measured at the distribution substation.

grid architecture↗
DOE OSTI2025

Securing 3D NAND Without Density Loss via In-Situ Encryption Using a Single Transistor XOR Cell

In this article, we push lightweight XOR-based in-situ encryption to extreme density by proposing a singletransistor XOR memory cell and applying it to 3D NAND, enabling secure data storage without density loss. Using a ferroelectric field-effect transistor (FeFET) as an example technology, we demonstrate that: i) a single-transistor memory can realize the XOR function by exploiting the ability to charge the source and drain separately and control current flow direction, eliminating the need for conventional encrypted cells that rely on complementary devices; ii) with a XOR-based cipher, encryption and decryption can be mapped to in-situ array operations, where ciphertext is stored as the threshold voltage (VTH) states of FeFETs in a NAND string, and decryption is achieved through read operations using key-dependent complementary source/drain bias; iii) the proposed technique is scalable to multi-level cell (MLC) storage by encrypting and decrypting data bit by bit; iv) using an integrated NAND FeFET array, we experimentally demonstrate encryption and decryption operations for both single-level cell (SLC) and MLC storage; v) systemlevel benchmarking shows that the proposed technique achieves 48× and 278× improvements in encryption and decryption throughput, respectively, compared to AES.

36 MATERIALS SCIENCE↗
DOE OSTI2020

A Flexible and Secure Evaluation Platform for Overvoltage Protection in Power Electronics Systems

This paper summarizes the fault mechanisms specifically for the overvoltage protection schemes in power electronic converters and the resulted power electronics enabled systems. A flexible and secure evaluation platform for overvoltage protection, has also been presented based on this conceptual mechanism. The proposed platform aims at testing the protection performance of distinctive overvoltage protection schemes. It would be applied to verify the effectiveness, identify potential strengths and weaknesses, and obtain the most critical protection response time to provide sufficient engineering insights for the designer. The operation principle and detailed design guideline have been presented first. The comprehensive component stress has been analyzed. An intensive set of LTSpice simulations have been conducted to show the validity of the proposed assessment approach.

Zheng, Sheng↗
DOE OSTI2023

Securely Aggregated Coded Matrix Inversion

Coded computing is a method for mitigating straggling workers in a centralized computing network, by using erasure-coding techniques. Federated learning is a decentralized model for training data distributed across client devices. In this work we propose approximating the inverse of an aggregated data matrix, where the data is generated by clients; similar to the federated learning paradigm, while also being resilient to stragglers. To do so, we propose a coded computing method based on gradient coding. We modify this method so that the coordinator does not access the local data at any point; while the clients access the aggregated matrix in order to complete their tasks. Here, the network we consider is not centrally administrated, and the communications which take place are secure against potential eavesdroppers.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2022

PUF-Based Two-Factor Authentication Protocol for Securing the Power Grid Against Insider Threat

Recent advances in smart grid technologies have enabled additional distributed control paradigms that allow more efficient and reliable operation. However, this creates new security concerns for the grid, such as attackers using spoofed grid control devices to generate false measurements. This paper introduces a two-factor authentication protocol leveraging standard public-key cryptography as one authentication factor and a hardware-based fingerprint, known as a Physical Unclonable Function, as a second authentication factor. This protocol incurs a small overhead and prevents cyber-attacks even when an adversary is able to compromise the cryptographic keys stored in the non-volatile memory of an intelligent control device.

42 ENGINEERING↗
DOE OSTI2024

Secure Federated Learning Across Heterogeneous Cloud and High-Performance Computing Resources: A Case Study on Federated Fine-Tuning of LLaMA 2

Federated learning enables multiple data owners to collaboratively train robust machine learning models without transferring large or sensitive local datasets by only sharing the parameters of the locally trained models. Here, in this article, we elaborate on the design of our Advanced Privacy-Preserving Federated Learning (APPFL) framework, which streamlines end-to-end secure and reliable federated learning experiments across cloud computing facilities and high-performance computing resources by leveraging Globus Compute, a distributed function as a service platform, and Amazon Web Services. We further demonstrate the use case of APPFL in fine-tuning an LLaMA 2 7B model using several cloud resources and supercomputers.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2024

Deciphering Discrepancies: A Comparative Analysis of Docker Image Security

As the use of microservices continues to grow and become a foundational approach to architecting software solutions, ensuring the security of microservices is paramount. Docker images have emerged as the predominant solution to containerize microservices–and thus, Docker images are becoming a large attack surface. Thus, reducing vulnerabilities in Docker images will reduce microservice cyberattacks. A common way to find vulnerabilities in Docker images employs static analysis tools like Trivy and Grype. However, these tools frequently generate disparate vulnerability reports when analyzing the same Docker image, thus causing uncertainty in tool selection. We collected 927 Docker images, analyzed them with Trivy and Grype, and compared the vulnerabilities reported in each image. Among the 865 images found to have vulnerabilities, Trivy and Grype disagreed on both the number of vulnerabilities and the vulnerability IDs found therein. Since both tools interface with external vulnerability databases, some discrepancies can be attributed to how the tools interface with these external resources. The external vulnerability databases partially overlap and frequently contradict one another, thereby creating challenges for static analysis tool developers and end users alike. This New Ideas and Emerging Results (NIER) study contains new and critical information that practitioners need for selecting and using static analysis tools–given that increases in the use of Docker technologies means increases in the size of the attack surfaces.

Boles, Brittany [Montana State University]↗