Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “Security monitoring”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 775 records · Page 43

Distributive On-line Processing, Visualization and Analysis System for Gridded Remote Sensing Data

The ability to use data stored in the current Earth Observing System (EOS) archives for studying regional or global phenomena is highly dependent on having a detailed understanding of the data's internal structure and physical implementation. Gaining this understanding and applying it to data reduction is a time- consuming task that must be undertaken before the core investigation can begin. This is an especially difficult challenge when science objectives require users to deal with large multi-sensor data sets that are usually of different formats, structures, and resolutions, for example, when preparing data for input into modeling systems. The NASA Goddard Earth Sciences Data and Information Services Center (GES DISC) has taken a major step towards meeting this challenge by developing an infrastructure with a Web interface that allows users to perform interactive analysis online without downloading any data, the GES-DISC Interactive Online Visualization and Analysis Infrastructure or "Giovanni." Giovanni provides interactive, online, analysis tools for data users to facilitate their research. There have been several instances of this interface created to serve TRMM users, Aerosol scientists, Ocean Color and Agriculture applications users. The first generation of these tools support gridded data only. The user selects geophysical parameters, area of interest, time period; and the system generates an output on screen in a matter of seconds. The currently available output options are: Area plot averaged or accumulated over any available data period for any rectangular area; Time plot time series averaged over any rectangular area; Time plots image view of any longitude-time and latitude-time cross sections; ASCII output for all plot types; Image animation for area plot. In the future, we will add correlation plots, GIS-compatible outputs, etc. This allow user to focus on data content (i.e. science parameters) and eliminate the need for expensive learning, development and processing tasks that are redundantly incurred by an archive's user community. The current implementation utilizes the GrADS-DODS Server (GDS), a stable, secure data server that provides subsetting and analysis services across the Internet for any GrADS-readable dataset. The subsetting capability allows users to retrieve a specified temporal and/or spatial subdomain from a large dataset, eliminating the need to download everything simply to access a small relevant portion of a dataset. The analysis capability allows users to retrieve the results of an operation applied to one or more datasets on the server. In our case, we use this approach to read pre-processed binary files and/or to read and extract the needed parts from HDF or HDF-EOS files. These subsets then serve as inputs into GrADS processing and analysis scripts. It can be used in a wide variety of Earth science applications: climate and weather events study and monitoring; modeling. It can be easily configured for new applications.

Leptoukh, G.↗

Encryption for Remote Control via Internet or Intranet

A data-communication protocol has been devised to enable secure, reliable remote control of processes and equipment via a collision-based network, while using minimal bandwidth and computation. The network could be the Internet or an intranet. Control is made secure by use of both a password and a dynamic key, which is sent transparently to a remote user by the controlled computer (that is, the computer, located at the site of the equipment or process to be controlled, that exerts direct control over the process). The protocol functions in the presence of network latency, overcomes errors caused by missed dynamic keys, and defeats attempts by unauthorized remote users to gain control. The protocol is not suitable for real-time control, but is well suited for applications in which control latencies up to about 0.5 second are acceptable. The encryption scheme involves the use of both a dynamic and a private key, without any additional overhead that would degrade performance. The dynamic key is embedded in the equipment- or process-monitor data packets sent out by the controlled computer: in other words, the dynamic key is a subset of the data in each such data packet. The controlled computer maintains a history of the last 3 to 5 data packets for use in decrypting incoming control commands. In addition, the controlled computer records a private key (password) that is given to the remote computer. The encrypted incoming command is permuted by both the dynamic and private key. A person who records the command data in a given packet for hostile purposes cannot use that packet after the public key expires (typically within 3 seconds). Even a person in possession of an unauthorized copy of the command/remote-display software cannot use that software in the absence of the password. The use of a dynamic key embedded in the outgoing data makes the central-processing unit overhead very small. The use of a National Instruments DataSocket(TradeMark) (or equivalent) protocol or the User Datagram Protocol makes it possible to obtain reasonably short response times: Typical response times in event-driven control, using packets sized .300 bytes, are <0.2 second for commands issued from locations anywhere on Earth. The protocol requires that control commands represent absolute values of controlled parameters (e.g., a specified temperature), as distinguished from changes in values of controlled parameters (e.g., a specified increment of temperature). Each command is issued three or more times to ensure delivery in crowded networks. The use of absolute-value commands prevents additional (redundant) commands from causing trouble. Because a remote controlling computer receives "talkback" in the form of data packets from the controlled computer, typically within a time interval < or =1 s, the controlling computer can re-issue a command if network failure has occurred. The controlled computer, the process or equipment that it controls, and any human operator(s) at the site of the controlled equipment or process should be equipped with safety measures to prevent damage to equipment or injury to humans. These features could be a combination of software, external hardware, and intervention by the human operator(s). The protocol is not fail-safe, but by adopting these safety measures as part of the protocol, one makes the protocol a robust means of controlling remote processes and equipment by use of typical office computers via intranets and/or the Internet.

Lineberger, Lewis↗

CropEx Web-Based Agricultural Monitoring and Decision Support

CropEx is a Web-based agricultural Decision Support System (DSS) that monitors changes in crop health over time. It is designed to be used by a wide range of both public and private organizations, including individual producers and regional government offices with a vested interest in tracking vegetation health. The database and data management system automatically retrieve and ingest data for the area of interest. Another stores results of the processing and supports the DSS. The processing engine will allow server-side analysis of imagery with support for image sub-setting and a set of core raster operations for image classification, creation of vegetation indices, and change detection. The system includes the Web-based (CropEx) interface, data ingestion system, server-side processing engine, and a database processing engine. It contains a Web-based interface that has multi-tiered security profiles for multiple users. The interface provides the ability to identify areas of interest to specific users, user profiles, and methods of processing and data types for selected or created areas of interest. A compilation of programs is used to ingest available data into the system, classify that data, profile that data for quality, and make data available for the processing engine immediately upon the data s availability to the system (near real time). The processing engine consists of methods and algorithms used to process the data in a real-time fashion without copying, storing, or moving the raw data. The engine makes results available to the database processing engine for storage and further manipulation. The database processing engine ingests data from the image processing engine, distills those results into numerical indices, and stores each index for an area of interest. This process happens each time new data is ingested and processed for the area of interest, and upon subsequent database entries, the database processing engine qualifies each value for each area of interest and conducts a logical processing of results indicating when and where thresholds are exceeded. Reports are provided at regular, operator-determined intervals that include variances from thresholds and links to view raw data for verification, if necessary. The technology and method of development allow the code base to easily be modified for varied use in the real-time and near-real-time processing environments. In addition, the final product will be demonstrated as a means for rapid draft assessment of imagery.

Harvey. Craig↗

Towards a New Supply Chain Cybersecurity Risk Analysis Technique

Supply chain cyber-attacks, such as the SolarWinds Orion attack, are occurring with greater frequency. These attacks compromise a digital device before it is sent to customers, bypassing traditional security controls to remain persistent and undetected in operational environments. While supply chain attacks are prevalent, methods for analyzing the risk of these attacks are currently unavailable. This paper proposes new supply chain cyber-attack difficulty and risk metrics to evaluate the relative risk of an attack throughout the supply chain lifecycle. Difficulty metrics for each stakeholder in a digital device’s supply chain (e.g., hardware manufacturing, firmware development, software development, storage, and distribution entities) are calculated using scores from cybersecurity maturity questionnaires in a Bayesian Network leaky Noisy-MAX model. These difficulty metrics are then used to calculate an overall supply chain cyber-attack risk. Vulnerability and recoverability metrics are also proposed to evaluate the relative stakeholder influence in the attack risk. These proposed relative risk metrics enable continuous supply chain monitoring, provide decision-makers with information necessary for improved supplier selection, and help drive improvements in the cybersecurity posture of the stakeholders in their supply chain.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

Low Count and Background Radionuclides Analysis - 20488

The US Department of Energy (DOE) is often faced with the need to evaluate radionuclides at low concentrations. When site sample data are likely to be close to threshold activity concentrations of interest, then the means by which the radiochemical analysis is performed and reported is critical. This situation can occur when differentiating from zero (presence/absence) for radionuclides that do not occur naturally, close comparison with environmental background for naturally occurring radionuclides, close comparison with a risk- or dose-based threshold concentrations of interest, or even comparisons across studies. There are several analytical issues that are of concern, but the two that appear to cause incorrect decisions to be made most often involve establishing detection limits and subtracting ambient background conditions in the laboratory. These issues are not critical when radionuclide activity concentrations are large relative to thresholds of concern, but they seem to be poorly understood when it matters. When the comparisons are important and are likely to be close to a threshold of interest, then the general contract with the analytical laboratories needs to be changed so that the right or appropriate data are obtained. The concern is that important decisions are made incorrectly more often as greater scrutiny is placed on DoE's radionuclide cleanup or monitoring decisions by the public and other stakeholders. Examples are presented of problems that have been observed for different projects, both within and outside the realm of DOE and NRC remediation and radioactive waste disposal problems, and solutions are offered that should lead to better data from which important decisions need to be made. The first example is from Los Alamos National Laboratory (LANL) and involves radionuclide concentrations in soil and rock beneath LANL's Material Disposal Area (MDA) G. An initial review of the data led to a conclusion that americium and plutonium are a long way present beneath MDA G. A more thorough review of the data that accounted properly for ambient background and the detection limits that had been established led to the opposite conclusion. Another example is from the Nevada National Security Site where tritium results from one of the wells were unexpectedly high. Proper understanding and analysis of ambient background led to the conclusion that the increased concentrations were not so obvious, and that a different contract with the analytical laboratory was needed to provide more appropriate data to support a better determination. Other examples are used from regulatory review of projects in Nevada, where background levels and secular equilibrium for naturally occurring radionuclides are not established correctly because of analytical issues. The same basic issues have also been found to create difficulties analyzing historical data from the West Valley Demonstration Project. There is evidence in the data that the apparent lack of secular equilibrium where it is expected to exist is related to ambient background subtraction or other analytical issues. A final example is presented for analysis of Tc-99 in samples of depleted uranium. In this case, two different studies that were performed only three months apart provide quite different results. The US Environmental Protection Agency (EPA) established the data quality objectives (DQO) process in the mid-1980's to establish decision performance criteria for data collection. EPA guidance (EPA G-4, for example) clearly distinguishes between DQOs and measurement performance objectives (MQOs) that should be addressed for laboratory analysis of samples. The language of DQOs and MQOs has become confused over time it seems, and the subsequent effects seem to include a lack of attention to decision performance and a routine approach to measurement quality. In order to better address radionuclide sample analysis when the concentrations are close to thresholds of concern, which might be zero for some radionuclides, background for others, and risk-based thresholds for yet others, it is important that routine laboratory analysis methods are adjusted, and that the project team and the laboratory work closely together to ensure that the data meets the MQO requirements of laboratory analysis and reporting of results, and that the MQOs effectively support project-specific DQOs. This basic approach will be applied in Los Alamos in the coming year to the collection of moisture data from underneath MDA T that will be analyzed for americium and neptunium isotopes. Proper understanding of the radiochemistry methods and reporting, and of appropriate statistical methods is critical to the success of such projects, ensuring that the right decisions are made. (authors)

07 ISOTOPE AND RADIATION SOURCES↗

Focal Plane Alignment Utilizing Optical CMM

In many applications, an optical detector has to be located relative to mechanical reference points. One solution is to specify stringent requirements on (1) mounting the optical detector relative to the chip carrier, (2) soldering the chip carrier onto the printed circuit board (PCB), and (3) installing the PCB to the mechanical structure of the subsystem. Figure 1 shows a sketch of an optical detector mounted relative to mechanical reference with high positional accuracy. The optical detector is typically a fragile wafer that cannot be physically touched by any measurement tool. An optical coordinate measuring machine (CMM) can be used to position optical detectors relative to mechanical reference points. This approach will eliminate all requirements on positional tolerances. The only requirement is that the PCB is manufactured with oversized holes. An exaggerated sketch of this situation is shown in Figure 2. The sketch shows very loose tolerances on mounting the optical detector in the chip carrier, loose tolerance on soldering the chip carrier to the PCB, and finally large tolerance on where the mounting screws are located. The PCB is held with large screws and oversized holes. The PCB is mounted loosely so it can move freely around. The optical CMM measures the mechanical reference points. Based on these measurements, the required positions of the optical detector corners can be calculated. The optical CMM is commanded to go to the position where one detector corner is supposed to be. This is indicated with the cross-hairs in Figure 2(a). This figure is representative of the image of the optical CMM monitor. Using a suitable tapping tool, the PCB is manually tapped around until the corner of the optical detector is at the crosshairs of the optical CMM. The CMM is commanded to another corner, and the process is repeated a number of times until all corners of the optical detector are within a distance of 10 to 30 microns of the required position. The situation is sketched in Figure 2(b) (the figure also shows the tapping tool and where to tap). At this point the fasteners for the PCB are torqued slightly so the PCB can still move. The PCB location is adjusted again with the tapping tool. This process is repeated 3 to 4 times until the final torque is achieved. The oversized mounting holes are then filled with a liquid bonding agent to secure the board in position (not shown in the sketch). A 10- to 30-micron mounting accuracy has been achieved utilizing this method..

Liebe, Carl Christian↗

Monthly Wastewater Report - May 2023

The Sandia National Laboratories, in California (Sandia/CA) is a research and development facility, owned by the U.S. Department of Energy’s National Nuclear Security Administration agency (DOE/NNSA). The laboratory is located in the City of Livermore (the City) and is comprised of approximately 410 acres. The Sandia/CA facility is operated by National Technology and Engineering Solutions of Sandia, LLC (NTESS) under a contract with the DOE/NNSA. The DOE/ NNSA’s Sandia Field Office (SFO) oversees the operations of the site. North of the Sandia/CA facility is the Lawrence Livermore National Laboratory (LLNL), in which Sandia/CA’s sewer system combines with before discharging to the City’s Publicly Owned Treatment Works (POTW) for final treatment and processing. The City’s POTW authorizes the wastewater discharge from Sandia/CA via the assigned Wastewater Discharge Permit #1251 (the Permit), which is issued to the DOE/NNSA’s main office for Sandia National Laboratories, located in New Mexico (Sandia/NM). The Permit requires the submittal of this Monthly Sewer Monitoring Report to the City by the twenty-fifth day of each month.

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗

Test Points for Online Monitoring of Quantum Circuits

Noisy Intermediate-Scale Quantum (NISQ) computers consisting of tens of inherently noisy quantum bits (qubits) suffer from reliability problems. Qubits and their gates are susceptible to various types of errors. Due to limited numbers of qubits and high error rates, quantum error correction cannot be applied. Physical constraints of quantum hardware including the error rates are used to guide the design and the layout of quantum circuits. The error rates determine the selection of qubits and their operations. The resulting circuit is executed on the quantum computer. This study explores the risk of unexpected changes in the error rates of NISQ computers post-calibration. We show that unexpected changes in error rates can alter the output state of a quantum circuit. To detect these changes, we propose the insertion of test points into the quantum circuit to enable online monitoring of the physical qubit behavior. We utilize classical, superposition, and uncompute test points. Furthermore, we use a gate error coverage metric to assess the quality of the tests. We verify the effectiveness of the proposed scheme on different IBM quantum computers (IBM Q), in addition to a noisy simulation that shows the scalability of the proposed approach.

97 MATHEMATICS AND COMPUTING↗

Connecting Space to Village: Tethys Adoption Within SERVIR

The SERVIR program, a joint development initiative of National Aeronautics and Space Administration (NASA) and United States Agency for International Development (USAID), works in partnership with leading regional organizations world-wide to help developing countries use information provided by Earth observing satellites and geospatial technologies for managing climate risks and land use. SERVIR empowers decision-makers with tools, products, and services to act locally on critical issues related to four key areas: Food Security and Agriculture, Water and Water-related Disasters, Land Use/Land Cover and Ecosystems, Weather and Climate. SERVIR is improving awareness, increasing access to information, and supporting analysis to help people in West Africa, Eastern and Southern Africa, Hindu Kush-Himalaya (HKH), the Lower Mekong, South America and Mesoamerica. NASA funds an Applied Sciences Team (AST), composed of experts from universities and research institutions around the United States. Through AST, SERVIR adopted the Tethys platform introduced by Brigham Young University (BYU) for the implementation of tools to deliver scientific data to stakeholders in the Hindu Kush-Himalaya region. Several Tethys applications developed within SERVIR have raised interest amongst decision makers in the countries served by our regional hubs. They see these new apps as key vehicles to disseminate complex information related to weather models, hydrological models, and air quality monitoring, and as such the scope of our Tethys efforts continue to expand to other regions. As of July 2019, each one of the SERVIR hubs (with the exception of Amazonia, which has only recently started), have stood up Tethys portals and have at least one individual trained in the implementation and maintenance of a Tethys portal and in the creation of basic applications. HKH, with BYU's valuable support, has implemented very sophisticated applications that showcase the possibilities and the benefits that the Tethys platform brings.

Tethys↗

Optimization of Conditions for Photoluminescence-Based Sensing of Critical Minerals: Strategies and Outlook

Economically critical minerals and metals are vital to America’s security, with application areas in energy, advanced technologies, and defense systems. The growing implementation of renewable energy sources such as electric vehicles is expected to significantly increase demand for these minerals, while the global supply is monopolistic, with most of the production occurring in a few countries outside of the US. To mitigate potential supply chain vulnerabilities, the domestic production of economically critical metals has become a bipartisan priority of the US government, and unconventional sources such as coal and its utilization byproducts such as fly ash and acid mine drainage are being actively explored as an alternative method for meeting domestic demand. Slow and expensive characterization methods for critical metals present a significant pain point for domestic production, which has led to the exploration of alternative low-cost, portable platforms capable of detecting target metals during resource prospecting and downstream process monitoring. The National Energy Technology Laboratory has developed a portable fiber optic-based luminescence spectrometer that utilizes a metal-organic framework (MOF) material to detect and distinguish parts-per-billion levels of the visible-emitting rare earth elements terbium, dysprosium, samarium, and europium, which are all economically critical metals. Although preliminary results with this system are promising, a crucial barrier to practical deployment is the ability to operate in low pH, high ionic strength environments, as acidic conditions and the presence of other metal ions can significantly reduce luminescence signal. Here, current strategies related to sample treatment, material design, and sensor configuration are discussed in the context of improving sensor performance in application-relevant conditions. Additionally, future opportunities, such as the optimization of the sensing binding environment through computational methods and specific metals to be removed for treatment will be discussed, presenting a forward-looking view for innovation in luminescent sensing of critical metals.

36 MATERIALS SCIENCE↗

Design and evaluation of a cyber‐physical testbed for improving attack resilience of power systems

Abstract A power system is a complex cyber‐physical system whose security is critical to its function. A major challenge is to model, analyse and visualise the communication backbone of the power systems concerning cyber threats. To achieve this, the design and evaluation of a cyber‐physical power system (CPPS) testbed called Resilient Energy Systems Lab (RESLab) are presented to capture realistic cyber, physical, and protection system features. RESLab is architected to be a fundamental platform for studying and improving the resilience of complex CPPS to cyber threats. The cyber network is emulated using Common Open Research Emulator (CORE), which acts as a gateway for the physical and protection devices to communicate. The physical grid is simulated in the dynamic time frame using Power World Dynamic Studio (PWDS). The protection components are modelled with both PWDS and physical devices including the SEL Real‐Time Automation Controller (RTAC). Distributed Network Protocol 3 (DNP3) is used to monitor and control the grid. Then, the design is exemplified and the tools are validated. This work presents four case studies on cyberattack and defence using RESLab, where we demonstrate false data and command injection using Man‐in‐the‐Middle and Denial of Service attacks and validate them on a large‐scale synthetic electric grid.

Sahu, Abhijeet↗

Summary of 1987 and 1988 manatee aerial surveys at Kennedy Space Center

Aerial surveys of manatees conducted since 1977 at Kennedy Space Center (KSC) have provided a very useful and cost effective monitoring tool in the assessment of abundance and distribution of manatees in the northern Banana River. Data collected in the mid 1980's as part of the KSC Environmental Monitoring Program indicated that the numbers of manatees utilizing the northern Banana River had increased dramatically from earlier years and that the animals appeared to have changed their distribution patterns within the area as well (Provancha and Provancha 1988). United States Fish and Wildlife Service (USFWS) and Florida Department of Natural Resources (FLDNR) conducted bimonthly aerial surveys in 1986 for the entire Florida east coast. Their data clearly show that the Banana River has the highest concentration of manatees during the non-winter months when compared to all other segments of the east coast surveys (B. Wiegle/FLDNR, unpublished data). They further show that, in spring, an average of 71 percent of the manatees in Brevard county were located in the Banana River. During that period 85 percent of the animals were north of the NASA Causeway (State Road (SR) 402) in the KSC security zone. These data indicate the importance of the KSC waters to the Florida east coast manatee population. We reinitiated KSC surveys in 1987 to document distributions and numbers of manatees during the spring influx. Aerial censuses were continued throughout the year in 1988 and this report provides a summary of our findings for the two years.

Provancha, Jane A.↗

The Application of NASA Remote Sensing Technology to Human Health

With the help of satellites, the Earth's environment can be monitored from a distance. Earth observing satellites and sensors collect data and survey patterns that supply important information about the environment relating to its affect on human health. Combined with ground data, such patterns and remote sensing data can be essential to public health applications. Remote sensing technology is providing information that can help predict factors that affect human health, such as disease, drought, famine, and floods. A number of public health concerns that affect Earth's human population are part of the current National Aeronautics and Space Administration (NASA) Earth Science Applications Plan to provide remotely gathered data to public health decision-makers to aid in forming and implementing policy to protect human health and preserve well-being. These areas of concern are: air quality; water quality; weather and climate change; infectious, zoonotic, and vector-borne disease; sunshine; food resource security; and health risks associated with the built environment. Collaborations within the Earth Science Applications Plan join local, state, national, or global organizations and agencies as partners. These partnerships engage in projects that strive to understand the connection between the environment and health. The important outcome is to put this understanding to use through enhancement of decision support tools that aid policy and management decisions on environmental health risks. Future plans will further employ developed models in formats that are compatible and accessible to all public health organizations.

Watts, C. T.↗

A Managed Tokens Service for Securely Keeping and Distributing Grid Tokens

Fermilab is transitioning authentication and authorization for grid operations to using bearer tokens based on the WLCG Common JWT (JSON Web Token) Profile. One of the functionalities that Fermilab experimenters rely on is the ability to automate batch job submission, which in turn depends on the ability to securely refresh and distribute the necessary credentials to experiment job submit points. Thus, with the transition to using tokens for grid operations, we needed to create a service that would obtain, refresh, and distribute tokens for experimenters’ use. This service would avoid the need for experimenters to be experts in obtaining their own tokens and would better protect the most sensitive long-lived credentials. Further, the service needed to be widely scalable, as we are currently keeping credentials active for approximately 15 experiments, each with 1-3 different credentials, and distributing those credentials to 2-20 submit points per experiment, with those numbers steadily increasing. To address these issues, we created and deployed a Managed Tokens service. The service is written in Go, taking advantage of that language’s native concurrency primitives to easily be able to scale operations as we onboard experiments. The service uses as its first credentials a set of kerberos keytabs, stored on the same secure machine that the Managed Tokens service runs on. These kerberos credentials allow the service to use htgettoken via condor_vault_storer to store vault tokens in the HTCondor credential managers (credds) that run on the batch system scheduler machines (HTCondor schedds); as well as downloading a local, shorter-lived copy of the vault token. The kerberos credentials are then also used to distribute copies of the locally-stored vault tokens to experiment submit points. When experimenters schedule jobs to be submitted, these distributed vault tokens are used to access a Hashicorp Vault instance (run separately from the Managed Tokens service), and previously-stored refresh tokens there are used to obtain the bearer token that is submitted with the job. We will discuss here the design of the Managed Tokens service, including elaborating on certain choices we made with regards to concurrent operations, configuration, monitoring, and deployment.

Bhat, Shreyas↗

Repair and Utilization of the Kratos XSAM 800 X-Ray Photoelectron Spectrometer (XPS)

The objectives for this summer faculty fellowship were first to repair the Kratos XSAM 800 X-ray Photoelectron Spectrometer (XPS) and then to utilize the instrument to participate in ongoing research projects at KSC and in the researcher's own laboratory at UCF. The first 6 weeks were used in repairing the instrument. Working both alone and with the Kratos service engineer, a number of hardware problems, largely associated with the sample stage control system, were corrected. Defective parts were identified and fixed in the computer driver boards, the stage power supply, and the driver interface. The power supply was completely replaced. After four weeks of work, the instrument was functional. This occurred on a Wednesday. The following Friday the instrument had to be completely shut down because the power to the O & C Building was to be turned off. The instrument was properly secured. On Monday, the instrument was powered up and the original problems returned. After another 2 weeks of work, a software problem was identified. This problem caused the computer to use a defective port for the sample stage control. It was circumvented by rewriting the startup routine. The final 3 weeks of the fellowship were spent using the XPS to analyze samples being studied in the Langley materials project (Martha Williams) and a catalyst project (Dr. Orlando Melendez). During this time, several sample analysis requests from other groups at KSC also came in and those samples were run as well. The summer faculty fellowship also allowed many contacts to be made. After meeting with the sensors group, two projects were identified for collaboration and white papers are being prepared. One project aims to develop small, very sensitive hydrogen detectors and the other to develop a broad area, easily monitored, zero power consumption hydrogen detector. In addition to the work mentioned above, the XPS was utilized in a study underway in Dr. Hampton's laboratory at UCF.

Hampton, Michael D.↗

Annual Stormwater Report for the Y-12 National Security Complex Oak Ridge, Tennessee

This is the ninth annual stormwater report prepared in accordance with the modified National Pollutant Discharge Elimination System permit issued to the Y-12 National Security Complex (Y-12) on April 1, 2014. This modified permit removed the authorization to augment flow in East Fork Poplar Creek (EFPC) and thus removed the requirement to sample this effluent in conjunction with other major outfalls on EFPC. There are several construction and demolition activities currently in progress at Y-12. These include the construction of the Uranium Processing Facility (UPF), the Mercury Treatment Facility (MTF) on EFPC, the site-wide power grid upgrade, construction of an Emergency Operations Center, construction of a new Fire Station, Security Improvement Revitalization Program (SIRP), West End Protection Area Reduction (WEPAR) Project, and the demolition of the Biology Complex. Current stormwater protections have proven effective in 2021. However, moving forward, challenges to protect stormwater will continue from these projects. Therefore, oversight of these activities, and all other construction and demolition projects, will continue to be a priority in 2022. Y-12 will continue to implement appropriate Best Management Practices and reduce outside material storage areas where possible.

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗

Date Release Report for Large Surface Explosion Coupling Experiment (LSECE) Nevada National Security Site

The DTRA sponsored 2020-2022 Large Surface Explosion Coupling Experiment (LSECE) consists of two large ground surface chemical explosions, data collection, analysis and modeling carried out in 2020-2022. The LSECE chemical explosions were carried out at the site of prior NNSA sponsored buried chemical explosions that were part of the Source Physics Experiment (SPE) Phase II in Dry Alluvium Geology (DAG). This report described the data collected under LSECE that is being made publicly available. The prior buried explosion DAG data are described in a separate report (https://www.osti.gov/biblio/1825534) and are also publicly available. The LSECE explosions, data analysis and numerical modeling work sponsored by DTRA were intended to address three objectives: 1) Generate seismo-acoustic data to test and improve numerical models of explosion energy coupling in dry alluvium geology; 2) To improve seismo-acoustic yield estimation techniques as a function of depth and medium properties; 3) To study and improve acoustic propagation modeling under two different atmospheric conditions. The LSECE data that were collected have expanded the prior DAG buried explosion dataset to include surface chemical explosions recorded on a common set of seismo-acoustic stations. They have allowed a more detailed study of above and below surface seismo-acoustic energy coupling with applications to explosion monitoring and assessment. The two approximately 1-ton TNT equivalent yield LSECE explosions were detonated at different times of the day to explore the effects of the different atmospheric conditions. The first chemical explosion “Artemis” was conducted before dawn when temperature inversions were present. The second chemical explosion “Apollo” was conducted on a sunny afternoon when the temperature gradient was more linear. The LSECE chemical explosion data were also collected across a variety of different sensor types to allow evaluation of their effectiveness in recovering useful information. The LSECE instrumentation included fiber optic or Distributed Acoustic Sensing (DAS), a dense array or Large-N array of seismometers, borehole accelerometers, DAS and a velocity meter, airborne acoustic instruments and a variety of visual and remote sensing data.

58 GEOSCIENCES↗

WISP: Watching grid Infrastructure Stealthily through Proxies (Final Technical Report)

The complex interdependencies of cyber systems (sensors and communications), physical grids and associated electricity market operations make protecting electric power grids a significant challenge. The energy sector is constantly under new, targeted, advanced and dangerous cyber-attacks that have the potential to result in the loss of human life. These threats are further exacerbated by our need to modernize the grid. One focus of cyber security research in smart grids is the securing of the SCADA system through advanced intrusion detection systems (IDS) and bad data detection algorithms in state estimation. These methods either require full knowledge of the system topology and parameters or fail to understand the physical behaviors under attack. WISP (Watching grid Infrastructure Stealthily through Proxies) is designed to provide additional protection to the power grid using only publicly available data. In particular, WISP exploits the spatio-temporal nature of the real time locational marginal prices (LMPs), in conjunction with other information such as bids, weather, outages and load data to analyze anomalous power pricing behaviors and then correlate those observations to localize regions of interest and identify potential cyber events. WISP is non-intrusive as the tool is deployed as a service in the Cloud or on premise and provides reliable information to system operators for enhanced situational awareness, without impeding energy delivery functions. The WISP technology comprises three modules: the data-driven anomaly detection core, the vulnerability and risk analysis and the root cause analysis. The data-driven anomaly detection core performs the tasks of feature selection, anomaly detection and attack region localization. The vulnerability and risk analysis module provides system level information of the vulnerable variables and times, assisting the operators in selecting monitoring and protection nodes. The root cause analysis module takes the detection results and identifies potential operational conditions that contribute to the detected anomalies. In Phase I, we have demonstrated the feasibility and effectiveness of WISP. We developed a realistic electricity market simulator capable of generating normal and attack market data under various operational conditions. We developed a series of cyber-attack detection and analysis algorithms and evaluated them under multiple data sources. Finally, we integrated all modules into an end-to-end software, providing functions for data management, data analytics and visualization. Specifically, we have achieved: (i) real-time data acceptance from external utility interfaces with >99% acceptance rate; (ii) high performance anomaly detection algorithms with >98% detection accuracy and <0.1% false alarm rate; and (iii) ultra-low computing delay <50 milliseconds. Additionally, our team developed algorithms to identify the vulnerable variables in electricity market operations and root cause analysis functions to identify major contributors to the price spikes. These ancillary modules are necessary when deploying WISP in real world industry environment. In Phase II, we have demonstrated the effectiveness of WISP software on realistic largescale power systems. We performed red team testing for the Phase I WISP software and identified software vulnerabilities and implemented corresponding mitigation solutions. We adapted the electricity market simulator for the Texas synthetic 2000-bus system and generated datasets for the false data injection attacks. We created database and visualization interfaces for the Texas system and the ISO New England system. We performed software optimization in terms of operation efficiency, computing speed and detection accuracy. Finally, we tested the software on the Texas system and the ISO New England system and evaluated the detection performance. Overall, we achieved above 89% detection rate, below 3% false alarm rate and below 37 seconds of end-to-end detection delay.

24 POWER TRANSMISSION AND DISTRIBUTION↗