Results for “network security” — Page 47

DOE OSTI2022

Science and Technology Review: Getting to Carbon Neutral

At Lawrence Livermore National Laboratory, we focus on science and technology research to ensure our nation’s security. We also apply that expertise to solve other important national problems in energy, bioscience, and the environment. Science & Technology Review is published eight times a year to communicate, to a broad audience, the Laboratory’s scientific and technological accomplishments in fulfilling its primary missions. The publication’s goal is to help readers understand these accomplishments and appreciate their value to the individual citizen, the nation, and the world. Achieving carbon neutrality requires a well-considered combination of technologies, private involvement, and public policies. As described in the article beginning on p. 4, Lawrence Livermore National Laboratory developed the Getting to Neutral: Options for Negative Carbon Emissions in California report, a three-pillared approach to bridge the gap between California’s initial plans to reduce carbon emissions and the state’s goal to achieve net zero emissions by 2045. The cover image represents the network of strategies and stakeholders involved in achieving carbon neutrality for the environment.

29 ENERGY PLANNING, POLICY, AND ECONOMY↗

DOE OSTI2025

Introduction: Neuromorphic Materials

The explosive growth in data collection and the need to process it efficiently, as well as the desire to automate increasingly complex tasks in transportation, medical care, manufacturing, security and many other fields have motivated a growing interest in neuromorphic computing. Unlike the binary, transistorbased ON/OFF logic gates and separate logic and memory functionalities employed in digital computing, neuromorphic computing is inspired by animal brains that use interconnected synapses and neurons to perform processing, storage and transmission of information at the same location, while only consuming ~20 W or less of power. Motivated by the brain’s efficiency, adaptability, self-learning and resiliency qualities, neuromorphic computing can be broadly defined as an approach to processing and storing information using hardware and algorithms inspired by models of biological neural systems. Present research in neuromorphic computing encompasses approaches that vary significantly in their degree of neuro-inspiration, from systems that only incorporate features such as asynchronous, event-driven operation or use crossbar arrays of non-volatile memory (NVM) elements to accelerate deep neural networks (DNNs), to designs that embrace the extreme parallelism, sparsity, reconfigurability, adaptability, complexity and stochasticity observed in nervous systems. The term ‘neuromorphic’ computing is often credited to Carver Mead, who in the 1980s investigated Si-based analog electronics to replicate functions of the animal retina. Earlier important advances in this field include the work of Frank Rosenblatt, who proposed the concept of the perceptron, Bernard Widrow, who used this concept to build one of the first analog neural networks, the Adaline and many other researchers (see ref. 6 for an historical perspective on neuromorphic computing). With the recent increase in the use of artificial intelligence and large language models, and rising concerns over the associated energy costs, interest in neuromorphic hardware has expanded rapidly. According to some estimates, driven largely by the drastic growth in the training use of artificial intelligence (AI) models using the current computing architectures, the energy cost of computing is projected to reach the energy supply worldwide by 2045. Furthermore, while this is not a realistic outcome, it means that, if more efficient computing technologies are not developed -- soon -- the world will soon become one where demand for energy and market constraints limit the continued increase of societal access to AI and cloud services from data centers. Data centers used for training and use of these models consume hundreds of terawatt hours of electricity, already past 4% of the US electricity demand.

Circuits↗

DOE OSTI2026

Detection and imaging of chemicals and hidden explosives using terahertz time-domain spectroscopy and deep learning

Detecting concealed chemicals and explosives remains a critical challenge in global security. Terahertz time-domain spectroscopy (THz-TDS) offers a promising non-invasive and stand-off detection technique owing to its ability to penetrate optically opaque materials without causing ionization damage. While many chemicals exhibit distinct spectral features in the terahertz range, conventional terahertz-based detection methods often struggle in real-world environments, where variations in sample geometry, thickness, and packaging can lead to inconsistent spectral responses. In this study, we present a chemical imaging system that integrates THz-TDS with deep learning to enable accurate pixel-level identification and classification of different explosives. Operating in reflection mode and enhanced with plasmonic nanoantenna arrays, our THz-TDS system achieves a peak dynamic range of 96 dB and a detection bandwidth of 4.5 THz, supporting practical, stand-off operation. By analyzing individual time-domain pulses with deep neural networks, the system exhibits strong resilience to environmental variations and sample inconsistencies. Blind testing across eight chemicals—including pharmaceutical excipients and explosive compounds—resulted in an average classification accuracy of 99.42% at the pixel level. Notably, the system maintained an average accuracy of 88.83% when detecting explosives concealed under opaque paper coverings, demonstrating its robust generalization capability. These results highlight the potential of combining advanced terahertz spectroscopy with neural networks for highly sensitive and specific chemical and explosive detection in diverse and operationally relevant scenarios.

Imaging and sensing↗

DOE OSTI2021

WORKSHOP ON URBAN SCALE PROCESSES AND THEIR REPRESENTATION IN HIGH SPATIAL RESOLUTION EARTH SYSTEM MODELS

It is essential that numerical models used to study physics, chemistry, and biology affecting the Earth system at regional and global scales represent the effects of urban areas on climate and the effects of changing the climate on urban areas. At the same time, it is essential to develop state of the art, simple and accurate urban models to better understand the relevant processes and also toaddress issues related to urban security against the spectra of chemical, biological and radiological (CBR) hazards. Towards bringing these communities together, a 2.5-day international workshop was held at Argonne National Laboratory (ANL) in the Chicago area on May 22-24, 2019. This workshop brought together national and international experts to develop a roadmap for a better understanding of the issues associated with urban areas and at enhancing the capabilities of regional and global Earth System models (ESMs) in representing the atmospheric dynamics and chemistry, unique aspects of the biosphere and land use, and human dimensions of the urban environment. This workshop was especially important to those developing very high-resolution versions of regional and global models. The workshop also discussed existing datasets, including in situ and satellite observations, and the emerging smart city sensing technologies and their possible use in model development (e.g., the NSF-funded Array of Things network currently operating in Chicago and expanding to other cities).

54 ENVIRONMENTAL SCIENCES↗

DOE OSTI2020

Gas transport across the low-permeability containment zone of an underground nuclear explosion

Understanding the nature of gas transport from an underground nuclear explosion (UNE) is required for evaluating the ability to detect and interpret either on-site or atmospheric signatures of noble gas radionuclides resulting from the event. We performed a pressure and chemical tracer monitoring experiment at the site of an underground nuclear test that occurred in a tunnel in Nevada to evaluate the possible modes of gas transport to the surface. The site represents a very well-contained, low gaspermeability end member for past UNEs at the Nevada National Security Site. However, there is very strong evidence that gases detected at the surface during a period of low atmospheric pressure resulted from fractures of extremely small aperture that are essentially invisible. Our analyses also suggest that gases would have easily migrated to the top of the high-permeability collapse zone following the detonation minimizing the final distance required for migration along these narrow fractures to the surface. This indicates that on-site detection of gases emanating from such low-permeability sites is feasible while standoff detection of atmospheric plumes may also be possible at local distances for sufficiently high fracture densities. Finally, our results show that gas leakage into the atmosphere also occurred directly from the tunnel portal and should be monitored in future tunnel gas sampling experiments for the purpose of better understanding relative contributions to detection of radioxenon releases via both fracture network and tunnel transport.

98 NUCLEAR DISARMAMENT, SAFEGUARDS, AND PHYSICAL P↗

DOE OSTI2023

Measuring Multicomponent Adsorption of Tracer Gases on Natural Zeolites

A natural clinoptilolite sample near the Nevada National Security Site was obtained to study adsorption and retardation on gas transport. Of interest is understanding the competition for adsorption sites that may reduce tracer gas adsorption relative to single-component measurements, which may be affected by the multi-scale pore structure of clinoptilolite. Clinoptilolite has three distinct domains of pore size distributions ranging from nanometers to micrometers: micropores with 0.4–0.7 nm diameters, measured on powders by CO2 adsorption at 273 K, representing the zeolite cages; mesopores with 4–200 nm diameters, observed using liquid nitrogen adsorption at 77 K; and macropores with 300–1000 nm diameters, measured by mercury injection on rock chips (~ 100 mesh), likely representing the microfractures. These pore size distributions are consistent with X-ray computed tomography (CT) and focused ion beam scanning electron microscope (FIB-SEM) images, which are used to construct the three-dimensional (3D) pore network to be used in future gas transport modeling. To quantify tracer gas adsorption in this multi-scale pore structure and multicomponent gas species environment, natural zeolite samples initially in equilibrium in air were exposed to a mixture of tracer gases. As the tracer gases diffuse and adsorb in the sample, the remaining tracer gases outside the sample fractionate. Using a quadrupole mass spectrometer to quantify this fractionation, the degree of adsorption of tracer gases in the multicomponent gas environment and multi-scale pore structure is assessed. The major finding is that Kr reaches equilibrium much faster than Xe in the presence of ambient air, which leads to more Kr uptake than Xe over limited exposure periods. When the clinoptilolite chips were exposed to humid air, the adsorption capability decreases significantly for both Xe and Kr with relative humidity (RH) as low as 3%. Both Xe and Kr reaches equilibrium faster at higher RH. The different, unexpected, adsorption behavior for Xe and Kr is due to their kinetic diameters similar to the micropores in clinoptilolite which makes it harder for Xe to access compared to Kr.

37 INORGANIC, ORGANIC, PHYSICAL, AND ANALYTICAL CH↗

DOE OSTI2024

Photovoltaic Analysis and Response Support (PARS) Platform for Solar Situational Awareness and Resiliency Services

The project's primary objective is to develop a digital-twin based Photovoltaic (PV) Analysis and Response Support (PARS) platform, which aims to provide real-time situational awareness and optimal response plans. This platform is designed to enhance the performance of hybrid PV systems, making them competitive with or even superior to conventional generation resources. The PARS platform enabled the project team to develop and evaluate an extensive suite of grid support functionalities for the hybrid PV systems to enhance grid performance, across key areas including visibility, dispatchability, security, resilience, and reliability. Given the global push toward achieving 100% clean energy by 2035, there is a significant increase in the integration of inverter-based resources (IBRs) throughout the energy grid. Effectively managing the inherent variability and uncertainty associated with IBRs is crucial for ensuring cost-effectiveness, reliability, and security in both the main grid and islanded microgrids. Constrained to a limited array of IEEE test systems or standard feeder models, traditional IBR modeling struggles to assimilate new field data, accurately reflect system dynamics, and adapt to the evolving energy landscape. In our project, we embraced a Digital Twin (DT) strategy for crafting the PARS platform. A digital twin acts as a precise virtual counterpart of a physical system, built on historical data and continuously honed with real-time insights. This enables the high-fidelity DT to accurately mirror current system operations and forecast future scenarios. Consequently, the PARS platform becomes an ideal environment for testing and refining monitoring, control, power, and energy management algorithms designed to boost hybrid PV system performance. The defining feature of the PARS platform, distinguishing it from other advanced simulation tools, is its exceptional adaptability. This is achieved by employing actual network topologies and utilizing real-time field data for fine-tuning and calibration, ensuring a close emulation of real-world conditions. The project deliverables include: 1) High-fidelity IBR models and tools for real-time parameterization, utilizing real-time field measurements to refine IBR models for enhanced accuracy and performance; 2) Grid-forming and Grid-following capabilities to deliver resilience services, including blackstart, voltage and frequency support, cold-load pick-up, power reserves, and three-phase load balancing across grid-connected and microgrid settings; 3) Machine learning-based forecasting tools and methods for generating synthetic data and topologies, creating diverse and realistic simulation environments for evaluating varied operational scenarios; 4) Advanced microgrid power and energy management algorithms for optimizing the integration and operation of PV, storage, and demand response resources within both feeder and community scales. The power grid data sets are provided by four utility companies in North Carolina and the New York Power Administration. Acting as industry advisors, our industry partners communicated stakeholder needs and regulatory standards to the research teams, aiding technology transfer by incorporating the developed methodologies into their daily operations. This collaboration ensures that the PARS platform, functioning as a power system digital twin, enhances our understanding of IBR dynamic behaviors and enables the development and evaluation of IBR control functions that match or exceed the capabilities of conventional synchronous generators.

14 SOLAR ENERGY↗

DOE OSTI2023

Envisioning the Future Renewable and Resilient Energy Grids—A Power Grid Revolution Enabled by Renewables, Energy Storage, and Energy Electronics

Today’s power grids are facing tremendous challenges because of the ever-increasing power demand, system complexity, infrastructure cost, knowledge base, and policy and regulatory issues to achieve supply–demand power balance and resiliency with respect to more frequent extreme weather events and cyberattacks. It is particularly challenging when the transition toward 100% intermittent renewable energy sources is considered. Many countries are calling for building up more transmission and distribution lines to increase power delivery capacities. This article is an attempt to answer two urgent questions: Is more transmission and distribution infrastructure really needed to meet the increasing power demand? What kind of future grid infrastructure should we envision and build? This article attempts to answer these questions and proposes the concept of community-centric asynchronous renewable and resilient energy grids. By clearly differentiating the concepts of grid resilience and reliability, the importance of building resilient power electronics’ devices and robust system-level control algorithms to achieve 100% renewable energy integrated resilient grids is presented. To identify the shortcomings and propose advancements, power electronics’ technologies are categorized using the proposed concepts of natural source frequencies (NSf), energy storage, direct energy conversion/control and fault protection (DeCaFp), and high-efficiency energy consumption and buffering (heECaB) technology. The ability of networked microgrids to greatly reduce power outages and power system restoration time is demonstrated by leveraging robust decentralized and centralized control algorithms, identified through a comprehensive literature review. Future research areas are proposed to further enhance grid stability, controllability, cybersecurity, and protection against faults in the presence of 100% renewable sources by leveraging the advanced capabilities of NSf, DeCaFp, and heECaB devices and system-level control algorithms.

14 SOLAR ENERGY↗

DOE OSTI2023

CASTLE: Conflict Analysis Strategy Testing Laboratory Environment v.1.0.0

SAND2024-01743O The Conflict Analysis Strategy Testing Laboratory Environment (CASTLE) is a software framework that enables and simplifies building a novel, turn-based strategy game in which it can define its own rules, maps, pieces, and interactions. The software is for novice to experienced programmers with some knowledge of Unity3D, a tool used in game production. CASTLE includes a library of common game mechanics used for strategic wargames and traditional board games, such as cards, tokens, dice, and grid maps. It follows design principles popularized by the video game industry and uses singletons for managing portions of the code. CASTLE builds on Unity's component-based design and can respond to engine events during execution. Among the numerous user-friendly features: Build games quickly and cost-effectively Network in real-time and apply data to new games developed on the framework Host multiple participants online Connect rule- or machine learning-based agents to a CASTLE game to serve as opponents or to simulate games Collect data collection from players and in-game behaviors Create a survey to gather demographics or opinions from players Store data locally or save it to an external database through Representational State Transfer (REST) functions CASTLE, which was prototyped using Microsoft Azure, is also designed for easily distributing online games using popular cloud services. The multiplayer functionality includes an agent interface, allowing developers to construct AI players that can substitute for humans in any of the games. Sandia National Laboratories is a multimission laboratory managed and operated by National Technology & Engineering Solutions of Sandia, LLC, a wholly owned subsidiary of Honeywell International Inc., for the U.S. Department of Energy’s National Nuclear Security Administration under contract DE-NA0003525.

Fabian, Nathan↗

DOE OSTI2025

Detection of False Data Injection Attacks (FDIA) on Power Dynamical Systems With a State Prediction Method

Not Available

97 MATHEMATICS AND COMPUTING↗

DOE OSTI2021

Side-channel Leakage Assessment Metrics: A Case Study of GIFT Block Ciphers

Determination of an adequate level of security and providing subsequent mechanisms to achieve it, is one of the most pressing problems regarding embedded computing devices. While there are some solutions available for resource-rich computer systems, direct application of these solutions to resource-constrained environments are often unfeasible. The fundamental problem for such resource-constrained systems is the fact that current cryptographic algorithms utilize significant energy consumption and storage overhead. Both the cryptographic algorithm and its physical implementation affect the resilience of a cryptosystem against side-channel attacks. A side-channel attack represents a process that exploits leakages in order to extract sensitive information such as the key. This paper focuses on Correlation Power Analysis (CPA) which is side-channel attack based on the power consumption leakage. In 2016 the U.S. Commerce Department’s National Institute of Standards and Technology (NIST) initiated the call for proposals of new cryptographic algorithms to strengthen the cryptographic defense of networked devices against cyberattacks and to protect the data created by those innumerable device. This work evaluates S-boxes used by NIST candidates PICCOLO, GIFT, and PRESENT, as well as several S-box variants that demonstrated sufficient weaknesses against classical cryptanalysis, for a quantitative comparison in terms of resiliency to CPA attack. Three well-known theoretical metrics are evaluated: transparency order (TO and RTO), nonlinearity, and signal-to-noise (SNR) ratio, aiming to characterize the resistance of these S-boxes against adversaries exploiting physical leakages. Experimental results from attacks on an 8- bit XMEGA were obtained via the ChipWhisperer platform and of all the S-boxes evaluated, GIFT64 with a PICCOLO S-box was found to be the most susceptible to CPA. Results showed that variations in TO and RTO were not sufficient to ensure practical CPA resistance and that among S-boxes with equal non-linearity there were no significant differences in the TO and SNR variants.

97 MATHEMATICS AND COMPUTING↗

DOE OSTI2021

Side-channel Leakage Assessment Metrics: A Case Study of GIFT Block Ciphers

Determination of an adequate level of security and providing subsequent mechanisms to achieve it, is one of the most pressing problems regarding embedded computing devices. While there are some solutions available for resource-rich computer systems, direct application of these solutions to resource-constrained environments are often unfeasible. The fundamental problem for such resource-constrained systems is the fact that current cryptographic algorithms utilize significant energy consumption and storage overhead. Both the cryptographic algorithm and its physical implementation affect the resilience of a cryptosystem against side-channel attacks. A side-channel attack represents a process that exploits leakages in order to extract sensitive information such as the key. This paper focuses on Correlation Power Analysis (CPA) which is side-channel attack based on the power consumption leakage. In 2016 the U.S. Commerce Department’s National Institute of Standards and Technology (NIST) initiated the call for proposals of new cryptographic algorithms to strengthen the cryptographic defense of networked devices against cyberattacks and to protect the data created by those innumerable device. This work evaluates S-boxes used by NIST candidates PICCOLO, GIFT, and PRESENT, as well as several S-box variants that demonstrated sufficient weaknesses against classical cryptanalysis, for a quantitative comparison in terms of resiliency to CPA attack. Three well-known theoretical metrics are evaluated: transparency order (TO and RTO), nonlinearity, and signal-to-noise (SNR) ratio, aiming to characterize the resistance of these S-boxes against adversaries exploiting physical leakages. Experimental results from attacks on an 8- bit XMEGA were obtained via the ChipWhisperer platform and of all the S-boxes evaluated, GIFT64 with a PICCOLO S-box was found to be the most susceptible to CPA. Results showed that variations in TO and RTO were not sufficient to ensure practical CPA resistance and that among S-boxes with equal non-linearity there were no significant differences in the TO and SNR variants.

97 MATHEMATICS AND COMPUTING↗

DOE OSTI2023

Black Start of Unbalanced Microgrids Harmonizing Single- and Three-Phase Grid-Forming Inverters

As power systems are transforming with increasing penetrations of inverter-based resources (IBRs), system restoration using IBRs has drawn attention. Using distributed grid-forming (GFM) assets located near critical loads, either three-phase or single-phase, to establish microgrid voltages in the absence of a bulk grid, a distribution system could obtain high system survivability. For swift and secure recovery of a critical load in a single-phase lateral, local single-phase GFM inverters can form a microgrid, and then it can be combined with a neighbouring grid with the inverters remaining in GFM mode for voltage and frequency regulation until the bulk grid comes online. It leads to dynamic interoperation of single-phase GFM inverters with three-phase ones in the black start process. This paper studies the novel approach with electromagnetic transient (EMT) simulations. To evaluate the potential and the technical challenges of the heterogeneous IBR-driven black start, three-phase and single-phase GFM inverter models are developed, including negative-sequence control for voltage balance and a phase-by-phase current limiter (three-phase) and current magnitude limiter (single-phase). To examine dynamic aspects of the black-start process, the EMT simulation also models transformer and motor dynamics emulating their inrush and startup behavior as well as network dynamics. Involvement of grid-following assets to facilitate the black-start process is also modeled. By allowing multiple GFM inverters to collectively black start without leader-follower coordination, regardless of phases, a system can achieve extreme resilience. An inverter-driven black start of a heavily unbalanced 2-MVA distribution feeder using 1 three-phase and 3 single-phase GFM inverters is demonstrated. The simulation shows the heterogeneous system can maintain stability with the single-phase GFM dynamics coupled with the three-phase one.

grid-forming inverter↗

DOE OSTI2023

Black Start of Unbalanced Microgrids Harmonizing Single- and Three-Phase Grid-Forming Inverters: Preprint

As power systems are transforming with increasing penetrations of inverter-based resources (IBRs), system restoration using IBRs has drawn attention. Using distributed grid-forming (GFM) assets located near critical loads, either three-phase or single-phase, to establish microgrid voltages in the absence of a bulk grid, a distribution system could obtain high system survivability. For swift and secure recovery of a critical load in a single-phase lateral, local single-phase GFM inverters can form a microgrid, and then it can be combined with a neighbouring grid with the inverters remaining in GFM mode for voltage and frequency regulation until the bulk grid comes online. It leads to dynamic interoperation of single-phase GFM inverters with three-phase ones in the black start process. This paper studies the novel approach with electromagnetic transient (EMT) simulations. To evaluate the potential and the technical challenges of the heterogeneous IBR-driven black start, three-phase and single-phase GFM inverter models are developed, including negative-sequence control for voltage balance and a phase-by-phase current limiter (three-phase) and current magnitude limiter (single-phase). To examine dynamic aspects of the black-start process, the EMT simulation also models transformer and motor dynamics emulating their inrush and startup behavior as well as network dynamics. Involvement of grid-following assets to facilitate the black-start process is also modeled. By allowing multiple GFM inverters to collectively black start without leader-follower coordination, regardless of phases, a system can achieve extreme resilience. An inverter-driven black start of a heavily unbalanced 2-MVA distribution feeder using 1 three-phase and 3 single-phase GFM inverters is demonstrated. The simulation shows the heterogeneous system can maintain stability with the single-phase GFM dynamics coupled with the three-phase one.

grid-forming inverter↗

DOE OSTI2024

Trust-Based Detection and Mitigation of Cyber Attacks in Distributed Cooperative Control of Islanded AC Microgrids

In this study, we address the challenge of detecting and mitigating cyber attacks in the distributed cooperative control of islanded AC microgrids, with a particular focus on detecting False Data Injection Attacks (FDIAs), a significant threat to the Smart Grid (SG). The SG integrates traditional power systems with communication networks, creating a complex system with numerous vulnerable links, making it a prime target for cyber attacks. These attacks can lead to the disclosure of private data, control network failures, and even blackouts. Unlike machine learning-based approaches that require extensive datasets and mathematical models dependent on accurate system modeling, our method is free from such dependencies. To enhance the microgrid’s resilience against these threats, we propose a resilient control algorithm by introducing a novel trustworthiness parameter into the traditional cooperative control algorithm. Our method evaluates the trustworthiness of distributed energy resources (DERs) based on their voltage measurements and exchanged information, using Kullback-Leibler (KL) divergence to dynamically adjust control actions. We validated our approach through simulations on both the IEEE-34 bus feeder system with eight DERs and a larger microgrid with twenty-two DERs. The results demonstrated a detection accuracy of around 100%, with millisecond range mitigation time, ensuring rapid system recovery. Additionally, our method improved system stability by up to almost 100% under attack scenarios, showcasing its effectiveness in promptly detecting attacks and maintaining system resilience. These findings highlight the potential of our approach to enhance the security and stability of microgrid systems in the face of cyber threats.

Computer Science↗

DOE OSTI2023

Are System Baselines within OT Environments Feasible?

Critical infrastructure stakeholders need to baseline their systems to understand expected protocol communications.Baseline behaviors may vary based on operational context.Expected operations during a maintenance window, for example, may be different from normal operations.Furthermore, constructing system baselines for Industrial Control Systems (ICS) is difficult and time-consuming.ICS processes generate artifacts expressed across heterogeneous data sources such as network and device logs. There needs to be a corpus of data in order to develop and compare methods that evaluate the feasibility, performance, and generality of approaches to construct baselines for ICS events. Standalone repositories of network packet captures are insufficient to develop methods to classify or recognize operational events expressed across multiple data sources. Moreover, static data corpora do not enable researchers to compare the impact of changing the underlying system for which a baseline is being constructed and this limits the ability to evaluate the performance of system baselines given system changes (e.g. patches, configuration, maintenance events). In order to address these limitations within the community, this talk intends to promote discussion about the state of the practice of constructing baselines. In this manner, we can continue to understand requirements within industry that are not being met by current approaches to baseline construction. This talk builds on two previous talks on the topic of system baselines for OT environments. First, Weaver co-presented at the RSA Conference ICS Sandbox with Dan Gunter. The talk confirmed the need within industry to construct baselines across multiple types of data sources relative to the semantics of specific business processes. Second, Weaver presented at IEEE Security and Privacy Workshop on Language-Theoretic Security.

02 PETROLEUM↗

DOE OSTI2025

A distributed voltage inference framework for cyber-physical attacks detection and localization in active distribution grids

The transition to active distribution grids with real-time monitoring and control depends on the proliferation of advanced communication networks and devices. This paradigm shift towards a cyber-physical architecture also introduces new vulnerabilities for adversaries to exploit and launch sophisticated cyber-physical attacks targeting grid observability. Current research highlights the challenges in distinguishing attacks on voltage phasor or nodal injection measurements and isolating multi-source attack locations in a multiphase distribution grid. The attack detection and localization methods in literature face accuracy issues, applications across diverse attack scenarios, or scalability limits. Here, to bridge these gaps, this paper proposes a distributed Voltage Inference framework for real-time detection and localization of cyber-physical attacks, addressing scalability, adaptability, and accuracy challenges in state-of-the-art methods. The proposed methodology leverages the distributed nature of the Voltage Inference framework through a two-step process of prediction and correction, together with a tractable graph partitioning approach, providing a reliable solution to identify compromised measurement sources and facilitate isolation. Extensive testing on IEEE 13 and 123-node distribution feeders underscores the algorithm’s efficacy, enhancing the security and resilience of active distribution grids against evolving cyber threats. Additionally, Hardware-in-the-Loop (HIL) implementation validates the proposed strategy’s practical applicability in real-world scenarios.

active distribution grids↗

DOE OSTI2021

How Cooperative Engagement Programs Strengthen Sequencing Capabilities for Biosurveillance and Outbreak Response

The threat of emerging and re-emerging infectious diseases continues to be a challenge to public and global health security. Cooperative biological engagement programs act to build partnerships and collaborations between scientists and health professionals to strengthen capabilities in biosurveillance. Biosurveillance is the systematic process of detecting, reporting, and responding to especially dangerous pathogens and pathogens of pandemic potential before they become outbreaks, epidemics, and pandemics. One important tool in biosurveillance is next generation sequencing. Expensive sequencing machines, reagents, and supplies make it difficult for countries to adopt this technology. Cooperative engagement programs help by providing funding for technical assistance to strengthen sequencing capabilities. Through workshops and training, countries are able to learn sequencing and bioinformatics, and implement these tools in their biosurveillance programs. Cooperative programs have an important role in building and sustaining collaborations among institutions and countries. One of the most important pieces in fostering these collaborations is trust. Trust provides the confidence that a successful collaboration will benefit all parties involved. With sequencing, this enables the sharing of pathogen samples and sequences. Obtaining global sequencing data helps to identify unknown etiological agents, track pathogen evolution and infer transmission networks throughout the duration of a pandemic. Having sequencing technology in place for biosurveillance generates the capacity to provide real-time data to understand and respond to pandemics. We highlight the need for these programs to continue to strengthen sequencing in biosurveillance. By working together to strengthen sequencing capabilities, trust can be formed, benefitting global health in the face of biological threats.

60 APPLIED LIFE SCIENCES↗