Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “secure data”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 847 records · Page 47
All sourcesNASA NTRSDOE OSTI
DOE OSTI2021

Time-frequency based cyber security defense of wide-area control system for fast frequency reserve

Global power systems are transiting from conventional fossil fuel energy to renewable energies due to their environmental benefits. The increasing penetration of renewable energies presents challenges for power system operation. The efficiency and sufficiency of responsive reserves have become increasingly important for power systems with a high proportion of renewable energies. The Fast Frequency Reserve (FFR), especially the Wide-area Monitoring System (WAMS)-based FFR, is a promising and effective solution to secure and enhance the stability of power systems. However, cyber security has become a new challenge for the WAMS-based FFR system. Cyber attacks on the FFR control system may threaten the safety of power system operation due to the rapid power controllability requirement of FFR. Therefore, to address this problem, a time-frequency based cyber security defense framework is proposed to detect the cyber spoofing of synchrophasor data in WAMS-based FFR control systems. This paper first introduces the Continuous Wavelet Transforms (CWTs) to decompose spoofing signals. Then, the Dual-frequency Scale Convolutional Neural Networks (DSCNN) is proposed to identify the time-frequency domains matrix from two frequency scales. Integrating CWTs and DSCNN, an identification framework called CWTs-DSCNN is further proposed to detect the spoofing attacks in the WAMS-based FFR system. Multiple experiments using the actual data from FNET/GridEye are performed to verify the effectiveness of the framework in securing WAMS-based FFR systems.

25 ENERGY STORAGE↗
DOE OSTI2014

Lake Michigan Offshore Wind Feasibility Assessment

The purpose of this project was to conduct the first comprehensive offshore wind assessment over Lake Michigan and to advance the body of knowledge needed to support future commercial wind energy development on the Great Lakes. The project involved evaluation and selection of emerging wind measurement technology and the permitting, installation and operation of the first mid-lake wind assessment meteorological (MET) facilities in Michigan’s Great Lakes. In addition, the project provided the first opportunity to deploy and field test floating LIDAR and Laser Wind Sensor (LWS) technology, and important research related equipment key to the sitting and permitting of future offshore wind energy development in accordance with public participation guidelines established by the Michigan Great Lakes Wind Council (GLOW). The project created opportunities for public dialogue and community education about offshore wind resource management and continued the dialogue to foster Great Lake wind resource utilization consistent with the focus of the GLOW Council. The technology proved to be effective, affordable, mobile, and the methods of data measurement accurate. The public benefited from a substantial increase in knowledge of the wind resources over Lake Michigan and gained insights about the potential environmental impacts of offshore wind turbine placements in the future. The unique first ever hub height wind resource assessment using LWS technology over water and development of related research data along with the permitting, sitting, and deployment of the WindSentinel MET buoy has captured public attention and has helped to increase awareness of the potential of future offshore wind energy development on the Great Lakes. Specifically, this project supported the acquisition and operation of a WindSentinel (WS) MET wind assessment buoy, and associated research for 549 days over multiple years at three locations on Lake Michigan. Four research objectives were defined for the project including to: 1) test and validate floating LIDAR technology; 2) collect and access offshore wind data; 3) detect and measure bird and bat activity over Lake Michigan; 4) conduct an over water sound propagation study; 5) prepare and offer a college course on offshore energy, and; 6) collect other environmental, bathometric, and atmospheric data. Desk-top research was performed to select anchorage sites and to secure permits to deploy the buoy. The project also collected and analyzed data essential to wind industry investment decision-making including: deploying highly mobile floating equipment to gather offshore wind data; correlating offshore wind data with conventional on-shore MET tower data; and performing studies that can contribute to the advancement and deployment of offshore wind technologies. Related activities included: • Siting, permitting, and deploying an offshore floating MET facility; • Validating the accuracy of floating LWS using near shoreline cup anemometer MET instruments; • Assessment of laser pulse technology (LIDAR) capability to establish hub height measurement of wind conditions at multiple locations on Lake Michigan; • Utilizing an extended-season (9-10 month) strategy to collect hub height wind data and weather conditions on Lake Michigan; • Investigation of technology best suited for wireless data transmission from distant offshore structures; • Conducting field-validated sound propagation study for a hypothetical offshore wind farm from shoreline locations; • Identifying the presence or absence of bird and bat species near wind assessment facilities; • Identifying the presence or absence of benthic and pelagic species near wind assessment facilities; All proposed project activities were completed with the following major findings: • Floating Laser Wind Sensors are capable of high quality measurement and recordings of wind resources. The WindSentinel presented no significant operational or statistical limitations in recording wind data technology at a at a high confidence level as compared to traditional anemometer cup technology. • During storms, mean Turbulent Kinetic Energy (TKE) increases with height above water; • Sufficient wind resources exist over Lake Michigan to generate 7,684 kWh of power using a 850 kW rated turbine at elevations between 90 - 125 meters, a height lower than originally anticipated for optimum power generation; • Based on initial assessments, wind characteristics are not significantly different at distant (thirty-two mile) offshore locations as compared to near-shore (six mile) locations; • Significant cost savings can be achieved in generation wind energy at lower turbine heights and locating closer to shore. • Siting must be sufficiently distant from shore to minimize visual impact and to address public sentiment about offshore wind development; • Project results show that birds and bats do frequent the middle of Lake Michigan, bats more so than birds; • Based on the wind resource assessment and depths of Lake Michigan encountered during the project, future turbine placement will most likely need to incorporate floating or anchored technology; • The most appropriate siting of offshore wind energy locations will enable direct routing of transmission cables to existing generating and transmission facilities located along the Michigan shoreline; • Wind turbine noise propagation from a wind energy generating facility at a five mile offshore location will not be audible at the shoreline over normal background sound levels.

17 WIND ENERGY↗
NASA NTRS2019

Flexible Modem Interface (FMI) in Space - Extending Standardized Commercial Satellite Communications Services to Space Users

Recent innovations are producing a multitude of advanced commercial satellite communications (COMSATCOM) systems that could deliver massive amounts of SATCOM capacity at a fraction of current cost while also offering reliability and availability that is critical to achieving mission success for orbiting assets. Recognizing the alignment of commercial capabilities with the National Aeronautics and Space Administration's (NASA) diverse mission requirements, the agency is proactively engaging industry to formulate strategies leading towards a NASA communications architecture that includes advanced commercial capabilities. To fully leverage the expanded space resources, NASA must also address the integration of commercial waveforms into its space terminals. In pursuit of similar goals, the United States Department of Defense (DoD) is leading the standardization of the flexible modem interface (FMI) to address service integration for their tactical terminals in pursuit of a DoD Wideband SATCOM Enterprise.This paper describes how NASA is adapting this FMI standard to work with the Space Telecommunications Radio System (STRS) software-defined radio (SDR) framework to address the challenging size, weight, and power resource requirements for terminals in space. A full adaptation would include waveform compatibility with modular baseband processing, frequency compatibility with a wideband front end, and radiated beam control with an electronically steerable antenna to enable multi-provider commercial service capability in a feasible package for space terminals. Security is also a key aspect to be addressed for this integration since data will flow through commercial networks, commercial service providers have their own security mechanisms, and space terminals must be able to securely load proprietary software and firmware needed to access the commercial networks on demand. Success of this effort means commercial partners will be able to allow network-compliant implementations to be hosted on STRS-compliant SDRs in space for reliable and capable network access.

COMSATCOM↗
DOE OSTI2014

Automatic Labeling for Entity Extraction in Cyber Security

Timely analysis of cyber-security information necessitates automated information extraction from unstructured text. While state-of-the-art extraction methods produce extremely accurate results, they require ample training data, which is generally unavailable for specialized applications, such as detecting security related entities; moreover, manual annotation of corpora is very costly and often not a viable solution. In response, we develop a very precise method to automatically label text from several data sources by leveraging related, domain-specific, structured data and provide public access to a corpus annotated with cyber-security entities. Next, we implement a Maximum Entropy Model trained with the average perceptron on a portion of our corpus (~750,000 words) and achieve near perfect precision, recall, and accuracy, with training times under 17 seconds.

Automatic Labeling↗
NASA NTRS2008

Web Monitoring of EOS Front-End Ground Operations, Science Downlinks and Level 0 Processing

This paper addresses the efforts undertaken and the technology deployed to aggregate and distribute the metadata characterizing the real-time operations associated with NASA Earth Observing Systems (EOS) high-rate front-end systems and the science data collected at multiple ground stations and forwarded to the Goddard Space Flight Center for level 0 processing. Station operators, mission project management personnel, spacecraft flight operations personnel and data end-users for various EOS missions can retrieve the information at any time from any location having access to the internet. The users are distributed and the EOS systems are distributed but the centralized metadata accessed via an external web server provide an effective global and detailed view of the enterprise-wide events as they are happening. The data-driven architecture and the implementation of applied middleware technology, open source database, open source monitoring tools, and external web server converge nicely to fulfill the various needs of the enterprise. The timeliness and content of the information provided are key to making timely and correct decisions which reduce project risk and enhance overall customer satisfaction. The authors discuss security measures employed to limit access of data to authorized users only.

Cordier, Guy R.↗
DOE OSTI2024

Harnessing large language models’ zero-shot and few-shot learning capabilities for regulatory research

Abstract Large language models (LLMs) are sophisticated AI-driven models trained on vast sources of natural language data. They are adept at generating responses that closely mimic human conversational patterns. One of the most notable examples is OpenAI's ChatGPT, which has been extensively used across diverse sectors. Despite their flexibility, a significant challenge arises as most users must transmit their data to the servers of companies operating these models. Utilizing ChatGPT or similar models online may inadvertently expose sensitive information to the risk of data breaches. Therefore, implementing LLMs that are open source and smaller in scale within a secure local network becomes a crucial step for organizations where ensuring data privacy and protection has the highest priority, such as regulatory agencies. As a feasibility evaluation, we implemented a series of open-source LLMs within a regulatory agency’s local network and assessed their performance on specific tasks involving extracting relevant clinical pharmacology information from regulatory drug labels. Our research shows that some models work well in the context of few- or zero-shot learning, achieving performance comparable, or even better than, neural network models that needed thousands of training samples. One of the models was selected to address a real-world issue of finding intrinsic factors that affect drugs' clinical exposure without any training or fine-tuning. In a dataset of over 700 000 sentences, the model showed a 78.5% accuracy rate. Our work pointed to the possibility of implementing open-source LLMs within a secure local network and using these models to perform various natural language processing tasks when large numbers of training examples are unavailable.

Biochemistry & Molecular Biology↗
DOE OSTI2018

Nuclear Power Plant Simulation and Cybersecurity

Critical infrastructure protection is vital to the day-to-day operation of any country, and those systems need to be protected to the fullest extent possible. As with what was seen in Ukraine in late 2016, with the cyber attack on the power grid, these systems are susceptible to attacks that can cause serious damage, both physically and economically. This incident shut down the power grid for 6 hours, with nearly 80,000 people affected. Cyber security can be referred to as the protection of data and systems in networks, both wired and wireless, from unauthorized access or attack. In nuclear power plants, assessments of cyber security are critical to ensuring the safe and reliable operation of the systems used. According to the Nuclear Regulatory Commission (NRC), the purpose of cyber security assessments is to detect and then eliminate or mitigate vulnerabilities in the digital system that could be exploited either from outside or inside the digital system protected area. These cyber security assessments are essentially intended to reduce cyber security risk. The NRC refers to cyber security risk as the combination of the consequence to the nuclear power plant and the susceptibility of a digital system to internal and external cyber attack.

21 SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLANTS↗
NASA NTRS2002

Grids for Dummies: Featuring Earth Science Data Mining Application

This viewgraph presentation discusses the concept and advantages of linking computers together into data grids, an emerging technology for managing information across institutions, and potential users of data grids. The logistics of access to a grid, including the use of the World Wide Web to access grids, and security concerns are also discussed. The potential usefulness of data grids to the earth science community is also discussed, as well as the Global Grid Forum, and other efforts to establish standards for data grids.

Hinke, Thomas H.↗
NASA NTRS2011

Leveraging the Cloud for Robust and Efficient Lunar Image Processing

The Lunar Mapping and Modeling Project (LMMP) is tasked to aggregate lunar data, from the Apollo era to the latest instruments on the LRO spacecraft, into a central repository accessible by scientists and the general public. A critical function of this task is to provide users with the best solution for browsing the vast amounts of imagery available. The image files LMMP manages range from a few gigabytes to hundreds of gigabytes in size with new data arriving every day. Despite this ever-increasing amount of data, LMMP must make the data readily available in a timely manner for users to view and analyze. This is accomplished by tiling large images into smaller images using Hadoop, a distributed computing software platform implementation of the MapReduce framework, running on a small cluster of machines locally. Additionally, the software is implemented to use Amazon's Elastic Compute Cloud (EC2) facility. We also developed a hybrid solution to serve images to users by leveraging cloud storage using Amazon's Simple Storage Service (S3) for public data while keeping private information on our own data servers. By using Cloud Computing, we improve upon our local solution by reducing the need to manage our own hardware and computing infrastructure, thereby reducing costs. Further, by using a hybrid of local and cloud storage, we are able to provide data to our users more efficiently and securely. 12 This paper examines the use of a distributed approach with Hadoop to tile images, an approach that provides significant improvements in image processing time, from hours to minutes. This paper describes the constraints imposed on the solution and the resulting techniques developed for the hybrid solution of a customized Hadoop infrastructure over local and cloud resources in managing this ever-growing data set. It examines the performance trade-offs of using the more plentiful resources of the cloud, such as those provided by S3, against the bandwidth limitations such use encounters with remote resources. As part of this discussion this paper will outline some of the technologies employed, the reasons for their selection, the resulting performance metrics and the direction the project is headed based upon the demonstrated capabilities thus far.

Cloud Computing↗
DOE OSTI2019

Nevada National Security Site 2018 Waste Management Monitoring Report: Area 3 and Area 5 Radioactive Waste Management Sites

Environmental monitoring data are collected at and around the Area 3 and Area 5 Radioactive Waste Management Sites (RWMSs) within the Nevada National Security Site. This report summarizes the 2018 environmental data to provide an overall evaluation of RWMS performance and to support environmental compliance and performance assessment activities.

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗
DOE OSTI2019

Physics-Guided Deep Learning for Time-Series State Estimation Against False Data Injection Attacks

The modern power grid is a cyber-physical system. While the grid is becoming more intelligent with emerging sensing and communication techniques, new vulnerabilities are introduced and cyber security becomes a major concern. One type of cyber-attacks - False Data Injection Attacks (FDIAs) - exploits the limitations in traditional power system state estimation, and modifies system states without being detected. In this paper, we propose a physics-guided deep learning (PGDL) approach to defend against FDIAs. The PGDL takes real-time measurements as inputs to neural networks, outputs the estimated states, and reconstructs measurements considering power system physics. A deep recurrent neural network - Long Short-Term Memory (LSTM) - is employed to learn the temporal correlations among states. This hybrid learning model leads to a time-series state estimation method to defend against FDIAs. The simulation results using IEEE 14-bus test system demonstrate the accuracy and robustness of the proposed time-series state estimation under FDIAs.

Cyber security, state estimation, physics-guided d↗
DOE OSTI2022

Real-time Event Detection Using Rank Signatures of Real-world PMU Data

Timely detection of power system events is a crucial task, which can facilitate the implementation of remedial actions to improve reliability, resiliency, and security of the system. Meanwhile, the widespread deployment of phasor measurement units (PMUs) makes it possible to develop data-driven event detection techniques. However, relying purely on data without incorporating domain knowledge for the event detection task in power systems poses substantial security and stability risks due to issues associated with data misinterpretation and model accuracy. In this regard, we propose a real-time event detection method using real-world PMU data by incorporating domain knowledge to adequately capture the event signatures. Specifically, we track the change in rank signatures of PMU data to accurately localize the events. To optimize the detection process, we incorporate an offline Bayesian optimization algorithm to tune the parameters by efficiently searching for the best values. The experiments using the real-world PMU dataset from a U.S. interconnection show that the proposed event detection approach can efficiently detect the events from PMU data streams with high accuracy.

Ghasemkhani, Amir↗
DOE OSTI2023

VDiSC: An Open Source Framework for Distributed Smart City Vision and Biometric Surveillance Networks

Recent global growth in the interest of smart cities has led to trillions of dollars of investment toward research and development. These connected cities have the potential to create a symbiosis of technology and society and revolutionize the cost of living, safety, ecological sustainability, and quality of life of societies on a world-wide scale. Some key components of the smart city construct are connected smart grids, self-driving cars, federated learning systems, smart utilities, large-scale public transit, and proactive surveillance systems. While exciting in prospect, these technologies and their subsequent integration cannot be attempted without addressing the potential societal impacts of such a high degree of automation and data sharing. Additionally, the feasibility of coordinating so many disparate tasks will require a fast, extensible, unifying framework. To that end, we propose the Distributed Smart City framework for Vision, or VDiSC. VDiSC serves as a unified biometric API harness that allows for seamless evaluation, deployment, and simple pipeline creation for heterogeneous biometric software. VDiSC additionally provides a fully declarative capability for defining and coordinating custom machine learning and sensor pipelines, allowing the distribution of processes across otherwise incompatible hardware and networks. VDiSC ultimately provides a way to quickly configure, hot-swap, and expand large coordinated or federated systems online without interruptions for maintenance. Because much of the data collected in a smart city contains Personally Identifying Information (PII), VDiSC also provides built-in tools and layers to ensure secure and encrypted streaming, storage, and access of PII data across distributed systems.

Brogan, Joel↗
DOE OSTI2014

Los Alamos Team Demonstrates Bottle Scanner Technology

Los Alamos scientists are demonstrating a Nuclear Magnetic Resonance Imaging (NMR) technology that may provide a breakthrough for screening liquids at airport security. By adding low-power X-ray data to the NMR mix, scientists believe they have unlocked a new detection technology. Funded in part by the Department of Homeland Security's Science and Technology Directorate, the new technology is called MagRay.

46 INSTRUMENTATION RELATED TO NUCLEAR SCIENCE AND ↗
DOE OSTI2026

The LCLStream Ecosystem for Multi-Institutional Dataset Exploration

We describe a new end-to-end experimental data streaming framework designed from the ground up to support new types of applications – AI training, extremely high-rate X-ray time-of-flight analysis, crystal structure determination with distributed processing, and custom data science applications and visualizers yet to be created. Throughout, we use design choices merging cloud microservices with traditional HPC batch execution models for security and flexibility. This project makes a unique contribution to the DOE Integrated Research Infrastructure (IRI) landscape. By creating a flexible, API-driven data request service, we address a significant need for high-speed data streaming sources for the X-ray science data analysis community. With the combination of data request API, mutual authentication web security framework, job queue system, high-rate data buffer, and complementary nature to facility infrastructure, the LCLStreamer framework has prototyped and implemented several new paradigms critical for future generation experiments.

Rogers, David [ORNL] (ORCID:0000000251871768)↗
DOE OSTI2020

Blockchain based Communication Architectures with Applications to Private Security Networks

Existing communication protocols in high consequence security networks are highly centralized. While this naively makes the controls easier to physically secure, external actors require fewer resources to disrupt the system because there are fewer points in the system can be destroyed or interrupted without the entire system failing. We present a solution to this problem using a proof-of-work-based blockchain implementation built on MultiChain. We construct a test-bed network containing two types of data input: visual imagers and microwave sensor information. These data types are ubiquitous in perimeter intrusion detection security systems and allow a realistic representation of a real-world network architecture. The cameras in this system use an object detection algorithm to nd important targets in the scene. The raw data from the camera and the outputs from the detection algorithm are then placed in a transaction on the distributed ledger. Similarly, microwave data is used to detect relevant events and are placed in a transaction. These transactions are then bundled into blocks and broadcast to the rest of the network using the Bitcoin-based MultiChain protocol. We develop five tests to examine the security metrics of our network. We performed the five security metric test using different sized networks from 7 to 39 nodes to determine how the metrics scale with respect to size. We nd that when compared to a centralized architecture our implementation provides a resiliency increase that is expected from a blockchain-based protocol without slowing the system so much that a human operator would notice. Furthermore, our approach is able to detect tampering in real time. Based on these results, we theorize that security networks in general could use a blockchain-based approach in a meaningful way.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2016

Cyber-Physical Security Assessment (CyPSA) Toolset

CyPSA seeks to organize and gain insight into the diverse sets of data that a critical infrastructure provider must manage. Specifically CyPSA inventories, manages, and analyzes assets and relations among those assets. A variety of interfaces are provided. CyPSA inventories assets (both cyber and physical). This may include the cataloging of assets through a common interface. Data sources used to generate a catalogue of assets include PowerWorld, NPView, NMap Scans, and device configurations. Depending upon the role of the person using the tool the types of assets accessed as well as the data sources through which asset information is accessed may vary. CyPSA allows practitioners to catalogue relations among assets and these may either be manually or programmatically generated. For example, some common relations among assets include the following: Topological Network Data: Which devices and assets are connected and how? Data sources for this kind of information include NMap scans, NPView topologies (via Firewall rule analysis). Security Metrics Outputs: The output of various security metrics such as overall exposure. Configure Assets:CyPSA may eventually include the ability to configure assets including relays and switches. For example, a system administrator would be able to configure and alter the state of a relay via the CyPSA interface. Annotate Assets: CyPSA also allows practitioners to manually and programmatically annotate assets. Sources of information with which to annotate assets include provenance metadata regarding the data source from which the asset was loaded, vulnerability information from vulnerability databases, configuration information, and the output of an analysis in general.

Garcia, Luis↗
DOE OSTI2020

Nevada National Security Site 2019 Waste Management Monitoring Report Area 3 and Area 5 Radioactive Waste Management Sites

Environmental monitoring data are collected at and around the Area 3 and Area 5 Radioactive Waste Management Sites (RWMSs) within the Nevada National Security Site (NNSS). This report summarizes the 2019 environmental data to provide an overall evaluation of RWMS performance and to support environmental compliance and performance assessment (PA) activities. Some of these data (e.g., radiation exposure, air, and groundwater) are presented in other reports (Mission Support and Test Services, LLC 2019, 2020a, 2020b). Direct radiation monitoring data indicate exposure levels at the Area 3 and Area 5 RWMSs are within the range of background levels measured at the NNSS. Slightly elevated exposure levels outside the Area 3 RWMS are attributed to nearby historical aboveground nuclear weapons tests. Air monitoring data at the Area 3 and Area 5 RWMSs show that tritium concentrations in water vapor and americium and plutonium concentrations in air particles are below Derived Concentration Standards for these radionuclides. Groundwater monitoring data indicate the groundwater in the uppermost aquifer beneath the Area 5 RWMS is not impacted by RWMS operations. Results of groundwater analysis from wells around the Area 5 RWMS are below established investigation levels. Leachate samples collected from the leachate collection systems at the Area 5 mixed low-level waste disposal unit are below established contaminant regulatory limits. During 2019, precipitation at the Area 3 RWMS was 77 percent above average, and precipitation at the Area 5 RWMS was 69 percent above average. Water balance measurements indicate that evapotranspiration from the vegetated weighing lysimeter at the Area 5 RWMS dries the soil and prevents downward percolation of precipitation more effectively than evaporation as measured from the bare-soil weighing lysimeter. Vadose zone monitoring in the Area 3 and Area 5 RWMS soil covers shows no evidence of precipitation percolating through the covers to the waste. Moisture from precipitation did not percolate below 120 centimeters (3.9 feet [ft]) in the vegetated final cover on the U-3ax/bl disposal unit at the Area 3 RWMS during 2019. There was no drainage through 2.4 meters (8 ft) of soil as indicated from the Area 3 drainage lysimeters that received only natural precipitation. At the Area 3 RWMS, which received three times the natural precipitation, 57 percent of the applied precipitation and irrigation drained from the bare-soil drainage lysimeter. All 2019 monitoring data indicate that the Area 3 and Area 5 RWMSs are performing within expectations of the model and parameter assumptions for the facilities’ PAs.

2019↗