Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “Security monitoring”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 91 records · Page 5

Software and System Health Management with R2U2

R2U2 (Realizable, Responsive, Unobtrusive Unit) is a hardware-supported tool and framework for the real-time system and software health management of cyber-physical systems. R2U2 continuously monitors properties about safety, performance, and security of the vehicle and can perform diagnostic reasoning. Efficient observers for past-time and future-time Metric Temporal Logic, reasoners for Bayesian Networks, and model-based prognostics algorithms are major components of R2U2. Their combination makes it possible to design powerful models for system runtime monitoring, diagnostics, software health management, prognostics, and security monitoring. The R2U2 monitoring engine is designed for minimal runtime overhead and is available as Simulink block or as a software component for integration into the flight software stack, and enables R2U2 to monitor complex cyber-physical systems without any instrumentation of the flight software. In this presentation, we give an overview of R2U2 architecture and reasoning algorithms, present its features, and give a life demo of the tool.

Schumann, Johann↗

NEVADA NATIONAL SECURITY SITE 2020 DATA REPORT- GROUNDWATER MONITORING PROGRAM AREA 5 RADIOACTIVE WASTE MANAGEMENT SITE

This report presents groundwater and leachate sample results from the Area 5 Radioactive Waste Management Site (RWMS) at the Nevada National Security Site in Nye County, Nevada. Since 1993, groundwater samples have been collected and static groundwater depths have been measured from the aquifer immediately below the Area 5 RWMS. The data are evaluated for evidence of effects on the aquifer related to the Area 5 RWMS. Leachate from the Cell 18 lined mixed waste cell has been sampled since 2011, and leachate from the Cell 25 lined mixed waste cell was first sampled in 2019 after it began receiving waste in August 2018. Leachate data are analyzed for hazardous contaminants to determine appropriate leachate handling and disposal. This report includes five years of data from 2016 through 2020.

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗

Runtime Monitoring with R2U2 for Aircraft Systems with Neural Networks

R2U2 (Realizable, Responsive, Unobtrusive Unit) is a hardware-supported tool and framework for real-time system monitoring and software health management of cyber-physical systems. During system operation, R2U2 continuously monitors properties about safety, performance, and security of the vehicle and its vital components and can perform diagnostic reasoning. Efficient observers for past-time and future-time Metric Temporal Logic, fast reasoners for Bayesian Networks, and model-based prognostics algorithms are key components of R2U2 and designed for minimal computational footprint. R2U2 has been implemented in software supporting ROS, NASA's cFS/cFE, and Simulink and as an FPGA configuration. The synergistic combination of monitors and observers in R2U2 makes it possible to design powerful models for system runtime monitoring, diagnostics, software health management, prognostics, and security monitoring. In this presentation, I will give a detailed overview of the R2U2 architecture and its features and will discuss the application of R2U2 for safety-monitoring of a neural-network based autonomous centerline tracking system (ACT) for autonomous aircraft.

Runtime Monitoring↗

A Novel Authentication Management for the Data Security of Smart Grid

Bidirectional wireless communication is employed in various smart grid components such as smart meters and control and monitoring applications where security is vital. The Trusted Third Party (TTP) and wireless connectivity between the smart meter and the third party in the key management-based encryption techniques for the smart grid are expected to be totally trustworthy and dependable. In a wired/wireless medium, however, a man-in-the-middle may seek to disrupt, monitor and manipulate the network, or simply execute a replay attack, revealing its vulnerability. Recognizing this, this study presents a novel authentication management (model) comprised of two layer security schema. The first layer implements an efficient novel encryption method for secure data exchange between meters and control center with the help of two partially trusted simple servers (constitutes the TTP). In this setting, one server handles the data encryption between the meter and control center/central database, and the other server administers the random sequence of data transmission. The second layer monitors and verifies exchanged data packets among smart meters. It detects abnormal packets from suspicious sources. To implement this node-to-node authentication, One class support vector machine algorithm is proposed which takes advantages of the location information as well as the data transmission history (node identification, packet size, and data transmission frequency). This schema secures data communication, and imposes a comprehensive privacy throughout the system without considerably extending the complexity of the conventional key management scheme.

24 POWER TRANSMISSION AND DISTRIBUTION↗

Groundwater Monitoring Report, U.S. Department of Energy Y-12 National Security Complex, Oak Ridge, Tennessee

This report contains the groundwater and surface water monitoring data obtained during calendar year (CY) 2019 at the U.S. Department of Energy (DOE) Y-12 National Security Complex (Y-12) on the DOE Oak Ridge Reservation (ORR) in Oak Ridge, Tennessee. The monitoring data were obtained from wells, springs, and surface water sampling locations in three hydrogeologic regimes at Y-12. The Bear Creek Hydrogeologic Regime (Bear Creek Regime) encompasses a section of Bear Creek Valley (BCV) between the west end of Y-12 and the west end of the Bear Creek Watershed (directions are in reference to the Y-12 grid system, shown as Plant North. The Upper East Fork Poplar Creek Hydrogeologic Regime (East Fork Regime) encompasses the Y-12 industrial facilities and support structures in BCV. The Chestnut Ridge Hydrogeologic Regime (Chestnut Ridge Regime) encompasses a section of Chestnut Ridge directly south of Y-12. Background information in Section 2 of this report outlines the hydrogeologic framework for groundwater and surface water quality monitoring at Y-12 and includes an overview of the groundwater contamination in each hydrogeologic regime. Section 3 provides details regarding the groundwater and surface water sampling and analysis activities implemented under the Y-12 GWPP, including sampling locations and frequency, sample collection and handling, field measurements and laboratory analytes, quality assurance (QA)/quality control (QC) sampling, data management, and data quality assessment (DQA). However, the equivalent QA/QC or DQA information for the groundwater and surface water data associated with the monitoring programs implemented by UCOR are not included in this report and instead are deferred to referenced programmatic plans and reports issued by OREM and UCOR. Section 4 of this report presents a summary evaluation of the CY 2019 monitoring data with regard to the respective objectives of surveillance monitoring and exit pathway/perimeter monitoring. The evaluation is based primarily on the analytical results for the following principal groundwater contaminants at Y-12: nitrate, uranium, gross alpha activity, gross beta activity, and volatile organic compounds (VOCs). Section 5 summarizes the most significant findings with respect to the principal contaminants along with recommendations for any proposed changes to the ongoing groundwater and surface water quality monitoring performed under the Y-12 GWPP. Technical reports and plans cited in the narrative sections of the report are listed in Section 6. Narrative sections of this report reference several appendices. Figures (maps and diagrams) and data tables (excluding data summary tables incorporated in the narrative sections) are in Appendix A and Appendix B, respectively. Appendix C contains construction details for each well sampled during CY 2019 by either the Y-12 GWPP or UCOR, along with schematic diagrams for wells equipped with Westbay™ multiport sampling equipment or Barcad® pump systems. Appendix D supports the background summary discussion in Section 2 and provides more detailed information about the hydrogeologic framework for groundwater and surface water monitoring at Y-12, including the primary sources of groundwater contamination in each hydrogeologic regime. Results for all field measurements and laboratory analyses obtained by the Y-12 GWPP and UCOR are presented in Appendix E, which also includes the sample numbers for the QA/QC samples associated with groundwater and surface water monitoring performed by the Y-12 GWPP.

54 ENVIRONMENTAL SCIENCES↗

Cyber Secure Sensor Network for Fossil Fuel Power Generation Assets Monitoring

The energy sector is undergoing digital transformation which is to say more and more power generation assets have become automated and connected to the internet. The connected sensors can tap into plants to monitor the health of assets and manage fleets remotely. These are just some of the benefits digitalization is bringing to the power industry. Within a power plant, control systems are no longer concerned with one system or one piece of equipment, but rather whole fleet of assets inter-connected with smart sensors which have the function of continuously monitoring and transmitting real-time operational data to operators. These connected systems will form a part of the industrial internet of things (IIoT). The big data scenarios provide benefits of performing system prognostics and optimization which is a key selling point of power plant digitalization.

20 FOSSIL-FUELED POWER PLANTS↗

Security component with fiber Bragg grating

A fiber Bragg grating (FBG) security component for single-party and multi-party monitoring is provided. The security component includes an optical fiber having a plurality of Bragg gratings. The Bragg gratings provide a spectral response that is randomized based on the manufacture of the security component. For single-party use, the spectral response provides a reproducible spectral signature when interrogated with an optical signal. For multi-party use, each party applies a known optical interrogation signal to the security component and applies an external stress known only to the respective monitoring party. The resulting shift in the spectral signature is unique to each monitoring party, making it extremely difficult to successfully counterfeit the security component's response for all such parties.

Ziock, Klaus-Peter↗

Evaluation of a Regional Crop Model Implementation for Sub-National Yield Assessments in Kenya

CONTEXT: Cropping system models can be used to both assess regional food security and to monitor and predict agricultural drought. Agriculture in Kenya is extremely important to both the economy and food security of the country. OBJECTIVE: This study evaluated a regional implementation of a widely used crop model, the Decision Support System for Agrotechnology Transfer (DSSAT), within a coupled modeling framework, the Regional Hydrologic Extremes Assessment System (RHEAS), over Kenya. The goal of this study was to assess the ability of RHEAS to simulate the annual variability of maize yields at the county level and evaluate the uncertainty inherent in the model and inputs. METHODS: The RHEAS system implements a stochastic ensemble approach to account for field scale variabilities in crop management practices and underlying soil and weather conditions. Satellite-derived datasets were used to evaluate the land surface component of the system and seasonally disaggregated yield for 5 years was used to assess the performance of the cropping system model. RESULTS AND CONCLUSIONS: The median correlation between RHEAS and satellite-derived soil moisture and evapotranspiration estimates were 0.78, and 0.51, respectively, indicating that the model is able to capture the key drivers of the hydrological budget. Overall, RHEAS simulated yearly yield variations with a median correlation of 0.7 with reported yields, with the best performance in the short rains season. However, across both seasons, the RHEAS model was positively biased on the order of ~1.6 MT/ha. The overall median unbiased RMSE was 0.66 MT/ha. The RHEAS system shows skill at simulating extreme departures in anomalies, and a majority of the time (62.5%) the reported yields fall within the interquartile range of the simulations. SIGNIFICANCE: One of the most important areas of improvement for the next generation of agricultural data and models is to better understand and communicate the inherent uncertainties. This is especially critical in data-limited regions. Here we present a modeling system and its implementation that begins to address these concerns. We demonstrate the ability to simulate broad trends in yields at the county level for sub-annual yields with skills that commensurate previous national/annual level studies.

Crop model↗

Innovation in Radiological Security, Part 2 of 2 – Insights into Developing a Cloud-hosted Security Technology

A Sentry Remote Monitoring System (Sentry-RMS) is a stand-alone security system that provides detection, assessment, and communication of priority alarms as an additional means of thwarting internal and external threats to sites that maintain radiological material. The SEntry-RMS CommUnications and REsponse (Sentry-SECURE) platform is an optional feature of the Sentry-RMS that relays priority alarm information to the identified response stakeholders. Sentry-SECURE is hosted in a cloud environment that abstracts the data owner’s and data consumer’s platforms to allow for greater information sharing. This promotes situational awareness amongst authorized users and enables future innovation among modern response platforms. When securely architecting a cloud solution such as this, the use of design paradigms can be an effective tool to increase the accuracy and reliability of cyber- and information-security-related decisions made throughout the development process. This approach also supports the categorization of design considerations into three levels: industry concepts, project approaches, and data protections for digital processes. Industry concepts consist of the notional underpinnings that guide or motivate a security process, system, or design but often lack any tangible attributes. Project approaches represent decisions made during the design and development process to prioritize a solution, method, or practice above another that may provide a comparable functional output but lacks a desired security benefit. Data protections for digital processes represent the selection, integration, and implementation of specific controls for a given asset. This paper will explore specific examples of how Sentry-SECURE has been designed to account for considerations at each of these three levels, while balancing the operational intent of the platform with the security enhancements necessary to maintain data integrity, availability, and confidentiality.

assessment, RMS, security, physical, cloud, Cyber ↗

A Scalable Quantum Cryptography Network for Protected Automation Communication (Final Report)

This is the final report for a CEDS-funded project aimed at developing a new quantum technology for securing utility communication networks used to control and monitor electrical grid equipment. Securing these control networks represents a unique challenge as the performance of the security solution has a direct impact on the stability and reliability of the electrical grid. Traditional, software-based solutions - developed for information networks - are not suitable for utility control networks because they introduce latency, require burdensome maintenance and upgrades, are often incompatible with legacy equipment, and introduce operational complexity that reduces grid reliability. Consequently, many U.S. utilities do not use existing solutions and, instead, protect their critical control networks through the careful isolation and obscuration of their networked equipment. With more utilities embracing grid automation, the attack surface that utilities must defend from hackers has grown to an unmanageable size. To address this situation, Qubitekk and its partners proposed and developed a hardware-based solution that can secure critical control networks without negatively impacting grid performance. This new solution is based on quantum key distribution (QKD) techniques that guarantee secure key generation and distribution across a utility control network. Through deployment and field testing of a prototype QKD system, we have shown that this solution delivers long-term network security, is technically feasible to implement and maintain on a utility’s distribution substation network and does not negatively impact grid operations. In addition, the project has identified and solved key challenges associated with generating, transmitting, and measuring coherent photonic quantum states on a real-world fiber optic network. These additional findings are playing a critical role in advancing quantum networks for quantum computing applications. An overview of the QKD prototype development effort, field testing activities and results, and additional findings relevant to emerging quantum networks are presented in this report.

71 CLASSICAL AND QUANTUM MECHANICS, GENERAL PHYSIC↗

Systematic Review on Effects of Bioenergy From Edible Versus Inedible Feedstocks on Food Security

Achieving food security is a critical challenge of the Anthropocene that may conflict with environmental and societal goals such as increased energy access. The“fuel versus food”debate coupled with climate mitigation efforts has given rise to next-generation biofuels. Findings of this systematic review indicate just over half of the studies (56% of 224 publications) reported a negative impact of bioenergy production on food security. However, no relationship was found between bioenergy feedstocks that are edible versus inedible and food security (Pvalue=0.15). A strong relationship was found between bioenergy and type of food security parameter (Pvalue < 0.001), sociodemographic index of study location (Pvalue=0.001),spatial scale (Pvalue < 0.001), and temporal scale (Pvalue=0.017). Programs and policies focused on bioenergy and climat emitigation should monitor multiple food security parameters at various scales over the long term toward achieving diverse sustainability goals.

food security↗

PAS: Privacy Algorithms in Systems

Today we face an explosion of data generation, ranging from health monitoring to national security infrastructure systems. More and more systems are connected to the Internet that collects data at regular time intervals. These systems share data and use machine learning methods for intelligent decisions, which resulted in numerous real-world applications (e.g., autonomous vehicles, recommendation systems, and heart-rate monitoring) that have benefited from it. However, these approaches are prone to identity thief and other privacy related cyber-security attacks. So, how can data privacy be protected efficiently in these scenarios? More dedicated efforts are needed to propose the integration of privacy techniques into existing systems and develop more advanced privacy techniques to address the complex challenges of multi-system connectivity and data fusion. Therefore, we have introduced Privacy Algorithms in Systems (PAS) at CIKM which provides a venue to gather academic researchers and industry researchers/practitioners to present their research in an effort to advance the frontier of this critical direction of privacy algorithms in systems.

Kotevska, Olivera↗

Technical Guide for Implementing Cybersecurity Continuous Monitoring in the Nuclear Industry

A technical guide to assist the nuclear industry in implementing cybersecurity continuous monitoring program. The guide walks through the steps to develop a cybersecurity continuous monitoring program and provides details relative to the nuclear industry. It also includes a series of examples of optional metrics to be used, and technologies that can be useful when implementing a continuous monitoring program.

21 SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLANTS↗

The Management and Security Expert (MASE)

The Management and Security Expert (MASE) is a distributed expert system that monitors the operating systems and applications of a network. It is capable of gleaning the information provided by the different operating systems in order to optimize hardware and software performance; recognize potential hardware and/or software failure, and either repair the problem before it becomes an emergency, or notify the systems manager of the problem; and monitor applications and known security holes for indications of an intruder or virus. MASE can eradicate much of the guess work of system management.

Miller, Mark D.↗