Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “System Security”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 919 records · Page 51

Security Constrained Economic Optimization of Photovoltaic and Other Distributed Assets

The rapid growth of distributed energy resources (DERs), especially photovoltaic (PV) systems, has introduced new complexities in maintaining grid reliability, stability, and cost-effective operation. This project addresses these challenges by developing and demonstrating a scalable GridOS Distributed Energy Resource Management System (DERMS) that enables secure, real-time optimization and control of DERs at the distribution feeder level.

14 SOLAR ENERGY↗

International Symposium on Transport Security of Nuclear and other Radioactive Material; Tokyo, Japan, November 2019

As an outcome of the Fourth Nuclear Security Summit of 2016, held in Washington D.C., the Governments of Australia, Canada, Czech Republic, Finland, France, Hungary, Italy, Japan, Kazakhstan, Morocco, Spain, the Republic of Korea, Thailand, the United Kingdom, and the United States reaffirmed, through INFCIRC/909, their will to further improve the overall security in the transport of nuclear and other radioactive materials. With this goal in mind, each expressed their commitment to further exchange national practices with other countries through the IAEA and the Global Initiative to Combat Nuclear Terrorism (GICNT). They also committed to actively support the IAEA as the central organization for coordinating activities and developing guidance documents and to support the GICNT and the Global Partnership Against the Spread of Weapons and Materials of Mass Destruction in developing and implementing its nuclear transport security activities. Both of these organizations address the commitments regarding nuclear transport security as outcomes of the Nuclear Security Summit 2016. In an effort to continue the momentum from the Nuclear Security Summit, the Government of Japan, in cooperation with the Integrated Support Center for Nuclear Nonproliferation and Nuclear Security of Japan Atomic Energy Agency (ISCN/JAEA), hosted the International Transport Security Symposium in November 2019. With over fifty countries invited to attend, the event exchanged and promoted good practices in several topical area sessions related to the security of nuclear and other radioactive material in transport. Topical sessions included Laws and Regulatory Framework, Physical Protection Systems, Response Actions, and Insider/Information Security. The Symposium built support for transport security and encouraged IAEA Member States to actively work regionally and internationally with the IAEA’s transport security programme through the practical implementation and incorporation of IAEA Nuclear Security Series recommendations and guidance into their national frameworks for transport security. From these sessions, to the host detailed a recommended path forward for future engagements in the security of nuclear and radioactive material in transport. The paper will discuss the Symposium’s outcomes and highlight the forward momentum made by both signatories and non-signatories for the strengthening of all the critical elements of a State’s transport security regime, including physical protection systems, insider threats to the nuclear and radioactive material supply chains, planning and capabilities for law enforcement response to malicious transport security events, and employment of technology to address critical vulnerabilities to the transport of nuclear and other radioactive materials.

Holt, Katherine↗

NREL Project CloudZero

The National Renewable Energy Laboratory's (NREL's) CloudZero project is evaluating the ability to reliably and securely manage complex energy systems from the cloud, identifying major technical and regulatory barriers to cloud adoption, suggesting new security controls and best practices for cloud applications, and empowering industry to embrace the cloud, where appropriate.

cloud↗

AI-based Detection and Defense Against Cyberattacks in Distributed Energy Resources

This study will provide comprehensive artificial intelligence (AI)-based solution tools for network security, malware prevention, and sensor data anomaly detection for distributed energy resource (DER) research, development, and demonstration. DER technologies are energy systems (e.g., solar panels, wind turbines, and energy storage systems) that are often connected to the internet and thus vulnerable to cyberattacks. Cybersecurity should be of primary concern for DERs, which is why we propose an integrated multi-layer cyber-defense system for DERs. This system encompasses risk assessments, network security, malware prevention, and detection of anomalies in the sensor data. Implementation of a comprehensive risk assessment with an overview of the model architecture should be the primary step, and should include the potential impact of experiencing, at a given time, one or more cyberattacks on the system. The second step is to ensure that the network security includes firewalls, intrusion detection, and malware prevention. The third step is to provide solution tools that enable sensor data anomaly detection for DERs. By incorporating these considerations into DER research, development, and demonstration, organizations can help ensure the safety and security of their systems and protect against potential cyberattacks.

20 FOSSIL-FUELED POWER PLANTS↗

Detector-device-independent quantum key distribution: Security analysis and fast implementation

One of the most pressing issues in quantum key distribution (QKD) is the problem of detector side-channel attacks. To overcome this problem, researchers proposed an elegant “time-reversal” QKD protocol called measurement-device-independent QKD (MDI-QKD), which is based on time-reversed entanglement swapping. However, MDI-QKD is more challenging to implement than standard point-to-point QKD. Recently, an intermediary QKD protocol called detector-device-independent QKD (DDI-QKD) has been proposed to overcome the drawbacks of MDI-QKD, with the hope that it would eventually lead to a more efficient detector side-channel-free QKD system. Here, we analyze the security of DDI-QKD and elucidate its security assumptions. We find that DDI-QKD is not equivalent to MDI-QKD, but its security can be demonstrated with reasonable assumptions. On the more practical side, we consider the feasibility of DDI-QKD and present a fast experimental demonstration (clocked at 625 MHz), capable of secret key exchange up to more than 90 km.

46 INSTRUMENTATION RELATED TO NUCLEAR SCIENCE AND ↗

Internship Presentation: Reactor System Facility Modification to Detect Compromised Human Machine Interfaces

This study presents a multi-layered Industrial Control System (ICS)/Operational Technology (OT) security architecture aimed at detecting and mitigating compromised Human Machine Interface (HMI) and Instrumentation & Control (I&C) systems within the Flowing Autoclave System (FAS) at Idaho National Laboratory (INL). The approach combines network security solutions, hash-based algorithms, and blockchain technologies to verify system integrity and provide an immutable record of network activity. This integrated three-pronged strategy enhances the detection of system compromises, enabling preemptive action before significant damage occurs.

21 - SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLAN↗

Transactive Energy System Deployment Over Insecure Communication Links

Here, in this paper, the privacy and security issues associated with the transactive energy system (TES) deployment over insecure communication links are addressed. In particular, it is ensured that 1) individual agents’ bidding information is kept private throughout hierarchical market-based interactions; and 2) any extraneous data injection attack can be quickly and easily detected. An implementation framework is proposed to enable the cryptography-based enhancement of privacy and security for the deployment of any general hierarchical systems including TESs. Under the proposed framework, a unified cryptography-based approach is developed to achieve both privacy and security simultaneously. Specifically, privacy preservation is realized by an enhanced Paillier encryption scheme, where a block design is proposed to significantly improve computational efficiency. Attack detection is further achieved by an enhanced Paillier digital signature scheme, where a stamp-concatenation mechanism is proposed to enable detection of data replace and reorder attacks. Simulation results verify the effectiveness of the proposed cyber-resilient design for transactive energy systems. Note to Practitioners—This paper is motivated by addressing the issues of cyber resiliency for practically deploying transactive energy system (TES) but it is also applicable to the problem of enhancing the privacy and security for any general hierarchical control systems. TES is an emerging control approach that engages energy suppliers and customers through market operations and uses the price to optimally allocate energy resources. While it has been shown to be promising for power system applications, the underlying market-based interactions raise significant concerns of privacy (data leakage) and security (data tampering). However, existing TES works only focus on the coordination mechanism instead of privacy and security issues. This paper proposes a new cryptography-based TES design for practical deployment. Specifically, to protect privacy, individual supply and demand amounts to be exchanged are all encrypted in a particular way such that the original amounts cannot be inferred from the encrypted amounts, while the desired computation for setting the market clearing price can be carried out over the encrypted amounts, thus generating an encrypted result which, when decrypted, matches that of the same computation over the original amounts. To achieve security, for each exchanged data, its sender generates a particular digital signature which is exchanged together with the data. This enables the receiver to automatically detect the integrity by checking whether a mathematical relationship holds for the pair of data and signature. In our future research, we will investigate more challenging scenarios where some suppliers and customers themselves could be corrupted and purposely submit distorted amounts.

97 MATHEMATICS AND COMPUTING↗

Identity-based quantum signature scheme with strong security

Recently, Chen et al. proposed an identity-based quantum signature scheme (IDQSS). Their scheme has the advantages of the classical identity-based signature (IDS) scheme. However, Chen et al.’s scheme cannot resist against the private key generator (PKG)’s forgery attack. On the other hand, in their scheme, many rounds of quantum swap tests have to be performed by the verifier during the signature verification phase. To improve the security and efficiency of the IDQSS, a new IDQSS is proposed. In our scheme, the private key of the signer is generated by PKG according to the signer’s identity, which is used as the corresponding public key. The signer generates a quantum signature with her private key and the secret parameters shared with the verifier. Anyone can verify the quantum signature with the identity of the signer. Our scheme overcomes the security drawback of Chen et al.’s scheme and inherits the merits of the classical IDS system. It has the security properties such as information-theoretical security, non-repudiation and unforgeability. At the same time, in our scheme, the verifier need not perform any quantum swap test. Therefore, our IDQSS is more secure and efficient.

71 CLASSICAL AND QUANTUM MECHANICS, GENERAL PHYSIC↗

Design and Operation of Energy Systems with Large Amounts of Variable Generation: IEA Wind TCP Task 25 (Final Summary Report)

This report summarizes findings on wind integration from the 17 countries or sponsors participating in the International Energy Agency Wind Technology Collaboration Program (IEA Wind TCP) Task 25 from 2006-2020. Both real experience and studies are reported. Many wind integration studies incorporate solar energy, and most of the results discussed here are valid for other variable renewables in addition to wind. The national case studies address several impacts of wind power on electric power systems. In this report, they are grouped under long-term planning issues and short-term operational impacts. Long-term planning issues include grid planning and capacity adequacy. Short-term operational impacts include reliability, stability, reserves, and maximizing the value of wind in operational timescales (balancing related issues). The first section presents the variability and uncertainty of power system-wide wind power, and the last section presents recent studies toward 100% shares of renewables. The appendix provides a summary of ongoing research in the national projects contributing to Task 25 for 2021-2024. The design and operation of power and energy systems is an evolving field. As ambitious targets toward net-zero carbon energy systems are announced globally, many scenarios are being made regarding how to reach these future decarbonized energy systems, most of them involving large amounts of variable renewables, mainly wind and solar energy. The secure operation of power systems is increasingly challenging, and the impacts of variable renewables, new electrification loads together with increased distribution system resources will lead to somewhat different challenges for different systems. Tools and methods to study future power and energy systems also need to evolve, and both short-term operational aspects (such as power system stability) and long-term aspects (such as resource adequacy) will probably see new paradigms of operation and design. The experience of operating and planning systems with large amounts of variable generation is accumulating, and research to tackle the challenges of inverter-based, nonsynchronous generation is on the way. Energy transition and digitalization also bring new flexibility opportunities, both short and long term.

24 POWER TRANSMISSION AND DISTRIBUTION↗

Considerations of persistence and security in CHOICES, an object-oriented operating system

The current design of the CHOICES persistent object implementation is summarized, and research in progress is outlined. CHOICES is implemented as an object-oriented system, and persistent objects appear to simplify and unify many functions of the system. It is demonstrated that persistent data can be accessed through an object-oriented file system model as efficiently as by an existing optimized commercial file system. The object-oriented file system can be specialized to provide an object store for persistent objects. The problems that arise in building an efficient persistent object scheme in a 32-bit virtual address space that only uses paging are described. Despite its limitations, the solution presented allows quite large numbers of objects to be active simultaneously, and permits sharing and efficient method calls.

Campbell, Roy H.↗

End-to-End Encryption for Cyber-Physical Systems Using Fully Homomorphic Encryption

Cyber-physical systems require reliable, safe, and secure control of critical infrastructure, combining computational and networking capabilities, which heighten the risk of cyber attacks. These attacks can disrupt the physical process, causing unforeseen consequences. One solution is the use of fully homomorphic encryption (FHE) to protect the control loop, allowing for secure computations and communications without compromising signal and control system privacy. The challenge with FHE, however, is its requirement for inputs to be integers. This presentation introduces a modified Learning With Errors (LWE) FHE approach that encodes control system dynamics and signals into integers. Our proposed scheme leverages a generalized LWE encoding function and modifies the Gentry-Sahai-Waters gadget decomposition tool to encrypt the control system. Using the modified LWE scheme, we formalize a fully encrypted control system, supported by simulated results.

97 MATHEMATICS AND COMPUTING↗

Designing an Intrusion Detection for an Adjustable Speed Drive System Controlling a Critical Process

In this article, we address the cyber-security problem of industrial control systems (ICSs) when their sensor measurements may be compromised due to an attacker who has intercepted those measurements via a network. We introduce a general-purpose method “Dynamic Watermarking (DW)” to detect potential cyber-intrusions on speed sensor measurements within industrial control systems, which deploy an adjustable speed drive (ASD) to control a critical process. The DW method is injecting a random private low-amplitude signal with a zero mean Gaussian distribution, “watermark”, into one of the input phase voltages powering the ASD system. The watermark signal propagates through the system including pulse width modulation (PWM) power conversion stage and motor, then ultimately appears in the speed sensor measurements. By deploying two statistical DW tests with two proper thresholds, the system can detect potential cyber-intrusions or unobservable cyber-attacks such as replay attacks and false data injection attacks (FDIA). The DW method tested on a laboratory-scale ASD system experimentally to protect the system against cyber-intrusions. This system, powered by a commercial PWM drive operating at 208 V, 3-phase, and 3.7 kW, served as our experimental platform.

42 ENGINEERING↗

System Integration for Remote Systems at DOE Hanford Nuclear Site - 18712

The deployment of remotely operated technology that functions in environments too hazardous for worker entry are often needed at the Hanford Site to perform functions like infrastructure inspection; decommissioning and decontamination; characterization; environmental sampling; and nuclear waste sampling, mobilization, and retrieval. The development and production of Hanford remote systems typically requires the integration of robotic components and sensor technologies that have been engineered or adapted to meet function and performance requirements. Pacific Northwest National Laboratory has led the engineering and integration of robotic and sensor/manipulator technology for several remote system deployments at Hanford and for national security sponsors. This paper describes the system integration process for ensuring that the mechanical, electrical, and software aspects of each component are successfully brought together to produce a remote system that meets function and performance requirements under extreme environments and limited-access operational demands. A brief summary of previous and current remote system projects is also provided. (authors)

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗

Demonstrating Advanced Nuclear Energy Solutions for Net Zero

Background/Objectives. The aggressive goals being set by nation states, communities, and private industry for decarbonization of grid electricity, industrial heat sources, and transportation around the world are imperative to mitigating the devastating effects that we are seeing from climate change. Although many of these goals focus on accomplishments by 2035 or 2050, the decisions that we make today won’t just impact the landscape of energy systems for the next 20 or 30 years—they will shape the world’s environment for centuries to come. That means that we can’t just focus on technologies that will get us to 2050, but technologies that will withstand our energy demands over that long-ranging future. Success will require us to utilize all of the clean energy resources that we have available to meet demands for electricity, heat, and steam, and we will need energy carriers such as hydrogen that do not emit additional greenhouse gases at the point of use. Nuclear energy, ranging from technologies in service today to advanced, higher temperature and modular systems that will be in service this decade, will provide a robust complement to renewable energy resources that operate variably. Researchers across the U.S. Department of Energy laboratory complex are working to advance multiple aspects of these clean energy solutions, with many focusing on integrated energy system solutions that leverage all available clean energy assets to meet wide-ranging energy demands. Approach/Activities. Nuclear energy is a proven, zero-emission option during operation that can provide consistent, dispatchable power to meet electricity demands while also providing high-quality heat that can meet energy demands beyond the electricity sector. Energy system design should seek to maximize these assets. As a dispatchable energy source with a small land utilization footprint, nuclear energy can be collocated with renewable resources, and the smaller systems that will be deployed this decade (ranging from a few megawatts to hundreds of megawatts) can be installed right where that energy is needed. Integrated nuclear and renewable systems will enhance power grid reliability and resilience, and they will help stabilize the grid through their increasingly flexible operation. Licensing, installation, and broad adoption of these advanced nuclear energy systems are expected to progress significantly in the 2020s, but this may be longer than desired by some stakeholders wishing to implement impactful clean energy decisions today. However, one must recall that nuclear energy systems will operate for 80 or more years, as is being demonstrated by current fleet nuclear systems. The nuclear community is extremely thorough in reviewing these systems with regard to safety and security; these efforts ensure that the deployed systems will continue to provide reliable, resilient energy over that operational lifetime. That investment of time up front will ensure that we can support energy demands over the centuries to come. While advanced nuclear technologies move through this process, communities and private industry may choose to install renewable generation systems that can later be coupled to the complementary nuclear systems as they become available—thus moving closer to the net zero goals in the near term. Choosing technologies and deployment configurations that allow small modular nuclear powerhouses to be added to these “energy parks” as they become available will ensure that advanced technologies can be readily adopted to support growing demands for clean energy. Results/Lessons Learned. The primary focus of integrated energy systems (IES) research is to assess the technical and economic potential of novel multi-input, multioutput solutions that are expected to enhance energy system flexibility, reliability, and resilience as we pursue a clean energy transition. Various energy applications and product streams beyond electricity are being evaluated, ranging from generation of potable water to production of hydrogen, fertilizers, synthetic fuels, and various chemicals. In early FY23 Idaho National Laboratory (INL) will commission thermal energy generation systems that emulate nuclear fission energy input using electric heating and will allow for integrated system testing with thermal energy storage, hydrogen production via high temperature electrolysis (HTE), and power systems hardware to demonstrate operation of a clean energy park within a microgrid or larger grid infrastructure, supporting up to 450 kW of heat input via electric heating and demonstrating operation of HTE systems at the multi-hundred kW scale. This presentation will highlight the wide array of RD&D being conducted at INL and partner laboratories to develop and deploy nuclear and renewable-based IES that will be key to achieving our net zero goals, including both computational and experimental demonstrations. By working with key collaborators in industry, analytical st

08 HYDROGEN↗

Water Security: Trends, Capabilities, and Research Directions to Secure Water Infrastructure

Water and wastewater sector is target rich and resource poor ~153k water utilities, serve 80% of US population ~16k publicly-owned wastewater systems in the US serve 75% of the population Need scalable solutions to fit small and medium to large systems Federal attention to critical infrastructure continues to grow – particularly in the water sector Increase in water sector incidents and threats for large scale disruption – particularly by nation-state actors and their proxies EPA is the SRMA DHS CISA focuses on critical infrastructure protection across sectors They must work together to secure WWW systems Research capabilities to enable secure water systems Current and future threats Resilience – natural disasters, accidents, cyber-physical attacks

99 - GENERAL AND MISCELLANEOUS↗

Securing and Auto-Synchronizing Communication over Free-Space Optics Using Quantum Key Distribution and Chaotic Systems

Free-Space Optical (FSO) communication provides very large bandwidth, relatively low cost, low power, low mass of implementation, and improved security when compared to conventional Free-Space Radio-Frequency (FSRF) systems. In this paper, we demonstrate a communication protocol that demonstrates improved security and longer-range FSO communication, compared to existing FSO security techniques, such as N-slit interferometers. The protocol integrates chaotic communications with Quantum Key Distribution (QKD) techniques. A Lorenz chaotic system, which is inherently secure and auto-synchronized, is utilized for secure data communications over a classical channel, while QKD is used to exchange crucial chaotic system parameters over a secure quantum channel. We also provide a concept of operations for a NASA mission combining chaotic communications and QKD operating synergistically in an end-to-end space communications link. The experimental simulation results and analysis are favorable towards our approach.

Chaotic Communication↗