Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “Security Requirements”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 937 records · Page 52

Secure, Scalable Control and Communications for Distributed PV

An increasing number of jurisdictions are adopting Distributed Energy Resource (DER) interconnection standards which require photovoltaic (PV) inverters, energy storage systems, and other DER to include interoperable grid-support functionality. These functions provide grid operators the nobs to support local and bulk power system operations with DER equipment, but the associated grid operator-to-DER communications networks must be deployed with appropriate cybersecurity features. In some situations, additional security features may prevent control system scalability or increase communication latencies and dropouts. These unintentional consequences of the security features would therefore hinder the ability of the grid operator to implement specific control algorithms. This project evaluated the tradeoffs between power system performance and cybersecurity metrics for several grid services.

14 SOLAR ENERGY↗

UNIX security in a supercomputing environment

The author critiques some security mechanisms in most versions of the Unix operating system and suggests more effective tools that either have working prototypes or have been implemented, for example in secure Unix systems. Although no computer (not even a secure one) is impenetrable, breaking into systems with these alternate mechanisms will cost more, require more skill, and be more easily detected than penetrations of systems without these mechanisms. The mechanisms described fall into four classes (with considerable overlap). User authentication at the local host affirms the identity of the person using the computer. The principle of least privilege dictates that properly authenticated users should have rights precisely sufficient to perform their tasks, and system administration functions should be compartmentalized; to this end, access control lists or capabilities should either replace or augment the default Unix protection system, and mandatory access controls implementing multilevel security models and integrity mechanisms should be available. Since most users access supercomputing environments using networks, the third class of mechanisms augments authentication (where feasible). As no security is perfect, the fourth class of mechanism logs events that may indicate possible security violations; this will allow the reconstruction of a successful penetration (if discovered), or possibly the detection of an attempted penetration.

Bishop, Matt↗

HOME INSECURITY: NO ALARMS, FALSE ALARMS, AND SIGINT

The market share of home security systems has substantially increased as vendors incorporate more desirable features: intrusion detection, automation, wireless, and LCD touch panel controls. Wireless connectivity allows vendors to manufacture cheaper, more featureful products that require little to no home modification to install. Consumer win, since adding devices is easier. The result: an ostensibly more secure, convenient, and connected home for a larger number of citizens. Sadly, this hypothesis is flawed; the idea of covering a home with more security sensors does not translate into a more secure home. Additionally, the number of homes using these vulnerable systems is large, and the growth rate is increasing producing a even larger problem. In this talk, I will demonstrate a generalized approach for compromising three systems: ADT, the largest home security dealer in North America; Honeywell, one of the largest manufacturers of security devices; and Vivint, a top 5 security dealer. We will suppress alarms, create false alarms, and collect artifacts that facilitate tracking the movements of individuals in their homes.

Lamb, Logan M↗

Performance Analysis of Scientific Computing Workloads on Trusted Execution Environments

Scientific computing sometimes involves computation on sensitive data. Depending on the data and the execution environment, the HPC (high-performance computing) user or data provider may require confidentiality and/or integrity guarantees. To study the applicability of hardware-based trusted execution environments (TEEs) to enable secure scientific computing, we deeply analyze the performance impact of AMD SEV and Intel SGX for diverse HPC benchmarks including traditional scientific computing, machine learning, graph analytics, and emerging scientific computing workloads. We observe three main findings: 1) SEV requires careful memory placement on large scale NUMA machines (1x -3.4x slowdown without and 1x -1.15x slowdown with NUMA aware placement), 2) virtualization - a prerequisite for SEV - results in performance degradation for workloads with irregular memory accesses and large working sets (1x -4x slowdown compared to native execution for graph applications) and 3) SGX is inappropriate for HPC given its limited secure memory size and inflexible programming model (1.2x -126x slowdown over unsecure execution). Finally, we discuss forthcoming new TEE designs and their potential impact on scientific computing.

97 MATHEMATICS AND COMPUTING↗

Land remote sensing commercialization: A status report

The current offer by the United States Department of Commerce to transfer the U.S. land remote sensing program to the private sector is described. A Request for Proposals (RFP) was issued, soliciting offers from U.S. firms to provide a commercial land remote sensing satellite system. Proposals must address a complete system including satellite, communications, and ground data processing systems. Offerors are encouraged to propose to take over the Government LANDSAT system which consists of LANDSAT 4 and LANDSAT D'. Also required in proposals are the market development procedures and plans to ensure that commercialization is feasible and the business will become self-supporting at the earliest possible time. As a matter of Federal Policy, the solicitation is designed to protect both national security and foreign policy considerations. In keeping with these concerns, an offeror must be a U.S. Firm. Requirements for data quality, quantity, distribution and delivery are met by current operational procedures. It is the Government's desire that the Offeror be prepared to develop and operate follow-on systems without Government subsidies. However, to facilitate rapid commercialization, an offeror may elect to include in his proposal mechanisms for short term government financial assistance.

Bishop, W. P.↗

Space Station utilization

The essential requirement of the Space Station that the customer be continually involved in all aspects of the program is considered. Potential users of the Space Station need both formal and informal channels into the program at an early stage of the definition process to secure their influence and participation in the development process. Only with this participation can users' needs and requirements be integrated into the design phase to produce 'user friendliness' in the Space Station. A Space Station that is easy and economical to use will generate more users that can take advantage of the available resources. The Space Station must be: a research facility; a satellite servicing and assembly facility; an observatory for terrestrial, solar, and astronomical viewing; and a transportation node for orbit transfer vehicles. NASA intends to see that the Space Station is developed and operated so as to serve its users.

Raney, W. P.↗

Post-closure program streamlining at the Nevada national security site - 15290

More than 200 sites on the Nevada National Security Site (NNSS), Nevada Test and Training Range (NTTR), and Tonopah Test Range (TTR) have been closed in place. At these sites, contamination has been left in place, and protection of human health, safety, and the environment is ensured through the establishment of use restrictions (URs). Post-closure requirements were initially established in the Closure Report (CR) for each site and include a variety of inspection, monitoring, maintenance, and reporting commitments. Post-closure requirements and site controls (fences, monuments, soil covers, and postings) may vary depending on site location, accessibility, land use scenario, and the nature of contaminants left in place. Corrective Action Sites (CASs) on the NNSS, NTTR, and TTR have been identified for closure under the Federal Facility Agreement and Consent Order (FFACO), which was signed in 1996. Over 1,900 CASs have been closed under the framework of the FFACO, and more than 200 of those have URs. Many post-closure requirements have been modified over time. In addition, because the scope of the program has spanned almost 20 years, the post-closure requirements have varied due to changing strategies and expectations. Because of the number of sites closed over the course of the program, post-closure requirements are found in hundreds of closure documents, addendums, errata sheets, Records of Technical Change, inspection reports, permit modifications, and correspondence. Furthermore, resources such as personnel and funding necessary to conduct the post-closure program have diminished, while computer capabilities and configuration control principles have improved since closure activities under the FFACO began. Because of these factors, to effectively manage the post-closure program, ensure that all commitments are being met, and improve the ease of identifying the most current post-closure requirements for each UR, the current requirements for every use-restricted site under the purview of the U.S. Department of Energy, National Nuclear Security Administration Nevada Field Office will be consolidated into a single Post-Closure Plan. The Consolidated Post-Closure Plan will also outline a strategy and present possible criteria that may be used for future evaluation of post-closure requirements. Continual assessment of the post-closure program will ensure that the post-closure requirements for URs across the NNSS, NTTR, and TTR are consistently justifiable and sufficient to protect site workers, the public, and the environment while increasing efficiency. Future changes to post-closure requirements and justification for those changes will be recorded in revisions to the Consolidated Post-Closure Plan. This process will provide a comprehensive, consistent, and streamlined method for evaluation of post-closure requirements and implementation of changes. (authors)

54 ENVIRONMENTAL SCIENCES↗

Summary Report for the Radiation Detection for Nuclear Security Summer School 2012

The Pacific Northwest National Laboratory (PNNL) hosted students from across the United States at the inaugural Radiation Detection for Nuclear Security Summer School from June 11 – 22, 2012. The summer school provided students with a unique understanding of nuclear security challenges faced in the field and exposed them to the technical foundations, analyses, and insight that will be required by future leaders in technology development and implementation. The course heavily emphasized laboratory and field demonstrations including direct measurements of special nuclear material. The first week of the summer school focused on the foundational knowledge required by technology practitioners; the second week focused on contemporary applications. Student evaluations and feedback from student advisors indicates that the summer school achieved its objectives of 1) exposing students to the range of nuclear security applications for which radiation detection is necessary, 2) articulating the relevance of student research into the broader context, and 3) exciting students about the possibility of future careers in nuclear security.

98 NUCLEAR DISARMAMENT, SAFEGUARDS, AND PHYSICAL P↗

Special Analysis for the Disposal of the Oak Ridge National Laboratory General Radioactive Sources Waste Stream at the Area 5 Radioactive Waste Management Site, Nevada National Security Site, Nye County, Nevada

This special analysis (SA) evaluates whether the Oak Ridge National Laboratory (ORNL) General Radioactive Sources waste stream (ORNLSOURCES01, Revision 3) is suitable for disposal by shallow land burial (SLB) at the Area 5 Radioactive Waste Management Site (RWMS) at the Nevada National Security Site (NNSS). The ORNL General Radioactive Sources waste stream consists of sealed sources and solid radioactive sources that are no longer needed (ORNL 2015). The ORNL General Radioactive Sources waste stream required a special analysis because 26 radionuclides exceeded the NNSS Waste Acceptance Criteria (WAC) Action Levels (U.S. Department of Energy, National Nuclear Security Administration Nevada Field Office [NNSA/NFO] 2015). However, review of the generator’s method to calculate waste concentration indicates that the concentrations are significantly overestimated. Waste concentrations are recalculated in this analysis using a list of individual sources provided by the generator. One radionuclide, radium-226 (226Ra), still exceeds its action level and a Special Analysis (SA) is required. The results indicate that all performance objectives can be met with disposal of the ORNL General Radioactive Sources in a SLB trench. Addition of the ORNL General Radioactive Sources inventory slightly increases the 222Rn flux density. The maximum mean and 95th percentile flux density remain less than the performance objective throughout the compliance period. The ORNL General Radioactive Sources waste stream had no significant effect on the maximum mean and 95th percentile for all other performance assessment results. The ORNL General Radioactive Sources waste stream is suitable for disposal by SLB at the Area 5 RWMS. However, because the activity concentrations on the waste profile sheet are significantly overestimated, approval of the sheet could potentially allow the disposal of high activity radiation sources. To ensure the generator does not include large radiation sources in its waste stream, a control is recommended on the maximum individual source activity from this generator.

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗

Special Analysis for the Disposal of the Sandia National Laboratory Classified Macroencapsulated Mixed Waste at the Area 5 Radioactive Waste Management Site, Nevada National Security Site, Nye County, Nevada

This special analysis evaluates whether the Sandia National Laboratory (SNL) Classified Macroencapsulated Mixed Waste stream (ASLA000001007, Revision 4) is suitable for disposal by shallow land burial (SLB) at the Area 5 Radioactive Waste Management Site (RWMS) at the Nevada National Security Site (NNSS). The SNL Classified Macroencapsulated Mixed Waste stream consists of debris from classified nuclear weapons components (SNL 2015). The SNL Classified Macroencapsulated Mixed Waste stream required a special analysis due to tritium (3H) exceeding the NNSS Waste Acceptance Criteria (WAC) Action Levels (U.S. Department of Energy, National Nuclear Security Administration Nevada Field Office [NNSA/NFO] 2015). The SNL Classified Macroencapsulated Mixed Waste stream had no significant effect on the maximum mean and 95th percentile results for the resident air pathway and all-pathways annual total effective dose (TED). The SNL Classified Macroencapsulated Mixed Waste stream increases the mean air pathway and all-pathways annual TED from approximately 100 to 200 years after closure. Addition of the SNL Classified Macroencapsulated Mixed Waste stream inventory shifts the maximum TED to approximately 100 years after closure and increases the TED for several alternative exposure scenarios. The maximum mean and the 95th percentile 222Rn flux density remain less than the performance objective throughout the compliance period. The SNL Classified Macroencapsulated Mixed Waste stream is suitable for disposal by SLB at the Area 5 RWMS. The waste stream is recommended for approval without conditions.

LNL↗

Lunar Glovebox Balance with Wireless Technology

The most important equipment required for processing lunar samples is a high-quality mass balance for maintaining accurate weight inventory, security, and scientific study. After careful review, a Curation Office memo by Michael Duke in 1978 chose the Mettler PL200 to be used for sample weight measurements inside the gloveboxes (Fig. 3). These commercial off-the-shelf (COTS) balances did not meet the strict accepted material requirements in the Lunar lab. As a result, each balance housing, weighing pan, and wiring was custom retrofitted to meet Lunar Operating Procedure (LOP) 54 requirements [for material construction restrictions]. The original design drawings for the custom housings, readout support stands, and wiring were done by the JSC engineering directorate. The 1977- 1978 schematics, drawings, and files are now housed in the curation Data Center. Per the design specifications, the housing was fabricated from aluminum grade 6061 T6, seamless welds, and anodized per MIL-A-8625 type I, class I. The balance feet were TFE Teflon and any required joints were sealed with Viton A gaskets. The readout display and support stands outside the glovebox were fabricated from 300 series stainless steel with #4 finish and mounted to the glovebox with welded bolts. Wire harnesses that linked the balance with the outside display and power were encapsulated with TFE Teflon and transported through custom Deutsch wire bulk head pass-through systems from inside to outside the glovebox. These Deutsch connectors were custom fabricated with 316L stainless steel bodies, Viton A O-rings, aluminum 6061 with electroless nickel plating, Teflon (replacing the silicone), and gold crimp connectors (no soldering). Many of the Deutsch connectors may have been used in the Apollo program high vacuum complex in building 37 and date to about 1968 to 1970.

Zeigler, Ryan A.↗

Using Project Complexity Determinations to Establish Required Levels of Project Rigor

This presentation discusses the project complexity determination process that was developed by National Security Technologies, LLC, for the U.S. Department of Energy, National Nuclear Security Administration Nevada Field Office for implementation at the Nevada National Security Site (NNSS). The complexity determination process was developed to address the diversity of NNSS project types, size, and complexity; to fill the need for one procedure but with provision for tailoring the level of rigor to the project type, size, and complexity; and to provide consistent, repeatable, effective application of project management processes across the enterprise; and to achieve higher levels of efficiency in project delivery. These needs are illustrated by the wide diversity of NNSS projects: Defense Experimentation, Global Security, weapons tests, military training areas, sensor development and testing, training in realistic environments, intelligence community support, sensor development, environmental restoration/waste management, and disposal of radioactive waste, among others.

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗

A critical review of cyber-physical security for building automation systems

Modern Building Automation Systems (BASs), as the brain that enable the smartness of a smart building, often require increased connectivity both among system components as well as with outside entities, such as the cloud, to enable low-cost remote management, optimized automation via outsourced cloud analytics, and increased building-grid integrations. As smart buildings move towards open communication technologies, providing access to BASs through the building's intranet, or even remotely through the Internet, has become a common practice. However, increased connectivity and accessibility come with increased cyber security threats. BASs were historically developed as closed environments with limited cyber-security considerations. As a result, BASs in many buildings are vulnerable to cyber-attacks that may cause adverse consequences, such as occupant discomfort, excessive energy usage, and unexpected equipment downtime. Therefore, there is a strong need to advance the state-of-the-art in cyber-physical security for BASs and provide practical solutions for attack mitigation in buildings. However, an inclusive and systematic review of BAS vulnerabilities, potential cyber-attacks with impact assessment, detection & defense approaches, and cyber resilient control strategies is currently lacking in the literature. This review paper fills the gap by providing a comprehensive up-to-date review of cyber-physical security for BASs at three levels in commercial buildings: management level, automation level, and field level. The general BASs vulnerabilities and protocol-specific vulnerabilities for the four dominant BAS protocols (i.e., BACnet, KNX, LonWorks, and Modbus) are reviewed, followed by a discussion on four attack targets and seven potential attack scenarios. Furthermore, the impact of cyber-attacks on BASs is summarized as signal corruption, signal delaying, and signal blocking. The typical cyber-attack detection and defense approaches are identified at the three levels. Cyber resilient control strategies for BASs under attack are categorized into passive and active resilient control schemes. Open challenges and future opportunities are finally discussed.

97 MATHEMATICS AND COMPUTING↗

A Robust In-Situ Warp-Correction Algorithm For VISAR Streak Camera Data at the National Ignition Facility

The National Ignition Facility (NIF) at the Lawrence Livermore National Laboratory is a 192-beam pulsed laser system for high-energy-density physics experiments. Sophisticated diagnostics have been designed around key performance metrics to achieve ignition. The Velocity Interferometer System for Any Reflector (VISAR) is the primary diagnostic for measuring the timing of shocks induced into an ignition capsule. The VISAR system utilizes three streak cameras; these streak cameras are inherently nonlinear and require warp corrections to remove these nonlinear effects. A detailed calibration procedure has been developed with National Security Technologies (NSTec) and applied to the camera correction analysis in production. However, the camera nonlinearities drift over time, affecting the performance of this method. An in-situ fiber array is used to inject a comb of pulses to generate a calibration correction in order to meet the timing accuracy requirements of VISAR. We develop a robust algorithm for the analysis of the comb calibration images to generate the warp correction that is then applied to the data images. Our algorithm utilizes the method of thin-plate splines (TPS) to model the complex nonlinear distortions in the streak camera data. In this paper, we focus on the theory and implementation of the TPS warp-correction algorithm for the use in a production environment.

70 PLASMA PHYSICS AND FUSION TECHNOLOGY↗

Post-Closure Report for Closed Resource Conservation and Recovery Act Corrective Action Units, Nevada National Security Site, Nevada: For Calendar Year 2020 (Rev. 2)

This report serves as the combined annual report for post-closure activities in compliance with the requirements listed in Resource Conservation and Recovery Act (RCRA) Permit Number NEV HW0101 associated with the following closed corrective action units (CAUs): 1) CAU 90, Area 2 Bitcutter Containment; 2) CAU 91, Area 3 U-3fi Injection Well; 3) CAU 92, Area 6 Decon Pond Facility; 4) CAU 110, Area 3 WMD U-3ax/bl Crater; 5) CAU 111, Area 5 WMD Retired Mixed Waste Pits; 6) CAU 112, Area 23 Hazardous Waste Trenches The locations of the sites are shown in Figure ES-1. This report covers calendar year 2020. The post-closure requirements for these sites are described in RCRA Permit NEV HW0101 and are summarized in each CAU-specific section of this report. The results of the inspections, a summary of maintenance activities, and an evaluation of monitoring data are presented in this report. Site inspections are conducted annually at CAUs 90, 91, and 112; semiannually at CAUs 92 and 110; and quarterly at CAU 111. Additional inspections are conducted at CAUs 92 and 111 if precipitation occurs in excess of 1.0 inch in a 24-hour period. Inspections include an evaluation of the condition of the units, including covers, fences, signs, gates, and locks. At CAUs 110 and 111, soil moisture monitoring and subsidence surveys are conducted in addition to the visual inspections. At CAU 110, the site fence, gate, lock, and use restriction signs are evaluated. At CAU 111, an ecological survey, direct radiation monitoring, air monitoring, radon flux monitoring, and groundwater monitoring are also conducted. This report will address all monitoring item notes above except groundwater monitoring. Groundwater monitoring is documented in the Nevada National Security Site Data Report: Groundwater Monitoring Program Area 5 Radioactive Waste Management Site. All required inspections, maintenance, and monitoring were conducted in accordance with the post-closure requirements of the permit. Revision 6 of RCRA Permit NEV HW0101 was issued effective December 10, 2015, and remained in effect until December 10, 2020. At the time of this report submittal, the new RCRA permit application was in review.

54 ENVIRONMENTAL SCIENCES↗

Heralded-qubit amplifiers for practical device-independent quantum key distribution

Device-independent quantum key distribution does not need a precise quantum mechanical model of employed devices to guarantee security. Despite its beauty, it is still a very challenging experimental task. We compare a recent proposal by Gisin et al.[Phys. Rev. Lett. 105, 070501 (2010)] to close the detection loophole problem with that of a simpler quantum relay based on entanglement swapping with linear optics. Our full-mode analysis for both schemes confirms that, in contrast to recent beliefs, the second scheme can indeed provide a positive key rate which is even considerably higher than that of the first alternative. The resulting key rates and required detection efficiencies of approximately 95% for both schemes, however, strongly depend on the underlying security proof.

71 CLASSICAL AND QUANTUM MECHANICS, GENERAL PHYSIC↗

Security Enhancement of Network Constraint Grid-Edge Energy Management System

Network constrained grid edge energy management system (EMS) provides economic solution for active and reactive power dispatch of distributed energy resources (DERs) at the grid edge level. Grid edge EMS ensures secure interconnection of a circuit segment to the distribution system by maintaining grid code requirements (e.g. IEEE 1547–2018). Grid edge EMS is dependent on communication to receive load measurement, which brings a risk of unobservable false data injection attacks (FDIAs). To mitigate the risk, this paper proposes a framework to enhance resilient operation of grid edge EMS by detecting the unobservable FDIAs on loads and replacing them with forecasted values. In this work, a two-step detection algorithm is proposed. In first step, conventional residual based algorithm is deployed. Autoencoder (AE) based data driven mechanism is included in second step to detect the presence of unobservable FDIAs. After ensuring the presence of FDIA, its specific location is detected by checking the maximum residue values till the predefined threshold value is reached. Detected false data injected loads are then replaced with forecasted load values following long-short term memory (LSTM) based forecast to ensure resilient performance of grid edge EMS in the presence of attacks. This proposed security enhancement framework for grid edge EMS is evaluated in IEEE 13 bus system with three integrated DERs. Numerical simulation shows the validation of the proposed framework by reducing voltage violation in real operation of grid edge EMS.

cyber attack detection↗