Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “operating systems security”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 937 records · Page 52
All sourcesNASA NTRSDOE OSTI
DOE OSTI2020

Scalable Stochastic Transmission Expansion: A Use Case for ExaSGD

The intermittent nature of renewable energy poses new challenges for power grids due to its variable and un- certain power output. These features of renewable generation are becoming more relevant to transmission planning as grids reach higher penetration levels of renewable energy. In this paper we present an approach for transmission planning based on scalable computational approaches which enable the explicit consideration of operational uncertainties in the planning process. Using three-stage stochastic programming and the progressive hedging algorithm, we compute transmission expansion decisions on a modified RTS-GMLC test system. We augment the grid with large amounts of wind generation and consider many operational scenarios subject to wind uncertainty. This is an example of a possible use of the ExaSGD security constrained AC optimal power flow solver.

Exascale Computing Project↗
DOE OSTI2020

LWRS 2019 Accomplishments Report

Nuclear energy is an important part of supplying our nation’s energy—safely, dependably, and economically—with reduced carbon dioxide emissions. The United States (U.S.) Department of Energy-Office of Nuclear Energy (DOE-NE) supports a strong and viable domestic nuclear industry. In collaboration with industry programs, the Light Water Reactor Sustainability (LWRS) Program supports the continued operation of the commercial fleet of nuclear power plants. DOE’s role in this program focuses on enhancing the safe, efficient, and economical performance of the nation’s nuclear fleet. This report describes the accomplishments of the LWRS Program during Fiscal Year 2019. DOE-NE’s0F primary mission is to advance nuclear power as a resource capable of making major contributions in meeting the nation’s energy supply, environmental, and energy security needs. Under the guidance of three research objectives, NE resolves barriers to technical, cost, safety, security, and proliferation resistance through early stage research, development, and demonstration (RD&D) to: • Enhance the long-term viability and competitiveness of the existing U.S. reactor fleet • Develop an advanced reactor pipeline • Implement and maintain national strategic fuel-cycle and supply-chain infrastructures.

42 ENGINEERING↗
DOE OSTI2018

Recurrent Neural Network Attention Mechanisms for Interpretable System Log Anomaly Detection

Deep learning has recently demonstrated state-of-the art performance on key tasks related to the maintenance of computer systems, such as intrusion detection, denial of service attack detection, hardware and software system failures, and malware detection. In these contexts, model interpretability is vital for administrator and analyst to trust and act on the automated analysis of machine learning models. Deep learning methods have been criticized as black box oracles which allow limited insight into decision factors. In this work we seek to "bridge the gap'' between the impressive performance of deep learning models and the need for interpretable model introspection. To this end we present recurrent neural network (RNN) language models augmented with attention for anomaly detection in system logs. Our methods are generally applicable to any computer system and logging source. By incorporating attention variants into our RNN language models we create opportunities for model introspection and analysis without sacrificing state-of-the art performance. We demonstrate model performance and illustrate model interpretability on an intrusion detection task using the Los Alamos National Laboratory (LANL) cyber security dataset, reporting upward of 0.99 area under the receiver operator characteristic curve despite being trained only on a single day's worth of data.

Anomaly detection, Attention, Recurrent Neural Net↗
DOE OSTI2014

Archiving Data from New Survey Technologies: Lessons Learned on Enabling Research with High-Precision Data While Preserving Participant Privacy: Preprint

During the past 15 years, increasing numbers of organizations and planning agencies have begun collecting high-resolution Global Positioning System (GPS) travel data. Despite the significant effort and expense to collect it, privacy concerns often lead to underutilization of the data. To address this dilemma of providing data access while preserving privacy, the National Renewable Energy Laboratory, with support from the U.S. Department of Transportation and U.S. Department of Energy, established the Transportation Secure Data Center (TSDC). Lessons drawn from best-practice examples from other data centers have helped shape the structure and operating procedures for the TSDC, which functions under the philosophy of first and foremost preserving privacy, but doing so in a way that balances security with accessibility and usability of the data for legitimate research. This paper provides details about the TSDC approach toward achieving these goals, which has included creating a secure enclave with no external access for backing up and processing raw data, a publicly accessible website for downloading cleansed data, and a secure portal environment through which approved users can work with detailed spatial data using a variety of tools and reference information. This paper also describes lessons learned from operating the TSDC with respect to improvements in GPS data handling, processing, and user support, along with plans for continual enhancements to better support the needs of both data providers and users and to thus advance the research value derived from such valuable data.

33 ADVANCED PROPULSION SYSTEMS↗
DOE OSTI2020

Performance Evaluation of AG-1 FC HEPA Filters and Medium in Nuclear Complex Facilities - 20434

High Efficiency Particulate Air (HEPA) filters are credited as the final barrier against the release of radioactive aerosol contamination in nearly every operating U. S. Department of Energy (DOE) and National Nuclear Security Agency (NNSA) nuclear facility. The Institute for Clean Energy Technology (ICET) at Mississippi State University maintains a research program that studies various aspects of these components of containment systems and seeks to answer key questions from across the industry. This programmatic overview will include results from recent and ongoing studies, including a study on filter design and performance envelope, degradation due to aging or fatigue, fire event impact on HEPA filters, and accelerated aging of medium and component parts. ICET has completed a study helping to define the threshold for combined elevated temperature and relative humidity resistance of separator style and separator-less style HEPA filters that are used in DOE complexes. The study provides experimental data that considers elevated temperature, elevated relative humidity (RH), and target differential pressure (dP) in an attempt to gain a better understanding or more comprehensive insight into the operating envelope of different configurations of ASME (American Society for Mechanical Engineers) AG-1 Section FC filters. Test variables including air temperature ranges of 48.88 deg. C, 54.44 deg. C, or 60 deg. C (120, 130, or 140 deg. F); air RH ranges including 60-70%, 80%, or 90+% with initial filter dP of either 497.68 Pa, 746.52 Pa, or 995.36 Pa (2 inches water column (in. w. c.), 3 in. w. c., or 4 in. w. c.) included for full bracketing of each set of conditions. A study examining the effects of aging and fatigue on nuclear grade HEPA filters and medium elucidates the physical properties of media along with testing of new and aged ASME AG-1 HEPA filters. In addition to performing autopsies of the tested, aged filters to help better understand the service life of their performance, newly designed accelerated aging chambers allow new medium to undergo accelerated aging and exposure treatments. Evaluation of degradation in physical properties and functionality requires a high population of aged filters of different ages, designs, manufacturers, and operational histories. The limited availability of this population and the impropriety of looking solely at formulations and components from past years requires experimental design that will provide foresight into future filter performance. This undertaking therefore involves not only properties analysis of aged medium from different operational histories, ages, designs, and manufacturers, but also prescience in analytical goals via accelerated aging studies of newly manufactured media. A more complete understanding of the mechanisms of degradation from past formulations as well as current and future formulations is possible. Accelerated Aging of newly manufactured media utilizes exposure treatments based on the Arrhenius equation to artificially age medium and therefore glimpse into the future. Evaluation of current media properties This testing allows for the comparison of performance and durability of new filters under upset or design basis conditions with aged filters that were in service under ambient conditions and other aged filters retained in storage. Susceptibility of HEPA filters to the effects of combustion byproducts, heat, and water is also being studied in an attempt to gain understanding on the prevention of filter failures during fire events in nuclear facilities. ICET seeks to determine the effect of filter performance due to smoke loading using characterized smoke from variable fuel compositions, geometries, and loads; the smoke capacity of various filters with different burning conditions, heat release rates and transport, as well as mass transport from the air stream will be studied in low flow containment systems. (authors)

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗
DOE OSTI2021

On Self-Security of Grid-Interactive Smart Inverters

The capability to exchange information with utility operators, aggregators, and nearby smart devices can make a grid-interactive inverter an intelligent cyber-physical device. However, the capability of exchanging information can also put the inverters at the risk of insecure operation. In this paper, possible software manipulations into the inverters are studied to understand their vulnerability to cyberattacks. Moreover, the state-of-the-art system-level and device-level cyber-defense measures are discussed, and advantages and drawbacks of each technique are provided. Studies show that a reference model can be implemented in device-level security to effectively examine incoming setpoints for detecting and preventing malicious or harmful actions. This paper particularly underlines the significance of device-level self-security and its advantages for grid-interactive inverters. Finally, recommendations for future studies are provided.

Gursoy, Mehmetcan↗
NASA NTRS1991

Automated power management and control

A comprehensive automation design is being developed for Space Station Freedom's electric power system. A joint effort between NASA's Office of Aeronautics and Exploration Technology and NASA's Office of Space Station Freedom, it strives to increase station productivity by applying expert systems and conventional algorithms to automate power system operation. The initial station operation will use ground-based dispatches to perform the necessary command and control tasks. These tasks constitute planning and decision-making activities that strive to eliminate unplanned outages. We perceive an opportunity to help these dispatchers make fast and consistent on-line decisions by automating three key tasks: failure detection and diagnosis, resource scheduling, and security analysis. Expert systems will be used for the diagnostics and for the security analysis; conventional algorithms will be used for the resource scheduling.

Dolce, James L.↗
DOE OSTI2016

Federation of UML models for cyber physical use cases

This method employs the concept of federation, which is defined as the use of existing models that represent aspects of a system in specific domains (such as physical and cyber security domains) and building interfaces to link all of domain models. Federation seeks to build on existing bodies of work. Some examples include the Common Information Models (CIM) maintained by the International Electrotechnical Commission Technical Committee 57 (IEC TC 57) for the electric power industry. Another relevant model is the CIM maintained by the Distributed Management Task Force (DMTF)? this CIM defines a representation of the managed elements in an Information Technology (IT) environment. The power system is an example of a cyber-physical system, where the cyber systems, consisting of computing infrastructure such as networks and devices, play a critical role in the operation of the underlying physical electricity delivery system. Measurements from remote field devices are relayed to control centers through computer networks, and the data is processed to determine suitable control actions. Control decisions are then relayed back to field devices. It has been observed that threat actors may be able to successfully compromise this cyber layer in order to impact power system operation. Therefore, future control center applications must be wary of potentially compromised measurements coming from field devices. In order to ensure the integrity of the field measurements, these applications could make use of compromise indicators from alternate sources of information such as cyber security. Thus, modern control applications may require access to data from sources that are not defined in the local information model. In such cases, software application interfaces will require integration of data objects from cross-domain data models. When incorporating or federating different domains, it is important to have subject matter experts work together, recognizing that not everyone has the same knowledge, responsibilities, focus, or skill set.

Source record↗
DOE OSTI2017

Optically-based Sensor System for Critical Nuclear Facilities Post-Event Seismic Structural Assessment

The U.S. Department of Energy (DOE) has ownership and operational responsibility for a large enterprise of nuclear facilities that provide essential functions to DOE missions ranging from national security to discovery science and energy research. These facilities support a number of DOE programs and offices including the National Nuclear Security Administration, Office of Science, and Office of Environmental Management. With many unique and “one of a kind” functions, these facilities represent a tremendous national investment, and assuring their safety and integrity is fundamental to the success of a breadth of DOE programs. Many DOE critical facilities are located in regions with significant natural phenomenon hazards including major earthquakes and DOE has been a leader in developing standards for the seismic analysis of nuclear facilities. Attaining and sustaining excellence in nuclear facility design and management must be a core competency of the DOE. An important part of nuclear facility management is the ability to monitor facilities and rapidly assess the response and integrity of the facilities after any major upset event. Experience in the western U.S. has shown that understanding facility integrity after a major earthquake is a significant challenge which, lacking key data, can require extensive effort and significant time. In the work described in the attached report, a transformational approach to earthquake monitoring of facilities is described and demonstrated. An entirely new type of optically-based sensor that can directly and accurately measure the earthquake-induced deformations of a critical facility has been developed and tested. This report summarizes large-scale shake table testing of the sensor concept on a representative steel frame building structure, and provides quantitative data on the accuracy of the sensor measurements.

46 INSTRUMENTATION RELATED TO NUCLEAR SCIENCE AND ↗
NASA NTRSDate not supplied

Software-Only Key Management and Cryptography (KMC) for Spacecraft Command Encryption

The Jet Propulsion Laboratory (JPL) Advanced Multi-Mission Operations System (AMMOS) in partnership with NASA’s Katherine Johnson Independent Verification and Validation (NASA IV&V) Jon McBride Software Testing and Research (JSTAR) laboratory have jointly developed a command encryption capability that provides a software-only encryption solution utilizing the CCSDS Space Data Link Security Protocol. This solution, named Key Management and Cryptography (KMC), incorporates JPL’s encryption service with the JSTAR open-source CryptoLib library, providing a solution for spacecraft command encryption, which is required per NASA standard NASA-STD-1006-A. This paper will focus on its design, usage, and operation for two SmallSat missions, along with its future expanded functionality of end-to-end spacecraft encryption.

command encryption↗
DOE OSTI2019

A Comparison of Fuel Choice for Backup Generators

This poster discusses the costs and benefits of backup generator configurations. We analyze the relative costs and benefits - in terms of economics and reliability - of natural gas versus diesel as fuels for backup systems. We find that, given our assumptions of fuel security for diesel and natural gas, natural gas generators are less likely than diesel generators to fail during a power outage. The differences in likelihoods of failure between natural gas and diesel generators are small for most regions and dependent on several assumptions. This indicates that differences in fuel source security are of second-order concern. We also find that grid-connected generators run for backup as well as additional services have higher reliability due to more frequent operation, and lower net costs than generators used solely for backup. At the same time, emergency-only systems may still be preferred, depending on permitting, noise, and air quality concerns.

29 ENERGY PLANNING, POLICY, AND ECONOMY↗
DOE OSTI2019

A Passive Network Cyber Threat Intelligence Framework for Legacy Critical Control Systems using Machine Learning

The importance of Internet and communication networks in our daily life and in any organization’s daily operations is well known and cannot be overstressed. A nation’s economy is fully reliant on its critical infrastructure. Energy sector is one of the 16 Critical Infrastructure Sectors identified by the Department of Homeland Security. Securing these critical infrastructure sectors is challenging but is also of utmost priority in this day of constant and persistent cyber threats. Threat is any circumstance or event that has the potential to adversely impact an agency's assets and operations. Cyber Threat Intelligence (CTI) is the process of collection, analysis, and identification of potential cyber threats to the organization. This goal of current research performed at the Savannah River National Laboratory (SRNL), Aiken, SC, is to develop a Cyber Threat Intelligence framework for gathering Threat Intelligence passively from the network traffic from and to a real or simulated Critical Control Systems.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2019

High-Intensity Linear Accelerator with Ribbon Beam

We propose a solution of the fundamental problem in accelerator physics: significant increase of peak beam power in linear accelerator with conservation of beam brightness. It is of primary importance for operation of existing high-power accelerators (LANSCE, Spallation Neutron Source), for development of the next generation of high-power accelerators for basic scientific research and Accelerator-Driven Systems applications (Transmutation of Waste, Nuclear Reactor-Driver), and national security applications, which are all $1B-class facilities. The concept utilizes acceleration of beam with ribbon geometry instead of traditional circular beam. High value of beam current is reached using large width of the beam. Acceleration and focusing is achieved using alternative-focusing principle, which does not require traditional focusing elements (quadrupoles, solenoids). The concept utilizes advantage of 2D plane geometry which excludes beam distortion along beam width and results in conservation of high-value of beam brightness.

43 PARTICLE ACCELERATORS↗
DOE OSTI2019

Situational Awareness of Network System Roles (SANSR)

In a large enterprise it is difficult for cyber security analysts to know what services and roles every machine on the network is performing (e.g. file server, domain name server, email server). Understanding the roles of the systems in the network provides analysts with a situational awareness that will allow them to detect consequential changes in the network, initiate an incident response plan, and optimize their security posture. Using the network flow data, already collected by most enterprises, we developed a tool that enables analysts to automatically detect/classify services and roles of every machine that’s operating on a network (e.g. file server, domain name server, email server) for better situational awareness of potential threats to the network. his tool queries Elasticsearch for network flow data, creates a temporal behavior model of each system, uses unsupervised machine learning to cluster the models with a set of labeled temporal behavior models, and the resulting information can be printed to the console or programmatically accessed. The results include the likelihood that a machine has a labeled role and lists other machines that are most similar in behavior.

Huffer, KellyM.↗
DOE OSTI2020

Assessing DER Network Cybersecurity Defences in a Power-Communication Co-Simulation Environment

Increasing penetrations of interoperable distributed energy resources (DER) in the electric power system are expanding the power system attack surface. Maloperation or malicious control of DER equipment can now cause substantial disturbances to grid operations. Fortunately, many options exist to defend and limit adversary impact on these newly-created DER communication networks, which typically traverse the public internet. However, implementing these security features will increase communication latency, thereby adversely impacting real-time DER grid support service effectiveness. In this work, a collection of software tools called SCEPTRE were used to create a co-simulation environment where SunSpec-compliant PV inverters were deployed as virtual machines and interconnected to simulated communication network equipment. Network segmentation, encryption, and moving target defence security features were deployed on the control network to evaluate their influence on cybersecurity metrics and power system performance. The results indicated that adding these security features did not impact DER-based grid control systems but improved the cybersecurity posture of the network when implemented appropriately.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2019

Concepts for Autonomous Operation of Microreactors

Microreactor concepts have seen increasing interest in recent years given their potential use for meeting energy needs in remote and grid-isolated communities. Given the small power outputs of microreactors and the potential for remote siting, there is a need to reduce operational staffing levels to improve their economic viability. A key enabling technology for this purpose is autonomous control that enables autonomous operation of microreactors. While several options for autonomous control exist, the level of human operator involvement in operational decision making needs to be defined as part of the system design process. Once this separation of function is achieved, several options exist for autonomous control ranging from simple automation of some procedures to fully autonomous operational mode decision making and execution.A critical aspect of autonomous decision making is the ability to have as complete an awareness of the system state as possible. In addition to data on temperature, pressure, flow, and neutron flux, measurements of the condition of important components will be necessary. This type of information will allow the autonomous control system to adapt its decision making to any changing conditions within the reactor, thereby not compromising safety while continuing to operate for as long as possible. Several technical advances are needed before widespread use of autonomous control in microreactors. These include sensor and instrumentation technologies that are capable of long term, unattended operation in harsh environments, technologies for inferring the state of the microreactor system or subsystems in an automated fashion, algorithms for predictive decision making that account for the assessed condition of the microreactor subsystems as well as the potential impact on those components of any operational decision, and actuators and control system hardware that are also long-lived in a harsh environment. In addition, given the need to remotely monitor the operations, cybersecurity requirements will likely need to be imposed to ensure secure operations.

29 ENERGY PLANNING, POLICY, AND ECONOMY↗
DOE OSTI2021

Characterizing Human Performance: Detecting Targets at High False Alarm Rates [Slides]

Analysts develop a “no threat” bias with high false alarms. If only shown alarms for actual attacks, may never actually see an alarm. We see this in the laboratory, but not often studied in applied environments. (TSA is an exception.) In this work, near-operational paradigms are useful, but difficult to construct well. Pilot testing is critical before engaging time-limited professionals. Experimental control is difficult to balance with operational realism. Grounding near-operational experiments in basic research paradigms has both advantages and disadvantages. Despite shortcomings in our second experiment, we now have a platform for experimental investigations into the human element of physical security systems.

45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗
NASA NTRSDate not supplied

Reasoning Service Exemplars for NASA’s Data and Reasoning Fabric

Future operations for Urban and Advanced Air Mobility are enabled by a distributed network of reliable and secured data and reasoning services referred to here as a fabric. In the aggregate, such a system must be all encompassing and mission agnostic, but specific use-cases are still needed to improve understanding and drive design paradigms. For this purpose, three reasoning service exemplars for Target Selection and Routing, Trajectory Generation, and Battery Health Management were developed and integrated into a specific NASA proposed data and reasoning fabric. These services were then used to build a mission reasoning application for lightning strike reconnaissance developed in collaboration with the Civil Air Patrol. Autonomous mission execution was then demonstrated using a multivehicle simulation platform with a full envelope 6 Degree-of-Freedom dynamics model for a concept electric Vertical Takeoff and Landing aircraft.

Autonomy↗