Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “energy systems security”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 955 records · Page 53

Advanced Transmission Technologies –GETs and HPCs Session 3: HPCs and Building Actions Plans to Digital Assurance Risks

The third session of the Idaho National Laboratory’s (INL) Technical Assistance for Digital Assurance (TADA) program, held on November 11, 2025, centered on High Performance Conductors (HPCs) and the formulation of action plans to address digital assurance risks associated with Grid-Enhancing Technologies (GETs). This session convened experts from utilities, vendors, and government agencies to examine the technical, operational, and cybersecurity aspects of HPC deployment. Discussions highlighted the benefits of HPCs, such as their ability to rapidly increase transmission capacity using existing corridors, improve grid resilience, reduce system losses, and align with FERC Orders 2023 and 1920. Participants evaluated supply chain and digital assurance risks, including reliance on imported materials, limited domestic manufacturing capacity, workforce shortages, and traceability issues. The session also emphasized the importance of digital trust, integration-layer cybersecurity, and unified risk frameworks, introducing tools like intrusion detection systems, encryption, zero trust networking, and firmware integrity. Recaps of earlier workshops on Dynamic Line Ratings (DLRs), Advanced Power Flow Control (APFC), and Transmission Topology Optimization (TTO) underscored institutional barriers and integration challenges. Action plans were proposed to mitigate issues such as inconsistent cybersecurity practices, SBOM usage, supply chain visibility, operator trust, and misaligned incentives. Additionally, INL presented its supply chain risk management tools and Cyber-Informed Engineering (CIE) principles to support secure procurement and system design. The session concluded with a commitment to share key takeaways, incorporate cohort feedback into future policy development, and continue collaborative engagement through upcoming pilot activities. Session 3 of 3.

24 - POWER TRANSMISSION AND DISTRIBUTION↗

Igor

SAND2023-05551O Igor, an open-source software, manages large clusters of users in a high-performance computing community. The systems allows users to choose an operating system and reserve and request hosts. The administrative side sets up and executes requests from users while simultaneously giving them tools to manage and enforce reservation policies and user access to the hosts. Sandia National Laboratories is a multimission laboratory managed and operated by National Technology & Engineering Solutions of Sandia, LLC, a wholly owned subsidiary of Honeywell International Inc., for the U.S. Department of Energy’s National Nuclear Security Administration under contract DE-NA0003525.

Bagwell, Allen↗

Reimagining Codesign for Advanced Scientific Computing: Report for the ASCR Workshop on Reimagining Codesign

In March 2021, the U.S. Department of Energy’s Advanced Scientific Computing Research program convened the Workshop on Reimagining Codesign. The workshop, also known as ReCoDe, was organized around discussions on eight topic areas: (1) codesign for traditional high-performance computing workloads; (2) codesign of memory/storage systems; (3) codesign of machine learning, neuromorphic, quantum, and other non-von Neumann accelerators; (4) codesign for edge computing and processing at experimental instruments; (5) codesign for security and privacy; (6) hardware design tools and open-source hardware for high-productivity codesign; (7) tools, software stack, and programming languages for high-productivity codesign; and (8) quantitative tools and data collection for modeling and simulation for codesign. The panels identified four Priority Research Directions from these deliberations: (1) breakthrough computing capabilities with targeted heterogeneity and rapid design; (2) software and applications that embrace radical architecture diversity; (3) engineered security and integrity, from transistors to applications; and (4) design with data-rich processes.

97 MATHEMATICS AND COMPUTING↗

Risk-Based Dynamic Contingency Analysis Applied to Puerto Rico Electric Infrastructure

The U.S. Department of Energy’s (DOE) Office of Electricity and Office of Energy Efficiency & Renewable Energy have funded DOE National Laboratories to perform modeling, analysis, and high-level design of resilience-enhancement options for the power grid of the Commonwealth of Puerto Rico. The Pacific Northwest National Laboratory (PNNL) is one of the national laboratories contributing to the DOE effort. Under this funding, PNNL completed Phase I of their analysis in 2018, which identified high-priority transmission enhancements derived from detailed dynamic cascading analysis of severe contingencies, including a hurricane scenario example. This report describes additional analysis completed under Phase II, which was performed over 2019. The PNNL team applied decades of experience making complex power systems more resilient, reliable, secure, flexible, affordable and sustainable, with partners in government and industry. In this report, PNNL presents the Phase II analysis, in which a risk-based dynamic contingency analysis approach to evaluate impact of several hurricane scenarios was developed. This approach was used to identify high-priority enhancements and test resilience mitigation actions, including the evaluation of high-solar scenarios developed as a result of the 2019 Puerto Rico Integrated Resource Plan (IRP).

24 POWER TRANSMISSION AND DISTRIBUTION↗

Results of an In-Field Validation Exercise in Support of Wide-Area Environmental Sampling

The National Nuclear Security Administration’s (NNSA) Office of Nonproliferation and Arms Control (NA-24) is evaluating Wide-Area Environmental Sampling (WAES) as an additional safeguards verification tool for the International Atomic Energy Agency to detect undeclared nuclear activities. The NNSA is evaluating strategies for conducting a generic WAES campaign, the cost of a WAES campaign, and the effect of technological advancements that have occurred since the last major WAES review in 1999. Until now, the NNSA effort has focused on tabletop exercises (TTXs) in which high-performance computing allows for advanced modeling and simulation efforts to be applied to the WAES question. Although the modeling and simulations used in the TTXs are extremely valuable, field campaigns are still needed to validate the assumptions that underpin the models and the modeling process itself. During a 7 week period beginning in May 2023 and ending in June 2023, which included 4 weeks of active field collections, a multilaboratory team conducted its first in-field validation exercise. Prior to the in-field exercise, abbreviated TTXs were conducted to estimate the performance of all collection systems to be used during the field test. These TTXs guided the selection of materials to be released and the placement of the collection system. Based on these determinations, materials were procured to use in the field test, and an injection/release system was designed, built, and installed at the test facility. Background samples were collected during weeks one and four, and environmental collections against active releases were conducted during weeks two and three. The goals of this validation exercise included a demonstration of (1) the ability to provide controlled releases of particulates of surrogate materials, (2) the fielding and operation of collection systems (including deposition and active air collectors), and (3) the flexibility to revise equipment and campaign plans in the field. This paper presents the results and preliminary conclusions for this initial validation test. Based on these results, subsequent field campaigns are anticipated and will include the addition of other released materials.

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗

Incentivizing Distributed Energy Resource Participation in Grid Services

The bulk power system is experiencing a dramatic shift as renewable generation growth continues to accelerate. Large-scale renewables adoption will help societies transition to a low-carbon, low-cost, and environmentally friendly electrical power system. However, the transition from a paradigm of generation following load to one where load follows generation will require large-scale interconnection and coordinated operation of Distributed Energy Resources (DERs), supported by open communication protocols. In this future grid scenario, DER aggregations will provide critical grid services that enable high penetration levels of renewable generation. This position paper presents an Energy Service Interface (ESI) that defines scope for ensuring secure, trustworthy information exchange between grid service providers and DERs. The goal of the ESI is to encourage large-scale participation of DERs in order to provide grid services through dispatch of DER aggregations. This position paper also presents an open smart energy communications protocol that allows DERs to advertise their characteristics and participate in grid services, within constraints established by the ESI. The paper presents several monetization incentives that grid service providers could use to encourage large-scale DER participation.

32 ENERGY CONSERVATION, CONSUMPTION, AND UTILIZATI↗

GP-BayesOpInf

SAND2025-01851O GP-BayesOpInf is a software tool that uses algorithms to combine Gaussian process regression, principal component analysis, and linear Bayesian inference to produce a probabilistic reduced-order model for time-dependent systems. Numerical examples include the compressible Euler equations for an ideal gas, a heat diffusion process with a nonlinear reaction term, and a set of ordinary differential equations describing a compartmental model in epidemiology. Sandia National Laboratories is a multimission laboratory managed and operated by National Technology & Engineering Solutions of Sandia, LLC, a wholly owned subsidiary of Honeywell International Inc., for the U.S. Department of Energy’s National Nuclear Security Administration under contract DE-NA0003525.

SciDAC↗

Enterprise Credentialing Service Statement of Work (SOW)

The scope of this project includes providing professional services in support of the development and deployment of an Enterprise Credentialing Service for the Department of Energy (DOE) National Nuclear Security Administration (NNSA), which will be used for issuing and managing credentials used for authentication, digital signature, and encryption functions by users, applications, and devices in a closed computing environment. The Seller shall provide subject matter expertise for the design and deployment of the technologies and processes that comprise the Enterprise Credentialing Service, which will include a public key infrastructure (PKI) and a credential management system (CMS) that issues and manages PKI-based smartcard credentials. The Enterprise Credentialing Service will support approximately 17,000 users at 15 DOE NNSA sites and laboratories located across the continental United States.

97 MATHEMATICS AND COMPUTING↗

Hybrid Cyber-attack Detection in Photovoltaic Farms

Here, to address the cyber-physical security in PV farms, a hybrid cyber-attack detection is proposed in this manuscript. To secure PV farms, the proposed method integrates model-based and data-driven methods by fusing the detection score at the device and system levels. First, a model-based cyber-attack detection method is developed for each PV inverter. A residual between the estimation of the Kalman filter and measurement is calculated. By leveraging the calculated residual from all inverters, a squared Mahalanobis distance is developed for device detection score generation. At the system level, a convolutional neural network (CNN) is proposed to detect cyber-attack using the waveform data at the point of common coupling (PCC) in PV farms. To improve the CNN detection accuracy, a set of well-designed features are extracted from the raw waveform data. Finally, a weighted detection score fusion method is proposed to combine device and system detection scores by using their complementary strength. The feasibility and robustness of the proposed method are validated by testing cases and a comparative experiment.

14 SOLAR ENERGY↗

Cybersecurity Platform and Certification Framework Development for Extreme Fast Charging (XFC)-Integrated Charging Ecosystem (Final Project Report)

This report summarizes a pioneering effort in Electric Vehicle charging infrastructure ecosystem cybersecurity requirements, assessment methodologies, functional verification, as well as embodiment of the key technologies in the form of hardware and software tools being made available to the public. EPRI led a team of experts, as well as a stakeholder coalition encompassing all key actors in the EV charging infrastructure ecosystem that includes eXtreme Fast Charging (XFC) equipment (defined as 200kW or above). EV charging infrastructure in the United States is a patchwork of networks that have continued to grow organically and have been designed to serve the charging needs of the EV owners, who are their customers. In doing so, each network provider, as well as their connected entities such as the cloud Electric Vehicle Service Providers or EVSPs, utility back office, utility AMI networks, payment networks, as well as Original Equipment Manufacturer (EV manufacturer) telematics networks, have designed systems that may work well individually, but no single entity is responsible for the entire ecosystem to be secure in terms of data exchange. Furthermore, there is no uniformity in how each actor has implemented the cybersecurity requirements since no system-wide cybersecurity requirements existed prior to this project. The final project report describes the technical approach guided by the EV charging infrastructure cybersecurity working group, convened specifically for this project. The technical approach included definition of requirements at the ecosystem level, treated as a ‘system of systems’, and then passed down to individual systems (EVSE, EV, cloud EVSP, utility, and the payment networks), followed by developing the cybersecurity risk and vulnerability assessment methods, that were later applied to real-world cyber-physical systems at EPRI, ANL, and NREL laboratories, to validate both the process and the results. Finally, in a spotlight over the most vulnerable equipment, which is the EV charge station (AC or DC), the team developed a multi-layer cybersecurity implementation in the embedded domain embodied by the open-source Secure Network Interface Card (SNIC) demonstrating the various ways in which the infrastructure can be secured protecting against the identified attack surfaces. Finally, the entire process of EV infrastructure cybersecurity assessment was encapsulated in the Electric Vehicle Charging Cybersecurity Management (EVC2M) online GUI-based tool, that is expected to be released to the public. The report presents the objectives, the technical approach, the key results, and recommendations for future work.

24 POWER TRANSMISSION AND DISTRIBUTION↗

NLR CSP Optical Facilities: Illuminating the Path Forward Through Innovation and Impact: Agreement 38490

This initiative is a multi-faceted project at the National Laboratory of the Rockies (NLR) aimed at strengthening its Concentrating Solar Power (CSP) Optical Facilities to advance the development of low-cost, high-performance materials for solar and other applications. The project's strategy is built on three pillars: strategic stakeholder engagement, diligent facility maintenance and utilization, and the development of new research capabilities. The overarching goal is to ensure the facilities remain state-of-the-art resources for industry and academia, thereby accelerating the conversion of concentrated sunlight into energy. A key driver of the project is an international Advisory Board, which provides critical guidance on research priorities and industry needs, leading to new collaborations and secured funding. This external engagement, combined with proactive outreach to industry partners, ensures the lab's work remains aligned with real-world challenges, including materials durability and performance certification. Significant efforts in facility maintenance have addressed challenges with aging infrastructure. Notable achievements include the complete refurbishment of the hail-damaged Ultra-Accelerated Weathering System (UAWS) and the successful replacement of a failing 15-year-old Lambda 1050 spectrophotometer with a new-generation model, substantially upgrading material characterization capabilities. These maintenance activities were complemented by achieving a prestigious ISO 9001:2015 certification for the Advanced Optical Materials Labs, formally recognizing the quality and reliability of NLR's measurement capabilities. Despite these successes, challenges remain, including high demand for the High Flux Solar Furnace (HFSF) and intermittent failures of other key instruments. The project has delivered major advancements in research techniques and capabilities. At the Flatirons campus, a new indoor laboratory, was established to house advanced deflectometry and photogrammetry systems for heliostat characterization. For on-sun testing, a novel, actively cooled turning mirror was developed for the HFSF, enabling more realistic testing of particle receivers and components. A collaboration with Virginia Tech successfully demonstrated the high-temperature durability of a new solar absorber coating through extensive cyclic testing. Concurrently, new modeling took place to better predict material degradation on rough, fractal surfaces. In summary, this project has systematically enhanced NLR's CSP Optical Facilities through strategic upgrades, rigorous maintenance, and stakeholder-guided research. By overcoming equipment failures, budgetary constraints, and logistical hurdles, the project has reinforced NLR's role as a central hub for CSP innovation and materials testing. Future work will focus on securing diverse funding, expanding collaborations, and continuing to provide the critical infrastructure needed to accelerate the development and deployment of next-generation technologies.

14 SOLAR ENERGY↗

Battery Lifecycle Framework

The Battery Lifecycle (BLC) Framework is an open-source platform that provides tools to visualize and share battery data from material characterization, cell testing, manufacturing, and field testing through the technology development cycle. BLC has three components: data importers, a front-end for querying the data and creating visualizations, and an application programming interface to provide access to the data from Python. BLC has been deployed for tracking the development of a battery from the lab to a manufacturing line and systems installed in the field and for comparing studies of multiple cells of the same battery chemistry and configuration. The code was developed around Redash, a robust open-source extract-transform-load engine. Sandia National Laboratories is a multimission laboratory managed and operated by National Technology & Engineering Solutions of Sandia, LLC, a wholly owned subsidiary of Honeywell International Inc., for the U.S. Department of Energy’s National Nuclear Security Administration under contract DE-NA0003525. SAND2021-4546 O

De Angelis, Valerio↗

Data-Driven Probabilistic Voltage Risk Assessment of MiniWECC System with Uncertain PVs and Wind Generations using Realistic Data

Here, it is found from actual data that due to generation dispatch and uncertain renewable generations and loads with complicated correlations, inferring the probabilistic distributions for uncertain inputs is challenging. Many probabilistic power flow approaches have been developed in the literature but their validations using realistic systems and data are lacking. This paper proposes a data-driven probabilistic analysis approach for system risk assessment of the miniWECC system using actual data. The sparse Gaussian process (SGP) is advocated to quantify the impacts of uncertain inputs on voltage security. SGP does not need the probability distribution function of uncertain inputs, can handle correlations and is highly computationally efficient. Results on the miniWECC system using realistic data show that SGP outperforms existing approaches and is able to quantify the voltage violation risks.

17 WIND ENERGY↗

Straight Vegetable Oil as a Diesel Fuel?

Biodiesel, a renewable fuel produced from animal fats or vegetable oils, is popular among many vehicle owners and fleet managers seeking to reduce emissions and support U.S. energy security. Questions sometimes arise about the viability of fueling diesel vehicles with straight vegetable oil (SVO), or waste oils from cooking and other processes, without intermediate processing. But SVO and waste oils differ from biodiesel (and conventional diesel) in some important ways and are generally not considered acceptable vehicle fuels.

ADVANCED PROPULSION SYSTEMS,BIOMASS FUELS↗

University Coalition for Fossil Fuel Energy Research

Following a nationwide open competition, the University Coalition for Fossil Energy Research (UCFER) was established in October 2015 through a cooperative agreement between Penn State and the Department of Energy (DOE) National Energy Technology Laboratory (NETL). Penn State lead UCFER with the objective of advancing basic and applied research for clean and low-carbon energy based on fossil fuels in support of the DOE’s mission. UCFER focused on research that improves the efficiency of production and use of fossil energy resources, while minimizing the environmental impacts and reducing greenhouse gas emissions. Penn State lead a team of nine universities (Massachusetts Institute of Technology, The Pennsylvania State University, Princeton University, Texas A&M University, University of Kentucky, University of Southern California, The University of Tulsa, University of Wyoming, and Virginia Polytechnic and State University) during the competition stage, adding seven more universities in 2017 (Carnegie Mellon University, Louisiana State University, The Ohio State University, University of North Dakota, University of Pittsburgh, University of Utah, and West Virginia University). This Coalition exhibited a wide geographical distribution across the U.S. bringing a wide variety of fossil energy expertise. This national university alliance was a major collaborative effort with NETL to address specific topics of R&D in NETL’s mission area, which involved one or more of NETL’s five core competencies (Geologic and Environmental Systems, Materials Engineering and Manufacturing, Energy Conversion Engineering, Systems Engineering and Analysis, and Computational Science and Engineering). The first five to six months of the project was the definitization stage. During this period, Penn State worked closely with NETL to finalize the Coalition organizational structure and By- Laws, prepare a statement of substantial involvement and a statement of project objectives, and develop operations and membership plans. A major component of this stage included preparing an execution plan to solicit research, evaluate proposals, recommend selected projects to NETL, and award projects. In addition, a plan was prepared to monitor projects, review projects, disseminate knowledge from research projects and develop an online system for Coalition research portfolio management. This included developing a website and several databases. The first of six rounds of solicitations started in mid-2016. Projects from the sixth solicitation started February 1, 2021, and ended January 31, 2023. Projects that were selected represented twelve technology lines. Approximately $16.6 million in funding was available for the six solicitations. Most of the funding was provided by DOE, Office of Fossil Energy (DOEFE) with the DOE Fuel Cells Technologies Office (DOE-FCTO) providing funding for a few projects. Coalition universities submitted 259 proposals in response to the solicitations, requesting approximately $67.0 million in funding, and forty-three projects were selected. However, one project withdrew after the principal investigator left the university. The management of the Coalition projects was a major activity by Penn State. Managing the Coalition projects consisted of monitoring the projects, reviewing the projects through annual technical review meetings, disseminating knowledge from the research projects, and developing an online system for Coalition research portfolio management. Penn State’s OMT monitored projects to ensure that all milestones (technical, schedule, budget) were met, expenditures were allowable, cost share (when applicable) were reported, and all technical reports were submitted. The OMT also posted the technical reports electronically on a secure members-only website for access and review by the Coalition members. Disseminating knowledge from the research projects was done through a website, newsletters, various meetings, conferences, journal articles, publicity/press releases, and project summaries that were prepared after each project was completed. Penn State kept NETL apprised of UCFER progress through quarterly reports (thirtyone were submitted by Penn State), verbal and written communications, yearly updates at the annual technical review meetings, and cost accrual reports. The UCFER project had a significant impacty. The UCFER program established the first national university alliance in fossil energy research with a major collaboration effort with DOE NETL that addressed specific topics in NETL’s research and development mission areas. It generated inter-university collaborations, which was another program interest. Twenty-two out of 259 proposals contained collaborations (≈8.5%) and three of forty-two funded projects involved inter-university collaborations (≈7.0%). The forty-two funded projects provided support at fourteen universities involving 269 personnel. Research was conducted by 106 faculty, 115 graduate and undergraduate students, forty-six research staff and post-doctoral scholars, and two visiting scholars. Students and post-doctoral scholars were also on-site at NETL through CRADAs. In addition, non-Coalition participants included six universities and sixteen companies and national laboratories. The non-Coalition participants were involved as subcontractors, providers of cost share, performed unpaid consultation and sample analysis, served as advisory board members, or were providers of samples and materials for testing. UCFER also produced visibility in that fifty-six refereed journal articles were published, fifty-seven conference papers and twenty-three posters were prepared, 190 presentations were given, eight patent applications were filed, two books/book chapters were written, and ten software codes were developed. Collaboration between NETL and the individual projects was a major requirement for all funded projects. This included NETL staff time to support collaboration, consultation, technical guidance, sample preparation and analysis, internships at NETL, on-site testing and equipment usage by Coalition participants at NETL, co-mentoring students, and coauthoring journal articles and conference papers. Collaboration was impacted by COVID-19 in that not all on-site activities could be performed. NETL personnel were coauthors on eight of the conference papers (fourteen percent of the conference papers that were prepared) and seventeen of the journal articles (thirty percent of the journal articles that were prepared). A website was developed for an online proposal solicitation and review process and to provide exposure to UCFER. A website analysis highlighted the large amount of member and general public interest in UCFER by interpreting access statistics from March 2016 through June 2023. Visitors to the site originated from many different organizations, businesses, and countries. The website provided a means to disseminate information to both the general public and the UCFER members and was successfully used for outreach activities. In addition, NETL required that RFP release, proposal submission, and proposal reviews all be performed online. Penn State successfully developed these capabilities in a secure section of the website, which were used throughout the UCFER project. It is recognized that each project had its technical successes. In addition, highlighted successes were compiled and summarized from the research projects. Information was requested from the PIs of completed projects. In addition, Penn State’s Operations Management Team reviewed subcontract reports to identify project successes. Examples of information requested from PIs included (not all-inclusive): new projects that have been funded as a result of UCFER funding; new commercial products; establishment of a new center; new patent; new software; best paper awards; highly-cited work; and graduate student successes. A total of forty-eight highlighted successes were reported.

01 COAL, LIGNITE, AND PEAT↗

Cybersecurity Considerations for Hydrogen Infrastructure in Airport Environments

This report explores key cybersecurity concerns and best practices within environments that serve as reference points for the development of hydrogen fueling infrastructure for aviation. This cybersecurity analysis leverages prior NREL studies: 1) hydrogen fueling station component validation to identify vulnerabilities and failure events documented in physical equipment, and 2) electric aircraft charging infrastructure analysis to explore primary cybersecurity vulnerabilities. It reviews the criticality of digitized technologies in sustaining hydrogen fuel production, storage, and fueling systems, noting cybersecurity concerns that are universal to power systems and industrial control systems in general. In considering cybersecurity vulnerabilities within a future landscape of hydrogen energy for aviation applications, a reference architecture was intended to reveal the points of connection between assets and the potential sensors that are vulnerable to manipulation in the event of compromised access or communication within a SCADA system. A generalized reference architecture can help stakeholders, engineers, or strategists understand connections, criticalities, and standard practices when it comes to designing and planning for new systems. There are several gaps to account for in assessing the future of hydrogen production, storage, and fueling for aviation. Engaging stakeholders, including aircraft manufacturers, electric utilities, site property owners, and local communities, will inform decision-making around site structure, operations, and resources for future hydrogen fueling infrastructure to understand operational needs and cybersecurity awareness. Cybersecurity mitigation strategy must consider physical attack vectors that emerge with the integration of hydrogen systems into existing airport security requirements. The cybersecurity risk assessment contained in this report is an entry point into potential future granular-level analyses to be conducted as part of hazard and risk assessments for safe aviation hydrogen infrastructure, determining how the scale of hydrogen fuel infrastructure for aviation impacts the volume of cyber attack vectors, and what, if any, are the vulnerabilities associated with different types of on-board hydrogen systems. In this nascent development phase, assessing how best to integrate cybersecurity practices into an evolving U.S. aviation landscape provides critical insights into building increased awareness and stakeholder engagement to support a cyber-resilient infrastructure.

08 HYDROGEN↗

Cybersecurity Considerations for Grid-Connected Batteries with Hardware Demonstrations

The share of renewable and distributed energy resources (DERs), like wind turbines, solar photovoltaics and grid-connected batteries, interconnected to the electric grid is rapidly increasing due to reduced costs, rising efficiency, and regulatory requirements aimed at incentivizing a lower-carbon electricity system. These distributed energy resources differ from traditional generation in many ways including the use of many smaller devices connected primarily (but not exclusively) to the distribution network, rather than few larger devices connected to the transmission network. DERs being installed today often include modern communication hardware like cellular modems and WiFi connectivity and, in addition, the inverters used to connect these resources to the grid are gaining increasingly complex capabilities, like providing voltage and frequency support or supporting microgrids. To perform these new functions safely, communications to the device and more complex controls are required. The distributed nature of DER devices combined with their network connectivity and complex controls interfaces present a larger potential attack surface for adversaries looking to create instability in power systems. To address this area of concern, the steps of a cyberattack on DERs have been studied, including the security of industrial protocols, the misuse of the DER interface, and the physical impacts. These different steps have not previously been tied together in practice and not specifically studied for grid-connected storage devices. In this work, we focus on grid-connected batteries. We explore the potential impacts of a cyberattack on a battery to power system stability, to the battery hardware, and on economics for various stakeholders. We then use real hardware to demonstrate end-to-end attack paths exist when security features are disabled or misconfigured. Our experimental focus is on control interface security and protocol security, with the initial assumption that an adversary has gained access to the network to which the device is connected. We provide real examples of the effectiveness of certain defenses. This work can be used to help utilities and other grid-connected battery owners and operators evaluate the severity of different threats and the effectiveness of defense strategies so they can effectively deploy and protect grid-connected storage devices.

25 ENERGY STORAGE↗

Counter Unmanned Aircraft System (CUAS) Implementation Storyline

This report is an FY21 Deliverable for NA-21.1, International Nuclear Security, WBS 21.1.1.1.4 Counter Unmanned Aircraft Systems (CUAS), under C.1.4, Develop Suite of Engagement Materials and Tools for Country/Regional Teams. The responsibility for protecting nuclear assets is an immense challenge for governments. Policy changes based on geopolitics, instability of government regimes, and technological advances that facilitate theft of nuclear material all contribute to the enduring task of staying current with these and other threats. One of the recent threats to come along is the use of drones or Unmanned Aircraft Systems (UAS) to circumvent traditional Physical Security Systems. There are significant resources invested on physical protection systems for securing nuclear assets, but many of these systems can now be bypassed by simply flying over these measures intended to guard against ground attacks. In recent years the threat increased to hostile groups to attack or surveil due to advances and availability of UAS platforms. It is now more urgent to implement systems and procedures to counter the UAS threat. The United States (U.S.) federal government granted authority to the Department of Energy (DOE) to implement a Counter UAS to protect nuclear assets. This document provides a very practical and transparent view of the trials, tribulations and challenges we encountered while implementing the first Counter-Unmanned Aircraft System (CUAS) Program in the DOE at Los Alamos National Laboratory (LANL).

98 NUCLEAR DISARMAMENT, SAFEGUARDS, AND PHYSICAL P↗