Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “operating systems security”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 955 records · Page 53

Concepts for Autonomous Operation of Microreactors

Microreactor concepts have seen increasing interest in recent years given their potential use for meeting energy needs in remote and grid-isolated communities. Given the small power outputs of microreactors and the potential for remote siting, there is a need to reduce operational staffing levels to improve their economic viability. A key enabling technology for this purpose is autonomous control that enables autonomous operation of microreactors. While several options for autonomous control exist, the level of human operator involvement in operational decision making needs to be defined as part of the system design process. Once this separation of function is achieved, several options exist for autonomous control ranging from simple automation of some procedures to fully autonomous operational mode decision making and execution.A critical aspect of autonomous decision making is the ability to have as complete an awareness of the system state as possible. In addition to data on temperature, pressure, flow, and neutron flux, measurements of the condition of important components will be necessary. This type of information will allow the autonomous control system to adapt its decision making to any changing conditions within the reactor, thereby not compromising safety while continuing to operate for as long as possible. Several technical advances are needed before widespread use of autonomous control in microreactors. These include sensor and instrumentation technologies that are capable of long term, unattended operation in harsh environments, technologies for inferring the state of the microreactor system or subsystems in an automated fashion, algorithms for predictive decision making that account for the assessed condition of the microreactor subsystems as well as the potential impact on those components of any operational decision, and actuators and control system hardware that are also long-lived in a harsh environment. In addition, given the need to remotely monitor the operations, cybersecurity requirements will likely need to be imposed to ensure secure operations.

29 ENERGY PLANNING, POLICY, AND ECONOMY↗

Characterizing Human Performance: Detecting Targets at High False Alarm Rates [Slides]

Analysts develop a “no threat” bias with high false alarms. If only shown alarms for actual attacks, may never actually see an alarm. We see this in the laboratory, but not often studied in applied environments. (TSA is an exception.) In this work, near-operational paradigms are useful, but difficult to construct well. Pilot testing is critical before engaging time-limited professionals. Experimental control is difficult to balance with operational realism. Grounding near-operational experiments in basic research paradigms has both advantages and disadvantages. Despite shortcomings in our second experiment, we now have a platform for experimental investigations into the human element of physical security systems.

45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗

Reasoning Service Exemplars for NASA’s Data and Reasoning Fabric

Future operations for Urban and Advanced Air Mobility are enabled by a distributed network of reliable and secured data and reasoning services referred to here as a fabric. In the aggregate, such a system must be all encompassing and mission agnostic, but specific use-cases are still needed to improve understanding and drive design paradigms. For this purpose, three reasoning service exemplars for Target Selection and Routing, Trajectory Generation, and Battery Health Management were developed and integrated into a specific NASA proposed data and reasoning fabric. These services were then used to build a mission reasoning application for lightning strike reconnaissance developed in collaboration with the Civil Air Patrol. Autonomous mission execution was then demonstrated using a multivehicle simulation platform with a full envelope 6 Degree-of-Freedom dynamics model for a concept electric Vertical Takeoff and Landing aircraft.

Autonomy↗

Advanced Energy Storage Management in Distribution Network

With increasing penetration of distributed generation (DG) in the distribution networks (DN), the secure and optimal operation of DN has become an important concern. In this paper, an iterative mixed integer quadratic constrained quadratic programming model to optimize the operation of a three phase unbalanced distribution system with high penetration of Photovoltaic (PV) panels, DG and energy storage (ES) is developed. The proposed model minimizes not only the operating cost, including fuel cost and purchasing cost, but also voltage deviations and power loss. The optimization model is based on the linearized sensitivity coefficients between state variables (e.g., node voltages) and control variables (e.g., real and reactive power injections of DG and ES). To avoid slow convergence when close to the optimum, a golden search method is introduced to control the step size and accelerate the convergence. The proposed algorithm is demonstrated on modified IEEE 13 nodes test feeders with multiple PV panels, DG and ES. Numerical simulation results validate the proposed algorithm. Various scenarios of system configuration are studied and some critical findings are concluded.

linearization↗

URBAN-NET-TOOLKIT

Strengthening and maintaining secure, functioning, and resilient Critical Infrastructure Systems (CISs) is one of our nation's primary goals, and it requires proactive and coo0rdinated efforts among federal, state, local, public and private owners and operators of CISs. Recent worldwide extreme events have shown how interdependencies across CISs (electric grid, telecommunications, transportation, water networks, etc.) can drastically increase system vulnerability. To understand these complex interdependencies, ORNL has instantiated Urban-NET, a novel decision support system for CIS operators who need to identify vulnerabilities for minimizing the cascading impacts - saving utilities, the federal and state government, and private sector companies potentially billions by avoiding a complete CI failure and/or shutdown. The developed system includes a stack of software tools for preprocessing, modeling, interconnecting multiple CIS datasets as an integrated heterogeneous graph (i.e. network), identifying vulnerabilities through topological analysis, and predicting consequences based on simulations along with visualization.

Chinthavali, Supriya↗

Systems and devices for pumping and controlling high temperature fluids

The disclosed technology includes pumps, pipes, valves, seals, and systems for pumping and controlling high temperature fluids, such as liquid tin, at temperatures of between 1000-3000° C. The systems and device may be partially or entirely constructed using brittle materials, such as ceramics, that are capable of withstanding extreme heat without significantly degrading, and may be secured using components made of refractory metals, such as tungsten. The systems and devices may utilize static and dynamic seals made from brittle materials, such as graphite, to enable the high temperature operation of such pumps, pipes, valves, and systems without leakage.

Henry, Asegun↗

Trade-off Analysis of Operational Technologies to Advance Cyber Resilience through Automated and Autonomous Response to Threats

The advancement of cyber resilience requires a preliminary stage of characterizing the trade-off space of mitigation options and how these might affect the stability and determinism of an operational technology (OT). This first step will set the stage for the proper cyber-secure and cyber-resilient design and confirm the affects that can be considered and approved by the OT and the security groups. To provide a baseline for this discussion, this paper provides a consideration of the cyberphysical interactions, possible mitigation steps against certain attacks and their corresponding affects that lend to the security design planning and evaluation process. As an integral part of the proposed scheme this work introduces the concept of systemwide fuzzer, i.e., a tool that manipulates the system state in an effort to determine mitigation response sequences that minimize detriments and maximize benefit in accordance with specified operational requirements.

97 MATHEMATICS AND COMPUTING↗

Designing of smart home automation system based on Raspberry Pi

Locally networked or remotely controlled home automation system becomes a popular paradigm because of the numerous advantages and is suitable for academic research. This paper proposes a method for an implementation of Raspberry Pi based home automation system presented with an android phone access interface. The power consumption profile across the connected load is measured accurately through programming. Users can access the graph of total power consumption with respect to time worldwide using their Dropbox account. An android application has been developed to channelize the monitoring and controlling operation of home appliances remotely. This application facilitates controlling of operating pins of Raspberry Pi by pressing the corresponding key for turning “on” and “off” of any desired appliance. Systems can range from the simple room lighting control to smart microcontroller based hybrid systems incorporating several other additional features. Smart home automation systems are being adopted to achieve flexibility, scalability, security in the sense of data protection through the cloud-based data storage protocol, reliability, energy efficiency, etc.

42 ENGINEERING↗

Network Penetration Testing and Research

This paper will focus the on research and testing done on penetrating a network for security purposes. This research will provide the IT security office new methods of attacks across and against a company's network as well as introduce them to new platforms and software that can be used to better assist with protecting against such attacks. Throughout this paper testing and research has been done on two different Linux based operating systems, for attacking and compromising a Windows based host computer. Backtrack 5 and BlackBuntu (Linux based penetration testing operating systems) are two different "attacker'' computers that will attempt to plant viruses and or NASA USRP - Internship Final Report exploits on a host Windows 7 operating system, as well as try to retrieve information from the host. On each Linux OS (Backtrack 5 and BlackBuntu) there is penetration testing software which provides the necessary tools to create exploits that can compromise a windows system as well as other operating systems. This paper will focus on two main methods of deploying exploits 1 onto a host computer in order to retrieve information from a compromised system. One method of deployment for an exploit that was tested is known as a "social engineering" exploit. This type of method requires interaction from unsuspecting user. With this user interaction, a deployed exploit may allow a malicious user to gain access to the unsuspecting user's computer as well as the network that such computer is connected to. Due to more advance security setting and antivirus protection and detection, this method is easily identified and defended against. The second method of exploit deployment is the method mainly focused upon within this paper. This method required extensive research on the best way to compromise a security enabled protected network. Once a network has been compromised, then any and all devices connected to such network has the potential to be compromised as well. With a compromised network, computers and devices can be penetrated through deployed exploits. This paper will illustrate the research done to test ability to penetrate a network without user interaction, in order to retrieve personal information from a targeted host.

Murphy, Brandon F.↗

Securing Vehicle Charging Infrastructure

As the US electrifies the transportation sector, cyber attacks targeting vehicle charging could bring consequences to electrical system infrastructure. This is a growing area of concern as charging stations increase power delivery and must communicate to a range of entities to authorize charging, sequence the charging process, and manage load (grid operators, vehicles, OEM vendors, charging network operators, etc.). The research challenges are numerous and are complicated because there are many end users, stakeholders, and software and equipment vendors interests involved. Poorly implemented electric vehicle supply equipment (EVSE), electric vehicle (EV), or grid communication system cybersecurity could be a significant risk to EV adoption because the political, social, and financial impact of cyberattacks - or public perception of such - ripples across the industry and has lasting and devastating effects. Unfortunately, there is no comprehensive EVSE cybersecurity approach and limited best practices have been adopted by the EV/EVSE industry. There is an incomplete industry understanding of the attack surface, interconnected assets, and unsecured interfaces. Thus, comprehensive cybersecurity recommendations founded on sound research are necessary to secure EV charging infrastructure. This project is providing the power, security, and automotive industry with a strong technical basis for securing this infrastructure by developing threat models, determining technology gaps, and identifying or developing effective countermeasures. Specifically, the team is creating a cybersecurity threat model and performing a technical risk assessment of EVSE assets, so that automotive, charging, and utility stakeholders can better protect customers, vehicles, and power systems in the face of new cyber threats.

33 ADVANCED PROPULSION SYSTEMS↗

The National Carbon Capture Center at the Power Systems Development Facility

The National Carbon Capture Center (NCCC) at the Power Systems Development Facility supports the Department of Energy (DOE) goal of promoting the United States’ energy security through reliable, clean, and affordable energy produced from coal. Work at the NCCC supports the development of new power technologies and the continued operation of conventional power plants under CO 2 emission constraints. The NCCC includes adaptable slipstreams that allow technology development of CO 2 capture concepts using coal-derived syngas and flue gas in industrial settings. Because of the ability to operate under a wide range of flow rates and process conditions, research at the NCCC can effectively evaluate technologies at various levels of maturity and accelerate their development path to commercialization. During its first contract period, from October 1, 2008, through December 30, 2014, the NCCC designed, constructed, and began operation of the Post-Combustion Carbon Capture Center (PC4). Testing of CO 2 capture technologies commenced in 2011, and through the end of the contract period, more than 25,000 hours of testing had been achieved, supporting a variety of technology developers. Technologies tested included advanced solvents, enzymes, membranes, sorbents, and associated systems. The NCCC continued operation of the existing gasification facilities, which have been in operation since 1996, to support the advancement of technologies for next-generation gasification processes and pre-combustion CO 2 capture. The gasification process operated for 13 test runs, supporting over 30,000 hours combined of both gasification and pre-combustion technology developer testing. Throughout the contract period, the NCCC incorporated numerous modifications to the facilities to accommodate technology developers and increase test capabilities. Preparations for further testing were ongoing to continue advancement of the most promising technologies for future power generation processes.

01 COAL, LIGNITE, AND PEAT↗

Secure Power Systems Professional Phase III Final Report: Recruiting, Selecting and Developing Secure Power Systems Professionals

With significant numbers of power system experts retiring and a continuing trend of increasing complexity in modern power systems, there is a need throughout the power industry for cybersecurity awareness and competence in tasks that previously had no cyber components. To address these challenges, the U.S. Department of Energy established the Secure Power Systems Professional (SPSP) project to develop resources for job definition and competency analysis along with tools to guide assessment and curriculum design and to help identify and develop required knowledge, skills, and abilities in technical and operational power systems cybersecurity. The major accomplishments in Phase III of the project, which were built upon foundations laid in the first two phases, were (a) development and fielding of a Recruitment Guide for Human Resources and Hiring Managers and a Guide to Developing SPSPs; (b) development of psychometrically validated job profiles for identified SPSP job roles; (c) development of behavioral interview guidelines that list competencies necessary to perform each job role; and (d) development of guidelines that aid in evaluating individual and team performance and that inform strategic planning for organizations in selection, development and retention of SPSP professionals. The outcomes of the project can be immediately applied by human resources professionals, recruiters and hiring managers to assist in the recruitment, selection, and training of SPSPs, as well as to identify needed skills to grow existing employees into SPSPs.

97 MATHEMATICS AND COMPUTING↗

Artificial Intelligence/Machine Learning Technology in Power System Applications

The primary purpose of this report is to provide an overview of the advancement in artificial intelligence and machine learning (AI/ML) technologies and their applications in power systems. It offers a foundation for understanding the transformative role of AI/ML in power systems and aims to stimulate further research and development in this area. This report begins with a historical perspective of AI/ML technologies, then explores their advancement to today’s prominence. The document highlights key contributors to the success of AI/ML technologies, including increased computational power, greater data availability, innovative algorithms, and advanced tools. It further introduces various AI/ML techniques, including supervised, unsupervised and reinforcement learning, graph neural networks, and generative AI. It also emphasizes the critical importance of ensuring the safety, security, and trustworthiness of these AI/ML techniques within this sector. The report reviews the recent representative advancements in various power system applications enhanced by AI/ML techniques, underscoring key developments and their transformative impact as evidenced by numerous studies. It also explores both the opportunities and challenges associated with the application of AI/ML technologies to improve power system applications. While the report extensively covers AI/ML applications in power systems, focusing primarily on the technical and operational aspects, it may not thoroughly explore the sociopolitical, economic, and broader regulatory implications of AI/ML integration in power systems. AI/ML techniques hold significant potential for enhancing power system applications; however, they are not omnipotent. It is crucial to acknowledge their limitations and understand that they may not be able to address all challenges in the power system domain. Various factors must be considered that influence the implementation, adoption, and effectiveness of AI/ML solutions, including but not limited to safety, security, transparency, and trustworthiness. Additionally, the incorporation of advanced human–machine interfaces is essential, as it enables humans to validate the effectiveness of AI/ML solutions while remaining actively engaged, fostering trust in AI/ML deployment. Finally, the report summarizes AI/ML research activities supported by the Department of Energy (DOE) Office of Electricity (OE) through the Advanced Grid Modeling (AGM) program. The work aligns with the interests and mission of DOE-OE AGM, with the report serving as a resource for identifying existing progress and for pinpointing future applications within AI/ML that need further exploration and support.

24 POWER TRANSMISSION AND DISTRIBUTION↗

Project Boeing SGS (Final Report)

Boeing and its partner, PJM Interconnection, teamed to bring advanced “defense-grade” technologies for cyber security to the US regional power grid through demonstration in PJM’s energy management environment. Under this cooperative project with the Department of Energy, Boeing and PJM have developed and demonstrated a host of technologies specifically tailored to the needs of PJM and the electric sector as a whole. The team has demonstrated to the energy industry a combination of processes, techniques and technologies that have been successfully implemented in the commercial, defense, and intelligence communities to identify, mitigate and continuously monitor the cyber security of critical systems. Guided by the results of a Cyber Security Risk-Based Assessment completed in Phase I, the Boeing-PJM team has completed multiple iterations through the Phase II Development and Phase III Deployment phases. Multiple cyber security solutions have been completed across a variety of controls including: Application Security, Enhanced Malware Detection, Security Incident and Event Management (SIEM) Optimization, Continuous Vulnerability Monitoring, SCADA Monitoring/Intrusion Detection, Operational Resiliency, Cyber Range simulations and hands on cyber security personnel training. All of the developed and demonstrated solutions are suitable for replication across the electric sector and/or the energy sector as a whole. Benefits identified include; Improved malware and intrusion detection capability on critical SCADA networks including behavioral-based alerts resulting in improved zero-day threat protection; Improved Security Incident and Event Management system resulting in better threat visibility, thus increasing the likelihood of detecting a serious event; Improved malware detection and zero-day threat response capability; Improved ability to systematically evaluate and secure in house and vendor sourced software applications; Improved ability to continuously monitor and maintain secure configuration of network devices resulting in reduced vulnerabilities for potential exploitation; Improved overall cyber security situational awareness through the integration of multiple discrete security technologies into a single cyber security reporting console; Improved ability to maintain the resiliency of critical systems in the face of a targeted cyber attack of other significant event; Improved ability to model complex networks for penetration testing and advanced training of cyber security personnel

24 POWER TRANSMISSION AND DISTRIBUTION↗

Toward digital design at the exascale: An overview of project ICECap

High performance computing has entered the Exascale Age. Capable of performing over 1018 floating point operations per second, exascale computers, such as El Capitan, the National Nuclear Security Administration's first, have the potential to revolutionize the detailed in-depth study of highly complex science and engineering systems. However, in addition to these kind of whole machine “hero” simulations, exascale systems could also enable new paradigms in digital design by making petascale hero runs routine. Currently, untenable problems in complex system design, optimization, model exploration, and scientific discovery could all become possible. Motivated by the challenge of uncovering the next generation of robust high-yield inertial confinement fusion (ICF) designs, project ICECap (Inertial Confinement on El Capitan) attempts to integrate multiple advances in machine learning (ML), scientific workflows, high performance computing, GPU-acceleration, and numerical optimization to prototype such a future. Built on a general framework, ICECap is exploring how these technologies could broadly accelerate scientific discovery on El Capitan. In addition to our requirements, system-level design, and challenges, we describe some of the key technologies in ICECap, including ML replacements for multiphysics packages, tools for human-machine teaming, and algorithms for multifidelity design optimization under uncertainty. As a test of our prototype pre-El Capitan system, we advance the state-of-the art for ICF hohlraum design by demonstrating the optimization of a 17-parameter National Ignition Facility experiment and show that our ML-assisted workflow makes design choices that are consistent with physics intuition, but in an automated, efficient, and mathematically rigorous fashion.

70 PLASMA PHYSICS AND FUSION TECHNOLOGY↗

The RenewElec Project: Variable Renewable Energy and the Power System (Final Report)

Variable energy resources, such as wind power, now produce about 4% of U.S. electricity. They can play a significantly expanded role if the U.S. adopts a systems approach that considers affordability, security and reliability. Reaching a 20-30% renewable portfolio standard goal is possible, but not without changes in the management and regulation of the power system, including accurately assessing and preparing for the operational effects of renewable generation. The RenewElec project will help the nation make the transition to the use of significant amounts of electric generation from variable and intermittent sources of renewable power.

29 ENERGY PLANNING, POLICY, AND ECONOMY↗

SBIR Phase II Final Report - A Robust Wireless Communication System for Harsh Environments Including Nuclear Facilities

This is the Final Report for the DOE Phase II SBIR project “A Robust Wireless Communication System for Harsh Environments Including Nuclear Facilities.” The topics covered herein include technical progress made, progress against the planned milestones and deliverables, project outcomes, and a discussion on future expectations of deployment and impacts of the results of this work. In brief, all planned work for the project was successfully completed, on or ahead of schedule and on budget. The major accomplishment was the successful development of new sensor/communications systems with wideband (WB)/ultra-wideband (UWB) communications based on the software-defined-radio (SDR) technology to improve sensing and control in nuclear power plants and then a broad range of similar sensing applications. The impacts of these disciplines/focuses of this SBIR include: A new multi-frequency SDR-based architecture with WB/UWB communications integrated with sensors was developed, utilizing 310 MHz, 450 MHz, 915 MHz, and 5 GHz frequencies; Secure communications using Advanced Encryption Standard (AES) algorithm; Sensing possibilities not effectively addressed by previous technologies was addressed; and, The newly developed wireless sensor communications system can adapt its communications parameters to its operational environment for optimal performance. The performance of this system has been evaluated by systematic laboratory and field testing. The field testing was conducted at Massachusetts Institute of Technology (MIT)’s Nuclear Test Reactor, and the McClellan Nuclear center at the University of California Davis (UC Davis), as well as at Oak Ridge National Laboratory (ORNL). The success in this project resulted in DSI being awarded “The DOE’s 2018 SBIR/STTR Small Business of the Year”. This technology has attracted interest from The Rolls Royce company with ongoing discussions under NDA for potential strategic partnership between DSI and Rolls Royce in providing wireless sensor communications in nuclear facilities. Furthermore, the success of this project has attracted significant interest from the United Nations International Atomic Agency (IAEA) in Vienna, Austria, as well as other DOE and DOD offices. Currently, per request from IAEA, DOE’s office of International Safeguards has funded DSI to develop a WB/UWB wireless communication system for real-time transmission of images from IAEA’s safeguards cameras in various nuclear facilities. DSI also has received a Phase II and Phase II.5 SBIR awards from ARMY and NAVY for wireless communications capability for various DOD aircraft.

46 INSTRUMENTATION RELATED TO NUCLEAR SCIENCE AND ↗

Risk Management for Distributed Energy Resources

The National Institute of Standards and Technology will be hosting on Tuesday, February 2 and Wednesday, February 3, 2021, the second workshop in a new series focusing on the Open Security Controls Assessment Language. NREL extended the scope of the DERCF to include the NIST Risk Management Framework (RMF), addressing the challenges faced by federal energy managers when complying with the NIST RMF for DER systems. The NIST RMF is a cyclical process designed to incorporate principles of security and risk management into an organization’s system policies and procedures. The DER-RM will be downloadable application that runs locally and documents all the major requirements for achieving Authority to Operate the DER.

cybersecurity↗