Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “secure operation”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 1,009 records · Page 56

Unsupervised Detection of SOC Spoofing in OCPP 2.0.1 EV Charging Communication Protocol Using One-Class SVM

The electric vehicles (EVs) market keeps growing globally; thus, it is critical to secure the EV charging communication protocols in order to guarantee reliable and fair charging operations among the customers. The Open Charge Point Protocol (OCPP) 2.0.1 supports the communication between the Electric Vehicle Supply Equipment (EVSE) and Charging Station Management Systems (CSMSs); therefore, it becomes vulnerable to several types of attacks, which aim to jeopardize smart charging, billing, and energy management. Specifically, OCPP 2.0.1 allows the self-reporting of the State of Charge (SOC) values, which makes it vulnerable to spoofing-based cyberattacks, which target manipulating the scheduling priorities, distorting the load forecasts, and extending the charging sessions in an unfair manner. In this paper, we try to address this type of attack by providing a comprehensive analysis of the SOC spoofing attacks and introducing a novel unsupervised detection framework based on the One-Class Support Vector Machine (OCSVM) algorithm. Specifically, two types of attack scenarios are analyzed (i.e., priority manipulation and session extension) by deriving engineered features that capture the nonlinear relationships under normal charging behavior. Detailed simulation-based results are derived by utilizing the DESL-EPFL Level 3 EV charging dataset. Our results demonstrate high F1-score and recall in identifying spoofed SOC values and that the proposed OCSVM model demonstrates superior performance compared to alternative clustering and deep-learning based detectors.

EV charging↗

Adapting Digital Libraries to Continual Evolution

In this paper, we describe five investment streams (data storage infrastructure, knowledge management, data production control, data transport and security, and personnel skill mix) that need to be balanced against short-term operating demands in order to maximize the probability of long-term viability of a digital library. Because of the rapid pace of information technology change, a digital library cannot be a static institution. Rather, it has to become a flexible organization adapted to continuous evolution of its infrastructure.

Barkstrom, Bruce R.↗

Pressure Sensitive Tape in the Manufacture of Reusable Solid Rocket Motors

ATK Launch Systems Inc. manufactures the reusable solid rocket motor (RSRM) for NASA's Space Shuttle program. They are used in pairs to launch the Space Shuttle. Pressure sensitive tape (PST) is used throughout the RSRM manufacturing process. A few PST functions are: 1) Secure labels; 2) Provide security seals; and 3) Protect tooling and flight hardware during various inert and live operations. Some of the PSTs used are: Cloth, Paper, Reinforced Teflon, Double face, Masking, and Vinyl. Factors given consideration for determining the type of tape to be used are: 1) Ability to hold fast; 2) Ability to release easily; 3) Ability to endure abuse; 4) Strength; and 5) Absence of adhesive residue after removal.

Champneys, Jeff↗

Application of a Novel Long-Reach Manipulator Concept to Asteroid Redirect Missions

A high priority mission currently being formulated by NASA is to capture all or part of an asteroid and return it to cis-lunar space for examination by an astronaut crew. Two major mission architectures are currently being considered: in the first (Mission Concept A), a spacecraft would rendezvous and capture an entire free flying asteroid (up to 14 meters in diameter), and in the second (Mission Concept B), a spacecraft would rendezvous with a large asteroid (which could include one of the Martian moons) and retrieve a boulder (up to 4 meters in diameter). A critical element of the mission is the system that will capture the asteroid or boulder material, enclose it and secure it for the return flight. This paper describes the design concepts, concept of operations, structural sizing and masses of capture systems that are based on a new and novel Tendon- Actuated Lightweight In-Space MANipulator (TALISMAN) general-purpose robotic system. Features of the TALISMAN system are described and the status of its technology development is summarized. TALISMAN-based asteroid material retrieval system concepts and concepts-of-operations are defined for each asteroid mission architecture. The TALISMAN-based capture systems are shown to dramatically increase operational versatility while reducing mission risk. Total masses of TALISMAN-based systems are presented, reinforcing the mission viability of using a manipulator-based approach for the asteroid redirect mission.

Dorsey, John T.↗

Landsat 8: The Plans, the Reality, and the Legacy

Landsat 8, originally known as the Landsat Data Continuity Mission (LDCM), is a National Aeronautics and Space Administration (NASA)-U.S. Geological Survey (USGS) partnership that continues the legacy of continuous moderate resolution observations started in 1972. The conception of LDCM to the reality of Landsat 8 followed an arduous path extending over nearly 13 years, but the successful launch on February 11, 2013 ensures the continuity of the unparalleled Landsat record. The USGS took over mission operations on May 30, 2013 and renamed LCDM to Landsat 8. Access to Landsat 8 data was opened to users worldwide. Three years following launch we evaluate the science and applications impact of Landsat 8. With a mission objective to enable the detection and characterization of global land changes at a scale where differentiation between natural and human-induced causes of change is possible, LDCM promised incremental technical improvements in capabilities needed for Landsat scientific and applications investigations. Results show that with Landsat 8, we are acquiring more data than ever before, the radiometric and geometric quality of data are generally technically superior to data acquired by past Landsat missions, and the new measurements, e.g., the coastal aerosol and cirrus bands, are opening new opportunities. Collectively, these improvements are sparking the growth of science and applications opportunities. Equally important, with Landsat 7 still operational, we have returned to global imaging on an 8-day cycle, a capability that ended when Landsat 5 ceased operational Earth imaging in November 2011. As a result, the Landsat program is on secure footings and planning is underway to extend the record for another 20 or more years.

Loveland, Thomas R.↗

Development of a Point of Care Technology for Military Medical Applications in Austere Environments

NASA, Lawrence Livermore National Laboratory (LLNL) and the Department of Defense (DoD) share a common interest in compact medical diagnostic technologies—also known as “point of care testing” (POCT) technologies. For NASA, the need is to take care of astronauts on deep space missions. For LLNL, the focus is on technologies needed to support homeland security applications. For DoD, the need is to support warfighters in military theaters of operation, especially for prolonged field care and en route care. A recently patented technology, “Portable Medical Diagnosis Instrument” (U.S. Patent 9824870), co-invented by NASA and LLNL, is being developed further in a partnership between NASA, LLNL and Travis Air Force Base, with a focus on military applications. This instrument, the NASA-LLNL Medical Tricorder, can be used for a wide range of clinical samples including breath, saliva and blood. One component of the Tricorder is the NASA E-Nose, a carbon nanotube-based chemical sensor, integrated into a hand-held smart phone, that can detect and measure “breath biomarkers” in the gas phase of exhaled breath. The response of the NASA E-Nose is rapid, which makes it possible to detect various gas-phase substances in real time. The NASA E-Nose, with modification, can also be used for breath condensate analysis. Another component of the Tricorder is a miniaturized microfluidic analyzer, under development by LLNL, that does not require any pumps. The microfluidic analyzer can detect and measure biomarkers in liquid samples, such as blood, saliva and breath condensate. This microfluidic system requires small quantities of liquid sample and can perform analysis very rapidly (seconds to minutes), which makes it possible to detect relevant biomarkers in near real time in the field. The Clinical Investigation Facility (CIF) at Travis Air Force Base is currently conducting research with the goal to develop improved field-able technologies and procedures for the emergency response to life threatening injuries soldiers may receive in theater. This work includes experimental large animal systems and comprehensive collection of clinical specimens and physiological data. NASA and LLNL are partnering with Travis to test and further develop the Tricorder technology for high priority military applications, initially focused on lung injury models and traumatic brain injury.

Loftus, David J.↗

Idaho National Laboratory Energy Cybersecurity Programs Update

This brief presentation provides a status update on three Idaho National Laboratory energy cybersecurity programs of particular interest to NERC Reliability and Security Technical Committee annual in-person Security Groups summit. Public information on the following three programs is included: Cybersecurity for Operational Technology Environments (CyOTE™) program Cyber-Informed Engineering (CIE) Cyber Testing for Resilient Industrial Control Systems (CyTRICS) program, and associated high-level information on the Energy Software Bill of Materials POC, Executive Order 14017, and the Energy Cyber Sense Act

24 POWER TRANSMISSION AND DISTRIBUTION↗

Advanced Transmission Technologies (ATTs) Supplier Cohort Workshops Cohort Summary [Slides]

This Summary slide deck summarizes the key outcomes of the Advanced Transmission Technologies (ATTs) supplier cohort, part of Idaho National Laboratory’s (INL) Technical Assistance for Digital Assurance (TADA) program. The program aimed to strengthen grid resilience through cybersecurity controls, supply-chain security, and Cyber-Informed Engineering (CIE) for advanced transmission technologies. The cohort brought together vendors representing the full range of Grid-Enhancing Technologies (GETs), including providers of Dynamic Line Ratings (DLR), Advanced Power Flow Control (APFC), Transmission Topology Optimization (TTO), and High-Performance Conductors (HPCs). Discussions focused on institutional, integration, and operational barriers limiting GET adoption; cybersecurity risks at EMS/SCADA, cloud, and network integration points; and supply-chain transparency issues such as semiconductor dependence and SBOM/HBOM expectations. Participants also addressed operator trust, human-in-the-loop requirements, and challenges with utility adoption, while exploring how CIE can support secure deployment of GETs. This deck represents a consolidated summary of challenges and risks identified by vendors, cross-cutting themes and technology-specific insights from three cohort workshops, and actionable mitigations to guide utilities, vendors, and the Department of Energy in advancing secure, trusted deployment of GETs.

24 - POWER TRANSMISSION AND DISTRIBUTION↗

Physical Sciences Vistas: Issue 4 2021

In this issue of Physical Sciences Vistas we highlight examples of “excellence in nuclear security.” In this issue, highlights of our outstanding work supporting the Laboratory’s nuclear security enterprise include the following: The complete refurbishment of Sigma’s surface finishing lab. Pride in the lab’s revitalized condition on the part of the operations and R&D staff responsible for this complex operation is well justified. Development of advanced materials and processes enabling next-generation weapons designs, much of which has been facilitated by projects supported by the Laboratory Directed Research and Development Program. The use of proton radiography in illuminating elements important to validating high explosive burn models. The experimental series was a collaboration between Los Alamos researchers and staff at Lawrence Livermore and Sandia national laboratories and the United Kingdom’s Atomic Weapons Establishment. Deployment of a sophisticated remote handling unit to safely transfer highly radioactive materials required to support mission-critical projects. The skillful swap of an electrical transformer at the Los Alamos Neutron Science Center (LANSCE). The deliberate operation restored power to the accelerator in less than estimated time. A look at George Goff ’s role in translating fundamental science into applied solutions essential to the Lab’s nuclear security mission.

37 INORGANIC, ORGANIC, PHYSICAL, AND ANALYTICAL CH↗

Cyber-CHAMP White Paper

Cyber-CHAMP white paper intern school assignment. Worldwide there is a tremendous shortfall in the cybersecurity workforce. By 2021, researchers have forecasted a deficit of 3.5 million cyber professionals. As workforce capabilities diminished, the world's cybersecurity threats have continued to multiply. Industrial control systems (ICSs) and their operational technology (OT) components became more vulnerable to attack and compromise. When an ICS is compromised, attackers can cause widespread impacts on national security, public health, and safety. This capacity makes ICSs attractive targets, with 90% of surveyed OT organizations reporting a damaging cyberattack in the last two years. To address the risk to ICSs, personnel must be competent in operational best practices and the latest threats. While frameworks for information technology (IT) cybersecurity education have been developed, educational standards for OT cybersecurity are nonexistent.

97 MATHEMATICS AND COMPUTING↗

The evolution of the Human Systems and Simulation Laboratory in nuclear power research

The events at Three Mile Island in the United States brought about fundamental changes in the ways that simulation would be used in nuclear operations. The need for research simulators was identified to scientifically study human-centered risk and make recommendations for process control system designs. This paper documents the human factors research conducted at the Human Systems and Simulation Laboratory (HSSL) since its inception in 2010 at Idaho National Laboratory. The facility’s primary purposes are to provide support to utilities for system upgrades and to validate modernized control room concepts. In the last decade, however, as nuclear industry needs have evolved, so too have the purposes of the HSSL. Thus, beyond control room modernization, human factors researchers have evaluated the security of nuclear infrastructure from cyber adversaries and evaluated human-in-the-loop simulations for joint operations with an integrated hydrogen generation plant. Lastly, our review presents research using human reliability analysis techniques with data collected from HSSL-based studies and concludes with potential future directions for the HSSL, including severe accident management and advanced control room technologies.

21 SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLANTS↗

Precursor Analysis Report: Cyber Attack on Thyssenkrupp Blast Furnace 2014

The Cyber Attack on Thyssenkrupp Blast Furnace 2014 Precursor Analysis Report leverages publicly available information about the Thyssenkrupp Steel Mill cyber attack and catalogs anomalous observables for each technique employed in the attack. This analysis is based upon the methodology of the Cybersecurity for the Operational Technology Environment (CyOTE) program. In December 2014, the German Government’s Federal Office for Information Security (BSI) released a report detailing a cyber attack on a German steel mill that occurred earlier that year, though exact dates and details of the attack were not revealed. While the report did not specify the name of the company, multiple sources identified the victim as one of Europe’s largest steel manufacturers, Thyssenkrupp AG. Further, Thyssenkrupp announced on 16 May of that year that Europe’s largest blast furnace, “Schwelgern 2,” located at its facility in Duisburg, Germany, would be offline for several weeks for repairs and upgrades, suggesting Schwelgern 2 was likely the target of the attack. The attack began in early 2014, when adversaries infiltrated the victim steel mill’s Information Technology (IT) network via a spearphishing campaign, then worked their way into the Operational Technology (OT) environment, where they executed software that caused denial of service, denial of control, and eventually a loss of control. This led to the blast furnace shutting down without proper safety procedures, resulting in catastrophic physical damage. No lives were lost in the incident, but ThyssenKrupp suffered $4 million in damage to the blast furnace and an additional $6 million in lost revenue. The adversaries required specialized knowledge and expertise in steel production, which enabled them to compromise a variety of internal systems and components across both IT and OT networks. The attack also demonstrated detailed knowledge of the industrial control systems (ICS) and production processes being used. This combination resulted in one of the earliest known publicly reported cybersecurity incidents resulting in physical damage to ICS equipment. Researchers and analysts identified 19 unique techniques (used in a sequence of 20 steps) utilized during the attack with a total of 454 observables using MITRE ATT&CK® for Industrial Control Systems. The CyOTE program assesses observables accompanying techniques used prior to the triggering event to identify opportunities to detect malicious activity. If observables accompanying the attack techniques are perceived and investigated prior to the triggering event, earlier comprehension of malicious activity can take place. Fifteen of the identified techniques used during the Thyssenkrupp cyber attack were precursors to the triggering event. Analysis identified 369 observables associated with these precursor techniques, 316 of which were assessed to have an increased likelihood of being perceived in the 120 days preceding the triggering event. The response and comprehension time could have been reduced if the observables had been identified earlier. The information gathered in this report contributes to a library of observables tied to a repository of artifacts, data sources, and technique detection references for practitioners and developers to support the comprehension of indicators of attack. Asset owners and operators can use these products if they experience similar observables or to prepare for comparable scenarios.

45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗

An Operational Resilience Metric for Modern Power Distribution Systems

The electrical power system is the backbone of our nations critical infrastructure. It has been designed to withstand single component failures based on a set of reliability metrics which have proven acceptable during normal operating conditions. However, in recent years there has been an increasing frequency of extreme weather events. Many have resulted in widespread long-term power outages, proving reliability metrics alone do not provide adequate energy security. As a result, researchers have focused their efforts on a new set of metrics based on the concept of resilience to ensure efficient operation of power systems during extreme events. A resilient system has the ability to resist, adapt, and recover from disruptions. Therefore, resilience has demonstrated itself as a promising concept for currently faced challenges in power distribution systems. In this work, we propose a real-time resilience metric for modern power distribution systems. The metric is an aggregation of the controllable assets adaptive capacity, or their temporal flexibility in real and reactive power. This metric gives information to the magnitude and duration of a disturbance which the system can respond to without having to drop loads or have stability issues in voltage or frequency. We demonstrate the impact to resilience in a case study under normal operation and during a power contingency on a microgrid. In the future, this information can be used by operators to make more informed decisions based on system resilience in an effort to prevent power outages.

42 ENGINEERING↗

Virtualization - A Key Cost Saver in NASA Multi-Mission Ground System Architecture

With science team budgets being slashed, and a lack of adequate facilities for science payload teams to operate their instruments, there is a strong need for innovative new ground systems that are able to provide necessary levels of capability processing power, system availability and redundancy while maintaining a small footprint in terms of physical space, power utilization and cooling.The ground system architecture being presented is based off of heritage from several other projects currently in development or operations at Goddard, but was designed and built specifically to meet the needs of the Science and Planetary Operations Control Center (SPOCC) as a low-cost payload command, control, planning and analysis operations center. However, this SPOCC architecture was designed to be generic enough to be re-used partially or in whole by other labs and missions (since its inception that has already happened in several cases!)The SPOCC architecture leverages a highly available VMware-based virtualization cluster with shared SAS Direct-Attached Storage (DAS) to provide an extremely high-performing, low-power-utilization and small-footprint compute environment that provides Virtual Machine resources shared among the various tenant missions in the SPOCC. The storage is also expandable, allowing future missions to chain up to 7 additional 2U chassis of storage at an extremely competitive cost if they require additional archive or virtual machine storage space.The software architecture provides a fully-redundant GMSEC-based message bus architecture based on the ActiveMQ middleware to track all health and safety status within the SPOCC ground system. All virtual machines utilize the GMSEC system agents to report system host health over the GMSEC bus, and spacecraft payload health is monitored using the Hammers Integrated Test and Operations System (ITOS) Galaxy Telemetry and Command (TC) system, which performs near-real-time limit checking and data processing on the downlinked data stream and injects messages into the GMSEC bus that are monitored to automatically page the on-call operator or Systems Administrator (SA) when an off-nominal condition is detected. This architecture, like the LTSP thin clients, are shared across all tenant missions.Other required IT security controls are implemented at the ground system level, including physical access controls, logical system-level authentication authorization management, auditing and reporting, network management and a NIST 800-53 FISMA-Moderate IT Security plan Risk Assessment Contingency Plan, helping multiple missions share the cost of compliance with agency-mandated directives.The SPOCC architecture provides science payload control centers and backup mission operations centers with a cost-effective, standardized approach to virtualizing and monitoring resources that were traditionally multiple racks full of physical machines. The increased agility in deploying new virtual systems and thin client workstations can provide significant savings in personnel costs for maintaining the ground system. The cost savings in procurement, power, rack footprint and cooling as well as the shared multi-mission design greatly reduces upfront cost for missions moving into the facility. Overall, the authors hope that this architecture will become a model for how future NASA operations centers are constructed!

Ground System Architecture↗

The Role of the Digital Thread for Security, Resilience, and Adaptability in Manufacturing

The manufacturing sector is dramatically evolving with recent technical and digital advances. Among these, the digital thread is revolutionizing manufacturing operations well beyond the historic downloading of programs to computer numerically controlled (CNC) machine tools and the uploading of edited programs from CNC controllers. The digital thread is “the communication framework that enables a connected data flow and integrated view of the asset’s data throughout its lifecycle across traditionally siloed functional perspectives” (Leiva 2016). It is pervasive around the world and has changed the way society operates; for example, map apps are used to provide time-optimal directions to destinations using real-time traffic feedback. The digital thread makes it possible to digitally verify products, ensure that the latest technologies are deployed across the entire manufacturing ecosystem, and strengthen the workforce by making each individual more efficient and effective. These three foundational advanced manufacturing concepts will ensure a next-generation secure, resilient, and adaptable manufacturing ecosystem and sustainably support current and future needs of society (Lynn et al. 2020).

99 GENERAL AND MISCELLANEOUS↗

Wiretap

SAND2023-12116O Wiretap is an offensive security software package meant for penetration testers and red teams. Unlike a traditional VPN, Wiretap transparently proxies networking traffic without requiring administrator privileges. Sandia National Laboratories is a multimission laboratory managed and operated by National Technology & Engineering Solutions of Sandia, LLC, a wholly owned subsidiary of Honeywell International Inc., for the U.S. Department of Energy’s National Nuclear Security Administration under contract DE-NA0003525.

Rindels, Raymond↗

A Framework for Building Security into the Design Process

This report presents guidance to support the implementation of security objectives during the design process for nuclear facilities using an organization’s quality management system. The guidance in this document is intended for design vendors and operators of nuclear power facilities. Additionally, this guidance document can be beneficial to regulatory bodies, industry partners, customers, and other stakeholders within the nuclear power market. This report aims to ensure security consequences are identified before designs are completed, which may lead to reduced costs and higher security effectiveness and efficiency.

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗