Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “Computer Security”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 1,063 records · Page 59

Computing and AI for Pandemic Response: Looking Forward

This virtual symposium was held to highlight the impact the U.S. Department of Energy’s (DOE) National Virtual Biotechnology Laboratory (NVBL) has had utilizing the unique capabilities of the DOE to tackle the science and technology challenges associated with COVID-19, and to discuss areas in which the NVBL can have impact in the future. With perspectives from Chris Fall, Director, Office of Science, DOE, and William A. Bookless, Principal Deputy Administrator of the National Nuclear Security Administration, the event featured Presentations from lead investigators reporting progress in: Epidemiological modeling, Therapeutics, Testing, Understanding transport of the virus, and Solving issues around supply chain challenges. In addition, keynote speakers from outside the NVBL discussed the upcoming science and technology needs in computing, testing and surveillance, and vaccines. The event was aimed at the S&T community, media, and general public.

Brase, James M.↗

Computational investigation of arranged scintillating particle composites for fast neutron detection

Composite materials have the potential to play an important role in enabling high-performance and cost-effective neutron detectors for fundamental science, global security, and dosimetry applications. This work presents neutron and gamma transport simulation results on composites consisting of 6 Li-containing GS20 scintillator glass particles arranged in an organic matrix. These composites achieve high sensitivity for neutrons while suppressing signals from gamma rays. The simulations successfully identified optimal composite parameters such as particle size, geometry, and inter-particle pitch. This information is key to the subsequent fabrication and scale-up of the desired GS20-in-acrylic composite. Finally, the simulation results presented in this paper demonstrate that arranged composites can provide high neutron detection efficiency with gamma misidentification values of <1 in 10 6 gamma rays, assuming irradiation with a 252 Cf spontaneous fission source.

46 INSTRUMENTATION RELATED TO NUCLEAR SCIENCE AND ↗

Bringing Federated Identity to Grid Computing

The Fermi National Accelerator Laboratory (FNAL) is facing the challenge of providing scientific data access and grid submission to scientific collaborations that span the globe but are hosted at FNAL. Users in these collaborations are currently required to register as an FNAL user and obtain FNAL credentials to access grid resources to perform their scientific computations. These requirements burden researchers with managing additional authentication credentials, and put additional load on FNAL for managing user identities. Our design integrates the existing InCommon federated identity infrastructure, CILogon Basic CA, and MyProxy with the FNAL grid submission system to provide secure access for users from diverse experiments and collab orations without requiring each user to have authentication credentials from FNAL. The design automates the handling of certificates so users do not need to manage them manually. Although the initial implementation is for FNAL's grid submission system, the design and the core of the implementation are general and could be applied to other distributed computing systems.

Teheran, Jeny↗

Design of virtual SCADA simulation system for pressurized water reactor

The Virtual SCADA system is a software-based Human-Machine Interface that can visualize the process of a plant. This paper described the results of the virtual SCADA system design that aims to recognize the principle of the Nuclear Power Plant type Pressurized Water Reactor. This simulation uses technical data of the Nuclear Power Plant Unit Olkiluoto 3 in Finland. This device was developed using Wonderware Intouch, which is equipped with manual books for each component, animation links, alarm systems, real time and historical trending, and security system. The results showed that in general this device can demonstrate clearly the principles of energy flow and energy conversion processes in Pressurized Water Reactors. This virtual SCADA simulation system can be used as instructional media to recognize the principle of Pressurized Water Reactor.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

interflow: A Python package to organize, calculate, and visualize sectoral interdependency flow data

Many economic sectors rely on an uninterrupted “upstream” supply of a resource to conduct their primary functions, leaving them vulnerable to adverse effects should that resource flow be interrupted or compromised (OECD, 2017; U.S. EPA, 2010). Well-known examples of these relationships include water demand by the energy sector (e.g., thermoelectric cooling for nuclear generation) (Grubert & Sanders, 2018; Webber, 2017) and energy demand by the water sector (e.g., electricity required to treat or move water in the public water sector) (Congressional Research Service, 2017) though many others exist. Being able to calculate and document these interdependencies and evaluate where the greatest cross-sectoral intensities and flows exist can reveal opportunities to enhance the overall network. Despite the implications and potential impacts, however, these interconnections and flows have been historically complex to analyze and understand. The interflow package provides a flexible tool to organize, calculate, and visualize (using Sankey diagrams and other visualizations) sectoral interdependency flows for multiple subsectors and resources. This tool can help decision-makers, researchers, and other audiences more easily pull meaning from these interdependencies to reveal multi-faceted opportunities and risks. interflow can help investigate questions such as (1) which sectors have high cross-resource dependencies, (2) how does demand for a resource in various sectors compare across regions, and (3) where the sectoral and regional opportunities are for enhanced efficiency, security, and resiliency.

97 MATHEMATICS AND COMPUTING↗

Blockchain for High Performance Data Integrity and Provenance

Describes the development of a test bed to evaluate the the feasibility of different Blockchain mechanisms for determining the integrity of data computed on a high performance computer while limiting the degradation of performance.

99 GENERAL AND MISCELLANEOUS↗

Investigating Wireless Quantum Key Distribution for Advanced Reactor Communications

Remote operation of small modular reactor (SMR) facilities is an appealing prospect for streamlined operation costs, safety concerns, and user convenience. The ability to guarantee security of communication channels between offsite users and nuclear reactor facilities is critical to enabling remote operations, given the sensitive nature of reactor state data. This report proposes a configuration implementing quantum key distribution (QKD) and advanced encryption standard (AES) protocols to establish secure reactor data feeds. The model outlined, which utilizes the Argonne-developed SeQUeNCe software package and custom MATLAB code, determines free-space channel losses for microwave-band communications in a variety of weather conditions and simulates QKD via ground-satellite links. This report demonstrates the feasibility of repeatable, real-time key generation and distribution for this configuration towards enabling secure wireless reactor communications.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

Secure multi-party communication with quantum key distribution managed by trusted authority

Techniques and tools for implementing protocols for secure multi-party communication after quantum key distribution ("QKD") are described herein. In example implementations, a trusted authority facilitates secure communication between multiple user devices. The trusted authority distributes different quantum keys by QKD under trust relationships with different users. The trusted authority determines combination keys using the quantum keys and makes the combination keys available for distribution (e.g., for non-secret distribution over a public channel). The combination keys facilitate secure communication between two user devices even in the absence of QKD between the two user devices. With the protocols, benefits of QKD are extended to multi-party communication scenarios. In addition, the protocols can retain benefit of QKD even when a trusted authority is offline or a large group seeks to establish secure communication within the group.

97 MATHEMATICS AND COMPUTING↗

Proton beam therapy control system

A tiered communications architecture for managing network traffic in a distributed system. Communication between client or control computers and a plurality of hardware devices is administered by agent and monitor devices whose activities are coordinated to reduce the number of open channels or sockets. The communications architecture also improves the transparency and scalability of the distributed system by reducing network mapping dependence. The architecture is desirably implemented in a proton beam therapy system to provide flexible security policies which improve patent safety and facilitate system maintenance and development.

97 MATHEMATICS AND COMPUTING↗

Proton beam therapy control system

A tiered communications architecture for managing network traffic in a distributed system. Communication between client or control computers and a plurality of hardware devices is administered by agent and monitor devices whose activities are coordinated to reduce the number of open channels or sockets. The communications architecture also improves the transparency and scalability of the distributed system by reducing network mapping dependence. The architecture is desirably implemented in a proton beam therapy system to provide flexible security policies which improve patent safety and facilitate system maintenance and development.

97 MATHEMATICS AND COMPUTING↗

Cybersecurity Vulnerability Assessment Methodologies for Nuclear Power Plants

As any mechanical system ages, broken or outdated parts must be replaced; nuclear power plants (NPPs) are no different. The average age of a NPP in the United States' aging fleet of commercial reactors is 35 years, with many of these plants operating under extensions of their original licenses. These plants, originally designed in the 1960's and 1970's, are controlled by analog instrumentation and control (I and C) systems, and have since been upgraded (to varying degrees) to hybrid analog-digital systems. As these NPPs are upgraded to continue operating and to meet more stringent safety requirements imposed by the Nuclear Regulatory Commission (NRC), the implementation of digital systems to monitor and run the power plant introduces new vulnerabilities that must be addressed. The main objectives of a vulnerability assessment (VA) are to identify, quantify, and prioritize all of the susceptibilities inherent in a system. This allows for all weaknesses to be analyzed, and for the most serious concerns to be addressed first. Traditional VA methodologies deal with the analysis of physical systems associated with the NPP; with the introduction of digital control systems and computer networks, these methodologies must be expanded to include these fundamentally different systems and vulnerability concerns. Digital systems have been used in NPPs since the 1980's, but only for non-safety control systems; attacks on these systems were not deemed consequential, and no dedicated VA methodology was required. However, 'all new NPPs are being designed with integrated digital instrumentation and control systems as the backbone of protection, controls, alarms, and display and monitoring'. This gives rise to new vulnerabilities such as disrupted data displays, the suppression of critical alarms, or unauthorized access to secure systems from connected networks. The NRC released formal cybersecurity regulations in March 2009 (10 CFR 73.54), as well as a guide for the program in January 2010 (RG 5.71). However, the regulations and guide provide limited insight on how to identify these vulnerabilities; the focus is on remediating them once found. Hence, there is a need for a comprehensive, systematic methodology to conduct a VA on digital computer and communications and network systems. In this paper, we review traditional VA methodologies and discuss relevant cases. Then we discuss challenges to vulnerabilities within the context of modernization of the fleet and what needs to be done to address this issue.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

Assessment of Post-Quantum Cryptographic Algorithms

Recent research and development in exploiting quantum phenomenon have solidified the creation of large-scale quantum computers as a reality. These machines will have the ability to solve intractable problems defined on conventional computers. This has a significant impact on current cryptographic systems. A viable quantum computer will require an increase in symmetric key sizes and the replacement of asymmetric cryptographic schemes. Specifically, new constructs for public key cryptosystems must be established in order to continue to ensure the security that digital signatures and key exchange protocols provide. Understanding the post-quantum landscape is critical to applying Sandia-developed capabilities to post-quantum cyber areas. Developing a cohort of experts in this challenging and volatile space has enabled our ability to adapt to the new challenges in various customer mission areas.

71 CLASSICAL AND QUANTUM MECHANICS, GENERAL PHYSIC↗

Making Wireless Networks Secure for NASA Mission Critical Applications using Virtual Private Network (VPN) Technology

With so many security issues involved with wireless networks, the technology has not been fully utilized in the area of mission critical applications. These applications would include the areas of telemetry, commanding, voice and video. Wireless networking would allow payload operators the mobility to take computers outside of the control room to their offices and anywhere else in the facility that the wireless network was extended. But the risk is too great of having someone sit just inside of your wireless network coverage and intercept enough of your network traffic to steal proprietary data from a payload experiment or worse yet hack back into your system and do even greater harm by issuing harmful commands. Wired Equivalent Privacy (WEP) is improving but has a ways to go before it can be trusted to protect mission critical data. Today s hackers are becoming more aggressive and innovative, and in order to take advantage of the benefits that wireless networking offer, appropriate security measures need to be in place that will thwart hackers. The Virtual Private Network (VPN) offers a solution to the security problems that have kept wireless networks from being used for mission critical applications. VPN provides a level of encryption that will ensure that data is protected while it is being transmitted over a wireless local area network (IAN). The VPN allows a user to authenticate to the site that the user needs to access. Once this authentication has taken place the network traffic between that site and the user is encapsulated in VPN packets with the Triple Data Encryption Standard (3DES). 3DES is an encryption standard that uses a single secret key to encrypt and decrypt data. The length of the encryption key is 168 bits as opposed to its predecessor DES that has a 56-bit encryption key. Even though 3DES is the common encryption standard for today, the Advance Encryption Standard (AES), which provides even better encryption at a lower cycle cost is growing acceptance. The user computer running the VPN client and the. target site that is running the . VPN firewall exchange this encryption key and therefore are the only ones that are able to decipher the data. The level of encryption offered by the VPN is making it possible for wireless networks to pass the strict security policies that have kept them from being used in the past. Now people will be able to benefit from the many advantages that wireless networking has to offer in the area of mission critical applications.

Nichols, Kelvin F.↗

Making Wireless Networks Secure for NASA Mission Critical Applications Using Virtual Private Network (VPN) Technology

With so many security issues involved with wireless networks, the technology has not been fully utilized in the area of mission critical applications. These applications would include the areas of telemetry, commanding, voice and video. Wireless networking would allow payload operators the mobility to take computers outside of the control room to their off ices and anywhere else in the facility that the wireless network was extended. But the risk is too great of having someone sit just inside of your wireless network coverage and intercept enough of your network traffic to steal proprietary data from a payload experiment or worse yet hack back into your system and do even greater harm by issuing harmful commands. Wired Equivalent Privacy (WEP) is improving but has a ways to go before it can be trusted to protect mission critical data. Today s hackers are becoming more aggressive and innovative, and in order to take advantage of the benefits that wireless networking offer, appropriate security measures need to be in place that will thwart hackers. The Virtual Private Network (VPN) offers a solution to the security problems that have kept wireless networks from being used for mission critical applications. VPN provides a level of encryption that will ensure that data is protected while it is being transmitted over a wireless local area network (LAN). The VPN allows a user to authenticate to the site that the user needs to access. Once this authentication has taken place the network traffic between that site and the user is encapsulated in VPN packets with the Triple Data Encryption Standard (3DES). 3DES is an encryption standard that uses a single secret key to encrypt and decrypt data. The length of the encryption key is 168 bits as opposed to its predecessor DES that has a 56-bit encryption key. Even though 3DES is the common encryption standard for today, the Advance Encryption Standard (AES), which provides even better encryption at a lower cycle cost is growing acceptance. The user computer running the VPN client and the target site that is running the VPN firewall exchange this encryption key and therefore are the only ones that are able to decipher the data. The level of encryption offered by the VPN is making it possible for wireless networks to pass the strict security policies that have kept them from being used in the past. Now people will be able to benefit from the many advantages that wireless networking has to offer in the area of mission critical applications.

Nichols, Kelvin F.↗

FAIR Ecosystems for Science at Scale

High Performance Computing (HPC) centers provide resources to users who require greater scale to “get science done”. They deploy infrastructure with singular hardware architectures, cutting-edge software environments, and stricter security measures as compared with users’ own resources. As a result, users often create and configure digital artifacts in ways that are specialized for the unique infrastructure at a given HPC center. Each user of that center will face similar challenges as they develop specialized solutions to take full advantages of the center’s resources, potentially resulting in significant duplication of effort. Much duplicated effort could be avoided, however, if users of these centers found it easier to discover others’ solutions and artifacts as well as share their own. The FAIR principles address this problem by presenting guidelines focused around metadata practices to be implemented by vaguely defined “communities”; in practice, these tend to gather by domain (e.g. bioinformatics, geosciences, agriculture). Domain-based communities can unfortunately end up functioning as silos that tend both to inhibit sharing of solutions and best practices as well as to encourage fragile and unsustainable improvised solutions in the absence of best-practice guidance. We propose that these communities pursuing “science at scale” be nurtured both individually and collectively by HPC centers so that users can take advantage of shared challenges across disciplines and potentially across HPC centers. We describe an architecture based on the EOSC-Life FAIR Workflows Collaboratory, specialized for use with and inside HPC centers such as the Oak Ridge Leadership Computing Facility (OLCF), and we speculate on user incentives to encourage adoption. We note that a focus on FAIR workflow components rather than FAIR workflows is more likely to benefit the users of HPC centers.

Wilkinson, Sean [ORNL] (ORCID:0000000214437479)↗

Computational Fluid Dynamics Simulation of Lignocellulosic Biomass Transport in a Compression-Screw Feeder

There is continued interest in lignocellulosic biomass feedstocks for producing power, heat, and transportation liquid fuels in order to increase energy diversification and security. However, there are a few problems associated with the biomass production that must be resolved before biorefineries are considered economical. One of these problematic operations is the process of feeding biomass to reactor systems. Compression-screw feeders have been widely used as a way to fulfill this purpose. However, due to variability of feedstock properties and its complex challenges, production plants operate at less than 50% of their design capacity due to process upsets along with mechanical wear and failure. The objective of this study is to numerically investigate the screw-feeder operation and performance for various biomass physical properties and under different operating conditions. Therefore, the findings from this study will reduce the number of physical experiments needed to improve the plant design.

09 BIOMASS FUELS↗

A reinforcement learning approach to long-horizon operations, health, and maintenance supervisory control of advanced energy systems

In this work, we develop a Reinforcement Learning (RL) approach to the supervisory control problem for advanced energy systems, such as novel nuclear reactors and other demand-driven, mission-critical, and component-health-sensitive energy plants. The inclusive problem landscape considered captures the stochastic confluence of plant performance, component health evolution, power demand from the grid, diverse maintenance actions, and operator-defined goals and constraints, all considered over meaningfully long-enough reasoning horizons. Key aspects of the proposed approach are a receding horizon control-inspired technique dictating time- or event-triggered supervisory policy (re-)constructions, as well as additional capability-enabling contributions such as timescale compression, to handle long reasoning horizons and uncertainty in parts of the problem, and practical yet demonstrably-effective handling of hybrid action spaces with continuous and discrete decision variables. The resulting algorithm consists of a simulation-based RL agent constructing stochastic supervisory control policies over nontrivial action spaces and for long horizons, applying the learned policy to the system for a much shorter interval, and perpetually repeating, to construct the next long-horizon policy. That next policy will only be applied, again, for a short interval, yet originally far-in-time events move progressively closer, their associated uncertainty decreases, and new events and aspects enter the reasoning horizon. The proposed methodology bridges fundamental receding horizon concepts with the unequivocally stronger and more scalable reasoning of contemporary RL. Numerical examples using Soft Actor–Critic Deep RL illustrate the operation and efficacy of the proposed technique for a power plant tasked with health-aware load following missions in a dynamic electricity market landscape.

97 MATHEMATICS AND COMPUTING↗

Regularizing the linearly extrapolated BDF2 scheme for incompressible flows with time relaxation

This paper presents a highly-efficient finite element scheme for the time relaxation model (TRM). The efficiency is achieved through the second-order BDF2 time-stepping scheme with linear extrapolation (BDF2LE). The accuracy of the scheme is also greatly enhanced through the use of the divergence-free Scott-Vogeulis finite elements, and van Cittert approximate deconvolution. A complete finite element analysis is provided, which includes rigorous proofs for the stability, well-possessedness, and convergence of both velocity and pressure solutions. Furthermore, we also demonstrate that the inclusion of the linear time relaxation term preserves the long-time stability of the unregularized BDF2LE scheme. Finally, numerical experiments are presented that demonstrate the added stability and accuracy that time relaxation can provide.

97 MATHEMATICS AND COMPUTING↗