Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “operating systems security”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 1,063 records · Page 59

SFM - Sandia Fireball Model

SAND2022-13231 O Sandia Fireball Model is used in the assessment of liquid propellant fireballs in the source term analysis for space nuclear systems launch safety. Sandia National Laboratories is a multimission laboratory managed and operated by National Technology & Engineering Solutions of Sandia, LLC, a wholly owned subsidiary of Honeywell International Inc., for the U.S. Department of Energy’s National Nuclear Security Administration under contract DE-NA0003525.

Powers, Dana↗

Resilient U.S. Land Ports of Entry

The continued operation of Land Ports of Entry (LPOE), managed by the Customs and Border Protection (CBP) and General Services Administration% is vital to the U.S. economy and security. Border faculties are included in the Department of Homeland Security (DHS) Government Facilities Sector2, one of the 16 critical infrastructures "whose assets, systems, and networks, whether physical or virtual, are considered so vital to the United States that their incapacitation or destruction would have a debilitating effect on security, national economic security, national public health or safety, or any combination thereof.'" Specifically, disruptions to the flow of border crossing traffic, in the form of closures or increased border crossing wait times, impact the economy and security of all countries involved. This paper describes a process for analyzing and improving the resilience of U.S. Land Ports of Entry. For LPOE, the team believes that energy resilience is the primary objective due to the complete reliance on the e-manifest system and the increasing use of Multi-Energy Portals (MEPs). Emanifests are part of CPB's Automated Commercial Environment (ACE). They document several key pieces of information about cargo vehicles wishing to cross the border into the United States and are submitted before arriving at the port. Vehicles can be flagged for more invasive inspection based on the content of the e-manifest. MEPs are a non-intrusive inspection (NII) technology used to scan the contents of the cargo. Together MEPs and ACE serve an important role in aiding CBP with their mission to protect "the public from dangerous people and materials", and "enabling legitimate trade and travel.'" To analyze resilience of a port, the team would need to understand the port's current energy usage, which systems depend on energy and what backup systems exist, and any emergency operation plans that dictate how systems are operated in the event of a power outage. The team would also need to determine the design basis threats (DBTs) for the LPOE which could include natural disasters, manmade events, and accidents. The magnitudes of the DBTs are calculated and are then translated to expected impacts on the infrastructure and systems at the port. With this information gathered, existing LPOE models developed here at Sandia National Laboratories could be extended to support decisions about resilience. Current models are implemented in FlexSim, a 3rd party discrete event simulator. FlexSim provides 3-D visuals of physical layout that can reveal valuable insights, allows input to be variable (e.g. time it takes to interact with the CBP officer at primary inspection can vary) so that a whole range of possibilities can be captured in the results, and can be used to collect user-defined output metrics. Current LPOE models focus on cargo vehicle traffic, and process changes caused by the installation of new drive-through MEPs. Extending them to address resilience questions would require the addition of key pieces of information learned during the resilience analysis including critical systems, failure rates, and process changes for when failures occur. The primary output metric for current models is border crossing wait time. Additional metrics would also be added to the model to gain a more complete understanding of impacts related to resilience, for example, MEP scan rate. Once complete, the model could be used to analyze the effectiveness of mitigation strategies representing some future state.

29 ENERGY PLANNING, POLICY, AND ECONOMY↗

PV Cyber Security Research (Final Report)

Extensive deployment of interoperable distributed energy resources (DER) on power systems is increasing the power system cyber security attack surface. National and jurisdictional interconnection standards require DER to include a range of autonomous and commanded grid support functions which can drastically influence power quality, voltage, and bulk system frequency. This project was split into two phases. The first provided a survey and roadmap of the cybersecurity for the solar industry. The second investigated multiple PV cybersecurity research and development (R&D) concepts identified in the first phase. In the first year, the team created a roadmap for improving cybersecurity for distributed solar energy resources. This roadmap was intended to provide direction for the nation over the next five years and focused on the intersection of industry and government and recommends activities in four related areas: stakeholder engagement, cyber security research and development, standards development, and industry best practices. At the same time, the team produced a primer for DER vendors, aggregators, and grid operators to establish a common taxonomy and describe basic principles of cyber security, encryption, communication protocols, DER cyber security recommendations and requirements, and device-, aggregator-, and utility-level security best practices to ensure data confidentiality, integrity, and availability. This material was motivated by the need to assist the broader PV industry with cybersecurity resilience and describe the state-of-the-art for securing DER communications. Lastly, an adversary-based assessment of multiple PV devices was completed at the Distributed Energy Technologies Laboratory at Sandia National Laboratories to determine the status of industry cybersecurity practices. The team found multiple deficiencies in the security features of the assessed devices. In the second year, a set of recommendations was created for DER communication protocols— especially with respect to the state-of-the-art requirements in IEEE 2030.5. Additionally, several cybersecurity R&D technologies related to communications-enabled photovoltaic systems were studied to harden DER communication networks. Specifically, the team investigated (a) using software defined networking to create a moving target defense system for DER communications, and (b) engineering controls that prevent misprogramming or adversary action on DER devices/networks by disallowing setpoints that will generate unstable power system operations.

14 SOLAR ENERGY↗

Secure NTP Implementation for Power System Synchronization

Network Time Protocol (NTP), originally developed in the 1980s, remains one of the most widely adopted protocols for synchronizing clocks over Internet Protocol (IP)-based networks. It distributes time with millisecond-level accuracy across Ethernet-based systems and continues to be a standard in both enterprise and operational technology environments.

97 MATHEMATICS AND COMPUTING↗

National Ignition Facility Opacity Time Resolved Spectrometer Systems Engineering Final Project

The National Ignition Facility (NIF) is the world’s largest and most energetic laser facility. The NIF system is designed to produce high energy density (temperature and pressure) conditions through the application of its 192 laser beams. One of the users of NIF is the opacity platform developed to study the opacities at temperatures and densities relevant to the solar interior and stellar evolution. The platform was developed to study iron (Fe) opacity at temperatures relevant to the solar interior. The opacity campaign uses spectrometers to gather data. Spectrometers utilize crystals to produce x-ray spectra that are recorded on time-integrated and time-resolved detectors. The opacity spectrometer (OpSpec) currently fielded and in use at NIF uses a time integrated film channel to collect data. The opacity spectrometer time resolved (OpSpecTR) will utilize novel hCMOS detectors to capture time resolved images of spectra of interest. The key stakeholders identified for OpSpecTR included the physicists responsible for OpSpec and OpSpecTR, the Target Area Science and Engineering (TASE) department at NIF, the NIF and Photon Science (NIF & PS) Opacity program, the Nevada National Security Site (NNSS) Physics and Engineering program, the Sandia hCMOS manufacturing and testing program, and the Los Alamos National Laboratory (LANL) program sponsor. The Target and Experimental Operations (TEXOPS) was identified as a key stakeholder because the group includes the individuals that will physically interact with the OpSpecTR system as it participates in NIF experiments. The opacity platform collects data in a unique orientation relative to the existing diagnostics fielded at NIF. The existing infrastructure at NIF uses a diagnostic manipulator (DIM) to insert the diagnostic near the target chamber center to collect data during a NIF shot. Existing diagnostics collect data through the center line of the DIM axis and collect relevant data perpendicular to this axis. The opacity platform requires crystals mounted in a specific orientation which requires data collection parallel to the DIM axis. This deviation from standard NIF practices was a key factor in developing requirements.

42 ENGINEERING↗

Security of Mobile Radiological Sources: Overview of Industry Applied Technologies

Small radiological sources used in industrial settings recurrently require transit between job sites. Securing these sources, while stationary, can be addressed with standard security approaches and equipment. Transport of these sources increases the risk and complexity of managing and maintaining control of these sources. Implementing methodologies to securely monitor and locate sources improves response and resolution of anomalous events during transit. The Mobile Source Transit Security (MSTS) system was developed to improve security and provide situational awareness of these mobile sources throughout their job cycle. The MSTS development effort focused on creating a set of systems that could be successfully implemented in industrial radiography and well-logging applications. The MSTS team worked to address source presence and location through use and storage. The MSTS system monitors radiological sources as they move from the base of operations to the job site and back. The system provides near-real-time monitoring of the mobile source location and status and early notification of source loss or theft by transmitting operational status and alerting anomalous conditions over telematic links worldwide. The MSTS system can trigger an armed response or initiation of search and recovery operations and will automatically alert management and responsible staff if a radioactive source is lost or stolen whether it is on-site, in transport, or in storage.

98 NUCLEAR DISARMAMENT, SAFEGUARDS, AND PHYSICAL P↗

Threats to a Colorado river provisioning basin under coupled future climate and societal scenarios

Clean, reliable supplies of water are critical to the sustainability and resilience of communities, including water needed for energy and food production, industry, drinking water, and other human and ecological needs. However, water infrastructure and management in the United States are largely optimized for historic conditions—designed and operated to respond to social needs, and past mean and extreme streamflow, which may no longer apply in the future. Temperature, precipitation, ecosystem dynamics, energy and food production, and social systems are all experiencing changes, which cumulatively affect the security of water supply. Here, we examine the impact of these changes in a provisioning basin in the arid Southwest, the San Juan River, which supplies water, food, and energy to the Colorado River and the Rio Grande. Our analysis applies a multi-model framework to examine future climate and water use scenarios. Results demonstrate that the San Juan River basin could experience significant disruptions to water deliveries (-12% to -48% for the drier models) and shortages that exceed manageable thresholds (53% to 73% of water in shorted years), potentially affecting both the local basin as well as other regions that receive water and energy from the San Juan. While water stress metrics vary across the scenarios, results indicate the need for government, industry, and communities to consider options for adapting to water supply shifts. These results raise important questions regarding the resilience of water resources in basins across the West under future scenarios and implications for energy, food, and other water supply needs.

54 ENVIRONMENTAL SCIENCES↗

EUForia

EUForia is a general-purpose model checker that solves reachability problems in dynamical systems. It implements an abstraction-refinement process in which the system is iteratively approximated until it can prove or disprove that a system state is reachable. Sandia National Laboratories is a multimission laboratory managed and operated by National Technology & Engineering Solutions of Sandia, LLC, a wholly owned subsidiary of Honeywell International Inc., for the U.S. Department of Energy’s National Nuclear Security Administration under contract DE-NA0003525. SAND2021-3020 O

Bueno, Denis↗

Sphynx

Sphynx is a software library for parallel graph partitioning and load balancing. It partitions a set of vertices in a graph such that the vertex parts are balanced, and the edge cut is approximately minimized. The primary use case is to partition a computational graph into smaller tasks that can be assigned to processors (cores) for efficient parallel computing. Sphynx is based on the Trilinos scientific computing toolkit so can run on both multi-CPU and multi-GPU systems. SAND2020-12183 M Sandia National Laboratories is a multimission laboratory managed and operated by National Technology & Engineering Solutions of Sandia, LLC, a wholly owned subsidiary of Honeywell International Inc., for the U.S. Department of Energy's National Nuclear Security Administration under contract DE-NA0003525.

Boman, Erik↗

Radsource Mr: Mixed Reality Planning Tool For Radioactive Recovery

The RadSource MR system leverages Meta Quest 3's advanced mixed reality capabilities to create a comprehensive spatial planning platform for end-of-life sealed radioactive source recovery operations. The application utilizes the Quest 3's high-resolution passthrough cameras and spatial mapping algorithms to generate accurate 3D environmental models. Core technical components include: (1) Real-time spatial measurement algorithms calculating distances, angles, slopes, and surface areas with sub-centimeter accuracy; (2) Virtual object placement system allowing users to position digital representations of recovery equipment (trailers, containment vessels, protective barriers) within the real environment; (3) Voice recording and annotation system for hands-free documentation in protective equipment; (4) 3D mesh capture and storage capabilities for post-operation analysis and regulatory documentation. (5) Procedure documentation is available for viewing in Mixed Reality, providing an innovative and convenient way to access the information during pre-visit and inspection activities. (6) Support for screen capture for the view for real world and virtual objects together to use it later for planning. The system integrates computer vision techniques for environmental understanding, spatial mathematics for precise measurements, and human-computer interaction principles optimized for hazardous environment operations. Data persistence allows teams to save and share planning sessions across multiple stakeholders while maintaining operational security requirements.

Khadka, Rajiv [Idaho National Laboratory (INL), Id↗

Cyber Security Gap Analysis for Critical Energy Systems (CSGACES)

This study describes a cyber security research & development (R&D) gap analysis and research plan to address cyber security for industrial control system (ICS) supporting critical energy systems (CES). The Sandia National Laboratories (SNL) team addressed a long-term perspective for the R&D planning and gap analysis. Investment will posture CES for sustained and resilient energy operations well into the future.

42 ENGINEERING↗

Utility-Scale Solar, 2021 Edition: Empirical Trends in Deployment, Technology, Cost, Performance, PPA Pricing, and Value in the United States [Slides]

Berkeley Lab’s “Utility-Scale Solar, 2021 Edition” provides an overview of key trends in the U.S. market, with a focus on 2020. Highlights of this year’s update include: A record of nearly 9.6 GWAC of new utility-scale PV capacity came online in 2020, bringing cumulative installed capacity to more than 38.7 GWAC across 43 states. 89% of all new utility-scale PV capacity added in 2020 uses single-axis tracking. Median installed project costs declined to $\$$1.4/WAC (or $\$$1.1/WDC) in 2020. Project-level capacity factors vary widely, from 9% to 36% (on an AC basis), with a sample median of 24%. The report explores drivers of this variation. Utility-scale PV’s LCOE fell to $\$$34/MWh in 2020 ($\$$28/MWh if factoring in the federal investment tax credit, or ITC). PPA prices have largely followed the decline in solar’s LCOE over time, but have stagnated more recently. Prices from a sample of recent contracts average just above $\$$20/MWh (levelized). In 2020, solar’s average market value (defined in the report to include only energy and capacity value) exceeded average wholesale prices in 12 of the 17 balancing authorities analyzed (including 4 of the 7 independent system operators across the United States). Adding battery storage is one way to increase the value of solar. Our public data file tracks metadata for more than 150 PV+battery hybrid projects that are already online or that have secured offtake arrangements. At the end of 2020, there were at least 460 GW of utility-scale solar power capacity within the interconnection queues across the nation, 160 GW of which include batteries. For more information, and to explore related interactive data visualizations, go to utilityscalesolar.lbl.gov.

14 SOLAR ENERGY↗

Unsupervised Detection of SOC Spoofing in OCPP 2.0.1 EV Charging Communication Protocol Using One-Class SVM

The electric vehicles (EVs) market keeps growing globally; thus, it is critical to secure the EV charging communication protocols in order to guarantee reliable and fair charging operations among the customers. The Open Charge Point Protocol (OCPP) 2.0.1 supports the communication between the Electric Vehicle Supply Equipment (EVSE) and Charging Station Management Systems (CSMSs); therefore, it becomes vulnerable to several types of attacks, which aim to jeopardize smart charging, billing, and energy management. Specifically, OCPP 2.0.1 allows the self-reporting of the State of Charge (SOC) values, which makes it vulnerable to spoofing-based cyberattacks, which target manipulating the scheduling priorities, distorting the load forecasts, and extending the charging sessions in an unfair manner. In this paper, we try to address this type of attack by providing a comprehensive analysis of the SOC spoofing attacks and introducing a novel unsupervised detection framework based on the One-Class Support Vector Machine (OCSVM) algorithm. Specifically, two types of attack scenarios are analyzed (i.e., priority manipulation and session extension) by deriving engineered features that capture the nonlinear relationships under normal charging behavior. Detailed simulation-based results are derived by utilizing the DESL-EPFL Level 3 EV charging dataset. Our results demonstrate high F1-score and recall in identifying spoofed SOC values and that the proposed OCSVM model demonstrates superior performance compared to alternative clustering and deep-learning based detectors.

EV charging↗

Restricted access processor - An application of computer security technology

This paper describes a security guard device that is currently being developed by Computer Sciences Corporation (CSC). The methods used to provide assurance that the system meets its security requirements include the system architecture, a system security evaluation, and the application of formal and informal verification techniques. The combination of state-of-the-art technology and the incorporation of new verification procedures results in a demonstration of the feasibility of computer security technology for operational applications.

Mcmahon, E. M.↗

An Interoperable, Agricultural Information System Based on Satellite Remote Sensing Data

Monitoring global agricultural crop conditions during the growing season and estimating potential seasonal production are critically important for market development of US. agricultural products and for global food security. The Goddard Space Flight Center Earth Sciences Data and Information Services Center Distributed Active Archive Center (GES DISC DAAC) is developing an Agricultural Information System (AIS), evolved from an existing TRMM Online Visualization and Analysis System (TOVAS), which will operationally provide satellite remote sensing data products (e.g., rainfall) and services. The data products will include crop condition and yield prediction maps, generated from a crop growth model with satellite data inputs, in collaboration with the USDA Agricultural Research Service. The AIS will enable the remote, interoperable access to distributed data, by using the GrADS-DODS Server (GDS) and by being compliant with Open GIS Consortium standards. Users will be able to download individual files, perform interactive online analysis, as well as receive operational data flows. AIS outputs will be integrated into existing operational decision support systems for global crop monitoring, such as those of the USDA Foreign Agricultural Service and the U.N. World Food Program.

Teng, William↗

Mission Assurance Modeling and Simulation: A Cyber Security Roadmap

This paper proposes a cyber security modeling and simulation roadmap to enhance mission assurance governance and establish risk reduction processes within constrained budgets. The term mission assurance stems from risk management work by Carnegie Mellon's Software Engineering Institute in the late 19905. By 2010, the Defense Information Systems Agency revised its cyber strategy and established the Program Executive Officer-Mission Assurance. This highlights a shift from simply protecting data to balancing risk and begins a necessary dialogue to establish a cyber security roadmap. The Military Operations Research Society has recommended a cyber community of practice, recognizing there are too few professionals having both cyber and analytic experience. The authors characterize the limited body of knowledge in this symbiotic relationship. This paper identifies operational and research requirements for mission assurance M&S supporting defense and homeland security. M&S techniques are needed for enterprise oversight of cyber investments, test and evaluation, policy, training, and analysis.

Gendron, Gerald↗

Immutable Secure Data Exchange and Storage for Urban Air Mobility Environments

The Urban Air Mobility (UAM) environment is derived from the Unmanned Traffic Management (UTM) concept of operations. Within the environment, UAM operators work independently to manage aerial vehicles in the urban environment. Providers of Services (PSU), UAM operators, and Supplemental Data Service Providers provide services to support flight operations within the UAM environment. The intent of this work is to leverage a permissioned blockchain approach, to, simulate secure data exchange and storage for UAM environments. Blockchain technologies can be used for identity management of vehicles, people, and systems.

Blockchain↗

Researching the Effects of Long-Term Dry Storage on Commercial Spent Nuclear Fuel

When the fuel in a nuclear reactor no longer contributes efficiently to power production, it is discharged and stored onsite in a water-filled spent fuel pool. When nuclear power plants in the United States were originally designed, it was expected that onsite storage would be temporary. The used nuclear fuel, also known as spent nuclear fuel (SNF), was to be removed from the storage pools after only a few years of cooling and sent for reprocessing. However, commercial reprocessing was not implemented in the United States, and utility spent fuel pools began running out of room. In order to continue power production, nuclear utilities began expanding onsite fuel storage capacities, first by increasing the density of fuel in the fuel pool racks, and then by developing and implementing dry storage casks. The dry storage casks are stored onsite by each utility at a licensed and secured independent spent fuel storage installation (ISFSI). Dry storage casks are robust systems typically consisting of a sealed metal cylinder surrounded by a combination of steel and concrete to provide radiation shielding. The first dry storage casks were loaded with SNF in 1986. Currently there are over 3,000 loaded dry storage casks, and approximately 200 new casks are being placed into service annually at operating nuclear power plants nationwide. Multiple nuclear power plant sites in the United States have shut down and completed decommissioning activities except for the removal of fuel in dry storage. Eventually, the 75,000+ tons of discharged SNF at more than 70 secured locations will need to be safely and securely transported to a new location(s) for eventual disposition. The continued safety and security of this material must be assured.

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗