Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “systems security”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 1,063 records · Page 59
All sourcesNASA NTRSDOE OSTI
DOE OSTI2017

Cyber-Physical Attack-Resilient Wide-Area Monitoring, Protection, and Control for the Power Grid

Cyber security and resiliency of Wide-Area Monitoring, Protection and Control (WAMPAC) applications is critically important to ensure secure, reliable, and economic operation of the bulk power system. WAMPAC relies heavily on the security of measurements and control commands transmitted over wide-area communication networks for real-time operational, protection, and control functions. Also, the current “N-1 security criteria” for grid operation is inadequate to address malicious cyber events and therefore it is important to fundamentally redesign WAMPAC and to enhance Energy Management System (EMS) applications to make them attack-resilient. In this paper, we propose an end-to-end defense-in-depth architecture for attack-resilient WAMPAC that addresses resilience at both the infrastructure layer and the application layers. Also, we propose an attack-resilient cyber-physical security framework that encompasses the entire security life cycle including risk assessment, attack prevention, attack detection, attack mitigation, and attack resilience. The overarching objective of this paper is to provide a broad scope that comprehensively describes most of the major research issues and potential solutions in the context of cyber-physical security of WAMPAC for the power grid.

24 POWER TRANSMISSION AND DISTRIBUTION↗
DOE OSTI2015

Towards improving software security by using simulation to inform requirements and conceptual design

We illustrate the use of modeling and simulation early in the system life-cycle to improve security and reduce costs. The models that we develop for this illustration are inspired by problems in reliability analysis and supervisory control, for which similar models are used to quantify failure probabilities and rates. In the context of security, we propose that models of this general type can be used to understand trades between risk and cost while writing system requirements and during conceptual design, and thereby significantly reduce the need for expensive security corrections after a system enters operation

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2015

Introduction: Cybersecurity and Software Assurance Minitrack

Modern society is dependent on software systems of remarkable scope and complexity. Yet methods for assuring their security and functionality have not kept pace. The result is persistent compromises and failures despite best efforts. Cybersecurity methods must work together for situational awareness, attack prevention and detection, threat attribution, minimization of consequences, and attack recovery. Because defective software cannot be secure, assurance technologies must play a central role in cybersecurity approaches. There is increasing recognition of the need for rigorous methods for cybersecurity and software assurance. The goal of this minitrack is to develop science foundations, technologies, and practices that can improve the security and dependability of complex systems.

Burns, Luanne↗
DOE OSTI2024

Disruption of Commercial Solar Inverter System by TLS Proxy Man-in-the-Middle Attack

Transport Layer Security (TLS) is a cryptographic protocol that encrypts communication data, providing end-to-end communication encryption and authentication. Currently, TLS is widely adopted for securing communication between servers and end devices, including solar inverter systems. Therefore, users/operators can securely access the solar inverters through a web user interface (WebUI) application programmable interface (API) on a PC or server over TLS-enabled Wi-Fi or Ethernet. However, the security of the TLS-based network becomes compromised if it is breached by a TLS proxy man-in-the-middle (MITM) exploit. This report explores potential vulnerabilities in a commercial solar inverter system that leverages a TLS proxy MITM and discusses the impacts through assume-breached penetration testing. Furthermore, the paper explores recommended mitigation methods against the TLS proxy MITM exploit in solar inverters.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2025

Modularization of Small Modular Reactor Facilities: Physical Protection Recommendations

U.S. nuclear power facilities face increasing challenges in meeting dynamic security requirements caused by evolving and expanding threats while keeping costs reasonable to make nuclear energy competitive. In consideration of the economic viability of small modular reactor (SMR) facilities, many designers and utilities are considering a modular approach to the construction and operation of these facilities. This modular approach considers building and operating a first unit; once the first reactor is in operation, construction will begin on a second reactor. This process would allow the vendor or utility to ensure production of energy and financial income while the second reactor is under construction. This project evaluates the feasibility of modular construction in terms of physical protection and identifies several recommendations for vendors and utilities considering this approach. To conduct this evaluation, a hypothetical three-unit SMR facility was developed, a physical protection system (PPS) was considered for the design, and a hypothetical design basis threat (DBT) was used to evaluate this PPS. Multiple outsider sabotage scenarios were examined, with adversary team sizes ranging from 4-to-8 to determine security system effectiveness. The results of this work will influence PPS designs and facility designs for U.S. domestic SMRs. This work will also demonstrate how a series of experimental and modeling capabilities across the Department of Energy (DOE) complex can impact the design and completion of security-by-design (SeBD) for SMRs considering modular construction. The conclusions and recommendations in this document may be applicable to all SMR designs.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗
NASA NTRS1987

The FAO/NASA/NLR Artemis system - An integrated concept for environmental monitoring by satellite in support of food/feed security and desert locust surveillance

The African real time environmental monitoring using imaging satellites (Artemis) system, which should monitor precipitation and vegetation conditions on a continental scale, is presented. The hardware and software characteristics of the system are illustrated and the Artemis databases are outlined. Plans for the system include the use of hourly digital Meteosat data and daily NOAA/AVHRR data to study environmental conditions. Planned mapping activities include monthly rainfall anomaly maps, normalized difference vegetation index maps for ten day and monthly periods with a spatial resolution of 7.6 km, ten day crop/rangeland moisture availability maps, and desert locust potential breeding activity factor maps for a plague prevention program.

Hielkema, J. U.↗
DOE OSTI2017

Nuclear Power Plant Cyber Security Discrete Dynamic Event Tree Analysis (LDRD 17-0958) FY17 Report

Instrumentation and control of nuclear power is transforming from analog to modern digital assets. These control systems perform key safety and security functions. This transformation is occurring in new plant designs as well as in the existing fleet of plants as the operation of those plants is extended to 60 years. This transformation introduces new and unknown issues involving both digital asset induced safety issues and security issues. Traditional nuclear power risk assessment tools and cyber security assessment methods have not been modified or developed to address the unique nature of cyber failure modes and of cyber security threat vulnerabilities. iii This Lab-Directed Research and Development project has developed a dynamic cyber-risk in- formed tool to facilitate the analysis of unique cyber failure modes and the time sequencing of cyber faults, both malicious and non-malicious, and impose those cyber exploits and cyber faults onto a nuclear power plant accident sequence simulator code to assess how cyber exploits and cyber faults could interact with a plants digital instrumentation and control (DI&C) system and defeat or circumvent a plants cyber security controls. This was achieved by coupling an existing Sandia National Laboratories nuclear accident dynamic simulator code with a cyber emulytics code to demonstrate real-time simulation of cyber exploits and their impact on automatic DI&C responses. Studying such potential time-sequenced cyber-attacks and their risks (i.e., the associated impact and the associated degree of difficulty to achieve the attack vector) on accident management establishes a technical risk informed framework for developing effective cyber security controls for nuclear power.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗
DOE OSTI2018

Potential impacts of China's climate policies on energy security

Highlights: • We develop an energy security assessment framework in a 3E-integrated system model. • The potential relations between climate targets and energy security are examined. • Climate policy reduces risks of energy system in terms of main safety metrics. • The impact of emission budgets on energy diversity relies on the time scale options. • Co-benefits of energy security would improve the economics of climate policies. - Abstract: Energy security, as an indispensable constituent of economic security, has long been a top research priority, and the dynamics of energy security become particularly complicated with the involvement of climate change. In this work, we combined a one-sector integrated assessment framework with a series of well-proposed energy security metrics to extensively explore the unidirectional consistency between climate policy and energy security from the national perspective. Implementation of climate policy is generally beneficial for improving energy security. Specifically, climate policy helps to reduce the systematic risk of China's energy system according to the metrics of energy (oil) intensity, energy (oil) expenditures and per capita energy (oil) consumption independent of time scale options. As observed from the perspective of energy diversity, co-benefits arising from climate policy primarily emerge in the first half of this century, and they may gradually decline as emission constraints and the phasing out of fossil fuels are enhanced. Additionally, the macroeconomic costs required to reach China's committed carbon-peaking target might be far lower than the costs required to fulfill the emission budgets under the global 2-degree warming rise threshold. If the co-benefits of energy security are considered, the economics of climate policy is expected to significantly improve.

54 ENVIRONMENTAL SCIENCES↗
DOE OSTI2024

Secure hierarchical processing using a secure ledger

Disclosed is a system and method for processing data using blockchain technology. The system includes a memory having programmable instructions stored thereon that, when executed by a processor, cause the system to: authenticate one or more sensors in anticipation of receiving component data; receive component data, upon successful authentication; store the component data locally or to a cloud-based server and/or calculate a root value for the component data; store or embed the root value with the stored component data; condense the component data and link the condensed component data to the stored component data via the root value. The system further includes instructions to log the condensed data, including the root value, to a ledger, and to identify a tag or transaction id corresponding to the logging event for subsequent retrieval of the condensed data using the tag or transaction id.

Zhao, Wenbing↗
DOE OSTI2026

Supporting U.S. National Security Through Cybersecurity Partnerships

At NLR, we're studying energy evolutions and threats to understand the challenges they pose and uncover ways to leverage grid advancements to achieve more secure, defensible, and reliable systems. Our integrated research approach bridges the gap between cyber threats and real-world consequences to deliver actionable solutions that reduce vulnerabilities and help strengthen U.S. national security.

29 ENERGY PLANNING, POLICY, AND ECONOMY↗
DOE OSTI2015

THE GRISM LENS-AMPLIFIED SURVEY FROM SPACE (GLASS). IV. MASS RECONSTRUCTION OF THE LENSING CLUSTER ABELL 2744 FROM FRONTIER FIELD IMAGING AND GLASS SPECTROSCOPY

We present a strong and weak lensing reconstruction of the massive cluster Abell 2744, the first cluster for which deep Hubble Frontier Fields (HFF) images and spectroscopy from the Grism Lens-Amplified Survey from Space (GLASS) are available. By performing a targeted search for emission lines in multiply imaged sources using the GLASS spectra, we obtain five high-confidence spectroscopic redshifts and two tentative ones. We confirm one strongly lensed system by detecting the same emission lines in all three multiple images. We also search for additional line emitters blindly and use the full GLASS spectroscopic catalog to test reliability of photometric redshifts for faint line emitters. We see a reasonable agreement between our photometric and spectroscopic redshift measurements, when including nebular emission in photometric redshift estimations. We introduce a stringent procedure to identify only secure multiple image sets based on colors, morphology, and spectroscopy. By combining 7 multiple image systems with secure spectroscopic redshifts (at 5 distinct redshift planes) with 18 multiple image systems with secure photometric redshifts, we reconstruct the gravitational potential of the cluster pixellated on an adaptive grid, using a total of 72 images. The resulting mass map is compared with a stellar mass map obtained from the deep Spitzer Frontier Fields data to study the relative distribution of stars and dark matter in the cluster. We find that the stellar to total mass ratio varies substantially across the cluster field, suggesting that stars do not trace exactly the total mass in this interacting system. The maps of convergence, shear, and magnification are made available in the standard HFF format.

79 ASTRONOMY AND ASTROPHYSICS↗
DOE OSTI2020

A trilevel model against false gas-supply information attacks in electricity systems

The interdependence between natural gas and electricity systems is increasing rapidly due to the growing reliance on natural gas-fired generating units. Availability of natural gas for gas-fired generating units can impact the secure operation of electricity systems. Fuel supply shortage for gas-fired units can be caused by uncertain interruptible supply contracts and incorrect supply information. This article proposes a trilevel min-max-min defender-attacker-operator optimization problem to provide the power system operator a screening methodology that allocates a limited budget for best protecting critical fuel supply information, and also the strategies to sign firm supply contract to reduce natural gas supply uncertainties. We utilize a column and constraint generation (C&CG) algorithm to solve the proposed problem. We illustrate the effectiveness of this trilevel formulation using a case study based on IEEE 24-node test system.

42 ENGINEERING↗
DOE OSTI2022

Adaptive Protective Relay Settings – A Vision to the Future

Adaptive relaying utilizes the continuously changing status of the power system as the basis for online adjustment of the power system relay settings. Fundamentally they are protection schemes that adjust settings and/or logic of operations based on the prevailing conditions of the system. These adjustments can include, but are not limited to, the logging of data for post-mortem analysis, communication throughout the system, as well as changing relay parameters. Adaptive relaying considers the fact that the status of a power system can change. These include system configuration changes, load effect, cold load pickup, end-of-line protection, transformer protection, and automatic reclosing. In this research, the author focus on the need for a secure, selective, and reliable system for adaptive overcurrent protection in T&D and Distributed Energy Systems. Various types of adaptive methods are presented and explained along with some pros and cons of each.

Mukherjee, Srijib↗
NASA NTRS2009

Towards Behavioral Reflexion Models

Software architecture has become essential in the struggle to manage today s increasingly large and complex systems. Software architecture views are created to capture important system characteristics on an abstract and, thus, comprehensible level. As the system is implemented and later maintained, it often deviates from the original design specification. Such deviations can have implication for the quality of the system, such as reliability, security, and maintainability. Software architecture compliance checking approaches, such as the reflexion model technique, have been proposed to address this issue by comparing the implementation to a model of the systems architecture design. However, architecture compliance checking approaches focus solely on structural characteristics and ignore behavioral conformance. This is especially an issue in Systems-of- Systems. Systems-of-Systems (SoS) are decompositions of large systems, into smaller systems for the sake of flexibility. Deviations of the implementation to its behavioral design often reduce the reliability of the entire SoS. An approach is needed that supports the reasoning about behavioral conformance on architecture level. In order to address this issue, we have developed an approach for comparing the implementation of a SoS to an architecture model of its behavioral design. The approach follows the idea of reflexion models and adopts it to support the compliance checking of behaviors. In this paper, we focus on sequencing properties as they play an important role in many SoS. Sequencing deviations potentially have a severe impact on the SoS correctness and qualities. The desired behavioral specification is defined in UML sequence diagram notation and behaviors are extracted from the SoS implementation. The behaviors are then mapped to the model of the desired behavior and the two are compared. Finally, a reflexion model is constructed that shows the deviations between behavioral design and implementation. This paper discusses the approach and shows how it can be applied to investigate reliability issues in SoS.

Ackermann, Christopher↗
NASA NTRS2020

Kenya Food Security & Agriculture II: Utilizing NASA Earth Observations to Enhance Drought Warning Systems and Develop Capacity to Use the RHEAS Model in Kenya

Twenty-three counties in Kenya experience frequent drought, which damages agricultural productivity and threatens the health and well being of millions. NASA DEVELOP partnered with NASA SERVIR, the Regional Centre for Mapping of Resources for Development (RCMRD) and Kenya’s National Drought Management Authority (NDMA) to enhance drought-detection capacity using NASA Earth observations. Currently, the NDMA publishes monthly Early Warning Bulletins with drought conditions for each arid or semi-arid county in Kenya. These bulletins utilize the Vegetation Condition Index (VCI) from the Moderate Resolution ImagingSpectroradiometer (MODIS) as well as a variety of biophysical, social and economic drought indicators, but do not allow for advanced forecasting. To improve drought-monitoring capabilities, the team created a Combined Drought Indicator (CDI) using the Regional Hydrologic Extremes Assessment System (RHEAS) model and data from Aqua and Terra MODIS and the National Centers for Environmental Prediction. The CDI combined precipitation anomalies, soil moisture anomalies, evaporative stress, and VCI according to weights determined by principal component analysis. To evaluate the performance of the CDI across Kenya, the team compiled a dataset of drought events from historical reports and the NDMA’s records. Results suggested that the CDI detected drought earlier thanVCI alone. However, more validation is needed to ensure that the CDI accurately and consistently detects drought earlier than current warning systems. In order to better understand the behavior of individual indices and the potential for earlier drought detection, the team also conducted a time-lag analysis. The team found that VCI responds to drought, on average, one month later than most other indices included in the CDI, suggesting that incorporating additional indices could improve early drought warning systems in Kenya.

Food Security & Agriculture↗
NASA NTRS2020

Kenya Food Security & Agriculture II: Utilizing NASA Earth Observations to Enhance Drought Warning Systems and Develop Capacity to Use the RHEAS Model in Kenya

Twenty-three counties in Kenya experience frequent drought, which damages agricultural productivity and threatens the health and well being of millions. NASA DEVELOP partnered with NASA SERVIR, the Regional Centre for Mapping of Resources for Development (RCMRD) and Kenya’s National Drought Management Authority (NDMA) to enhance drought-detection capacity using NASA Earth observations. Currently, the NDMA publishes monthly Early Warning Bulletins with drought conditions for each arid or semi-arid county in Kenya. These bulletins utilize the Vegetation Condition Index (VCI) from the Moderate Resolution Imaging Spectroradiometer (MODIS) as well as a variety of biophysical, social and economic drought indicators, but do not allow for advanced forecasting. To improve drought-monitoring capabilities, the team created a Combined Drought Indicator (CDI) using the Regional Hydrologic Extremes Assessment System (RHEAS) model and data from Aqua and Terra MODIS and the National Centers for Environmental Prediction.The CDI combined precipitation anomalies, soil moisture anomalies, evaporative stress, and VCI according to weights determined by principal component analysis. To evaluate the performance of the CDI across Kenya, the team compiled a dataset of drought events from historical reports and the NDMA’s records. Results suggested that the CDI detected drought earlier than VCI alone. However, more validation is needed to ensure that the CDI accurately and consistently detects drought earlier than current warning systems. In order to better understand the behavior of individual indices and the potential for earlier drought detection, the team also conducted a time-lag analysis. The team found that VCI responds to drought, on average, one month later than most other indices included in the CDI, suggesting that incorporating additional indices could improve early drought warning systems in Kenya.

Food Security & Agriculture↗
DOE OSTI2020

Non-intrusive data authentication systems and methods

Systems and methods are disclosed that create a separate digital and cryptographically secure signal “branch” to a secondary observer from a primary signal path of an information system. The information system may be a measurement system. The secure signal branch is creating without interfering with the primary signal path. In such a manner, the secondary observer may authenticate reported data while not interfering with the signal of the information system.

97 MATHEMATICS AND COMPUTING↗