Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “Computer security”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 1,099 records · Page 61
All sourcesNASA NTRSDOE OSTI
DOE OSTI2023

The Cybersecurity Value-at-Risk Framework

Hydropower remains one of the strongest forms of renewable energy generation methods. It is crucial to address the increasing risks associated with the rapid digitization. The push towards decarbonization also factors in the need to ensure security and resilience for grid-connected renewable energy resources. This report summarizes the U.S. Department of Energy's Water Power Technologies Office's effort to develop a cybersecurity valuation methodology that assists hydropower stakeholders in assessing risks associated with plan operations and gathers valuation guidance through a web-based applicaiton. The Hydropower Cybersecurity Value-at-Risk Framework delivers a platform for industry members to perform self assessments and make informed decisions on their cybersecurity investments.

CVF↗
DOE OSTI2023

Cybersecurity Guidance for Distributed Energy Resource Management Systems (DERMS)

As part of the Securing Solar for the Grid (S2G): Cybersecurity for Solar Systems workshop at RE + in Las Vegas, Nevada, NREL researchers discuss an ongoing effort to develop cybersecurity guidance for vendors and operators of distributed energy resource management systems (DERMS). This guide will prioritize cybersecurity best practices that can be testing and developed for a potential future standard. This presentation will highlight NREL's ongoing work in this area and future areas of research.

cyber↗
DOE OSTI2023

University Coalition for Fossil Fuel Energy Research

Following a nationwide open competition, the University Coalition for Fossil Energy Research (UCFER) was established in October 2015 through a cooperative agreement between Penn State and the Department of Energy (DOE) National Energy Technology Laboratory (NETL). Penn State lead UCFER with the objective of advancing basic and applied research for clean and low-carbon energy based on fossil fuels in support of the DOE’s mission. UCFER focused on research that improves the efficiency of production and use of fossil energy resources, while minimizing the environmental impacts and reducing greenhouse gas emissions. Penn State lead a team of nine universities (Massachusetts Institute of Technology, The Pennsylvania State University, Princeton University, Texas A&M University, University of Kentucky, University of Southern California, The University of Tulsa, University of Wyoming, and Virginia Polytechnic and State University) during the competition stage, adding seven more universities in 2017 (Carnegie Mellon University, Louisiana State University, The Ohio State University, University of North Dakota, University of Pittsburgh, University of Utah, and West Virginia University). This Coalition exhibited a wide geographical distribution across the U.S. bringing a wide variety of fossil energy expertise. This national university alliance was a major collaborative effort with NETL to address specific topics of R&D in NETL’s mission area, which involved one or more of NETL’s five core competencies (Geologic and Environmental Systems, Materials Engineering and Manufacturing, Energy Conversion Engineering, Systems Engineering and Analysis, and Computational Science and Engineering). The first five to six months of the project was the definitization stage. During this period, Penn State worked closely with NETL to finalize the Coalition organizational structure and By- Laws, prepare a statement of substantial involvement and a statement of project objectives, and develop operations and membership plans. A major component of this stage included preparing an execution plan to solicit research, evaluate proposals, recommend selected projects to NETL, and award projects. In addition, a plan was prepared to monitor projects, review projects, disseminate knowledge from research projects and develop an online system for Coalition research portfolio management. This included developing a website and several databases. The first of six rounds of solicitations started in mid-2016. Projects from the sixth solicitation started February 1, 2021, and ended January 31, 2023. Projects that were selected represented twelve technology lines. Approximately $16.6 million in funding was available for the six solicitations. Most of the funding was provided by DOE, Office of Fossil Energy (DOEFE) with the DOE Fuel Cells Technologies Office (DOE-FCTO) providing funding for a few projects. Coalition universities submitted 259 proposals in response to the solicitations, requesting approximately $67.0 million in funding, and forty-three projects were selected. However, one project withdrew after the principal investigator left the university. The management of the Coalition projects was a major activity by Penn State. Managing the Coalition projects consisted of monitoring the projects, reviewing the projects through annual technical review meetings, disseminating knowledge from the research projects, and developing an online system for Coalition research portfolio management. Penn State’s OMT monitored projects to ensure that all milestones (technical, schedule, budget) were met, expenditures were allowable, cost share (when applicable) were reported, and all technical reports were submitted. The OMT also posted the technical reports electronically on a secure members-only website for access and review by the Coalition members. Disseminating knowledge from the research projects was done through a website, newsletters, various meetings, conferences, journal articles, publicity/press releases, and project summaries that were prepared after each project was completed. Penn State kept NETL apprised of UCFER progress through quarterly reports (thirtyone were submitted by Penn State), verbal and written communications, yearly updates at the annual technical review meetings, and cost accrual reports. The UCFER project had a significant impacty. The UCFER program established the first national university alliance in fossil energy research with a major collaboration effort with DOE NETL that addressed specific topics in NETL’s research and development mission areas. It generated inter-university collaborations, which was another program interest. Twenty-two out of 259 proposals contained collaborations (≈8.5%) and three of forty-two funded projects involved inter-university collaborations (≈7.0%). The forty-two funded projects provided support at fourteen universities involving 269 personnel. Research was conducted by 106 faculty, 115 graduate and undergraduate students, forty-six research staff and post-doctoral scholars, and two visiting scholars. Students and post-doctoral scholars were also on-site at NETL through CRADAs. In addition, non-Coalition participants included six universities and sixteen companies and national laboratories. The non-Coalition participants were involved as subcontractors, providers of cost share, performed unpaid consultation and sample analysis, served as advisory board members, or were providers of samples and materials for testing. UCFER also produced visibility in that fifty-six refereed journal articles were published, fifty-seven conference papers and twenty-three posters were prepared, 190 presentations were given, eight patent applications were filed, two books/book chapters were written, and ten software codes were developed. Collaboration between NETL and the individual projects was a major requirement for all funded projects. This included NETL staff time to support collaboration, consultation, technical guidance, sample preparation and analysis, internships at NETL, on-site testing and equipment usage by Coalition participants at NETL, co-mentoring students, and coauthoring journal articles and conference papers. Collaboration was impacted by COVID-19 in that not all on-site activities could be performed. NETL personnel were coauthors on eight of the conference papers (fourteen percent of the conference papers that were prepared) and seventeen of the journal articles (thirty percent of the journal articles that were prepared). A website was developed for an online proposal solicitation and review process and to provide exposure to UCFER. A website analysis highlighted the large amount of member and general public interest in UCFER by interpreting access statistics from March 2016 through June 2023. Visitors to the site originated from many different organizations, businesses, and countries. The website provided a means to disseminate information to both the general public and the UCFER members and was successfully used for outreach activities. In addition, NETL required that RFP release, proposal submission, and proposal reviews all be performed online. Penn State successfully developed these capabilities in a secure section of the website, which were used throughout the UCFER project. It is recognized that each project had its technical successes. In addition, highlighted successes were compiled and summarized from the research projects. Information was requested from the PIs of completed projects. In addition, Penn State’s Operations Management Team reviewed subcontract reports to identify project successes. Examples of information requested from PIs included (not all-inclusive): new projects that have been funded as a result of UCFER funding; new commercial products; establishment of a new center; new patent; new software; best paper awards; highly-cited work; and graduate student successes. A total of forty-eight highlighted successes were reported.

01 COAL, LIGNITE, AND PEAT↗
DOE OSTI2021

A Cybersecurity Event Simulation Tool and Platform

Digital Instrumentation and Control Systems (ICSs) have replaced analog control systems in nuclear power plants raising cybersecurity concerns. To study and understand the cybersecurity risks of nuclear power plants both high fidelity models of the plant physics and controllers must be created, and a framework to test and evaluate cyber security events must be established. A testing and evaluation framework of cybersecurity events consists of a method of interfering with control systems, a simulation of the plant network, and a network packet capture and recording tool. Sandia National Labs (SNL) in collaboration with the University of New Mexico’s Institute for Space and Nuclear Power Studies (UNM-ISNPS) is developing such a cybersecurity testing framework.

21 SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLANTS↗
DOE OSTI2025

LDRD Abbreviated report: High-Order General-Discrete-Ordinates Method Enabling Efficient Deterministic Transport in Hydrodynamic Simulations

Deterministic transport simulations for national-security and energy applications often operate in high-dimensional phase-space, where accuracy and cost both become major challenges. A common numerical artifact in such problems is the “ray-effect,” which appears as unphysical streaks. Beyond misinterpretation, these artifacts can contaminate tightly coupled physics, such as fluid dynamics, radiation-hydrodynamics, and laser-plasma interactions, eroding the predictive capability of entire multiphysics workflows. Our objective was to make high-dimension studies practical on modern hardware while mitigating the ray-effect without relying on prohibitively expensive sampling approaches such as Monte Carlo methods. We developed the Generic Discretization Library (GenDiL), a Graphics Processing Unit (GPU)-first framework that uses high-order Discontinuous Galerkin (DG) methods and matrix-free algorithms to reduce memory usage and improve computational efficiency, critical for phase-space simulations. GenDiL supports phase-space adaptivity in both mesh size and polynomial order (hp-adaptivity) to place resolution only where it is needed. A central capability is Local Dimensional Refinement (LDR), which couples lower-dimension continuum models to higher-dimension kinetic models through stable and conservative interfaces, so that high-fidelity physics is applied only in regions where it is essential. Building on the GenDiL framework, we developed the General SN (GSN) family of algorithms as a true generalization of the polar SN approach (discrete ordinates, often denoted SN). Rather than tying discrete ordinates to a specific polar change of coordinates, GSN formulates transport on an arbitrary change of coordinates chosen to reduce ray-effect. We studied two complementary variants: an analytic variant, where the coordinate map is prescribed in advance by a closed-form function; and a data-driven variant, where a quantity of interest, such as the net flux, guides the coordinate system. GenDiL provides the library infrastructure for efficient GPU execution, but the GSN concept is algorithmic and independent of any one library. Across representative high-dimension tests, including non-symmetric solutions, both variants delivered strong ray-effect mitigation at practical cost, moving four- to six-dimensional analysis toward repeatable, routine studies.

73 NUCLEAR PHYSICS AND RADIATION PHYSICS↗
DOE OSTI2021

Generating SBoMs Utilizing Structured Threat Information Expression JSON bundles

With cyber-attacks on the rise, information is one of the first lines of defense. Now more than ever, security experts and developers need efficient ways to know if their software may be outdated or vulnerable to emerging threats. By generating a Software Bill of Material based on STIX2/JSON bundles, security experts and developers can ensure that they know where to find what can go wrong with their systems before the hackers do. As part of the Infrastructure Expression project, Idaho National Laboratory (INL) is currently working on ways that can aid in the development of efficient SBOMs using Structured Threat Information Expression (STIX). Doing so can provide an efficient first line of defense for detection and monitoring that can be easily used by cyber personnel from beginners to highly skilled experts.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2022

Industry Level Feasibility of LiDAR Data into Fire Modeling Using Fire Risk Investigation in 3D (FRI3D)

Many evaluation, assessment, and modeling tasks at nuclear power plants require spatial information this often requires physical visits to locations within the facility because the 2D or 3D schematics and current models do not contain enough detail or do not capture as-built and real-world conditions. These visits require extensive manual labor for not only the requesting party, but support groups such as security. LIDAR mapping is trying to solve that problem by providing very detailed 3D models for low costs. However, the use of these models can be very limited because either component reference information is missing and too costly to add, or there is no way to extract specific spatial data needed for other tools. This report presents Idaho National Lab's work with Environmental Intellect (Ei) covering two main efforts. First, to reduce the effort of "tagging" data in large 3D models. By using both existing plant database information, and artificial intelligence (AI) to find and read equipment labels. This research explores the ability of to provide a simple way for the user to tag items and verify plant data, capturing both the speed of AI and human verification. The second part of the work is the development of an interface for importing pieces needed for Modeling & Simulation. Analysis work such as that for fire, flood, or physical security all require spatial or 3D models in various levels of detail. This interface will allow for the retrieval of item location or boundaries, enabling the auto generation of models for varying tools. The application program interface (API) of the fire risk investigation in 3D (FRI3D) was used to test feasibility of exporting the LiDAR tagged spatial information. Outcomes from this work provide preliminary data to determine if the tools and methods could provide substantial industry benefit if fully matured.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2025

Secure NTP Implementation for Power System Synchronization

Network Time Protocol (NTP), originally developed in the 1980s, remains one of the most widely adopted protocols for synchronizing clocks over Internet Protocol (IP)-based networks. It distributes time with millisecond-level accuracy across Ethernet-based systems and continues to be a standard in both enterprise and operational technology environments.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2020

Perturbation-Based Diagnosis of False Data Injection Attack Using Distributed Energy Resources

Modern smart grid relies on various sensor measurements for its operational control. In a successful false data injection attack, the attacker manipulates the measurements from the grid sensors such that undetected errors are introduced into the estimates of the system parameters leading to catastrophic situations. This paper proposes a novel perturbation based false data injection attack detection mechanism that utilizes inverter based distributed energy resources (DERs) to create low magnitude perturbation signal in the distribution system voltage that is inconsequential to the normal grid operation. Two voltage sensitivity analysis based algorithms are designed to identify the optimal set of DERs that can create the voltage perturbation signal of desired magnitude. An analytical method of voltage sensitivity analysis is used to compute the magnitude of voltage perturbation signal at each node in a computationally efficient manner. Then, a detection mechanism is developed that checks for the presence of the perturbation sequence in each sensor measurement. A sensor measurement is deemed authentic if the voltage perturbation signal is present in the data. In case of sensor malfunction or cyber-attack, the perturbation signal will not be present in the measurement data. Performance of the proposed attack detection mechanism is validated via simulation of the IEEE 69 bus test system.

24 POWER TRANSMISSION AND DISTRIBUTION↗
DOE OSTI2025

pdas-experiments

SAND2025-04589O pdas-experiments automates computational experiments of fluid flow simulations. It uses the pressio-demoapps-schwarz package as a basis to break down complex simulations into smaller, manageable parts. This application is an extension of the Sandia Pressio software which uses domain decomposition to work with complex simulations more efficiently. Users can test different simulation setups, while keeping a detailed record of their experiments so they can be reproduced later. The software includes a C++ program that runs individual experiments based on user-defined settings in a YAML file, as well as a Python script that can manage multiple simulations at once. Sandia National Laboratories is a multimission laboratory managed and operated by National Technology & Engineering Solutions of Sandia, LLC, a wholly owned subsidiary of Honeywell International Inc., for the U.S. Department of Energy’s National Nuclear Security Administration under contract DE-NA0003525.

Tezaur, Irina [Sandia National Lab. (SNL-CA), Live↗
DOE OSTI2020

CReST-VCT System Integration Framework

In this paper, we propose a system integration framework for deploying the Coordinated Real-time Sub-Transmission Volt-var Control Tool (CReST VCT) functionality between the transmission system, the distribution system, and DERs. This represents one possible set of design choices to implement the coordinated optimization capabilities in an operating environment. The framework provides the following: An architectural reference model that describes how the CReST VCT solution maps into a broader grid architecture that accommodates and enables higher levels of DER penetration and utilization: A system integration reference model that defines a possible allocation of CReST VCT functionality within a utility’s operational environment. This includes one possible system design approach for allocation of functionality within software and protocol selections across the various interfaces; A list of potential performance and security issues that should be considered during an implementation. This framework does not represent a specific implementation of the CReST VCT algorithm or integration into a specific utility environment. It is intended to serve as a reference for those who plan to implement such a solution into their environment. The general model provided by the framework can be tailored to a specific environment based on its specific constraints and requirements.

24 POWER TRANSMISSION AND DISTRIBUTION↗
DOE OSTI2021

Power Over Ethernet Investigation Report

This report provides insight into collaboration between Savannah River National Laboratory’s (SRNL) Global Security Directorate, Augusta University (AU) and the Georgia Cyber Center (GCC) team with regards to device analysis, investigation, and R&D efforts. Most recently, the GCC/AU team approached SRNL to receive cybersecurity expertise in a joint effort to identify differences between a potentially questionable PoE injector recovered by Columbia County and an identical one purchased by the GCC. The questionable device was installed at a fire station operated in Columbia County, shown in the figure 1-1 below.

45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗
DOE OSTI2024

Threat Sources for Creating Synthetic Urban Search Data

Equivalent point source energy emission distributions were computed for various threat sources for use in simulating the detector responses for urban search scenarios. The sources include standard isotopic sources used in detector testing, medical and industrial sources occasionally encountered in urban searches, and several types of special nuclear materials. Most of the equivalent point source distributions represent small sources inside some amount of shielding, but the special nuclear material sources represent volumetrically distributed sources in spheres of metal. Text-based inputs for emission distributions are available for the Monte Carlo transport codes Monte Carlo N-Particle, SCALE/MAVRIC, and Omnibus/Shift, any of which can easily be converted to other formats. These sources were developed for use in the Radiological Anomaly Detection and Identification (RADAI) project and the follow-on project, the RADAI-Extended project, sponsored by the National Nuclear Security Administration Office of Defense Nuclear Nonproliferation Research and Development.

46 INSTRUMENTATION RELATED TO NUCLEAR SCIENCE AND ↗
DOE OSTI2024

Science & Technology Review: October-November 2024 DarkStar

At Lawrence Livermore National Laboratory, we focus on science and technology research to ensure our nation’s security. We also apply that expertise to solve other important national problems in energy, bioscience, and the environment. Science & Technology Review is published eight times a year to communicate, to a broad audience, the Laboratory’s scientific and technological accomplishments in fulfilling its primary missions. The publication’s goal is to help readers understand these accomplishments and appreciate their value to the individual citizen, the nation, and the world.

99 GENERAL AND MISCELLANEOUS↗
DOE OSTI2020

An Integrated Two-Factor Authentication Solution Using Pulse Connect Secure and Apache HTTP Server

Complex system requirements can often lead to a situation wherein no single product or platform can provide a solution. In these cases, a solution integrating the features of multiple products and platforms is needed. Recently, a program sponsor required discontinued use of a third-party Security Assertion Markup Language Identity Provider that was being used to implement a two-factor authentication (2FA) solution that fully integrated with Pulse Connect Secure (PCS). PCS alone could not provide the features necessary to meet all the requirements of a new 2FA solution. The challenge was to leverage the features of additional platforms to design an integrated solution to meet all requirements. This paper presents a solution that integrates the features of PCS, Apache HyperText Transfer Protocol Server, and a custom application that meets all requirements, including a requirement to defend against Uniform Resource Locator manipulation as means to gain unauthorized access to backend applications.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2020

Science & Technology Review August 2020

At Lawrence Livermore National Laboratory, we focus on science and technology research to ensure our nation’s security. We also apply that expertise to solve other important national problems in energy, bioscience, and the environment. Science & Technology Review is published eight times a year to communicate, to a broad audience, the Laboratory’s scientific and technological accomplishments in fulfilling its primary missions. The publication’s goal is to help readers understand these accomplishments and appreciate their value to the individual citizen, the nation, and the world.

36 MATERIALS SCIENCE↗
DOE OSTI2024

FORESTR: Finding, Organizing, Representing, Explaining, Summarizing, and Thinning Random forests

Random forests have become popular models used for data driven predictions. As a result, random forests are currently used or being considered for high-consequence mission applications in national security, such as the prediction of yield from optical signals and malware detection. While random forests may provide accurate predictions, the complexity of the algorithm causes a lack of interpretability. Random forests are an ensemble of regression or decision trees. Individual regression and decision trees are interpretable, but ensembles are inherently difficult to interpret due to the compilation of many models. We aim to increase the interpretability of random forests by finding patterns in the ensemble of trees that can be used to “thin” (or remove) trees. As a starting point, in this report, we develop a new distance metric for quantifying the similarity between trees based on their topologies (i.e., shapes). We base the metric on a novel distance metric for graphs that is a proper mathematical distance, is invariant to transformations, has registration between graphs, and computes topological evolutions between graphs. We use the tree distance metric to compute tree statistics such as a “mean tree” and to identify clusters of trees. We apply the developed methodology to a toy dataset and a mission relevant product inspection dataset to demonstrate how the metric can provide insight into random forests. Furthermore, we discuss the limitations of the approach and ideas for future research into how the metric could be used as a thinning tool to develop less complex models.

97 MATHEMATICS AND COMPUTING↗