Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “Cybersecurity”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 1,135 records · Page 63
All sourcesNASA NTRSDOE OSTI
DOE OSTI2022

Digital Infrastructure Industry Engagement

The commercial nuclear sector faces unprecedented financial challenges driven by low natural gas prices and subsidized renewables in a market that does not reward carbon-free baseload capacity. These circumstances, along with increasingly antiquated labor-centric operating models and analog technology, have forced the early closure of multiple nuclear facilities and placed a much larger population of nuclear stations at risk. Nuclear plant economic survival in current and forecasted market conditions requires an efficient and technology-centric operating model that harvests the native efficiencies of advanced technology. This is analogous to transformations that have occurred in other industries.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗
DOE OSTI2022

CyTRICS: Vulnerability Analysis Tailored for Critical Infrastructure

Society and modern life are dependent on critical infrastructure that is composed of expensive, special purpose devices that have long life cycles and may be in use for decades before being replaced. There are an abundance of organizations and individuals doing vulnerability analysis on a variety of systems, but what makes the Cyber Testing for Resilient Industrial Control Systems (CyTRICS) program unique and valuable is its strategic focus on high-priority critical infrastructure, close partnership with vendors, and ability to leverage bills of materials (BOMs) to identify and relate vulnerabilities to affected systems. Creating a bill of materials is a formal way of understanding and documenting the components of a system, including everything from integrated circuits to operating systems to third-party libraries. This is beneficial for connecting known vulnerabilities to affected devices, since vulnerabilities in a specific component are often not mapped to all systems that use that vulnerable component. Additionally, CyTRICS finds novel vulnerabilities through its vulnerability testing process and works closely with vendor partners to provide vulnerability reports so that affected systems can be patched in a timely manner. This presentation will describe the interrelated technical processes CyTRICS uses to create bills of materials and conduct vulnerability analysis.

99 GENERAL AND MISCELLANEOUS↗
DOE OSTI2022

TRANSSFORM Workshop Empowering the US manufacturing industry proceedings report

The U.S. Department of Energy (DOE), Office of Energy Efficiency and Renewable Energy, and Advanced Manufacturing Office (AMO) hosted the TRANSSFORM (Transformative, Resilient, Adaptive, Nimble, Sustainable, Smart, Flexible, Optimal, Robust, and Model-based1 – A Bold Vision for the Future of U.S. Manufacturing) Workshop on September 8–10, 2021. The objective of the workshop was to hear from stakeholders about how manufacturing digitalization can improve manufacturing competitiveness and reduce energy consumption and emissions production from U.S. manufacturing, and what research, development, and demonstrations are needed to have the desired impact.

manufacturing digitalization, decarbonization, IoT↗
DOE OSTI2021

Generating SBoMs Utilizing Structured Threat Information Expression JSON bundles

With cyber-attacks on the rise, information is one of the first lines of defense. Now more than ever, security experts and developers need efficient ways to know if their software may be outdated or vulnerable to emerging threats. By generating a Software Bill of Material based on STIX2/JSON bundles, security experts and developers can ensure that they know where to find what can go wrong with their systems before the hackers do. As part of the Infrastructure Expression project, Idaho National Laboratory (INL) is currently working on ways that can aid in the development of efficient SBOMs using Structured Threat Information Expression (STIX). Doing so can provide an efficient first line of defense for detection and monitoring that can be easily used by cyber personnel from beginners to highly skilled experts.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2023

ARIES 2022

An annual report of ARIES FY 2022 research highlights and capabilities, partner impacts, engagement and outreach, and messages from DOE and an External Advisory Board member.

clean energy↗
DOE OSTI2020

ARIES and PEGI Platform - Overview and Background

NREL's Power Electronic Grid Interface (PEGI) Workshop, held October 13, 2020, focused on the research challenges of operating power systems with ever-higher levels of inverter-based generation and power-electronic-based load. This presentation shares an overview of ARIES and the PEGI Platform.

ARIES↗
DOE OSTI2022

Cyber Threat Landscape for Distribution Systems

INL cyber analysts will present an overview of the current threat landscape for distribution systems. We will begin with examples of known attacks that have occurred recently to motivate the threat analysis and mitigation discussed in the remainder of the presentation. Examples may include the attacks affecting wind plants in Europe in Spring 2022, ransomware attacks on city utilities and commercial distribution systems, and advanced persistent threats (APTs) including the attacks on Ukrainian electric system in 2015 and 2016, as well as more recent evidence of other APT activity. We will present the end-to-end attack paths and discuss the various attacker skills, financing, motivations, and access that contributed to these attacks. In the second part of this presentation, we will discuss mitigating the cyber threats for distribution systems. We will discuss recent publicly disclosed vulnerabilities and explain their relevant context for distribution system security. Likely attacks to affect distribution systems, such as denial-of-service (DoS), ransomware, edge-device compromise, and advanced persistent threats (APTs) will be described. In addition to an overview of these kinds of attacks, we will provide examples of the various ways in which these attacks can start and what systems they can affect. Simple, cost-effective counter-measures to these attacks will be discussed and we will emphasize how these mitigations can reduce threats when properly applied and maintained.

24 POWER TRANSMISSION AND DISTRIBUTION↗
DOE OSTI2023

Cyber SHIELD Flyers

Fliers and introductory program power point documents. The goal of these documents are to provide renewable owner/operators with information about DOE funded programs being led by INL. Fliers and intro ppt's describe why renewable owner/operators should consider using INL programs under these projects. Cyber SHIELD - SOLAR Cyber SHIELD -WIND Cyber SHIELD - HYDRO

14 SOLAR ENERGY↗
DOE OSTI2023

Language-Theoretic Data Analysis to Support ICS Protocol Baselining

Critical infrastructure stakeholders need to baseline their systems to understand expected protocol communications. Baseline behaviors may vary based on operational context. Expected operations during a maintenance window, for example, may be different from normal operations. Furthermore, constructing system baselines for Industrial Control Systems (ICS) is difficult and time-consuming. ICS processes generate artifacts expressed across heterogeneous data sources such as network traffic and device logs. This paper explores the hypothesis that such ICS artifacts form a language in the language-theoretic sense. From a theoretical perspective, the variety of implementations of ICS protocols and constrained environment of OT networks provide a rich application domain for language-theoretic approaches. We present several use cases related to the practical construction of system baselines: grammars for data fusion, language dialects for device fingerprinting, and security automata for system baselining

24 POWER TRANSMISSION AND DISTRIBUTION↗