SEARCH · Engineering Papers

Results for “Vulnerabilities”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

SourceResearch connectionFrom yearThrough year

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 1,171 records · Page 65

All sources NASA NTRS DOE OSTI

DOE OSTI2022

Cost-Efficient Construction at Los Alamos National Laboratory

The construction industry can be fraught with cost, schedule, and scope overruns. Los Alamos National Laboratory (LANL), a Department of Energy (DOE) / National Nuclear Security Administration (NNSA) facility located in Northern New Mexico, seems to be particularly vulnerable to cost and schedule overruns. Since Triad National Security, LLC acquired the management and operating (M&O) contract for LANL in 2018, the group has been striving to reduce the cost of construction across the forty square-mile campus.

29 ENERGY PLANNING, POLICY, AND ECONOMY↗

DOE OSTI2022

A Step Toward Working with Untrusted Ground Stations

We are witnessing a shift toward outsourcing satellite and ground station services to third-party commercial entities. As with any enterprise, these third parties can be vulnerable to cyber compromise, including image tampering and deepfake injection. The multimedia community is beginning to establish standards and technology to enable authenticity verification of multimedia created and edited by others. While appealing to the remote sensing domain, the nature of raw satellite imagery is incompatible with the proposed change verification tools, resulting in the need for a means to validate updates made to image products. We present a simple method for verifying a specific class of algorithms. Our inverse processing approach eliminates the need to see the original image as the reversed data can be checked against an original digital signature. We demonstrate our approach on basic image restoration routines and conclude with a discussion on open challenges and next steps.

97 MATHEMATICS AND COMPUTING↗

DOE OSTI2022

Grid Energy Storage: Supply Chain Deep Dive Assessment

The report “America’s Strategy to Secure the Supply Chain for a Robust Clean Energy Transition” lays out the challenges and opportunities faced by the United States in the energy supply chain as well as the Federal Government plans to address these challenges and opportunities. It is accompanied by several issue-specific deep dive assessments, including this one, in response to Executive Order 14017 “America’s Supply Chains,” which directs the Secretary of Energy to submit a report on supply chains for the energy sector industrial base. The Executive Order is helping the Federal Government to build more secure and diverse U.S. supply chains, including energy supply chains. To combat the climate crisis and avoid the most severe impacts of climate change, the U.S. is committed to achieving a 50 to 52 percent reduction from 2005 levels in economy-wide net greenhouse gas pollution by 2030, creating a carbon pollution-free power sector by 2035, and achieving net zero emissions economy-wide by no later than 2050. The U.S. Department of Energy (DOE) recognizes that a secure, resilient supply chain will be critical in harnessing emissions outcomes and capturing the economic opportunity inherent in the energy sector transition. Potential vulnerabilities and risks to the energy sector industrial base must be addressed throughout every stage of this transition. The DOE energy supply chain strategy report summarizes the key elements of the energy supply chain as well as the strategies the U.S. Government is starting to employ to address them. Additionally, it describes recommendations for Congressional action. DOE has identified technologies and crosscutting topics for analysis in the one-year time frame set by the Executive Order. Along with the capstone policy report, DOE is releasing 11 deep dive assessment documents, including this one, covering the following technology sectors: carbon capture materials; electric grid including transformers and high voltage direct current (HVDC); energy storage; fuel cells and electrolyzers; hydropower including pumped storage hydropower (PSH); neodymium magnets; nuclear energy; platinum group metals and other catalysts; semiconductors; solar photovoltaics (PV); and wind. DOE is also releasing two deep dive assessments on the following crosscutting topics: Commercialization and competitiveness; and cybersecurity and digital components. More information can be found at www.energy.gov/policy/supplychains.

25 ENERGY STORAGE↗

DOE OSTI2022

Wind Energy: Supply Chain Deep Dive Assessment

17 WIND ENERGY↗

DOE OSTI2022

Security Enhancements for Distributed Energy Resource Systems Interconnected with Distribution Networks: Final Technical Report

The revised IEEE 1547 Standard defines new complex communication-adjustable voltage and frequency regulation and ride-through characteristics, while maintaining the general antiislanding requirement for unintentional islanding situations. Unintentional islanding is prohibited while intentional islanding is specifically allowed, thus effectively enabling microgrid operation mode. Further, IEEE 1547-2018 Standard introduces new requirements in terms of interoperability so that the DER plant/circuit segments may be seamlessly integrated with the utility networks but at the same time become vulnerable to a cyber-attack. Traditional cybersecurity measures including encryption, authentication and role-based access control may not be fully implementable to all communication protocols specified in the IEEE 1547 Standard. Therefore, in this project we have identified, researched, implemented and tested several cyberphysical approaches that rely mostly on the behavior of the DER circuit and may help with validating the incoming command and control action potentially coming through an insecure communications channel. Additionally, we have built semantic models and communications profiles for DER facilities and have implemented lightweight IEC 61850 based publisher-subscriber GOOSE messaging mechanism, with security extensions in terms of authentication and encryption. The project proposed information models for integration into UCA OpenFMB 2.0 profiles focusing on grid code compliance.

24 POWER TRANSMISSION AND DISTRIBUTION↗

DOE OSTI2022

Microelectronics at the Department of Energy: Capabilities and Opportunities for Driving U.S. Competitiveness

Microelectronics are everywhere—embedded in our consumer products; underlying our power, transportation, and information infrastructure; and fortifying our national security. These and other microelectronics applications are also intricately linked with America’s energy and decarbonization goals. For instance, advanced power electronics are critical to our transition to renewable power and electric transport, and more energy-efficient computing and consumer devices are needed as energy consumption grows rapidly. Meanwhile, global supply chain disruptions beginning in 2020 and the ensuing chip shortage caused by the COVID-19 pandemic highlight the vulnerability of microelectronics supply chains. The globally distributed manufacturing base can be disrupted in unexpected ways, and there is no single solution to these challenges given the range of applications and technologies within the microelectronics industry—from ever-smaller, nanoscale feature sizes to large-scale commodity use cases to specialized functionalities. Rather, solutions will require the private sector, federal agencies, and research and development (R&D) organizations such as labs and universities to act in concert beyond their individual missions.

36 MATERIALS SCIENCE↗

DOE OSTI2022

High-burnup Experiments in Reactivity Initiated Accidents (HERA)

High-burnup Experiments in Reactivity-initiated Accidents (HERA) is a joint experimental program (JEEP) operating within the United States (U.S.) Nuclear Energy Agency’s (NEA’s) framework for irradiation experiments (FIDES). HERA is dedicated to the understanding of light water reactor (LWR) fuel performance at high burnup under reactivity-initiated accidents (RIA). In-pile RIA experiments have been performed on high-burnup fuels (e.g., above 60 gigawatt days per metric ton of uranium [GWd/MTU]) in the CABRI reactor at the Cadarache site in southern France, and the Nuclear Safety Research Reactor (NSRR) in Japan. However, most of these experiments have taken place with heavily corroded Zircaloy claddings with pulse widths that are narrower (e.g., 5 ms – 30 ms full-width-half-max [FWHM]) than what would be likely in a commercial LWR (e.g., 30 ms – 80 ms FWHM). A few tests were performed in the CABRI facility with FWHM up to 76 ms, though only one “blistered” rod experienced cladding failure. Heavy waterside corrosion and narrow pulse widths are both known to increase the vulnerability of LWR fuel to pellet cladding mechanical interaction (PCMI). The HERA proposal is designed to: (1) quantify the impact of pulse width on fuel performance, offering new insight into the applicability of existing data; (2) generate new data on high burnup fuel under pulse conditions prototypic of LWRs; (3) quantify the additional margin provided by modern cladding alloys to PCMI failure limits; and (4) offer improved data for modelers using specially designed tests that eliminate key uncertainties in high-burnup fuel tests.

(HERA)↗

DOE OSTI2022

Ensuring a Nuclear Power Plant Safe State Following an EMP Event - Task 7 Deliverable: EMP Testing of Secondary Coupling to Instrumentation Cables

Sandia National Laboratories performed tests to address the potential vulnerability concerns of a coupled High-Altitude Electromagnetic Pulse (HEMP) inducing secondary coupling onto critical instrumentation and control cables in a nuclear power plant, with specific focus on early-time HEMP. Three types of receiving cables in nine configurations were tested to determine transfer functions between two electrically separated cables referenced to the common mode input current on the transmitting cable. One type of transfer function related the input short circuit current and resulting open circuit voltage on the receiving cable. The other transfer function related the input short circuit current and the resulting short circuit current on the receiving cable. A 500 A standard HEMP waveform was input into the transfer functions to calculate peak coupling values on the receiving cables. The highest level of coupling using the standard waveform occurred when cables were in direct contact, with a peak short circuit current of 85 A and open circuit voltage of 9.8 kV, while configurations with separated cables predicted coupling levels of less than 5 A or 500 V.

21 SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLANTS↗

DOE OSTI2021

Towards a New Supply Chain Cybersecurity Risk Analysis Technique

Supply chain cyber-attacks, such as the SolarWinds Orion attack, are occurring with greater frequency. These attacks compromise a digital device before it is sent to customers, bypassing traditional security controls to remain persistent and undetected in operational environments. While supply chain attacks are prevalent, methods for analyzing the risk of these attacks are currently unavailable. This paper proposes new supply chain cyber-attack difficulty and risk metrics to evaluate the relative risk of an attack throughout the supply chain lifecycle. Difficulty metrics for each stakeholder in a digital device’s supply chain (e.g., hardware manufacturing, firmware development, software development, storage, and distribution entities) are calculated using scores from cybersecurity maturity questionnaires in a Bayesian Network leaky Noisy-MAX model. These difficulty metrics are then used to calculate an overall supply chain cyber-attack risk. Vulnerability and recoverability metrics are also proposed to evaluate the relative stakeholder influence in the attack risk. These proposed relative risk metrics enable continuous supply chain monitoring, provide decision-makers with information necessary for improved supplier selection, and help drive improvements in the cybersecurity posture of the stakeholders in their supply chain.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

DOE OSTI2021

Assessment of the High Flux Isotope Reactor Cybersecurity Initiative

Recent cyber-attacks on industrial control systems, and inadvertent exposure of nuclear plant systems to cyber-exploits underscore the need for plant operators to adopt and deploy cyber-security defense solutions made for industrial control systems. Of increasing concern is the fact that international cyber hackers are beginning to target critical infrastructure, and because these more modern controls systems depend on advanced use of digital systems, they are more vulnerable than ever before to cyber-attacks. Traditional cyber defense strategies and products that have been available for decades are tailored for use on IT or corporate networks but can cause interruptions and catastrophic damage when deployed on industrial control system networks. The Department of Energy (DOE) Office of Nuclear Energy established the Gateway for Accelerated Innovation in Nuclear (GAIN) program to provide private companies pursuing innovative nuclear energy technologies with access to the technical support necessary to move toward commercialization. One of these GAIN small business vouchers was awarded to Dragos, Inc. to enable collaboration with Oak Ridge National Laboratory (ORNL) to evaluate the Dragos Platform on a production nuclear reactor test bed, hence laying the path for future commercial adoption. The vision was to provide a guide for industrial operators on implementing an industrial monitoring solution and to show how these solutions can be deployed without causing safety and reliability issues. This report documents the results of the collaboration between ORNL and Dragos, Inc.

21 SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLANTS↗

DOE OSTI2022

Optimal Portfolio Design of Distributed Energy Resources on Puerto Rico Distribution Feeders with Long Outages after Hurricane Maria

This work details a project to design reliable, resilient, and cost-effective networked microgrids considering grid constraints and resilience metrics focused on Puerto Rico distribution feeder locations with long outages after Hurricane Maria. The project consisted primarily of modeling and simulation tasks that accomplished the following objectives: 1. Selected 10 distribution feeder models in vulnerable areas. The sample feeders are geographically distributed across Puerto Rico and vary in length to capture the wide variety of feeders on the island. 2. Determined the optimal location and sizing of distributed energy resources (DERs) on the identified distribution feeders. The systems considered as part of the microgrid solutions were solar photovoltaic (PV), battery energy storage systems (BESS) and distributed fossil fuel generation (DFFG). 3. Estimated the cost-benefit of the proposed DER portfolios. 4. Provided a set of final recommendations that inform decision making on how to do targeted planning analysis for microgrids that can supply energy to critical infrastructures.

24 POWER TRANSMISSION AND DISTRIBUTION↗

DOE OSTI2022

Machine-Learning-Assisted Enhancement of Perovskite Stability and Photovoltaic Performance

Lab scale perovskite solar cells (PSCs) have reached power conversion efficiencies on par with silicon solar cells. Their potential for low-cost manufacturing combined with high performance make them attractive for commercialization. The major challenge impeding widespread development of PSCs is their stability. Halide perovskites are vulnerable to decomposition in the presence of moisture, oxygen, light, and heat. Furthermore, the chemical differences between halide perovskites and conventional semiconductors used in photovoltaics (e.g., silicon, chalcogenides, and III-V compounds) may render established accelerated lifetime testing protocols inaccurate.

14 SOLAR ENERGY↗

DOE OSTI2022

Smart Microgrids

The Nation’s electrical power depends on one bulk power grid to support security and economic prosperity. According to the Department of Homeland Security’s Homeland Threat Assessment of 2020, the largest cyber threat to homeland security is potential disruption to critical infrastructure, including power grids. Critical infrastructure includes the physical and cyber systems which generate, transmit, and distribute electricity with an impact on economic security, public health, or safety. The surety of the Nation’s power grid is vital for providing essential services and would put the population at risk if disrupted. Power outages can have catastrophic consequences for critical organizations such as hospitals and military installations. Additionally, the current fossil-fuel dependent power grid is extremely fragile and vulnerable to overloads, storms that destroy power lines, and cyber-attacks.

24 POWER TRANSMISSION AND DISTRIBUTION↗

DOE OSTI2022

Oak Ridge National Laboratory Pilot Demonstration of an Attestation and Anomaly Detection Framework using Distributed Ledger Technology for Power Grid Infrastructure

This report summarizes the design and pilot demonstration of a framework called Grid Guard that was created to provide increased data and device trustworthiness to electric grid devices by leveraging distributed ledger technology (DLT), specifically blockchain. Grid Guard contains a combination of core cryptographic methods such as the secure hash algorithm (SHA), and asymmetric cryptography, private permissioned blockchain, baselining configuration data, consensus algorithm (Raft) and the Hyperledger Fabric (HLF) framework. The system implements a low energy, fast, and robust enhancement to system trustworthiness within and across electric grid systems such as substations, control centers and metering infrastructures. Blockchain is a distributed database structured that provides a practically unalterable (immutable) timeline of stored transactions. By relying on hashing and the Raft consensus algorithm, if an entity tries to illegitimately alter a record at one instance of the database the other ledger nodes are not altered. They work to cross-reference each other and easily locate any incorrectly added data and remove it. The bulk raw data is stored in an off-chain storage (outside of the blockchain ledger) and a hash of this baseline data is stored in the Blockchain ledger via hashing windows of time-series and configuration data, after aggregation and filtering. The bulk off-chain data repository is then considered to be trust-anchored using the hashes stored in the blockchain. To secure the electric grid testbed devices and data, device configuration baselines were compared to those baselines that had been previously stored in the ledger. Statistical baselines for device configurations, network communication patterns, and high-speed sensor data are calculated and then stored off-chain and hashes stored in the ledger. Measurements such as three-phase voltage and current, frequency, breaker status, protection scheme settings, network configuration settings (and other device configuration artifacts) and network traffic features (packet interarrival times) are compared every minute or other selected time windows. During phase 1 of the Grid Guard DLT project different DLT technologies were studies, and an assessment was performed on DLT technology vulnerabilities, uses, and key characteristics. DLT consensus protocols were studies (e.g., RAFT, named after Reliable, Replicated, Redundant, And Fault-Tolerant). Also, cryptography, public, private and permissioned or permissionless systems were assessed. Grid Guard implements a permissioned private DLT. Consensus algorithm selection and choice of DLT implementation depended heavily on the use-case. For this use-case, parameters were selected to measure performance and existing tools for assessment. Benchmarking was performed theoretically and practically. During phase 2 hashed transactions/blocks were inserted into the ledger every second. During phase 2 of the Grid Guard DLT project, a prototype framework was developed and demonstrated for attestation of critical substation devices and data using precision timing systems that use PTP and IRIG-B protocols) on a testbed of operational devices that emulated a distribution substation, control center, and power metering infrastructure using real Operational Technology (OT). The testbed includes OT devices such as protective relays, human machine interfaces (HMI), and power meters. To determine when to collect and compare system and network baselines, an initial examination of an anomaly detection capability to identify malicious manipulation of data streams was conducted. The resulting anomaly detection was demonstrated in a set of experiments and leveraged to trigger device artifact attestation checks. Attestation checks occur against device configuration baselines when compared with the immutable blockchain-stored baselines, which provided a cryptographically supported means by which to store baselines. The electrical substation-grid testbed was created to test the Grid Guard framework. The testbed emulates the operations of a portion of a power grid and SCADA systems as closely as possible. The testbed integrates real protocols, mainly IEC 61850 standard protocols, such as the Sampled Value (SV) and the GOOSE protocols. The testbed also supports DNP3 and other layer 2 and layer 3 protocols such as Telnet, SSH, SFTP/FTP and other proprietary protocols needed to connect to industrial control system equipment. The testbed emulates real power conditions using the OpalRT hardware-in-the-loop (HIL) device which can create fault situations that cannot be easily tested on real systems. The electrical substation-grid testbed was created using real measurement, communication, and protection devices that electrical utilities commonly use.

24 POWER TRANSMISSION AND DISTRIBUTION↗

DOE OSTI2022

Net-zero Microgrid Program Report: Microrred de la Montaña Feasibility Study (Executive Summary Extended)

This feasibility study provides the technical and economic rationale for the Microrred de la Montaña as a viable solution for supplying reliable and resilient electricity to an underserved region in Puerto Rico – a region that is the first to be disconnected from the grid and the last to be restored, enduring months long outages. It begins the process of the development of the microgrid through conceptual design, engineering, detailed electrical design, implementation, and operation. The Microrred de la Montaña is organized under the governance of the Cooperativa Hidroeléctrica de la Montaña (Cooperativa) which has legal status as a cooperative and power provider under the laws of Puerto Rico. The members are the municipalities of Adjuntas, Jayuya, Lares and Utuado with a combined population of 90,000. These municipalities are in central Puerto Rico – a mountainous region that is extremely vulnerable to weather events and excessive, long-duration power outages and are among the poorest and most disadvantaged regions in Puerto Rico. Funding from external sources is necessary to acquire the resources for a resilient power delivery system. Regulatory support is necessary to establish operational relationships with the incumbent power providers. The Microrred de la Montaña is envisioned as a resilient microgrid that manages distributed energy resources – local solar, storage, and hydroelectricity over an upgraded distribution network within the boundaries of four municipalities. This feasibility study provides the results of an extensive techno-economic analysis to form a sound basis for decision-making by community leaders, their constituents, funding and investment agencies, and regulators to realize the benefits that are achievable by fully implementing the design and planning recommended for the Microrred de la Montaña.

13 HYDRO ENERGY↗

DOE OSTI2022

Cyber-Physical Resiliency for Wind Power Generation

During the next three years, wind power generation is expected to add more generation capacity to the national electrical grid than any other energy sector. With new wind turbine designs rated power over 10 MW and wind farms reaching over 1 GW capacities, the consequences of cyber-attacks on wind power generation are becoming increasingly more critical. Moreover, the known vulnerabilities of wind turbine control systems and the potential damaging effects of intrusions, motivate an urgent protection improvement for the wind power generation sector. This program has developed a variety of new adaptive defense technologies that enable wind power generation systems to survive sophisticated cyberattacks by enhancing the control systems capabilities of detection, localization, and accommodation. The introduction of these technologies in the on-shore and the emerging off-shore market will result in a significantly more reliable and secure wind power infrastructure.

17 WIND ENERGY↗

DOE OSTI2022

Satellite Enveloped with STITCHED Engineering Sensors for Detection of Approaching Objects

Today as well as tomorrows spaceborne assets impact almost all areas of national and nuclear security. Spaceborne assets can not only collect and disseminate valuable data, well beyond just the visual, but also track terrestrial-based mobile assets in real-time, and active spaceborne platforms potentially pose serious risk to vulnerable earth-based systems and infrastructures. The capability to defend national spaceborne assets from attack/interference is critical for security interests. This effort supports this mission through the cost-effective preeminent detection of approaching threats to our nation’s vital resources, in order to help secure and trust these high-value assets against the threats of tomorrow. This project develops novel fabrication techniques for conformal, low-profile and lightweight leakywave antenna (LWA) detection/imaging systems, which fuses technical embroidery (TE) and laser ablation (LA) processes with LWA design. Technical embroidery is an emerging field in additive textile manufacturing where flexible materials and functionalized fabrics are created for a wide variety of uses and purposes, while laser ablation is the process of removing material from a solid surface by irradiating it with a laser beam. Here, thin, conformal antenna designs are designed, modeled and fabricated using both TE and LA, to create lightweight, flexible and conformal object detection and imaging radars. This novel development ensures our nation’s ability to field advanced lightweight and conformal technologies to protect spaceborne assets.

42 ENGINEERING↗

DOE OSTI2022

Advanced Serpentine Heat Exchangers to Minimize Number of Joints and Leakage in HVAC&R Systems

Refrigerant leakage has a significant impact on heating, ventilation, air conditioning and refrigeration (HVAC&R) industries in terms of both greenhouse gas (GHG) emissions and lost efficiency of the systems themselves. One of the major causes of refrigerant leakage is braze joints within a vapor compression system. The brazing process is often inconsistent and almost always imperfect. As a result, braze joints are left vulnerable to leaks and can be weaker than non-brazed tubing. Conventional tube-fin heat exchangers are manufactured using one brazed joint per tube. An alternative to the conventional approach is the use of a single continuous serpentine tube. An Advanced Serpentine Heat Exchanger was developed to provide a heat transfer solution that meets or exceeds performance while also significantly reducing the number of joints and, consequently, the potential for refrigerant leakage. The developed serpentine heat exchanger not only delivers on performance, but is also cost competitive with conventional heat exchangers on the market.

30 DIRECT ENERGY CONVERSION↗