Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “security systems”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 1,243 records · Page 69

IP Protection in TinyML

Tiny machine learning (TinyML) is an essential component of emerging smart microcontrollers (MCUs). How- ever, the protection of the intellectual property (IP) of the model is an increasing concern due to the lack of desktop/server-grade resources on these power-constrained devices. In this paper, we propose STML, a system and algorithm co-design to Secure IP of TinyML on MCUs with ARM TrustZone. Our design jointly optimizes memory utilization and latency while ensuring the security and accuracy of emerging models. We implemented a prototype and benchmarked with 7 models, demonstrating STML reduces 40% of model protection runtime overhead on average.

42 ENGINEERING↗

2022 Annual Report Laboratory Directed Research & Development

Idaho National Laboratory’s (INL’s) mission is “to discover, demonstrate and secure innovative nuclear energy solutions, other clean energy options and critical infrastructure.” INL executes this mission through research and development across the continuum from basic science to applied science to engineering demonstration and then deployment. The Department of Energy (DOE) Laboratory Directed Research and Development (LDRD) program enables INL to conduct high-risk, impactful research that enriches the laboratory capabilities in order to further its missions. INL’s LDRD portfolio specifically advances the core capabilities of the laboratory aligned with its five science and technology initiatives: 1) nuclear reactor sustainment and expanded deployment, 2) integrated fuel cycle solutions, 3) integrated energy systems, 4) advanced design and manufacturing for extreme environments, and 5) secure and resilient cyber-physical systems. The 45 projects that ended in fiscal year 2022 and highlighted in this report are just a small sample of the impressive breadth and depth of cutting-edge science, technology, and engineering ongoing at INL.

99 GENERAL AND MISCELLANEOUS↗

In-Time Non-Participant Casualty Risk Assessment to Support Onboard Decision Making for Autonomous Unmanned Aircraft

Numerous operational paradigms, technologies, and missions are emerging as newcomers to the National Airspace System (NAS) develop small Unmanned Aircraft Systems (sUAS), personal air vehicles and other Urban Air Mobility (UAM) concepts. As the list of applications expands, maintaining the safety of the current airspace system remains one of the core concerns preventing widespread commercial implementation of these concepts. Further, the risks associated with unmanned aircraft operations themselves have to be recognized and mitigated in a timely manner. Safety-critical risks include, but are not limited to, flight outside of approved airspace, unsafe proximity to people or property, critical system failures, loss-of control, and cyber-security related risks. Instead of reacting to accidents, a set of predictive and data-driven risk monitoring, assessment, and mitigation capabilities are envisioned to help capture and eliminate hazards as these systems become operational. NASA’s System-wide Safety project is performing R&D on such a safety assurance concept. As part of this concept, this paper describes an architecture that continuously monitors a diverse set of onboard and ground-based sources to estimate and predict non-participant casualty risk during flight. Timely identification of the changing nature of this risk can inform decision making processes to mitigate current and impending situations.

Ancel, Ersin↗

Smart Microgrids

The Nation’s electrical power depends on one bulk power grid to support security and economic prosperity. According to the Department of Homeland Security’s Homeland Threat Assessment of 2020, the largest cyber threat to homeland security is potential disruption to critical infrastructure, including power grids. Critical infrastructure includes the physical and cyber systems which generate, transmit, and distribute electricity with an impact on economic security, public health, or safety. The surety of the Nation’s power grid is vital for providing essential services and would put the population at risk if disrupted. Power outages can have catastrophic consequences for critical organizations such as hospitals and military installations. Additionally, the current fossil-fuel dependent power grid is extremely fragile and vulnerable to overloads, storms that destroy power lines, and cyber-attacks.

24 POWER TRANSMISSION AND DISTRIBUTION↗

The GABLE Report: Garbled Autonomous Bots Leveraging Ethereum

Simple but mission-critical internet-based applications that require extremely high reliability and availability could potentially benefit from running on robust public programmable blockchain platforms such as Ethereum. Unfortunately, program code running on such blockchains is ordinarily publicly viewable, rendering these platforms unsuitable for applications requiring strict privacy of application code, data, and results. However, might it be possible to encode an application's business logic and data for these platforms in such a way that it becomes impossible for unauthorized parties to infer any meaningful information whatsoever about the semantics of the data, and the operations being performed on that data? In this report, we describe GABLE (Garbled Autonomous Bots Leveraging Ethereum), a system concept developed at Sandia that achieves this security goal in a limited, but still useful range of circumstances. GABLE, uses simple but effective algorithms to permit secure private execution of garbled state machines (and more efficient garbled circuits) on public computing resources. We give an example working implementation for garbled state machines, written using the Python and Solidity programming languages, and outline how our methods can be extended to support a more powerful garbled universal circuit model of computation. The capability embodied by the GABLE, system has significant potential applications, a few of which we discuss in this report.

97 MATHEMATICS AND COMPUTING↗

Harnessing the Power of AI: Status and Expansion of Current Domestic Transport Security Through Flexible Embedded Hardware

As applications of Artificial Intelligence (AI) continue to expand, there are increasing opportunities to leverage applied AI methodologies with mobile transportation focused embedded systems. Current applications of AI in transportation focus on a variety of areas, including fuel efficiency, safety, security, and other broad fields of optimization or detection. To leverage these AI workflows and methodologies in the field, teams must utilize complex embedded systems capable of implementing these AI-enabled algorithms in real-time. In this paper, we will investigate how these algorithms can be integrated into existing technologies leveraging vehicle data - such as the Controller Area Network Transport Security Tracking and Reporting Unit (C-STAR). The C-STAR technology is an embedded platform with onboard computation capable of running next generation algorithms in vehicle systems AI, such as preventative maintenance, driver authentication, and transport security. As deployed in the field, the C-STAR has a limited AI functionality –this paper will directly discuss how a device like C-STAR can be utilized and the advantages of integrating these new technologies. We will open with relevant background information and transportation projects that leverage AI, focusing specifically on those around transport security such as vehicle identification, anomaly detection, and deterrence. We will then extend this into potential opportunities and scaling for AI methodologies using platforms like the C-STAR. Finally, we will speak directly to the challenges of deploying AI-powered workflows, such as computing power needs, bandwidth, hallucinations, and other regulatory considerations.

Cook, Adian [ORNL] (ORCID:0000000160825395)↗

The Nuclear Digital I&C System Supply Chain Cyber-Attack Surface

The nuclear supply chain attack surface is a large, complex network of interconnected stakeholders and activities. The global economy has widened and deepened the supply chain, resulting in larger numbers of geographically dispersed locations and increased difficulty ensuring the authenticity and security of digital assets. Although the nuclear industry has made significant strides in securing facilities from cyber-attacks, the supply chain remains vulnerable. This paper outlines supply chain threats and vulnerabilities and provides a Digital I&C System Supply Chain Cyber-Attack Surface diagram to illustrate the complexity of securing hardware, firmware, software, and system information throughout the entire supply chain lifecycle. The knowledge presented in this paper provides a foundation to use in cybersecurity supply chain risk analysis and to guide future supply chain research and development efforts leading to enhancement of a nuclear facility’s overall security posture.

98 NUCLEAR DISARMAMENT, SAFEGUARDS, AND PHYSICAL P↗

A Secure and Adaptive Hierarchical Multi-Timescale Framework for Resilient Load Restoration Using a Community Microgrid

Distribution system integrated community microgrids (CMGs) can partake in restoring loads during extended duration outages. At such times, the CMGs are challenged with limited resource availability, absence of robust grid support, and heightened demand-supply uncertainty. Here, this paper proposes a secure and adaptive three-stage hierarchical multi-timescale framework for scheduling and real-time (RT) dispatch of CMGs with hybrid PV systems to address these challenges. The framework enables the CMG to dynamically expand its boundary to support the neighboring grid sections and is adaptive to the changing forecast error impacts. The first stage solves a stochastic extended duration scheduling (EDS) problem to obtain referral plans for optimal resource rationing. The intermediate near-real-time (NRT) scheduling stage updates the EDS schedule closer to the dispatch time using new obtained forecasts, followed by the RT dispatch stage. To make the decisions more secure and robust against forecast errors, a novel concept called delayed recourse is designed. The approach is evaluated via numerical simulations on a modified IEEE 123-bus system and validated using OpenDSS and hardware-in-loop simulations. The results show superior performance in maximizing load supply and continuous secure distribution network operation under different operating scenarios.

24 POWER TRANSMISSION AND DISTRIBUTION↗

Harnessing Virtual Power Plants Reliably: Enabling tools for increased observability, controllability, operation, and aggregation of distributed energy resources

Harnessing virtual power plants enhances the integration of distributed energy resources into utility grids for a sustainable energy future. Virtual power plants (VPPs) aggregate DERs to enhance resource adequacy and reduce emissions. U.S. utilities are exploring various technologies to manage DERs effectively. FERC Order 2222 allows DERs to participate in both wholesale and retail markets. Enhancing observability and controllability of behind-the-meter (BTM) DERs is essential for reliable grid operations. A hierarchical control architecture can improve coordination among residential energy resources. Field tests showed nearly 20% energy savings and 30% peak power reduction during grid events. Effective management of DERs requires enhanced situational awareness to prevent grid congestion. Integrating DER management systems (DERMS) with existing planning tools can improve operational security. Near-real-time grid models can validate optimal resource set points against resource uncertainty. Traditional uninterruptible power supplies (UPS) can be upgraded to support grid services and become part of VPPs. Upgrading UPS systems can reduce costs by 75% and unlock significant battery capacity. New battery management systems and grid-aware controllers are essential for optimizing UPS performance. Continued research and development are necessary to address challenges in integrating DERs into utility grids. Encouraging customer participation in pilot programs is vital for the evolution of VPPs. Here, the shift towards price-responsive DERs and VPPs is expected to enhance energy distribution efficiency.

24 POWER TRANSMISSION AND DISTRIBUTION↗

Fourth Integrated Communications, Navigation, and Surveillance (ICNS) Conference and Workshop 2004: Conclusions and Recommendations

The NASA Glenn Research Center organized and hosted the Fourth Integrated Communications, Navigation, and Surveillance (ICNS) Technologies Conference and Workshop, which took place April 26-30, 2004 at the Hyatt Fair Lakes Hotel in Fairfax, Virginia. This fourth conference of the annual series followed the very successful first ICNS Conference (May 1-3, 2001 in Cleveland, Ohio), second ICNS conference (April 29-May 2, 2002 in Vienna, Virginia), and third ICNS conference (May 19-22, 2003 in Annapolis, Maryland). The purpose of the Fourth ICNS Conference was to assemble government, industry and academic communities performing research and development for advanced digital communications, surveillance and navigation systems and associated applications supporting the national and global air transportation systems to: 1) Understand current efforts and recent results in near- and far-term R&D and technology demonstration; 2) Identify integrated digital communications, navigation and surveillance R&D requirements necessary for a safe, secure and reliable, high-capacity, advanced air transportation system; 3) Provide a forum for fostering collaboration and coordination; and 4) Discuss critical issues and develop recommendations to achieve the future integrated CNS vision for national and global air transportation. The workshop attracted 316 attendees from government, industry and academia to address these purposes through technical presentations, breakout sessions, and individual and group discussions during the workshop and after-hours events, and included 16 international attendees. An Executive Committee consisting of representatives of several key segments of the aviation community concerned with CNS issues met on the day following the workshop to consider the primary outcomes and recommendations of the workshop. This report presents an overview of the conference, workshop breakout session results, and the findings of the Executive Committee.

Phillips, Brent↗

Tools for Administration of a UNIX-Based Network

Several computer programs have been developed to enable efficient administration of a large, heterogeneous, UNIX-based computing and communication network that includes a variety of computers connected to a variety of subnetworks. One program provides secure software tools for administrators to create, modify, lock, and delete accounts of specific users. This program also provides tools for users to change their UNIX passwords and log-in shells. These tools check for errors. Another program comprises a client and a server component that, together, provide a secure mechanism to create, modify, and query quota levels on a network file system (NFS) mounted by use of the VERITAS File SystemJ software. The client software resides on an internal secure computer with a secure Web interface; one can gain access to the client software from any authorized computer capable of running web-browser software. The server software resides on a UNIX computer configured with the VERITAS software system. Directories where VERITAS quotas are applied are NFS-mounted. Another program is a Web-based, client/server Internet Protocol (IP) address tool that facilitates maintenance lookup of information about IP addresses for a network of computers.

LeClaire, Stephen↗

Formal verification and validation of run-to-completion style state charts using Event-B

State chart notations with ‘run to completion’ semantics are popular with engineers for designing controllers that react to environment events with a sequence of state transitions but lack formal refinement and rigorous verification methods. State chart models are typically used to design complex control systems that respond to environmental triggers with a sequential process. The model is usually constructed at a concrete level and verified and validated using animation techniques relying on human judgement. Event-B, on the other hand, is based on refinement from an initial abstraction and is designed to make formal verification by automatic theorem provers feasible. Abstraction and formal verification provide greater assurance that critical (e.g. safety or security) properties are not violated by the control system. In this paper, we introduce a notion of refinement into a ‘run to completion’ state chart modelling notation and leverage Event-B’s tool support for theorem proving. We describe the difficulties in translating ‘run to completion’ semantics into Event-B refinements and suggest a solution. We illustrate our approach and show how models can be validated at different refinement levels using our scenario checker animation tools. We show how critical invariant properties can be verified by proof despite the reactive nature of the system and how behavioural aspects of the system can be verified by testing the expected reactions using a temporal logic, model checking approach. To verify liveness, we outline a proof that the run to completion is deadlock-free and converges to complete the run.

97 MATHEMATICS AND COMPUTING↗

Assessing DER Network Cybersecurity Defences in a Power-Communication Co-Simulation Environment

Increasing penetrations of interoperable distributed energy resources (DER) in the electric power system are expanding the power system attack surface. Maloperation or malicious control of DER equipment can now cause substantial disturbances to grid operations. Fortunately, many options exist to defend and limit adversary impact on these newly-created DER communication networks, which typically traverse the public internet. However, implementing these security features will increase communication latency, thereby adversely impacting real-time DER grid support service effectiveness. In this work, a collection of software tools called SCEPTRE were used to create a co-simulation environment where SunSpec-compliant PV inverters were deployed as virtual machines and interconnected to simulated communication network equipment. Network segmentation, encryption, and moving target defence security features were deployed on the control network to evaluate their influence on cybersecurity metrics and power system performance. The results indicated that adding these security features did not impact DER-based grid control systems but improved the cybersecurity posture of the network when implemented appropriately.

97 MATHEMATICS AND COMPUTING↗

System-Level Integration of Modular Language Models for Real-Time Risk Assessment in Third-Party Risk Management Systems

Large enterprises typically rely on dedicated teams to govern and implement security measures throughout their supply chains, ensuring compliance with enterprise security procedures. There is a significant reliance on Third-Party Risk Management (TPRM) platforms, which often require complete, highly structured information from potential vendors. The review and compliance assurance processes are time- and labor intensive, often requiring several rounds of review between the supply chain security risk management teams, business users, and potential vendors, leading to delays in the supply chain processing and consumer experience. Significant challenges in the risk management paradigm include handling unstructured data in various formats and providing real-time feedback to users to reduce the required review time. This paper presents a novel solution to these challenges. A modular multi-step system architecture is proposed using advances in language processing, specifically for unstructured responses and provides real-time feedback (i.e., 3 seconds) so that users can improve their responses before the TPSRM team review. This novel system architecture will increase information accuracy and significantly reduce time and labor during the review process.

99 - GENERAL AND MISCELLANEOUS↗

Joint Comments from the Department of Energy, National Nuclear Security Administration (DOE NNSA) Los Alamos Field Office and Triad National Security, LLC on the U.S. Environmental Protection Agency’s New Mexico State-Wide Municipal Separate Storm Sewer System Strawman General Permit

In December 2020 and March 2021, EPA issued two MS4 strawman permit drafts specific to the Los Alamos area. EPA made text changes in the 2 nd strawman permit based on stakeholder comments related to the initial draft. During the public meeting on the Los Alamos area designation decision held on February 13, 2024, EPA staff stated that comments from the past strawman permits would be incorporated into the new MS4 permit to be issued state-wide. However, it does not appear that any of the text changes from the 2 nd Los Alamos area strawman permit were included in this state-wide general MS4 strawman permit. For reference, the 2 nd Los Alamos area revised strawman permit is included with these comments as Attachment 2. Many of the following comments refer to or state EPA’s updated text included in the 2 nd Los Alamos area strawman permit. The updated text from this 2 nd strawman permit that are referenced in the following comments should be applicable state-wide and it is suggested that this past work be reconsidered and incorporated.

54 ENVIRONMENTAL SCIENCES↗

Continuous-time look-ahead flexible ramp scheduling in real-time operation

This paper develops a novel continuous-time look-ahead optimization model for co-optimizing balancing energy and flexible ramp products in real-time power systems operation. In addition, a continuous-time day-ahead operation model is developed to commit and schedule an adequate subset of generating units for providing balancing energy and ramping requirements in real-time operation. The up and down flexible ramp products are defined as continuous-time decision trajectories that continuously supply the real-time up and down ramping requirements of the system. The deliverability of flexible ramp products is secured through reserving the respective power requirements in generation capacity constraints of generating units. A function space solution method is proposed to reduce the dimensionality of day-ahead and real-time models through projecting them into finite-dimensional function spaces spanned by Bernstein polynomials, where the real-time operation decisions are modeled with a higher accuracy level than day-ahead decisions. Simulations are conducted on the IEEE-RTS system using CAISO load data, and the numerical results showcase the effectiveness of the proposed model in supplying the energy and flexible ramp requirements and avoiding ramping scarcity in the system, while reducing the operation costs.

24 POWER TRANSMISSION AND DISTRIBUTION↗

NREL is Delivering Integrated Solutions for an Affordable and Secure Energy Future

The National Renewable Energy Laboratory (NREL) is the U.S. Department of Energy's primary national laboratory for energy systems research and development. As the energy systems laboratory, NREL's unique strength lies in developing and integrating a broad array of energy technologies into robust, resilient systems - bridging foundational research with practical applications to lower energy costs, drive economic growth, bolster national security, and deliver abundant and reliable energy.

29 ENERGY PLANNING, POLICY, AND ECONOMY↗