SEARCH · Engineering Papers
Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.
Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.
To move from ambitions to actions, communities need in-depth energy-sector expertise and insight. As a U.S. Department of Energy (DOE) research lab, NREL offers unbiased, best-in-class analysis and modeling capabilities supported by decades of scientific and applied research, expertise, and partnerships. This presentation highlights how NREL illuminates pathways to clean, affordable, equitable, secure, and resilient energy systems.
In recent years an increased international concern has emerged about the radiological and nuclear (RN) threats associated with the illicit trafficking of nuclear and radioactive materials that could be potentially used for terrorist attacks. The objective of the REWARD (Real Time Wide Area Radiation Surveillance System) project, co-funded by the European Union 7. Framework Programme Security, consisted in building a mobile system for real time, wide area radiation surveillance, using a CdZnTe detector for gamma radiation and a neutron detector based on novel silicon technologies. The sensing unit includes a GPS system and a wireless communication interface to send the data remotely to a monitoring base station, where it will be analyzed in real time and correlated with historical data from the tag location, in order to generate an alarm when an abnormal situation is detected. Due to its portability and accuracy, the system will be extremely useful in many different scenarios such as nuclear terrorism, lost radioactive sources, radioactive contamination or nuclear accidents. This paper shortly introduces the REWARD detection system, depicts some terrorist threat scenarios involving radioactive sources and special nuclear materials and summarizes the simulation work undertaken during the past three years in the framework of the REWARD project. The main objective consisted in making predictions regarding the behavior of the REWARD system in the presence of a Radiological Dispersion Device (RDD), one of the reference scenarios foreseen for REWARD, using the Monte Carlo simulation program MCNP6. The reference scenario is characterized in detail, from the i) radiological protection, ii) radiation detection requirements and iii) communications points of view. Experimental tests were performed at the Fire Brigades Facilities in Rome and at the Naples Fire Brigades, and the results, which validate the simulation work, are presented and analyzed. The response of the REWARD detection system to the presence of an RDD is predicted and discussed. (authors)
The deployment of a used fuel centralized interim storage facility (CISF) can offer a renewed opportunity for the U.S. to make real progress towards integrating of the back end of the fuel cycle. One of the key elements of success, and perhaps as important as the CISF project itself, is transportation-program readiness for large-scale rail shipments of spent fuel to a centralized storage facility. This paper offers an overview of the status of spent fuel transportation readiness in the U.S. The authors identify a number of technical and institutional challenges to be resolved before rail shipments of used fuel to a centralized storage facility can begin. Furthermore, 'NAC International', a transportation company, recommends a key action to ensure a safe, secure and efficient transportation system that meets stakeholder expectations is ready to meet milestone dates. NAC will address the challenges of deploying such a system, focused on leveraging existing U.S. transportation experience, capabilities and infrastructure. This paper concludes with the assertion, that spent fuel transportation to a CISF by 2021 is possible if we seriously commit resources now to address the critical institutional, operational, and system requirements implicit in a consent based transportation and storage program.
Explore the source record for details and available documents.
Formal methods use mathematical logic and equations to prove that a system or code is secure. In this poster, I examine existing formal methods tools and their application for projects working to remediate vulnerabilities in hardware and hardware description language. This poster is focused on the tools ReWire and AutoGenILA and I hope to evaluate their benefits and weaknesses with the intention of creating an internal report on the application and weaknesses of existing formal methods tools and identifying gaps for future formal methods tool creation.
The U.S. Department of Energy's (DOE) Energy Technology Innovation Partnership Project (ETIPP) helps coastal, remote, and island communities increase the affordability, reliability, and security of their energy systems through energy planning and deep-dive technical assistance.
The U.S. Department of Energy's (DOE) Energy Technology Innovation Partnership Project (ETIPP) helps coastal, remote, and island communities increase the affordability, reliability, and security of their energy systems through energy planning and deep-dive technical assistance. This is a English and Spanish translation.
The technical basis for the Y-12 National Security Complex (Y-12) Uranium Processing Facility (UPF) Criticality Accident Alarm System (CAAS) 90% design has been completed. The CAAS design was evaluated for two primary processing facilities, the Main Processing Building (MPB) and the Salvage and Accountability Building (SAB), and for connected facilities known as the Personnel Support Building (PSB) and the Highly Enriched Uranium Materials facility (HEUMF) Connector (HCON), which connects UPF to existing Y-12 facilities. The evaluation focused on three primary areas to address requirements of ANSI/ANS-8.3: (1) detectability of the minimum accident of concern; (2) determination of areas where total dose could exceed 12 rad for the maximum anticipated accident yield; and (3) evaluation of the radiation tolerance of the detectors and associated control cabinets. The design was based on extensive analyses performed in MCNP6.
Energy management system (EMS) consists of several wide-area control applications that serve as a backbone for security, stability, and reliability of the power system. Wide-area voltage control system (WAVCS), one of the critical wide-area applications, operates in coordination with local Flexible AC Transmission System (FACTS) devices to provide voltage security and optimal management of active and reactive power resources. Since the WAVCS relies on wide-area communication and data sharing devices, possible cybersecurity vulnerabilities have to be addressed to ensure the closed-loop operation of WAVCS. In this paper, we present a methodology for performing an impact analysis of cyber-attacks in WAVCS cybersecurity. In particular, different types of data integrity attacks, such as malicious tripping, fault replay, and signal altering attacks, are considered, and detailed impact analysis is conducted in a testbed environment using the Kundur's four machine two-area system. For performing an impact analysis, the transient voltage stability of the sensitive bus voltage is studied, followed by the quantitative assessment and severity ranking using the voltage profile index. Our experimental evaluation reveals that the data integrity attacks on control signals exhibit a higher attack severity than on the measurement signals. Further, the severity of these attacks varies with nature (static or dynamic), location, and types of attacks.
Many agencies and corporations are either contemplating or in the process of building a cyber Security Operations Center (SOC). Those Agencies that have established SOCs are most likely working on major revisions or enhancements to existing capabilities. As principle developers of the NASA SOC; this Presenters' goals are to provide the GFIRST community with examples of some of the key building blocks of an Agency scale cyber Security Operations Center. This presentation viII include the inputs and outputs, the facilities or shell, as well as the internal components and the processes necessary to maintain the SOC's subsistence - in other words, the anatomy of a SOC. Details to be presented include the SOC architecture and its key components: Tier 1 Call Center, data entry, and incident triage; Tier 2 monitoring, incident handling and tracking; Tier 3 computer forensics, malware analysis, and reverse engineering; Incident Management System; Threat Management System; SOC Portal; Log Aggregation and Security Incident Management (SIM) systems; flow monitoring; IDS; etc. Specific processes and methodologies discussed include Incident States and associated Work Elements; the Incident Management Workflow Process; Cyber Threat Risk Assessment methodology; and Incident Taxonomy. The Evolution of the Cyber Security Operations Center viII be discussed; starting from reactive, to proactive, and finally to proactive. Finally, the resources necessary to establish an Agency scale SOC as well as the lessons learned in the process of standing up a SOC viII be presented.
Dynamic and uncertain security environments, such as cyber systems, often involve strategic interactions among multiple decision-making agents. In this paper, we consider a cybersecurity setting where a system administrator (defender) has to screen malicious service requests of an attacker who seeks to exhaust available cyber resources and inconvenience users with normal requests. We propose a novel cyber-threat inspection model, based on Stackelberg games, that unies aspects of Threat Security Games with the Erlang-B queuing framework to provide equilibrium strategies for both the attacker and defender. In our proposed model, the defender seeks to determine the optimal number of inspection nodes required to maximize detection probability of malicious requests, while the attacker maximizes the probability of legitimate requests dropping out of the system. We derive analytical expressions of the equilibrium solutions of the proposed Stackelberg game under realistic assumptions on system observability and payoff structure of the players. A numerical case study is presented, and steps for further research are identified.
The bifurcation and Lyapunov exponent for a single-machine-infinite bus system with excitation model are carried out by varying the mechanical power, generator damping factor and the exciter gain, from which periodic motions, chaos and the divergence of system are observed respectively. From given parameters and different initial conditions, the coexisting motions are developed in power system. The dynamic behaviors in power system may switch freely between the coexisting motions, which will bring huge security menace to protection operation. Especially, the angle divergences due to the break of stable chaotic oscillation are found which causes the instability of power system. Finally, a new adaptive backstepping sliding mode controller is designed which aims to eliminate the angle divergences and make the power system run in stable orbits. Numerical simulations are illustrated to verify the effectivity of the proposed method.
Safe reentry of the shuttle orbiter requires that the payload bay doors be closed and securely latched. Since a malfunction in the door drive or bulkhead latch systems could make safe reentry impossible, the requirement to provide tools to manually close and secure the doors was implemented. The tools would disconnect a disabled door or latch closure system and close and secure the doors if the normal system failed. The tools required to perform these tasks have evolved into a set that consists of a tubing cutter, a winch, a latching tool, and a bolt extractor. The design, fabrication, and performance tests of each tool are described.
This report summarizes development of the ADTT web-based design environment by the ELORET team in 2000. The Advanced Design Technology Testbed had been in development for several years, with demonstration applications restricted to aerodynamic analyses of subsonic aircraft. The key changes achieved this year were improvements in Web-based accessibility, evaluation of collaborative visualization, remote invocation of geometry updates and performance analysis, and application to aerospace system analysis. Significant effort was also devoted to post-processing of data, chiefly through comparison of similar data for alternative vehicle concepts. Such comparison is an essential requirement for designers to make informed choices between alternatives. The next section of this report provides more discussion of the goals for ADTT development. Section 3 provides screen shots from a sample session in the ADTT environment, including Login and navigation to the project of interest, data inspection, analysis execution and output evaluation. The following section provides discussion of implementation details and recommendations for future development of the software and information technologies that provide the key functionality of the ADTT system. Section 5 discusses the integration architecture for the system, which links machines running different operating systems and provides unified access to data stored in distributed locations. Security is a significant issue for this system, especially for remote access to NAS machines, so Section 6 discusses several architectural considerations with respect to security. Additional details of some aspects of ADTT development are included in Appendices.
In January 2014 the U.S. Department of Energy (DOE), National Nuclear Security Administration (NNSA) Aerial Measuring System (AMS) and the Natural Resources Canada (NRCan) Nuclear Emergency Response project conducted a series of joint surveys at a number of locations in Nevada including the Nevada National Security Site (NNSS). The goal of this project was to compare the responses of the two agencies’ aerial radiation detection systems and data analysis techniques. This test included varied radioactive surface contamination levels and isotopic composition experienced at the NNSS and the differing data processing techniques utilized by the respective teams. Because both teams used the commercial aerial radiation detection systems from Radiation Solutions, Inc., the main focus of the campaign was to investigate the data acquisition techniques, data analysis, and ground-truth verification. The NRCan system consisted of four 4" × 4" × 16" NaI(Tl) scintillator crystals of which two were externally mounted in a modified commercial cargo basket certified for the Eurocopter AS350; the NNSA AMS system consisted of twelve 2" × 4" × 16" NaI(Tl) crystals in externally mounted dedicated pods. For NRCan, the joint survey provided an opportunity to characterize their system’s response to extended sources of various fission products at the NNSS. Since both systems play an important role in their respective countries’ national framework of radiological emergency response and are subject to multiple mutual cooperation agreements, it was important for each country to obtain more thorough knowledge of how they would employ these important assets and define the roles that they would each play in an actual response.
The growing convergence of Information Technology (IT) and Operational Technology (OT) within Industry 4.0 environments has introduced new demands on industrial network infrastructure. As cyber-physical systems become increasingly interconnected, ensuring the secure, timely, and efficient exchange of critical data is essential. This thesis explores how network slicing, a method of creating isolated virtual network segments, can be applied within OT environments to address challenges such as latency, security, and resource allocation. The first research question addressed in this thesis is: How can OT networks take advantage of NFV and SDN technology to become cyber resilient? This study examines the operational, security, and architectural implications of introducing network slicing into traditionally static OT infrastructures such as Industrial Control Systems (ICS) and SCADA. Through simulated deployments and case studies, the research demonstrates how slicing enables better isolation between critical and non-critical services, thereby improving response time, throughput, and security in sensitive environments. The second question considers: How to dynamically implement network slicing and take advantage of network resources towards integrating decentralized machine learning? In response, this thesis proposes a framework that combines Software-Defined Networking (SDN), Network Function Virtualization (NFV), and Federated Learning (FL) to enable real-time analytics while maintaining data locality. The proposed approach reduces the burden on centralized infrastructure and minimizes privacy risks by supporting on-site training of models across distributed OT nodes, coordinated through dynamically allocated network slices. The third focus explores: How slicing helps to increase the resiliency of OT networks through the orchestration of a dynamic DMZ? To answer this, the thesis presents a method for creating and managing Dynamic Demilitarized Zones (DMZs) using network slicing. This enables flexible and automated isolation of sensitive subsystems during threat scenarios or high-risk operations. Coupled with intelligent orchestration and containerized security services, the dynamic DMZ significantly enhances the system's ability to respond to cyber incidents without halting production. Ultimately, this thesis contributes a comprehensive architecture that blends network slicing with machine learning, secure segmentation, and automation, paving the way for resilient, adaptive, and intelligent OT environments. Performance evaluations across multiple scenarios show improvements in system reliability, threat response time, model accuracy, and resource utilization, providing a strong foundation for future industrial automation systems.
The purpose of this thesis is to develop a reference design to assist in the selection of security practices in power electronics design. A prototype will be developed from this reference design for evaluation. This evaluation will include a brief cost/benefit analysis to gauge the efficacy of implementing each layer of security throughout the power electronics design process. This thesis will also describe the obstacles and effectiveness of integrating a Trusted Platform Module (TPM) into a cyber-hardened grid-connected device. The TPM device is a secured crypto processor that assists in generating, storing, and restricting the use of cryptographic keys. The emphasis of this research is to establish integrity, authenticity, and confidentiality within a system by providing a baseline of security concerns for segments of the system. This research considers communication, control, and hardware level securities. The scope of this thesis will review the necessary security methods as well as consider the effects these methods have on the embedded system, to assess the desired security to responsiveness trade off. Applying this approach to a design process will alleviate various unknowns of appending security to a power electronics design. This thesis describes the specific vulnerabilities introduced within this grid-edge environment, and how the liabilities within the system can be mitigated. Initially, common security techniques will be considered to establish a guideline to benchmark performance and resource costs of the system. The foundation will be a non-hardened power electronic system platform with industry standard communication protocols. Several security techniques and attack vectors will then be evaluated to contribute to the base level platform. Other fail-safe features take place to gauge progress of the selected approach, non-inclusive to the TPM. Collectively, this investigation will determine a valid experiment by appraising and categorizing resource allocation, performance overhead, and monetary cost analysis results into a reference design. The prototype will then demonstrate methods to relieve common threats that are purposefully implemented into the design.
Industrial Control Systems (ICS) are commonly used in industries such as oil and natural gas, transportation, electric, water and wastewater, chemical, pharmaceutical, pulp and paper, food and beverage, as well as discrete manufacturing (e.g., automotive, aerospace, and durable goods.) SCADA systems are generally used to control dispersed assets using centralized data acquisition and supervisory control. Originally, ICS implementations were susceptible primarily to local threats because most of their components were located in physically secure areas (i.e., ICS components were not connected to IT networks or systems). The trend toward integrating ICS systems with IT networks (e.g., efficiency and the Internet of Things) provides significantly less isolation for ICS from the outside world thus creating greater risk due to external threats. Albeit, the availability of ICS/SCADA systems is critical to assuring safety, security and profitability. Such systems form the backbone of our national cyber-physical infrastructure. We extend the concept of mean failure cost (MFC) to address quantifying availability to harmonize well with ICS security risk assessment. This new measure is based on the classic formulation of Availability combined with Mean Failure Cost (MFC). The metric offers a computational basis to estimate the availability of a system in terms of the loss that each stakeholder stands to sustain as a result of security violations or breakdowns (e.g., deliberate malicious failures).