SEARCH · Engineering Papers

Results for “IT security”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

SourceResearch connectionFrom yearThrough year

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 127 records · Page 7

All sources NASA NTRS DOE OSTI

DOE OSTI2020

Report of the Sixth Regional Review Meeting of the Radiological Security Partnership.

The Sri Lanka Atomic Energy Regulatory Commission (AERC) and the United States Department of Energy (U.S. DOE) co-hosted the 6th Regional Review Meeting on Radiological Security involving representatives from over 20 countries, the International Atomic Energy Agency (IAEA), the International Criminal Police Organization (INTERPOL), and the World Institute for Nuclear Security. The purpose of the event was to discuss the implementation of, and plans for, high-activity radioactive source security (RSS). The U.S. DOE’s National Nuclear Security Administration (NNSA) Office of Radiological Security (ORS) fully sponsored this review meeting. Participants were welcomed to Colombo, Sri Lanka, and the meeting was formally opened by Nirmali Karunarathna of the Sri Lanka Atomic Energy Regulator Council who emphasized the strong partnerships among the participants. The opening Ceremony and Lamp Lighting included dignitaries from the sponsoring countries. Robert Hilton, Deputy Chief of Mission at the U.S. Embassy in Colombo, and Kristin Hirsch of the ORS gave other opening remarks that highlighted the social benefit from radiological sources in medicine, industry, and agriculture, while stressing the importance of addressing the risks associated with the malicious use of radiological sources. Emphasis was placed on the importance of partnerships among all the participants to help ensure the success of securing radiological materials throughout the world and the opportunity to share information and experiences. AERC was acknowledged with special thanks for hosting this event. A participant list is included as Attachment A, and the meeting agenda is provided as Attachment B. All presentations were made available to participants. The following sections summarize the meeting’s presentations, discussions, issues, suggestions, and recommendations.

61 RADIATION PROTECTION AND DOSIMETRY↗

DOE OSTI2020

Blockchain based Communication Architectures with Applications to Private Security Networks

Existing communication protocols in high consequence security networks are highly centralized. While this naively makes the controls easier to physically secure, external actors require fewer resources to disrupt the system because there are fewer points in the system can be destroyed or interrupted without the entire system failing. We present a solution to this problem using a proof-of-work-based blockchain implementation built on MultiChain. We construct a test-bed network containing two types of data input: visual imagers and microwave sensor information. These data types are ubiquitous in perimeter intrusion detection security systems and allow a realistic representation of a real-world network architecture. The cameras in this system use an object detection algorithm to nd important targets in the scene. The raw data from the camera and the outputs from the detection algorithm are then placed in a transaction on the distributed ledger. Similarly, microwave data is used to detect relevant events and are placed in a transaction. These transactions are then bundled into blocks and broadcast to the rest of the network using the Bitcoin-based MultiChain protocol. We develop five tests to examine the security metrics of our network. We performed the five security metric test using different sized networks from 7 to 39 nodes to determine how the metrics scale with respect to size. We nd that when compared to a centralized architecture our implementation provides a resiliency increase that is expected from a blockchain-based protocol without slowing the system so much that a human operator would notice. Furthermore, our approach is able to detect tampering in real time. Based on these results, we theorize that security networks in general could use a blockchain-based approach in a meaningful way.

97 MATHEMATICS AND COMPUTING↗

DOE OSTI2020

Recommendations for Data-in-Transit Requirements for Securing DER Communications

With the adoption of Distributed Energy Resource (DER) interoperability standards, common communication protocols are now being deployed between power system operators and DER devices. In 2018, a revision to the US interconnection and interoperability standard, Institute of Electrical and Electronics Engineers (IEEE) Std. 1547, required DER equipment to have an IEEE 2030.5, IEEE 1815, or SunSpec Modbus communication exchange interface. This change supports the future transition to secure connection and exchange of information between the DER equipment and implementing parties, such as grid operators. Adoption of standardized communication protocols and associated information models is a critical step toward interoperability between power system operators and DER, such as photovoltaic (PV) and energy storage systems. However, security requirements for these standardized communication protocols are not comprehensive, resulting in non-standard and vendor-specific implementation that may leave DER equipment susceptible to cyberattacks. This paper examines the data-in-flight security requirements for standardized DER communication protocols, per IEEE 1547-2018 revision, as it relates to device authentication, key management, and encryption. The state of the art for these security features is also explored, addressing their impact on communication and performance of low-cost single board computers, which are typical of DER devices. In conclusion, a recommendation is provided to adopt a common set of communication requirements, which are intended to achieve interoperability and implement data security over DER network pathways, while ensuring reliable, secure, and real-time information delivery.

42 ENGINEERING↗

DOE OSTI2021

INS–Support for Formal Cyber Security Education in Brazil–After Action Report

The adoption of digital technology into Instrumentation and Control (I&C) systems in nuclear facilities fundamentally changes the nature of these systems. Greater interconnectivity of reprogrammable, and functionally interdependent control systems has given rise to the need for computer security consideration in digital I&C Systems. The cyber security of I&C systems presents a growing risk to nuclear facilities and requires the development of educational and research tools to ensure the safety of these facilities. Currently there is a major gap in formal educational offerings on cyber security for these Operational Technology (OT) systems. To provide formal cyber security education resources, DOE’s office of International Nuclear Security (INS) partnered with the University of São Paulo (USP) to develop a training course on the cyber security of nuclear facility I&C systems using the hypothetical Nuclear Power Plant, Asherah.

46 INSTRUMENTATION RELATED TO NUCLEAR SCIENCE AND ↗

DOE OSTI2021

Security by Design Economics Analysis for Advanced Reactors and Small Modular Reactors Project Interim Report for FY2021

Advanced Reactor and Small Modular Reactor (AR/SMR) designs have the potential to provide clean, reliable baseload energy. Ensuring the capability to deploy these reactors in an economically viable fashion is of interest to industry. A large portion of the expected operating costs of AR/SMRs involves the security of the plant. Security by Design (SeBD) is the practice of including features in the design and construction of the site, with the intent to decrease the operating costs related to security. Quantifying the increase or decrease in the overall lifetime cost to the plant as a result of SeBD is of paramount importance in understanding the disadvantages and benefits of such activities. The National Nuclear Security Administration’s (NNSA) Office of International Nuclear Security (INS) is funding the development of a methodology whereby the capital expenses and operating expenses, as well as the physical security effectiveness, of SeBD can be quantified for AR/SMRs. This report is an interim report on the progress of the work performed by Sandia National Laboratories (SNL), Idaho National Laboratory, and Oak Ridge National Laboratory (ORNL). It is the second annual report on this work.

21 SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLANTS↗

DOE OSTI2023

Oak Ridge National Laboratory Security by Design: A Plant Design and Component-Based Approach to Technical Solutions to Insider and Outsider Threat

Security costs for nuclear reactors have been shown to rise over the lifecycle of a nuclear facility as new threats, security weaknesses, and the generic threat profile of the plant location change over time. This paper conducts a review of the technological gaps that currently exist in Security by Design (SeBD) based on the literature available and attempts to close those gaps through proposing technological constructs and processes that can integrate safety and security in the design process of a plant, with a primary focus on SMR technology. Under the new modular and mass manufacturing regime, where plant designs attempt to reduce costs with potential economies of scale and modular construction, the current SeBD definitions focusing on state level regulators are not considered adequate since the licensing stage is often too late in the design process to integrate the true cost savings of SeBD. Thus, this paper attempts to remedy the current logic in order to allow for continuous implementation of security alongside the development of the safety concept for the plant. If adopted within the design process the establishment of this type of technology will allow for a technological ecosystem to evolve that will imbed security concepts into the physical design of the components of the plant.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

DOE OSTI2021

A Nuclear Security Enterprise Study of High-Reliability Systems, Collaboration, and Data

It may seem simple and trivial, but defining the difference between data and information is contested and has implications that may affect the security of United States interests and even cost lives. For security, data are raw facts or figures without context, while information is the compilation or articulation of data that forms context. Security depends on clarity in the differences between data and information and controlling them. Control is necessary to ensure that data and information are not inadvertently released to foreign governments, the public, or those without Need-to-Know. A primary concern in the practice of security is the control of data to avoid the inadvertent conversion to sensitive information. The complexity of this concern is further augmented when institutions are part of tightly coupled networks that informally share data and information. Additionally, those that share data as a function of legislative action—and/or formally integrate data and information system infrastructures—may be a higher security risk. This paper will present a case study that utilizes elements of literature from Knowledge Management and networks to tell a story of an issue in security—specifically, controlling the conversion of data to information.

96 KNOWLEDGE MANAGEMENT AND PRESERVATION↗

DOE OSTI2023

Finding of No Adverse Effect for the Façade Alteration of Building 23-117, Administration Building, Mercury, Area 23, Nevada National Security Site, Nye County, Nevada

The U.S. Department of Energy (DOE), National Nuclear Security Administration Nevada Field Office (NNSA/NFO) plans to update the façade of Building 23-117 in the town of Mercury (Nevada State Historic Preservation Office [SHPO] Resource No. B15256), which is on the Nevada National Security Site (NNSS) in Nye County, Nevada. The purpose of the undertaking is to incorporate Building 23-117 into the new Mercury campus in accordance with the master plan for the modernization of Mercury. The NNSA/NFO will implement this undertaking in accordance with the Programmatic Agreement between the National Nuclear Security Administration Nevada Field Office and the Nevada State Historic Preservation Officer Regarding Modernization and Operational Maintenance of the Nevada National Security Site, at Mercury in Nye County, Nevada, hereafter referred to as the Mercury PA. Building 23-117 was built in 1982 as the architect-engineer Administration Building1 for Holmes & Narver, a government contractor who helped design and engineer the town of Mercury and other areas on the NNSS from its inception until the termination of their contract in 1990. The building continued to be used by subsequent government contractors and is currently still in use by MSTS. The town of Mercury and the immediate surrounding area have been formally determined eligible for listing in the National Register of Historic Places (National Register, NRHP) as the Mercury Historic District (MHD, SHPO Resource No. D230) under Criteria A and C for its importance in supporting nuclear testing and scientific research from 1951 through 1992. Building 23-117 was identified as a contributing element to the MHD in a 2018 architectural survey of the district (Reno et al.) and recorded on a Nevada Architectural Resource Assessment (ARA) form (Reno et al. 2017). It is a historic property for the purposes of compliance with Section 106 of the National Historic Preservation Act (NHPA) and is subject to the stipulations of the Mercury PA. The NNSA/NFO requested that Desert Research Institute (DRI), cultural resource subject matter experts, analyze the effects of the proposed project on historic properties in the Area of Potential Effect (APE) and make a recommended finding for the undertaking in accordance with Section 106 of the NHPA and the Mercury PA. The purpose of this letter report is to submit documentation related to the mitigation of the façade alteration of Building 23-117 (Nevada State Historic Preservation Office [SHPO] Resource No. B15256) in the Mercury Historic District (MHD, SHPO Resource No. D230). This submission is intended to comply with the stipulations in the Programmatic Agreement between the National Nuclear Security Administration Nevada Field Office and the Nevada State Historic Preservation Officer Regarding Modernization and Operational Maintenance of the Nevada National Security Site at Mercury in Nye County, Nevada, hereafter referred to as the Mercury PA.

54 ENVIRONMENTAL SCIENCES↗

DOE OSTI2023

Experiences of Member States in Building a Nuclear Security Infrastructure for New Nuclear Power Programmes

A nuclear power programme has many benefits, but it is a major undertaking that requires careful planning and preparation as well as a substantial investment in time. It also necessitates the establishment of a sustainable national infrastructure with committed and sustained financial and human resources. While nuclear power is not unique in this respect, it is different from other sources of energy because of the risks associated with the use of nuclear material, as well as the need for compliance with international legal instruments, internationally accepted nuclear safety standards, nuclear security guidance, and safeguards requirements. The IAEA’s Milestones in the Development of a National Infrastructure for Nuclear Power, IAEA Nuclear Energy Series No. NG-G-3.1 (Rev. 1), defines a phased approach that identifies 19 infrastructure issues that should be addressed in each of the three phases of the development of a nuclear infrastructure for a nuclear power programme. The publication Evaluation of the Status of National Nuclear Infrastructure Development IAEA Nuclear Energy Series NG-T-3.2 (Rev. 2) provides a methodology to determine the status of the infrastructure conditions covering all 19 issues identified in the Milestones Approach. A companion IAEA Implementing Guide, Establishing the Nuclear Security Infrastructure for a Nuclear Power Programme, IAEA Nuclear Security Series No. 19, provides guidance on the recommended actions to be taken by a State to establish an effective national nuclear security infrastructure for a nuclear power programme using the Milestones Approach. This publication is intended to provide guidance based on the experiences and good practices of Member States with embarking nuclear power programmes as well as Member States that are expanding their nuclear power programmes. The guidance is in the form of case studies, which highlight challenges, issues, and solutions identified by Member States as lessons learned for new nuclear power programmes. This TECDOC is designed to present the experiences of Member States to assist other Member States in developing a nuclear security programme. It addresses the key actions necessary to establish an effective national nuclear security infrastructure for a nuclear power programme consistent with the three phases of the IAEA Milestones Approach. The Member States that provided case studies in this document are at different stages in the development of a nuclear power programme.

42 ENGINEERING↗

DOE OSTI2024

Integrating PCTRAN with AI-Driven Host-Intrusion Detection and Secured Container Systems for Advanced Malware Analysis (Summer Internship Report)

This study presents a solution for enhancing the security of the Personal Computer Transient Analyzer (PCTRAN) PC-based Nuclear Power Plant Simulator by integrating the software with an artificial intelligence (AI)-driven host-intrusion detection system (HIDS), in addition to a secured container system, for malware analysis. PCTRAN is a Windows XP-based software package that has the ability to simulate a variety of accident and transient conditions for nuclear power plants (NPPs). It offers a high-resolution replica of the Nuclear Steam Supply System (NSSS) and displays the status of important parameters allowing for operator interaction. By including AI-driven HIDS for the NSSS, the framework can identify security threats in real-time, ensuring the integrity of the nuclear simulation environment. Additionally, the secured container system offers the ability to isolate and analyze malware, preventing potential threats from affecting core systems. The integration process involves extensive testing and validation in order to ensure accuracy, reliability, and compliance with security policies. This framework sets a new precedent for secure simulation and training in NPP operations, and offers insight for future advancements in cybersecurity.

21 SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLANTS↗

DOE OSTI2024

Small Modular Reactor and Microreactor Security-by-Design Lessons Learned: Integrated PPS Designs

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

DOE OSTI2025

Deep Cyber-Physical Situational Awareness for Energy Systems: A Secure Foundation for Next-Generation Energy Management

This document provides the final report for the CYPRES project. The purpose is (1) to highlight and summarize its major accomplishments and (2) to provide guidance on how its outcomes have informed and can inform important additional research and technology transfer. The goal of CYPRES was the research, development, and demonstration of a security-oriented next generation cyber-physical EMS for electric power systems that detects malicious and abnormal events through the fusion of cyber and physical data. To achieve this, the CYPRES project team researched, developed, and built a prototype of the solution, referred to as the CYPRES EMS. The CYPRES EMS is a proof-of-concept cyber-physical platform that demonstrates the management of the energy system, communications, security, and cyber-physical grid modeling and analytics. As part of the capabilities of the CYPRES EMS, the team designed and developed a suite of power system applications for monitoring, risk analyses, detection, and control that are inherently cyberaware. At its core, the project aimed to research, develop, and demonstrate a security-oriented next-generation cyber-physical Energy Management System (EMS) capable of detecting malicious and abnormal events through the innovative fusion of cyber and physical data. This approach represents a fundamental shift from traditional EMS, reimagining how critical infrastructure can be protected through unified cyber-aware and physics-aware secure data flow pipelines. The project’s cornerstone deliverable, the CYPRES EMS, serves as a proof-of-concept cyber-physical platform that revolutionizes the management of energy systems, communications, security, and cyber-physical grid modeling and analytics. This prototype implements a comprehensive suite of power system applications for monitoring, risk analyses, detection, and control, all designed with inherent cyber awareness. The system’s architecture extends from end-devices in the field through to control center applications, establishing a secure and resilient control framework that addresses the challenges posed by diverse devices of unknown trustworthiness connecting to modern power systems. Through this innovative approach to deep cyber-physical situational awareness, the CYPRES project not only advances the state-of-the-art in energy infrastructure protection but also establishes a new paradigm for how EMS can be designed, deployed, and operated in an increasingly complex threat landscape. The findings and developments from this project provide crucial insights for stakeholders across the energy sector, offering a blueprint for enhancing the reliability and resilience of our nation’s critical energy infrastructure in the face of evolving cyber threats.

24 POWER TRANSMISSION AND DISTRIBUTION↗

DOE OSTI2024

U.S. Domestic Molten Salt Reactor: Security-by-Design

U.S. nuclear power facilities face increasing challenges in meeting dynamic security requirements caused by evolving and expanding threats while keeping costs reasonable to make nuclear energy competitive. The past approach has often included implementing security features after a facility has been designed and without attention to optimization, which can lead to cost overruns. Incorporating security in the design process can provide robust, economical, and effective physical protection systems (PPS). The purpose of this work is both to develop a framework for the integration of security into the design phase of a molten salt reactor (MSR) and show how to effectively design a PPS with a reduced staffing headcount. Specifically, this work focuses on integrating PPS design features into a developed facility layout by making minor modifications to building structures. A suite of tools, including Scribe3D©, PathTrace©, and Blender©, were used to model a hypothetical, generic domestic MSR facility. Physical protection elements such as sensors, cameras, barriers, and responders were added into the model based on defending the hypothetical MSR facility against a hypothetical design basis threat (DBT). Multiple outsider sabotage scenarios were examined, with adversary team sizes ranging from 4–8 to determine security system effectiveness. The results of this work will influence PPS designs and facility designs for U.S. domestic MSRs. This work will also demonstrate how a series of experimental and modeling capabilities across the Department of Energy (DOE) complex can impact the design and completion of security-by-design (SeBD) for small modular reactors (SMRs). The conclusions and recommendations in this document may be applicable to all SMR designs.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

DOE OSTI2023

High-Reliability Systems and the Control of National Security Data and Information

High-reliability systems are characterized by catastrophic implications in the event of failure. These implications can include substantive damage to the environment, social order, and loss of life. Examples of high-reliability systems include nuclear submarines, nuclear reactors, the electric grid, and nuclear weapons. Due to the catastrophic implications of failure, there are heightened awareness and control mechanisms surrounding related data and information. However, defining the difference between data and information is often ambiguous across scholarly disciplines and in United States policy and legislation. For high-reliability systems, the implications of ambiguity between data and information may affect the security of United States interests and even cost lives. For security, data are raw facts or figures without context, while information is the compilation or articulation of data that forms context. Security depends on clarity in the differences between data and information and how to control them. Control is necessary to ensure that data and information are not unintentionally released to foreign governments, the public, or those without need-to-know. A primary concern in the practice of security is the control of data to avoid the unintended conversion to information. Intra-institutionally, this control is highly complex given the amalgam of legacy data systems and the numerous and constantly evolving nature of modern data systems that were not necessarily designed to be integrated. The complexity of this concern is augmented when institutions are part of interinstitutional collaborations or networks of public-private partnerships that share data and information. Additionally, institutions that share data as a function of policy and legislative action— particularly formally integrated data and information system infrastructures—may be at higher security risk. This paper will present an intra-institutional paradigm that utilizes and integrates concepts from numerous disciplines to frame a critical and underspecified practical issue in security—controlling for the unintended conversion of data to information.

45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗

DOE OSTI2023

High-Reliability Systems and the Control of National Security Data and Information

High-reliability systems are characterized by catastrophic implications in the event of failure. These implications can include substantive damage to the environment, social order, and loss of life. Examples of high-reliability systems include nuclear submarines, nuclear reactors, the electric grid, and nuclear weapons. Due to the catastrophic implications of failure, there are heightened awareness and control mechanisms surrounding related data and information. However, defining the difference between data and information is often ambiguous across scholarly disciplines and in United States policy and legislation. For high-reliability systems, the implications of ambiguity between data and information may affect the security of United States interests and even cost lives. For security, data are raw facts or figures without context, while information is the compilation or articulation of data that forms context. Security depends on clarity in the differences between data and information and how to control them. Control is necessary to ensure that data and information are not unintentionally released to foreign governments, the public, or those without need-to-know. A primary concern in the practice of security is the control of data to avoid the unintended conversion to information. Intra-institutionally, this control is highly complex given the amalgam of legacy data systems and the numerous and constantly evolving nature of modern data systems that were not necessarily designed to be integrated. The complexity of this concern is augmented when institutions are part of inter-institutional collaborations or networks of public-private partnerships that share data and information. Additionally, institutions that share data as a function of policy and legislative action—particularly formally integrated data and information system infrastructures—may be at higher security risk. This paper will present an intra-institutional paradigm that utilizes and integrates concepts from numerous disciplines to frame a critical and underspecified practical issue in security—controlling for the unintended conversion of data to information.

45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗

DOE OSTI2022

Assessing the dimensionality of food-security measures

Here, we explore the dimensionality of the U.S. Department of Agriculture’s household food security survey module among households with children. Using a novel methodological approach to measuring food security, we find that there is multidimensionality in the module for households with children that is associated with the overall household, adult, and child dimensions of food security. Additional analyses suggest official estimates of food security among households with children are robust to this multidimensionality. However, we also find that accounting for the multidimensionality of food security among these households provides new insights into the correlates of food security at the household, adult, and child levels of measurement.

99 GENERAL AND MISCELLANEOUS↗

DOE OSTI2024

The Meaning of Risk for Safety, Security, and Safeguards in the Design of Advanced Nuclear Reactors

What is the meaning of risk as it applies to the design of advanced reactors in the disciplines of safety, security, and safeguards? How can we find common terminology for the concept of risk and how can we find interfaces between these disciplines? These are important questions that should be explored in order that they may be applied in an integrated manner for the most effective and efficient design approaches. Eliminating or minimizing risks is a key design driver that motivates and informs the development of nuclear reactors. For safety, risk is well understood and applied in Probabilistic Risk Assessments. For security, the risk-based concepts of vulnerability assessments and vital areas are all considered in designing security systems. For safeguards, the concept of risk is not formally defined, as it relates to the design and operation of nuclear reactors. International nuclear safeguards seek to reduce the risk of proliferation in the nuclear fuel cycle and as such the concept of risk does exist. Therefore, the current understanding of the “3S’ approach, which seeks to find the interfaces and conflicts between safety, security, and safeguards requires a thorough understanding of the role that the reduction of risk plays in all three disciplines. The intersection of risk for safety and security is now being developed as there is a strong correlation between reactor design and operations and their vulnerability to sabotage. The intersection of risk for security and safeguards has to date chiefly been focused on the nuclear material control and accounting systems, which are relied on by both the operator (State) and the IAEA. This paper explores the concept of risk in each of the three disciplines, how they interact, potential conflicts and interfaces , how these might be addressed and leveraged, and a notional framework for how this could be achieved.

Kovacic, Donald N↗

DOE OSTI2025

Enhancing Security and Resiliency in Operational Technology Environments Through Network Slicing and Federated Learning

The growing convergence of Information Technology (IT) and Operational Technology (OT) within Industry 4.0 environments has introduced new demands on industrial network infrastructure. As cyber-physical systems become increasingly interconnected, ensuring the secure, timely, and efficient exchange of critical data is essential. This thesis explores how network slicing, a method of creating isolated virtual network segments, can be applied within OT environments to address challenges such as latency, security, and resource allocation. The first research question addressed in this thesis is: How can OT networks take advantage of NFV and SDN technology to become cyber resilient? This study examines the operational, security, and architectural implications of introducing network slicing into traditionally static OT infrastructures such as Industrial Control Systems (ICS) and SCADA. Through simulated deployments and case studies, the research demonstrates how slicing enables better isolation between critical and non-critical services, thereby improving response time, throughput, and security in sensitive environments. The second question considers: How to dynamically implement network slicing and take advantage of network resources towards integrating decentralized machine learning? In response, this thesis proposes a framework that combines Software-Defined Networking (SDN), Network Function Virtualization (NFV), and Federated Learning (FL) to enable real-time analytics while maintaining data locality. The proposed approach reduces the burden on centralized infrastructure and minimizes privacy risks by supporting on-site training of models across distributed OT nodes, coordinated through dynamically allocated network slices. The third focus explores: How slicing helps to increase the resiliency of OT networks through the orchestration of a dynamic DMZ? To answer this, the thesis presents a method for creating and managing Dynamic Demilitarized Zones (DMZs) using network slicing. This enables flexible and automated isolation of sensitive subsystems during threat scenarios or high-risk operations. Coupled with intelligent orchestration and containerized security services, the dynamic DMZ significantly enhances the system's ability to respond to cyber incidents without halting production. Ultimately, this thesis contributes a comprehensive architecture that blends network slicing with machine learning, secure segmentation, and automation, paving the way for resilient, adaptive, and intelligent OT environments. Performance evaluations across multiple scenarios show improvements in system reliability, threat response time, model accuracy, and resource utilization, providing a strong foundation for future industrial automation systems.

Rodiles Delgado, Brian G↗