Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “systems security”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 127 records · Page 7

Random digital encryption secure communication system

The design of a secure communication system is described. A product code, formed from two pseudorandom sequences of digital bits, is used to encipher or scramble data prior to transmission. The two pseudorandom sequences are periodically changed at intervals before they have had time to repeat. One of the two sequences is transmitted continuously with the scrambled data for synchronization. In the receiver portion of the system, the incoming signal is compared with one of two locally generated pseudorandom sequences until correspondence between the sequences is obtained. At this time, the two locally generated sequences are formed into a product code which deciphers the data from the incoming signal. Provision is made to ensure synchronization of the transmitting and receiving portions of the system.

Doland, G. D.↗

Tools, Techniques, and Methodologies: A Survey of Digital Forensics for SCADA Systems

Security aspects of SCADA environments and the systems within are increasingly a center of interest to researchers and security professionals. As the rise of sophisticated and nation-state malware targeting such systems flourishes, traditional digital forensics tools struggle to transfer the same capabilities to systems lacking typical volatile memory primitives, monitoring software, and the compatible operating-system primitives necessary for conducting forensic investigations. Even worse, SCADA systems are typically not designed and implemented with security in mind, nor were they purpose-built to monitor and record system data at the granularity associated with traditional IT systems. Rather, these systems are often built to control field devices and drive industrial processes. More succinctly, SCADA systems were not designed with a primary goal of interacting with the digital world. Consequently, forensics investigators well-versed in the world of digital forensics and incident response face an array of challenges that prevent them from conducting effective forensic investigation in environments with vast amounts of critical infrastructure. In order to bring SCADA systems within the reach of the armies of digital forensics professionals and tooling already available, both researchers and practitioners need a guide to the current state-of-the-art techniques, a road-map to the challenges lying on the path forward, and insight into the future directions R&D must move towards. To that end, this paper presents a survey into the literature on digital forensics applied to SCADA systems. We cover not only the challenges to applying digital forensics to SCADA like most other reviews, but also the range of proposed frameworks, methodologies, and actual implementations in literature.

Asmar Awad, Rima↗

Stucco System

Security event data, such as intrusion detection system alerts, provide a starting point for analysis, but are information impoverished. To provide context, analysts must manually gather and synthesize relevant data from myriad sources within their enterprise and external to it. Analysts search system logs, network flows, and firewall data; they search IP blacklists and reputation lists, software vulnerability information, malware and threat data, OS and application vendor blogs, and news sites. All of these sources are manually searched for data relevant to the event being investigated. Relevant results must then be brought together and synthesized to put the event in context and make decisions about its importance and impact.

42 ENGINEERING↗

Deep Cyber-Physical Situational Awareness for Energy Systems: A Secure Foundation for Next-Generation Energy Management

This document provides the final report for the CYPRES project. The purpose is (1) to highlight and summarize its major accomplishments and (2) to provide guidance on how its outcomes have informed and can inform important additional research and technology transfer. The goal of CYPRES was the research, development, and demonstration of a security-oriented next generation cyber-physical EMS for electric power systems that detects malicious and abnormal events through the fusion of cyber and physical data. To achieve this, the CYPRES project team researched, developed, and built a prototype of the solution, referred to as the CYPRES EMS. The CYPRES EMS is a proof-of-concept cyber-physical platform that demonstrates the management of the energy system, communications, security, and cyber-physical grid modeling and analytics. As part of the capabilities of the CYPRES EMS, the team designed and developed a suite of power system applications for monitoring, risk analyses, detection, and control that are inherently cyberaware. At its core, the project aimed to research, develop, and demonstrate a security-oriented next-generation cyber-physical Energy Management System (EMS) capable of detecting malicious and abnormal events through the innovative fusion of cyber and physical data. This approach represents a fundamental shift from traditional EMS, reimagining how critical infrastructure can be protected through unified cyber-aware and physics-aware secure data flow pipelines. The project’s cornerstone deliverable, the CYPRES EMS, serves as a proof-of-concept cyber-physical platform that revolutionizes the management of energy systems, communications, security, and cyber-physical grid modeling and analytics. This prototype implements a comprehensive suite of power system applications for monitoring, risk analyses, detection, and control, all designed with inherent cyber awareness. The system’s architecture extends from end-devices in the field through to control center applications, establishing a secure and resilient control framework that addresses the challenges posed by diverse devices of unknown trustworthiness connecting to modern power systems. Through this innovative approach to deep cyber-physical situational awareness, the CYPRES project not only advances the state-of-the-art in energy infrastructure protection but also establishes a new paradigm for how EMS can be designed, deployed, and operated in an increasingly complex threat landscape. The findings and developments from this project provide crucial insights for stakeholders across the energy sector, offering a blueprint for enhancing the reliability and resilience of our nation’s critical energy infrastructure in the face of evolving cyber threats.

24 POWER TRANSMISSION AND DISTRIBUTION↗

An islanding detection methodology combining decision trees and Sandia frequency shift for inverter-based distributed generations

Distributed generations (DGs) for grid-connected applications require an accurate and reliable islanding detection methodology (IDM) for secure system operation. This paper presents an IDM for grid-connected inverter-based DGs. The proposed method is a combination of passive and active islanding detection techniques for aggregation of their advantages and elimination/minimisation of the drawbacks. In the proposed IDM, the passive method utilises critical system attributes extracted from local voltage measurements at target DG locations as well as employs decision tree-based classifiers for characterisation and detection of islanding events. The active method is based on Sandia frequency shift technique and is initiated only when the passive method is unable to differentiate islanding events from other system events. Thus, the power quality degradation introduced into the system by active islanding detection techniques can be minimised. Furthermore, a combination of active and passive techniques allows detection of islanding events under low power mismatch scenarios eliminating the disadvantage associated with the use of passive techniques alone. Finally, detailed case study results demonstrate the effectiveness of the proposed method in detection of islanding events under various power mismatch scenarios, load quality factors and in the presence of single or multiple grid-connected inverter-based DG units.

24 POWER TRANSMISSION AND DISTRIBUTION↗

Solar Living House Final Technical Report

The Solar Living House is a high-performance solar-powered dwelling designed by a team of faculty and students from the University of Florida, in collaboration with Santa Fe College, the National University of Singapore, and Alachua Habitat for Humanity. The project was designed in accordance with the Solar Decathlon 2015, a research, design, education, and outreach program developed by the U.S. Department of Energy (DOE). The Solar Living House is fundamentally a house for living, centered on people and the activities of daily life while quietly introducing advanced design, construction, and engineering technologies. The 993 square-foot two-bedroom one-bath home was designed to embrace and frame an exterior courtyard space. This courtyard acts as an extension of the interior living spaces, maximizing the spatial potentials of a modest building footprint and introducing natural light into the primary living spaces of the house. Research Outcomes: The Solar Living House advances work on high-performance buildings through three principal technological innovations: wet/dry modular construction, a building automation system, and solar dehumidification systems. Wet / Dry Modular Construction: The house is designed as a series of five modules, including one that is designated as the “wet core.” The wet core consolidates the mechanical systems and bathroom into a single module to reduce plumbing runs, efficiency losses, and on-site construction time. The other four modules are designed to eliminate interior load bearing walls to allow for maximum flexibility in the reconfiguring of the space over time. The modules are designed to meet the structural challenges of both Florida’s hurricanes and California’s earthquakes. Building Automation System: The house is equipped with an integrated building automation system, allowing the houses environmental systems, lights, security systems, and smoke detectors to be programmed, monitored, and controlled through any mobile or computing device. These systems allow for more precise calibrations of temperature/humidity/lighting to correspond with user needs and preferences, minimizing energy losses with economical night- or day-time setbacks. Solar Dehumidification System: The most significant technological innovation in the Solar Living House is the solar thermal dehumidification system. This system generates hot water through two rooftop-mounted evacuated tube solar thermal collectors. The hot water is used to continually dry a regenerative solid desiccant material, typically white silica gel. The solid desiccant is used to adsorb moisture and humidity from the air without additional mechanical cooling. This strategy allows humidity to be modulated independently of air temperature, providing greater thermal comfort and reducing the opportunity for the growth of mold spores within the house while also reducing the overall energy consumption of the HVAC system. Economic Feasibility: The team set aggressive goals for affordability, targeting a construction cost of $138,710. An independent professional cost estimator determined the overall project costs, as designed, would be $333,799, or $336.15 per square foot of finished floor area. This is more than 2.4 times the target construction cost. By comparison, the average construction cost for a home in the United States in 2015 was $289,415, or $103.29 per square foot of finished floor area. Following work on the Solar Living House, team leaders incorporated many of its objectives into a net-zero energy home on a site in Gainesville, Florida. This site-built home avoided many of the constraints and complications of modular construction necessitated by the Solar Decathlon, allowing it to be built for a much more modest budget. This two-bedroom two bath 1,800 square foot home was constructed for $135.39 per square foot, including active photovoltaic solar systems, careful attention to continuous air barriers, increased insulation levels, and permanent site constructions. This project suggest that high-performance buildings can be realized for more modest budgets. Public Benefits: Work on the Solar Living House and Solar Decathlon 2015 offered our student team unparalleled learning opportunities. Because of the duration of the project, a number of students participated at different points in their education, from first year undergraduates all the way through to advanced graduate students. The opportunity for collaboration with students and faculty from the National University of Singapore was also extraordinary, allowing for a sharing of technical knowledge and cultural exchange. The wider public has benefited from this work as its findings have been shared through public presentations and publications. It serves as a useful stepping stone along the path towards affordable, high-performance buildings.

14 SOLAR ENERGY↗

A Modular, Reusable Latch and Decking System for Securing Payloads During Launch and Planetary Surface Transport

Efficient handling of payloads destined for a planetary surface, such as the moon or mars, requires robust systems to secure the payloads during transport on the ground, in space and on the planetary surface. In addition, mechanisms to release the payloads need to be reliable to ensure successful transfer from one vehicle to another. An efficient payload handling strategy must also consider the devices available to support payload handling. Cranes used for overhead lifting are common to all phases of payload handling on Earth. Similarly, both recent and past studies have demonstrated that devices with comparable functionality will be needed to support lunar outpost operations. A first generation test-bed of a new high performance device that provides the capabilities of both a crane and a robotic manipulator, the Lunar Surface Manipulation System (LSMS), has been designed, built and field tested and is available for use in evaluating a system to secure payloads to transportation vehicles. A payload handling approach must address all phases of payload management including: ground transportation, launch, planetary transfer and installation in the final system. In addition, storage may be required during any phase of operations. Each of these phases requires the payload to be lifted and secured to a vehicle, transported, released and lifted in preparation for the next transportation or storage phase. A critical component of a successful payload handling approach is a latch and associated carrier system. The latch and carrier system should minimize requirements on the: payload, carrier support structure and payload handling devices as well as be able to accommodate a wide range of payload sizes. In addition, the latch should; be small and lightweight, support a method to apply preload, be reusable, integrate into a minimal set of hard-points and have manual interfaces to actuate the latch should a problem occur. A latching system which meets these requirements has been designed and fabricated and will be described in detail. This latching system works in conjunction with a payload handling device such as the LSMS, and the LSMS has been used to test first generation latch and carrier hardware. All tests have been successful during the first phase of operational evaluations. Plans for future tests of first generation latch and carrier hardware with the LSMS are also described.

Doggett, William R.↗

A Modular, Reusable Latch and Decking System for Securing Payloads During Launch and Planetary Surface Transport

Efficient handling of payloads destined for a planetary surface, such as the moon or Mars, requires robust systems to secure the payloads during transport on the ground, in-space and on the planetary surface. In addition, mechanisms to release the payloads need to be reliable to ensure successful transfer from one vehicle to another. An efficient payload handling strategy must also consider the devices available to support payload handling. Cranes used for overhead lifting are common to all phases of payload handling on Earth. Similarly, both recent and past studies have demonstrated that devices with comparable functionality will be needed to support lunar outpost operations. A first generation test-bed of a new high performance device that provides the capabilities of both a crane and a robotic manipulator, the Lunar Surface Manipulation System (LSMS), has been designed, built and field tested and is available for use in evaluating a system to secure payloads to transportation vehicles. National Institute of Aerospace, Hampton Va 23662 A payload handling approach must address all phases of payload management including: ground transportation, launch, planetary transfer and installation in the final system. In addition, storage may be required during any phase of operations. Each of these phases requires the payload to be lifted and secured to a vehicle, transported, released and lifted in preparation for the next transportation or storage phase. A critical component of a successful payload handling approach is a latch and associated carrier system. The latch and carrier system should minimize requirements on the: payload, carrier support structure and payload handling devices as well as be able to accommodate a wide range of payload sizes. In addition, the latch should; be small and lightweight, support a method to apply preload, be reusable, integrate into a minimal set of hard-points and have manual interfaces to actuate the latch should a problem occur. A latching system which meets these requirements has been designed and fabricated and will be described in detail. This latching system works in conjunction with a payload handling device such as the LSMS, and the LSMS has been used to test first generation latch and carrier hardware. All tests have been successful during the first phase of operational evaluations. Plans for future tests of first generation latch and carrier hardware with the LSMS are also described.

Doggett, William R.↗

Integrating PCTRAN with AI-Driven Host-Intrusion Detection and Secured Container Systems for Advanced Malware Analysis (Summer Internship Report)

This study presents a solution for enhancing the security of the Personal Computer Transient Analyzer (PCTRAN) PC-based Nuclear Power Plant Simulator by integrating the software with an artificial intelligence (AI)-driven host-intrusion detection system (HIDS), in addition to a secured container system, for malware analysis. PCTRAN is a Windows XP-based software package that has the ability to simulate a variety of accident and transient conditions for nuclear power plants (NPPs). It offers a high-resolution replica of the Nuclear Steam Supply System (NSSS) and displays the status of important parameters allowing for operator interaction. By including AI-driven HIDS for the NSSS, the framework can identify security threats in real-time, ensuring the integrity of the nuclear simulation environment. Additionally, the secured container system offers the ability to isolate and analyze malware, preventing potential threats from affecting core systems. The integration process involves extensive testing and validation in order to ensure accuracy, reliability, and compliance with security policies. This framework sets a new precedent for secure simulation and training in NPP operations, and offers insight for future advancements in cybersecurity.

21 SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLANTS↗

Information security management system planning for CBRN facilities

The focus of this document is to provide guidance for the development of information security management system planning documents at chemical, biological, radiological, or nuclear (CBRN) facilities. It describes a risk-based approach for planning information security programs based on the sensitivity of the data developed, processed, communicated, and stored on facility information systems.

96 KNOWLEDGE MANAGEMENT AND PRESERVATION↗

3D Imaging with Structured Illumination for Advanced Security Applications

Three-dimensional (3D) information in a physical security system is a highly useful discriminator. The two-dimensional data from an imaging systems fails to provide target distance and three-dimensional motion vector, which can be used to reduce nuisance alarm rates and increase system effectiveness. However, 3D imaging devices designed primarily for use in physical security systems are uncommon. This report discusses an architecture favorable to physical security systems; an inexpensive snapshot 3D imaging system utilizing a simple illumination system. The method of acquiring 3D data, tests to understand illumination design, and software modifications possible to maximize information gathering capability are discussed.

42 ENGINEERING↗

Privacy by Design in Distributed Edge Systems: Innovating Secure Workflows for Smart Cities

The proliferation of distributed edge systems, such as those in smart cities, healthcare, and industrial IoT, offers unprecedented opportunities for data processing closer to its source, thereby reducing latency and enhancing efficiency. However, these systems also present significant privacy challenges due to the handling of sensitive data from multiple sources. This article explores the critical need for designing privacy-preserving workflows in distributed edge systems to ensure data security while maximizing the potential of edge computing. By examining the challenges, technological advancements, and potential of privacy-by-design approaches, we highlight the importance of integrating advanced privacy-preserving techniques like federated learning, differential privacy, homomorphic encryption, secure multi-party computation, and zero-knowledge proofs. These innovations are crucial for enhancing data security, regulatory compliance, and public trust in smart city applications, ultimately leading to safer and more efficient urban environments.

Kotevska, Olivera↗

Secure Software Defined Radio Project: Secure Wireless Systems for the Energy Sector (Briefing 6)

Strong industry interest in the SEL-FLT/FLR products has led to a large number of customers conducting various lab and field trial evaluations of the system. These trials are on-going but have allowed SEL to collect enough information about operation and deployment and security capabilities of the system to conclude the field demo phase of the project. The field-testing topical report has been completed and submitted. SEL has also prepared a SEL-FLT/FLR best practices guide based on learnings from the field demo phase of the project. This best practice guide has also been submitted. The final deliverable from this phase of the project is an economic and operational benefits white paper, which has also been written and submitted. The overall objective of the project, extending the cyber security capabilities of utility wired networks into last mile wireless networks has been successfully achieved. SEL chose to target a sensor network for implementation of this capability because it was one area of last mile networking where there was substantial need and opportunity. Based on customer interest in the product these efforts have been a success. Interest in, and support for many of the security features of the product has been expressed by customers trialing the product system. Key security features customers value are strong data encryption, sensor white listing, and use of secure account based log on for access to the system. These and other features of the product have gained strong acceptance from customers interested in purchasing these products. All project deliverables and tasks are now complete, and the project can be closed out.

24 POWER TRANSMISSION AND DISTRIBUTION↗

Multi-objective Optimization of Solar-driven Hollow-fiber Membrane Distillation Systems

Securing additional water sources remains a primary concern for arid regions in both the developed and developing world. Climate change is causing fluctuations in the frequency and duration of precipitation, which can be can be seen as prolonged droughts in some arid areas. Droughts decrease the reliability of surface water supplies, which forces communities to find alternate primary water sources. In many cases, ground water can supplement the use of surface supplies during periods of drought, reducing the need for above-ground storage without sacrificing reliability objectives. Unfortunately, accessible ground waters are often brackish, requiring desalination prior to use, and underdeveloped infrastructure and inconsistent electrical grid access can create obstacles to groundwater desalination in developing regions. The objectives of the proposed project are to (i) mathematically simulate the operation of hollow fiber membrane distillation systems and (ii) optimize system design for off-grid treatment of brackish water. It is anticipated that methods developed here can be used to supply potable water at many off-grid locations in semi-arid regions including parts of the Navajo Reservation. This research is a collaborative project between Sandia and the University of Arizona.

54 ENVIRONMENTAL SCIENCES↗