Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “operating systems security”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 1,297 records · Page 72

Management of Disused Radioactive Sealed Sources in Egypt - 13512

The future safe development of nuclear energy and progressive increasing use of sealed sources in medicine, research, industry and other fields in Egypt depends on the safe and secure management of disused radioactive sealed sources. In the past years have determined the necessity to formulate and apply the integrated management program for radioactive sealed sources to assure harmless and ecological rational management of disused sealed sources in Egypt. The waste management system in Egypt comprises operational and regulatory capabilities. Both of these activities are performed under legislations. The Hot Laboratories and Waste Management Center HLWMC, is considered as a centralized radioactive waste management facility in Egypt by law 7/2010. (authors)

07 ISOTOPE AND RADIATION SOURCES↗

NV: Nessus Vulnerability Visualization for the Web

Network vulnerability is a critical component of network se- curity. Yet vulnerability analysis has received relatively lit- tle attention from the security visualization community. In this paper we describe nv, a web-based Nessus vulnerability visualization. Nv utilizes treemaps and linked histograms to allow system administrators to discover, analyze, and man- age vulnerabilities on their networks. In addition to visual- izing single Nessus scans, nv supports the analysis of sequen- tial scans by showing which vulnerabilities have been fixed, remain open, or are newly discovered. Nv was also designed to operate completely in-browser, to avoid sending sensitive data to outside servers. We discuss the design of nv, as well as provide case studies demonstrating vulnerability analysis workflows which include a multiple-node testbed and data from the 2011 VAST Challenge.

information visualization↗

International Implementation of IAEA's Borehole Disposal Concept for Sealed Radioactive Sources - 18545

With funding from the Government of Canada, and support from the U.S. Nuclear Regulatory Commission's (NRC's) Office of International Program and many others, the International Atomic Energy Agency (IAEA) is supporting the field deployment of the Borehole Disposal Concept (BDC) for secure disposal of radioactive sources in Ghana, the Philippines and Malaysia. This is a first-of-its-kind implementation. Though small in volume, disused sealed radioactive sources can be intensively radioactive and create a significant safety and security liability for the majority of the 168 Member States in the IAEA. Millions of sealed radioactive sources have been manufactured since 1901, and it is estimated that hundreds of thousands are now unwanted. The irony is that some of the countries with the smallest inventories have the greatest difficulties managing their radioactive wastes. The BDC was originally conceptualized in an IAEA-study undertaken by the South African Nuclear Energy Corporation (NECSA) for countries with small inventories of disused sealed radioactive sources. There are multiple, passive engineered and natural barriers in the BDC design, including an inner stainless-steel capsule (which holds the wastes), an inner cement containment barrier, an outer stainless steel container and outer backfill cement, as well as the surrounding geosphere. In common subsurface geochemical environments, these barriers will isolate the wastes from the biosphere, provide effective containment and ensure long-term safety. To greatly limit the likelihood of inadvertent human intrusion (safety), and deliberate human intrusion (security), these waste packages will be disposed of in a narrow diameter borehole (26 cm) at depths greater than 30 m. This type of borehole disposal creates an exceptionally small footprint, removes the wastes from normal human surficial activities, and isolates the waste packages from near-surface processes. Over the past 20 years, the IAEA, NECSA and many others have advanced the BDC on the shoulders of the IAEA's broader work supporting safe and secure disposal of radioactive wastes and management of sealed radioactive sources. With recent funding and support from many others, the IAEA has assisted Ghana, Malaysia and the Philippines in assessing their inventories and conditioning their disused sealed radioactive sources, in drilling investigation boreholes and characterizing their proposed sites, and in designing their disposal systems. These countries plan to place the uppermost waste package at depths greater than 100 m. While activities in the Philippines remain focused on-site characterization, Ghana is in the latter stages of developing their Safety Case for operational and 'post-closure' safety and Malaysia has completed their Safety Case and submitted a license application to construct and operate a BDC facility. Though this paper identifies the support provided to Member States by the IAEA, it is the Ghana Atomic Energy Commission and the Malaysian Nuclear Agency that are responsible for the safety and security of the disposals and that have been responsible for carrying-out their disposal programs. Once the BDC is licensed by the relevant national regulatory bodies, these first-of-a-kind disposal approaches will provide a template for other countries to safely dispose of their disused sealed radioactive sources - permanently eliminating their safety and security liabilities. (authors)

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗

Preliminary Results of Ancillary Safety Analyses Supporting TREAT LEU Conversion Activities

The Transient Reactor Test Facility (TREAT), located at Idaho National Laboratory (INL), is a test facility designed to evaluate the performance of reactor fuels and materials under transient accident conditions. The facility, an air-cooled, graphite-moderated reactor designed to utilize fuel containing high-enriched uranium (HEU), has been in non-operational standby status since 1994. Currently, in support of the missions of the Department of Energy (DOE) National Nuclear Security Administration (NNSA) Material Management and Minimization (M3) Reactor Conversion Program, a new core design is being developed for TREAT that will utilize low-enriched uranium (LEU). The primary objective of this conversion effort is to design an LEU core that is capable of meeting the performance characteristics of the existing HEU core. Minimal, if any, changes are anticipated for the supporting systems (e.g. reactor trip system, filtration/cooling system, etc.); therefore, the LEU core must also be able to function with the existing supporting systems, and must also satisfy acceptable safety limits. In support of the LEU conversion effort, a range of ancillary safety analyses are required to evaluate the LEU core operation relative to that of the existing facility. These analyses cover neutronics, shielding, and thermal hydraulic topics that have been identified as having the potential to have reduced safety margins due to conversion to LEU fuel, or are required to support the required safety analyses documentation. The majority of these ancillary tasks have been identified in [1] and [2]. The purpose of this report is to document the ancillary safety analyses that have been performed at Argonne National Laboratory during the early stages of the LEU design effort, and to describe ongoing and anticipated analyses. For all analyses presented in this report, methodologies are utilized that are consistent with, or improved from, those used in analyses for the HEU Final Safety Analysis Report (FSAR) [3]. Depending on the availability of historical data derived from HEU TREAT operation, results calculated for the LEU core are compared to measurements obtained from HEU TREAT operation. While all analyses in this report are largely considered complete and have been reviewed for technical content, it is important to note that all topics will be revisited once the LEU design approaches its final stages of maturity. For most safety significant issues, it is expected that the analyses presented here will be bounding, but additional calculations will be performed as necessary to support safety analyses and safety documentation. It should also be noted that these analyses were completed as the LEU design evolved, and therefore utilized different LEU reference designs. Preliminary shielding, neutronic, and thermal hydraulic analyses have been completed and have generally demonstrated that the various LEU core designs will satisfy existing safety limits and standards also satisfied by the existing HEU core. These analyses include the assessment of the dose rate in the hodoscope room, near a loaded fuel transfer cask, above the fuel storage area, and near the HEPA filters. The potential change in the concentration of tramp uranium and change in neutron flux reaching instrumentation has also been assessed. Safety-significant thermal hydraulic items addressed in this report include thermally-induced mechanical distortion of the grid plate, and heating in the radial reflector.

Brunett, A. J.↗

Operational Impacts of Operating Reserve Demand Curves on Production Cost and Reliability: Preprint

The electric power industry landscape is continually evolving. As emerging technologies such as wind, solar, electric vehicles, and energy storage systems become more cost-effective and present in the system, traditional power system operating strategies will need to be reevaluated. The presence of wind and solar generation (commonly referred to as variable generation) may result in an increase in the variability and uncertainty of the net load profile. One mechanism to mitigate this is to schedule and dispatch additional operating reserves. These operating reserves aim to ensure that there is enough capacity online in the system to account for the increased variability and uncertainty occurring at finer temporal resolutions. A new operating reserve strategy, referred to as flexibility reserve, has been introduced in some regions. A similar implementation is explored in this paper, and its implications on power system operations are analyzed.

24 POWER TRANSMISSION AND DISTRIBUTION↗

Network Randomization and Dynamic Defense for Critical Infrastructure Systems

Critical Infrastructure control systems continue to foster predictable communication paths, static configurations, and unpatched systems that allow easy access to our nation's most critical assets. This makes them attractive targets for cyber intrusion. We seek to address these attack vectors by automatically randomizing network settings, randomizing applications on the end devices themselves, and dynamically defending these systems against active attacks. Applying these protective measures will convert control systems into moving targets that proactively defend themselves against attack. Sandia National Laboratories has led this effort by gathering operational and technical requirements from Tennessee Valley Authority (TVA) and performing research and development to create a proof-of-concept solution. Our proof-of-concept has been tested in a laboratory environment with over 300 nodes. The vision of this project is to enhance control system security by converting existing control systems into moving targets and building these security measures into future systems while meeting the unique constraints that control systems face.

98 NUCLEAR DISARMAMENT, SAFEGUARDS, AND PHYSICAL P↗

Power Sector Resilience Planning Guidebook: A Self-Guided Reference for Practitioners

The provision of reliable, secure, and affordable electricity is essential to power economic growth and development. The power system is at risk from an array of natural, human-caused, and technological threats, which can cause everything from power interruption to chronic undersupply of energy. It is critical for policymakers, planners, and system operators to safeguard their power systems from these threats by proactively planning for future needs and investing in resilient power systems. This guidebook is a reference for power sector resilience planning that introduces policymakers, power sector investors, planners, system operators, and other energy-sector stakeholders to the key concepts and steps involved in power sector resilience planning. Users can then apply this knowledge in the development of strategic, country-specific processes and identify actions that increase power sector resilience. This guidebook can be used as a stand-alone resource or shared with participants at stakeholder workshops to facilitate discussions and complete key steps of a resilience planning process.

29 ENERGY PLANNING, POLICY, AND ECONOMY↗

Physical Sciences Vistas: Perspectives on Simultaneous Excellence (Issue 1, 2023)

The issue begins with an article highlighting Physics Division’s involvement in diagnostic development that led to the measurement of ignition at the National Ignition Facility at Lawrence Livermore National Laboratory. Subsequent articles transition to some of the materials development occurring in Sigma, Materials Science and Technology, and Materials Physics and Applications divisions. This is inclusive of the development of next generation moderator materials as an enabling technology of small modular reactors. These materials will most likely be qualified at a facility at Idaho National Laboratory. The issue also highlights development of novel, additively manufactured foams for next generation weapons. This work is being done in close collaboration with the Kansas City National Security Campus to enable transition of materials development to production in a more agile way. Finally, an article describes Accelerator Operations and Technology Division’s hard work to replace the legacy remote instrumentation and control equipment at the Los Alamos Neutron Science Center (LANSCE) with a modern control system. The story discusses how that engineering success will lead to improved sustainability of the beam during operation and thus a better experience for all of our collaborators and partners in the LANSCE user program.

36 MATERIALS SCIENCE↗

SLR 2000

SLR 2000 is a concept for a totally automated subcentimeter SLR system presently being studied at GSFC. If funding permits, a prototype would be installed and tested at the Goddard Geophysical and Astronomical Observatory (GCAO) in FY98 and a small number of automated stations would be fielded by the year 2000. Unlike present systems, the "SLR 2000" system is being designed to: 1) operate autonomously without the need for onsite operators; 2) present no hazards (i.e., optical, electrical, and/or chemical) to personnel in the vicinity or to overflying aircraft; and 3) have a mean time between failures (MTBF) of at least three months. It is assumed that the systems are located at "friendly" sites where some level of security is provided and where certain low level service functions (e.g. commercial power, communications, heat pump service cleaning, etc.) are available or can be contracted for locally on an as-needed basis. The main system consists of two parts - an optical head and electronics rack. The optical head contains the laser transmitter and power supply, transmit/receive switch, optical telescope, tracking angle sensor (intensified CCD camera), detector and power supply, two angular encoders, azimuth and elevation motors, and a protective dome. The optical head mounts directly to the top of a concrete pier which contains the geodetic monument and forms part of the environmental housing for the hardware and servicing personnel. It is equipped with electronic levels for leveling the mount and monitoring its stability.

Degnan, John J.↗

Finite Energy and Bounded Actuator Attacks on Cyber-Physical Systems

As control system networks are being connected to enterprise level networks for remote monitoring, operation, and system-wide performance optimization, these same connections are providing vulnerabilities that can be exploited by malicious actors for attack, financial gain, and theft of intellectual property. Much effort in cyber-physical system (CPS) protection has focused on protecting the borders of the system through traditional information security techniques. Less effort has been applied to the protection of cyber-physical systems from intelligent attacks launched after an attacker has defeated the information security protections to gain access to the control system. In this paper, attacks on actuator signals are analyzed from a system theoretic context. The threat surface is classified into finite energy and bounded attacks. These two broad classes encompass a large range of potential attacks. The effect of theses attacks on a linear quadratic (LQ) control are analyzed, and the optimal actuator attacks for both finite and infinite horizon LQ control are derived, therefore the worst case attack signals are obtained. The closed-loop system under the optimal attack signals is given and a numerical example illustrating the effect of an optimal bounded attack is provided.

Djouadi, Seddik M↗

A Hybrid Data-Driven and Model-Based Anomaly Detection Scheme for DER Operation: Preprint

This paper proposes a hybrid data and model-based anomaly detection for securing the operation of distributed energy resources (DERs) in distribution grids. Data-driven autoencoders (AE) are set up at the edge level by taking local DER data and detect anomalous operations by leveraging the reconstruction ability. In parallel, model-based state estimation (SE) is running at the system level by taking system models and measurements, the anomalies are identified by analyzing the measurements residual. The hybrid scheme preserves the benefits of both data-driven and model-based analysis and thus improves the robustness and accuracy of anomaly detection. It can be established by getting full use of the existing infrastructures in distribution grids. Numerical tests on a realistic distribution feeder in Southern California highlight the effectiveness as well as benefits of the proposed scheme.

anomaly detection↗

CCE and Resilience Strategies

Consequence-driven Cyber-informed Engineering (CCE) is a methodology focused on securing the nation’s critical infrastructure systems. Developed at Idaho National Laboratory, CCE starts with the assumption that if a critical infrastructure system is targeted by a skilled and determined adversary, the targeted network can and will be penetrated. This think like the adversary approach provides critical infrastructure owners, operators, vendors and manufacturers with a disciplined methodology to: evaluate complex systems; determine what must be fully safeguarded; and apply proven engineering strategies to isolate and protect an industry’s most critical assets.

42 ENGINEERING↗

Development of a Reference Governor-based Control Scheme for Integrated Energy Systems

The concept of an Integrated Energy System (IES) is meant to combine different energy technologies in synergistic ways to achieve a more secure and economical energy supply. The RAVEN-based HYBRID framework is used to find the optimal installed capacity and the optimal economical dispatch of each component of the IES. In practice what is achievable is limited by not only the inherent physical response characteristics of individual plant units but also by equipment operating limits. The inherent response characteristics are presently accounted for in the RAVEN-based HYBRID framework by dynamic models for plant units. The equipment operating limits, which are not yet addressed in HYBRID, are the subject of this report. These limits are set to achieve a design service life for a plant unit and are based on material degradation in the presence of mechanical fatigue induced by thermal cycling and by structure creep resulting from elevated temperature conditions. In general, the plant unit designer determines and specifies the allowable operating range of key process variables. It is then up to the integrated system design engineer to ensure those conditions are met. This can be accomplished through a combination of limiting the demand rates made on the plant unit and designing a control system that limits variations of key process variables. The typical control system design procedure, however, is not well suited for achieving this for complex dynamic systems such as encountered in integrated energy systems where multiple plant units must be simultaneously coordinated. This report describes how equipment operating limitations in an IES can be formally met through a control system design procedure know as the Reference Governor. The approach augments the existing controllers in a plant unit with an advance controller that modifies the issued setpoints so that selected process variables remain within limits. The design procedure is applied to the reference multi-unit system that has been the focus of Modeling and Simulation task in the Integrated Energy System program. Results describing application to the problem of limiting key process variables during operational transients for two of the plant units, the balance of plant and the gas turbine, are then presented. It is demonstrated that the Reference Governor method is an effective means for ensuring equipment operating constraints can be met in an IES. The software that implements the method has been made accessible to others on the Modeling and Simulation upload site.

42 ENGINEERING↗

Aerospace Communications Security Technologies Demonstrated

In light of the events of September 11, 2001, NASA senior management requested an investigation of technologies and concepts to enhance aviation security. The investigation was to focus on near-term technologies that could be demonstrated within 90 days and implemented in less than 2 years. In response to this request, an internal NASA Glenn Research Center Communications, Navigation, and Surveillance Aviation Security Tiger Team was assembled. The 2-year plan developed by the team included an investigation of multiple aviation security concepts, multiple aircraft platforms, and extensively leveraged datalink communications technologies. It incorporated industry partners from NASA's Graphical Weather-in-the-Cockpit research, which is within NASA's Aviation Safety Program. Two concepts from the plan were selected for demonstration: remote "black box," and cockpit/cabin surveillance. The remote "black box" concept involves real-time downlinking of aircraft parameters for remote monitoring and archiving of aircraft data, which would assure access to the data following the loss or inaccessibility of an aircraft. The cockpit/cabin surveillance concept involves remote audio and/or visual surveillance of cockpit and cabin activity, which would allow immediate response to any security breach and would serve as a possible deterrent to such breaches. The datalink selected for the demonstrations was VDL Mode 2 (VHF digital link), the first digital datalink for air-ground communications designed for aircraft use. VDL Mode 2 is beginning to be implemented through the deployment of ground stations and aircraft avionics installations, with the goal of being operational in 2 years. The first demonstration was performed December 3, 2001, onboard the LearJet 25 at Glenn. NASA worked with Honeywell, Inc., for the broadcast VDL Mode 2 datalink capability and with actual Boeing 757 aircraft data. This demonstration used a cockpitmounted camera for video surveillance and a coupling to the intercom system for audio surveillance. Audio, video, and "black box" data were simultaneously streamed to the ground, where they were displayed to a Glenn audience of senior management and aviation security team members.

Griner, James H.↗

Channel Measurements for Switching Strategies in Hybrid RF/Optical Communications

Free space optical (FSO) communication links increase data rate, reduce size and power, and increase security. These criteria are particularly important in space communication. Increasing mission complexity and crowding of lower frequency bands is driving the need for optical communications. This makes FSO communication technology extremely attractive, and there is significant ongoing work towards the development of FSO transceivers, ground stations, and relays. Notable projects include the Laser Communications Relay Demonstrator (LCRD), Integrated LCRD Low-Earth Orbit User Modem and Amplifier Terminal (ILLUMA-T), and CubeSat Laser Infrared Crosslink (CLICK) CubeSats. These technologies will eventually operate in unison with existing Radio Frequency (RF) systems, but there is little experimental investigation of such hybrid networks. This paper presents some experimental underpinnings of switching strategies for hybrid RF/FSO systems in various attenuation conditions. A 170 m optical path was constructed in an enclosed test chamber where atmospheric conditions can be tightly controlled. The performance of a 1550 nm infrared FSO link was evaluated in this chamber under varying conditions of turbulence and jitter. The system will eventually be used to investigate switching criteria between the FSO and RF channels. Optimizing the use of RF/FSO communication links will allow data rate, size, power, and security improvements. Therefore, this research will help to mature the network architecture and improve the performance of communication networks to be used for LEO, GEO, Lagrange, Lunar missions and beyond.

Space Networks↗

High power THz sources for nonlinear imaging

Many biological and chemical compounds have unique absorption features in the THz (0.1 - 10 THz) region, making the use of THz waves attractive for imaging in defense, security, biomedical imaging, and monitoring of industrial processes. Unlike optical radiation, THz frequencies can pass through many substances such as paper, clothing, ceramic, etc. with little attenuation. The use of currently available THz systems is limited by lack of highpower, sources as well as sensitive detectors and detector arrays operating at room temperature. Here we present a novel, high power THz source based on intracavity downconverison of optical pulses. The source delivers 6 ps pulses at 1.5 THz, with an average power of >300 μW and peak powers >450 mW. We propose an imaging method based on frequency upconverison that is ideally suited to use the narrow bandwidth and high peak powers produced by the source. By upconverting the THz image to the infrared, commercially available detectors can be used for real time imaging.

71 CLASSICAL AND QUANTUM MECHANICS, GENERAL PHYSIC↗

Stormwater Pollution Prevention Plan, TA-03-38 Metals Fabrication Shop, Revision 4: LANS Archived 2019

This Storm Water Pollution Prevention Plan (SWPPP) was developed in accordance with the provisions of the Clean Water Act (33 U.S.C. §§1251 et seq., as amended), and the Multi-Sector General Permit for Storm Water Discharges Associated with Industrial Activity (U.S. EPA, June 2015) issued by the U.S. Environmental Protection Agency (EPA) for the National Pollutant Discharge Elimination System (NPDES) and using the industry specific permit requirements for Sector AA-Fabricated Metal Products as a guide. The applicable stormwater discharge permit is EPA General Permit Registration Number NMR053915 (Los Alamos National Security (LANS) (U.S. EPA, June 2015).This SWPPP applies to discharges of stormwater from the operational areas of the TA-03-38 Metals Fabrication Shop at Los Alamos National Laboratory. Los Alamos National Laboratory (also referred to as LANL or the “Laboratory”) is owned by the Department of Energy (DOE), and is operated by Los Alamos National Security, LLC (LANS). Throughout this document, the term “facility” refers to the TA-03-38 Metals Fabrication Shop and associated areas. The current permit expires at midnight on June 4, 2020. As the LANS contract ended for LANL MSGP facilities on October 31, 2018, a Notice of Termination (NOT) for permit coverage was filed and is effective as of 11/02/18. A copy of the NOT acknowledgment is located in Appendix C of this SWPPP. This is the archived and final revision of the SWPPP for LANS.

54 ENVIRONMENTAL SCIENCES↗

Cybersecurity Standards for Distributed Energy Resources: Gaps and Harmonization Strategy

This report examines cybersecurity standards for Distributed Energy Resources (DERs) in light of their rapid growth and increasing integration into energy systems. It identifies critical gaps in existing frameworks, including inadequate coverage of DER-specific challenges, complexities in implementing comprehensive standards, integration issues with legacy systems, adoption hurdles for newer standards, and a lack of harmonization across regulatory landscapes. The analysis highlights vulnerabilities such as data integrity risks, unauthorized device control, and denial-of-service attacks across various DER technologies like solar PV, wind turbines, energy storage systems, and hydrogen fuel cells. The report proposes a harmonization strategy to address these deficiencies by developing unified cybersecurity requirements, certification programs, and training resources while fostering collaboration among stakeholders such as government agencies, industry groups, DER operators, manufacturers, and research institutions. A phased roadmap is outlined to refine and implement these measures through pilot testing and widespread adoption. Ultimately, the report underscores the urgent need for coordinated efforts to enhance DER cybersecurity and ensure the reliable operation of future energy systems.

29 ENERGY PLANNING, POLICY, AND ECONOMY↗