Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “operating systems security”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 1,315 records · Page 73

High power THz sources for nonlinear imaging

Many biological and chemical compounds have unique absorption features in the THz (0.1 - 10 THz) region, making the use of THz waves attractive for imaging in defense, security, biomedical imaging, and monitoring of industrial processes. Unlike optical radiation, THz frequencies can pass through many substances such as paper, clothing, ceramic, etc. with little attenuation. The use of currently available THz systems is limited by lack of highpower, sources as well as sensitive detectors and detector arrays operating at room temperature. Here we present a novel, high power THz source based on intracavity downconverison of optical pulses. The source delivers 6 ps pulses at 1.5 THz, with an average power of >300 μW and peak powers >450 mW. We propose an imaging method based on frequency upconverison that is ideally suited to use the narrow bandwidth and high peak powers produced by the source. By upconverting the THz image to the infrared, commercially available detectors can be used for real time imaging.

71 CLASSICAL AND QUANTUM MECHANICS, GENERAL PHYSIC↗

Stormwater Pollution Prevention Plan, TA-03-38 Metals Fabrication Shop, Revision 4: LANS Archived 2019

This Storm Water Pollution Prevention Plan (SWPPP) was developed in accordance with the provisions of the Clean Water Act (33 U.S.C. §§1251 et seq., as amended), and the Multi-Sector General Permit for Storm Water Discharges Associated with Industrial Activity (U.S. EPA, June 2015) issued by the U.S. Environmental Protection Agency (EPA) for the National Pollutant Discharge Elimination System (NPDES) and using the industry specific permit requirements for Sector AA-Fabricated Metal Products as a guide. The applicable stormwater discharge permit is EPA General Permit Registration Number NMR053915 (Los Alamos National Security (LANS) (U.S. EPA, June 2015).This SWPPP applies to discharges of stormwater from the operational areas of the TA-03-38 Metals Fabrication Shop at Los Alamos National Laboratory. Los Alamos National Laboratory (also referred to as LANL or the “Laboratory”) is owned by the Department of Energy (DOE), and is operated by Los Alamos National Security, LLC (LANS). Throughout this document, the term “facility” refers to the TA-03-38 Metals Fabrication Shop and associated areas. The current permit expires at midnight on June 4, 2020. As the LANS contract ended for LANL MSGP facilities on October 31, 2018, a Notice of Termination (NOT) for permit coverage was filed and is effective as of 11/02/18. A copy of the NOT acknowledgment is located in Appendix C of this SWPPP. This is the archived and final revision of the SWPPP for LANS.

54 ENVIRONMENTAL SCIENCES↗

Cybersecurity Standards for Distributed Energy Resources: Gaps and Harmonization Strategy

This report examines cybersecurity standards for Distributed Energy Resources (DERs) in light of their rapid growth and increasing integration into energy systems. It identifies critical gaps in existing frameworks, including inadequate coverage of DER-specific challenges, complexities in implementing comprehensive standards, integration issues with legacy systems, adoption hurdles for newer standards, and a lack of harmonization across regulatory landscapes. The analysis highlights vulnerabilities such as data integrity risks, unauthorized device control, and denial-of-service attacks across various DER technologies like solar PV, wind turbines, energy storage systems, and hydrogen fuel cells. The report proposes a harmonization strategy to address these deficiencies by developing unified cybersecurity requirements, certification programs, and training resources while fostering collaboration among stakeholders such as government agencies, industry groups, DER operators, manufacturers, and research institutions. A phased roadmap is outlined to refine and implement these measures through pilot testing and widespread adoption. Ultimately, the report underscores the urgent need for coordinated efforts to enhance DER cybersecurity and ensure the reliable operation of future energy systems.

29 ENERGY PLANNING, POLICY, AND ECONOMY↗

Cyberattack Detection for Cyber Physical Systems Security–A Preliminary Study.

Cyber-physical systems (CPS) security has become an increasingly important research topic in recent years. Geared towards more advanced cyberattack detection techniques as part of strategies for enhancing the security of CPS, in this paper we propose a machine learning based cyber-attack detection scheme. The proposed scheme is a physical-domain technique; specifically, it assumes the physical measurements of the system carry sufficient information for capturing the system behavior, thus can be used for differentiating normal operation and attacks. CPS are complex in nature and the number of physical measurements available for CPS is often overwhelmingly high. Thus, accurately modeling CPS’ dynamic behavior, more importantly, distinguishing normal and adversary activities based on the large number of physical measurements, can be challenging. To address the challenge, we have focused our research effort on feature engineering, that is, to intelligently derive a set of salient signatures or features from the noisy measurements. We make sure the derived features are more compact and, more importantly, have more discriminant power than the original physical measurements, thus enabling us to achieve more accurate and robust detection performance. To demonstrate the effectiveness of the proposed scheme, in our experimental study we consider gas turbines of combined cycle power plants as the cyberphysical system. Using the data from the high-fidelity simulation we show that our proposed cyberattack detection scheme is able to achieve high detection performance.

97 MATHEMATICS AND COMPUTING↗

Internet Based Remote Operations

This is the Final Report for the Internet Based Remote Operations Contract, has performed payload operations research support tasks March 1999 through September 1999. These tasks support the GSD goal of developing a secure, inexpensive data, voice, and video mission communications capability between remote payload investigators and the NASA payload operations team in the International Space Station (ISS) era. AZTek has provided feedback from the NASA payload community by utilizing its extensive payload development and operations experience to test and evaluate remote payload operations systems. AZTek has focused on use of the "public Internet" and inexpensive, Commercial-off-the-shelf (COTS) Internet-based tools that would most benefit "small" (e.g., $2 Million or less) payloads and small developers without permanent remote operations facilities. Such projects have limited budgets to support installation and development of high-speed dedicated communications links and high-end, custom ground support equipment and software. The primary conclusions of the study are as follows: (1) The trend of using Internet technology for "live" collaborative applications such as telescience will continue. The GSD-developed data and voice capabilities continued to work well over the "public" Internet during this period. 2. Transmitting multiple voice streams from a voice-conferencing server to a client PC to be mixed and played on the PC is feasible. 3. There are two classes of voice vendors in the market: - Large traditional phone equipment vendors pursuing integration of PSTN with Internet, and Small Internet startups.The key to selecting a vendor will be to find a company sufficiently large and established to provide a base voice-conferencing software product line for the next several years.

Chamberlain, James↗

Motion of Air Bubbles in Water Subjected to Microgravity Accelerations

The International Space Station (ISS) serves as a platform for microgravity research for the foreseeable future. A microgravity environment is one in which the effects of gravity are drastically reduced which then allows physical experiments to be conducted without the overpowering effects of gravity. During his six month stay on the ISS, astronaut Donald R Pettit performed many informal/impromptu science experiments with available equipment. One such experiment focused on the motion of air bubbles in a rectangular container nearly filled with de-ionized water. Bubbles were introduced by shaking and the container was secured in place for several hours while motion of the bubbles were recorded using time-lapse photography. This paper shows correlation between bubble motion and quasi-steady acceleration levels during one such experiment operation. The quasi-steady acceleration vectors were measured by the Microgravity Acceleration Measurement System. Essentially linear motion was observed in the condition considered here. Dr. Pettit also created other conditions which produced linear and circulating motion, which are the subjects of further study. Initial observations of this bubble motion agree with calculations from many microgravity physical science experiments conducted on Shuttle microgravity science missions. Many crystal-growth furnaces involve heavy metals and high temperatures in which undesired acceleration-driven convection during solidification can adversely affect the crystal. Presented in this paper will be results showing correlation between bubble motion and the quasi-steady acceleration vector.

DeLombard, Richard↗

Using Ontologies to Formalize Services Specifications in Multi-Agent Systems

One key issue in multi-agent systems (MAS) is their ability to interact and exchange information autonomously across applications. To secure agent interoperability, designers must rely on a communication protocol that allows software agents to exchange meaningful information. In this paper we propose using ontologies as such communication protocol. Ontologies capture the semantics of the operations and services provided by agents, allowing interoperability and information exchange in a MAS. Ontologies are a formal, machine processable, representation that allows to capture the semantics of a domain and, to derive meaningful information by way of logical inference. In our proposal we use a formal knowledge representation language (OWL) that translates into Description Logics (a subset of first order logic), thus eliminating ambiguities and providing a solid base for machine based inference. The main contribution of this approach is to make the requirements explicit, centralize the specification in a single document (the ontology itself), at the same that it provides a formal, unambiguous representation that can be processed by automated inference machines.

Breitman, Karin Koogan↗

Motion of Air Bubbles in Water Subjected to Microgravity Accelerations

The International Space Station (ISS) serves as a platform for microgravity research for the foreseeable future. A microgravity environment is one in which the effects of gravity are drastically reduced which then allows physical experiments to be conducted without the over powering effects of gravity. During his 6-month stay on the ISS, astronaut Donald R. Pettit performed many informal/impromptu science experiments with available equipment. One such experiment focused on the motion of air bubbles in a rectangular container nearly filled with de-ionized water. Bubbles were introduced by shaking and then the container was secured in place for several hours while motion of the bubbles was recorded using time-lapse photography. This paper shows correlation between bubble motion and quasi-steady acceleration levels during one such experiment operation. The quasi-steady acceleration vectors were measured by the Microgravity Acceleration Measurement System (MAMS). Essentially linear motion was observed in the condition considered here. Dr. Pettit also created other conditions which produced linear and circulating motion, which are the subjects of further study. Initial observations of this bubble motion agree with calculations from many microgravity physical science experiments conducted on shuttle microgravity science missions. Many crystal-growth furnaces involve heavy metals and high temperatures in which undesired acceleration-driven convection during solidification can adversely affect the crystal. Presented in this paper will be results showing correlation between bubble motion and the quasi-steady acceleration vector.

DeLombard, Richard↗

Layered virus protection for the operations and administrative messaging system

NASA's Deep Space Network (DSN) is critical in supporting the wide variety of operating and plannedunmanned flight projects. For day-to-day operations it relies on email communication between the three Deep Space Communication Complexes (Canberra, Goldstone, Madrid) and NASA's Jet Propulsion Laboratory. The Operations & Administrative Messaging system, based on the Microsoft Windows NTand Exchange platform, provides the infrastructure that is required for reliable, mission-critical messaging. The reliability of this system, however, is threatened by the proliferation of email viruses that continue to spread at alarming rates. A layered approach to email security has been implemented across the DSN to protect against this threat.

IT security antivirus↗

Small Unmanned Aerial Systems (sUAS) on the NNSS White Paper

The Nevada National Security Site (NNSS) prides itself on being the premier outdoor, indoor, and underground national laboratory. It is the preferred location for experiments supporting the National Nuclear Security Administration’s nuclear weapons Stockpile Stewardship Programs, national defense programs, and national security research, development, and training programs, as well as vital programs of other federal agencies. Work at the NNSS supports the Stockpile Stewardship Program, Global and Homeland Security programs, and Environmental Management. The NNSS looks to incorporate safer work practices and continuous improvements. Unmanned Aerial Surveys (UAS) have already been implemented in areas off the NNSS for multiple uses. Using these best practices with systems catered to the NNSS would allow integration of new technology and would allow work at the NNSS to maintain the high level of quality already exhibited. The Management and Operating Contractor (M&O) has shown experience in multiple UAS platforms. Through the coordination and experience developed through these projects, the M&O can further improve the quality and cost effectiveness of services currently rendered and offer new services not currently available today. Several NNSS departments that could implement UAS technology are Emergency Response, Facility Management, Environmental Management, and Training. These departments would be able to improve their capabilities and expand personnel effectiveness with the inclusion of UASs and the information they provide.

61 RADIATION PROTECTION AND DOSIMETRY↗

CyberStrike STORMCLOUD

This presentation will be shared at the "Securing Solar for the Grid (S2G)" workshop at RE+ 2023. It provides an overview of the work INL and Sandia have done to develop CyberStrike STORMCLOUD, a training program was designed to enhance the ability of renewable energy and operators to prepare for a cyber incident impacting industrial control systems with specific considerations of the architectures and limitations of renewable energy.

14 SOLAR ENERGY↗

Dragonstone Strategy – State of Cybersecurity in the Oil & Natural Gas Sector

The oil & natural gas (ONG) system touches every corner of the nation and increased communications & control capabilities have not only allowed for greater efficiency of system operation, but have also created a massive target for adversaries to launch cyber-attacks. Like any other heavy industrial process, the ONG system relies on a complex system of information technology (IT) and operational technology (OT) devices. The current state of cyber-preparedness across the ONG industry varies from organization to organization. Among the most common challenges that ONG companies face are remote locations, longlived field assets, and lacking capabilities to find and track malware on their systems. ONG companies tend to be concerned with lack of cyber-awareness from employees, risk stemming from remote access for operations & maintenance, and software vulnerabilities within third-party equipment. Various industry and government organizations are performing research and development activities to address some of these challenges, but in many cases industry stakeholders are not aware of solutions that already exist. It is clear that a need exists for a coherent, comprehensive, multi-layered strategy for assuring the security and resilience of the nation's pipeline infrastructure against cyber threats. For a variety of reasons, the general consensus from stakeholders interviewed by LLNL is that the state of cyber-security within the electric grid is currently outpacing its ONG cousin. Existing strategies for the resilience and cyber-security of the electric grid can and should be leveraged to provide immediate benefits to the ONG system. In LLNL’s view, there are two key factors currently limiting the development of necessary cyber-practices within the ONG industry: The sheer number of differing regulatory bodies and trade groups offering both standards and best-practice recommendations for ONG cyber-security makes it difficult to create a comprehensive, directed, and coherent strategy that is applicable to all players within the ONG industry. The ONG industry is unaware of potentially useful technologies that have been developed for ensuring cyber-security of other infrastructure systems, such as the electric grid. Leveraging these technologies—and the science and engineering behind them—can provide some low-hanging fruit that can greatly improve cyber-security in the ONG industry without significant investments in terms of time and money. In the months following this report, LLNL will continue to perform outreach to key oil & gas industry stakeholders in a continual effort to identify the most pressing cyber-resilience issues in the industry. This outreach will be supplemented with LLNL’s threat intelligence capabilities to begin painting a clearer picture of the overall threat landscape faced by this sector. This assessment will be threat-informed and while the strategy itself will not be classified we will leverage intelligence analysis and adversary capabilities to identify gaps in current cybersecurity practices for oil & gas pipeline systems. Recommended efforts will be compiled into a cyber-resilience roadmap for the oil & gas pipeline sector, in which LLNL will highlight priority activities to immediately improve the state of cyber-resilience in the industry.

02 PETROLEUM↗

Sensor and Actuator Attacks on Hierarchical Control Systems with Domain-Aware Operator Theory

Cyber-Physical Systems (CPSs) provide opportunities for cyber attacks to have physical impacts. Advanced Persistent Threats (APTs) are a subclass of cyber threats that act stealthily to avoid detection and enable long-term attacks. Here, we build on our past work in APT modelling to combine deception-based sensor bias attacks and direct actuator manipulations in attacks against a hierarchical control system. That past work used the Koopman operator to develop a data-driven, domain-aware, optimization-based attacker model. Using an expansion of this model, we compute several different attacks, including multiple simultaneous attacks, against a high-fidelity commercial building emulator and compare the impacts of those attacks to each other. One next step of interest is to construct a defender system, built on the same modelling approach, designed to detect and mitigate such attacks.

koopman operator, Cyber-Physical Security, machine↗

High-Altitude ADS-B/GPS LPV Flight Tests on a NASA ER-2 Research Airplane

The research presented in this paper describes the conceptual design of a system architecture that integrates Automatic Dependent Surveillance-Broadcast (ADS-B) and Global Positioning System (GPS) Localizer Performance Vertical (LPV) guidance technology onto a unique high-altitude research airplane: a United States Air Force (USAF) / Lockheed Martin (Bethesda, Maryland) Aeronautics U-2S airplane. The design features modern display capabilities to provide air-to-air surveillance and precision navigation, to adhere to Federal Aviation Administration (FAA) certification standards for operations in upper Class E airspace. The National Aeronautics and Space Administration (NASA) variant of the U-2S, now called the Earth Resources (ER-2) airplane, remains unrivaled in the art of sustained high-altitude flight for scientific expeditions. Capable of routinely cruising above flight level (FL) 650 that had been considered, at inception, the domain of only the most elite experimental research aircraft types. Nicknamed the Dragon Lady, this U-2S research testbed is still one of the most advanced aircraft in the world. The exceptional military design of the vehicle, security guidelines, and the performance envelope of the ER-2 posed unique challenges to the integration of modern civilian avionics. ADS-B epitomizes the next generation of surveillance technology, incorporating both air and ground aspects. ADS-B provides air traffic control (ATC) with a more accurate picture of the three-dimensional positioning of aircraft in various phases of flight, including en route, terminal, approach, and ground operations. The airborne surveillance system broadcasts its identification, position, altitude, velocity, and other information. GPS LPV represents a significant advancement in aviation technology, emphasizing the pivotal role that GPS and Performance-Based Navigation concepts will play in the foreseeable future. This technology represents a shift from sensor-based navigation to performance-based navigation, allowing for more flexible and efficient use of airspace. This research described herein is structured as follows: Section II, “Systems Background,” provides a systems background and description of an ADS-B and GPS LPV system equipped on the high-altitude ER-2 research airplane to satisfy the FAA airworthiness requirements for high-altitude flight operations. Section III, “Flight Test System,” describes the flight-test airplane systems. Section IV, “Analysis of GPS SBAS, Safety, and Ground Tests,” provides an overview of the GPS Satellite-Based Augmentation System (SBAS) and an analysis of the GPS LPV metrics, safety, and ground tests. Section V, “High-Altitude Flight Tests,” describes the high-altitude flight tests, including 3 flight-test results, analysis, human factors, and lessons learned. Section VI, the conclusion, draws insights from the lessons learned, discusses the design challenges associated with ADS-B and GPS LPV, and showcases the paramount significance of these pivotal technologies in aircraft surveillance and navigation.

Ricardo A. Arteaga↗

Using microgrids to enhance energy security and resilience

Although microgrids are now widely studied, challenges still exist. A reliable control architecture needs to be developed to coordinate different devices. Advanced forecasting and demand response management approaches should be implemented to cope with the intermittence of renewable generation. Furthermore, interconnection issues should be further studied to eliminate the influence of microgrid integration and achieve coordinated operation throughout the system.

24 POWER TRANSMISSION AND DISTRIBUTION↗

High-Definition Optical Velocimetry: A New Diagnostic Paradigm for Nuclear Security

This slide-show describes work done to address the challenge of high-definition optical velocimetry with hundred(s) of high-fidelity velocity vs. time measurements. After a review of the historical context and a general technical description of how optical velocimetry, particularly photonic Doppler velocimetry, works, the innovation of multiplexed photonic Doppler velocimetry (MPDV) is described as implemented with commercially available telecom products and dense wavelength division multiplexing (DWDM). High amplification of small signals allows for laser-safe operations. The authors have evaluated and leveraged telecom components– optical amplifiers, wavelength multiplexers, and seed lasers–to provide an economical, compact and rugged approach to system architecture. Fourier transform data analysis is seen to be robust and capable of discriminating simultaneous data traces recorded onto a single digitizer channel. The authors successfully fielded demonstration MPDV system on shock driven experiments.

46 INSTRUMENTATION RELATED TO NUCLEAR SCIENCE AND ↗

Energy Storage Sizing, Placement and Valuation for Distribution Networks

SAND2023-05682O The Energy Storage Sizing, Placement, and Valuation for Distribution software allows a user to simulate sizing, placement, and operation of one or more storage assets on a distribution grid. Among its features are measuring differences to determine the best combinations, and options for configuring and comparing results. This new simulation capability leverages the Open Distribution System Simulator and the Hierarchical Engine for Large-scale Infrastructure Co-Simulation (HELICS). Sandia National Laboratories is a multimission laboratory managed and operated by National Technology & Engineering Solutions of Sandia, LLC, a wholly owned subsidiary of Honeywell International Inc., for the U.S. Department of Energy’s National Nuclear Security Administration under contract DE-NA0003525.

Tamrakar, Ujjwol↗

Wind Energy Intrusion Detection System

SAND2022-14659 O The Wind Energy Intrusion Detection System uses a human-machine interface (HMI) to parse results and analyze for anomalies. Sandia National Laboratories is a multimission laboratory managed and operated by National Technology & Engineering Solutions of Sandia, LLC, a wholly owned subsidiary of Honeywell International Inc., for the U.S. Department of Energy’s National Nuclear Security Administration under contract DE-NA0003525.

Johnson, Jay↗