Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “systems security”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 1,315 records · Page 73

Cleared for Launch - Lessons Learned from the OSIRIS-REx System Requirements Verification Program

Requirements verification of a large flight system is a challenge. It is especially challenging for engineers taking on their first role in space systems engineering. This paper describes our approach to verification of the Origins, Spectral Interpretation, Resource Identification, Security-Regolith Explorer (OSIRIS-REx) system requirements. It also captures lessons learned along the way from developing systems engineers embroiled in this process. We begin with an overview of the mission and science objectives as well as the project requirements verification program strategy. A description of the requirements flow down is presented including our implementation for managing the thousands of program and element level requirements and associated verification data. We discuss both successes and methods to improve the managing of this data across multiple organizational interfaces. Our approach to verifying system requirements at multiple levels of assembly is presented using examples from our work at instrument, spacecraft, and ground segment levels. We include a discussion of system end-to-end testing limitations and their impacts to the verification program. Finally, we describe lessons learned that are applicable to all emerging space systems engineers using our unique perspectives across multiple organizations of a large NASA program.

Requirements Verification↗

CTCVJ2056-3014: An X-Ray-Faint Intermediate Polar Harboring an Extremely Fast-Spinning White Dwarf

We report on XMM-Newton X-ray observations that reveal CTCV J2056-3014 to be an unusual accretion-powered, intermediate polar (IP) system. It is a member of the class of X-ray-faint IPs whose space density remains unconstrained but potentially very high, with L(sub χ,0.3-12 keV of 1.8 × 10(exp 31) erg s(exp -1). We discovered a coherent 29.6 s pulsation in X-rays that was also revealed in our reanalysis of published optical data, showing that the system harbors the fastest-spinning, securely known white dwarf (WD) so far. There is no substantial X-ray absorption in the system. Accretion occurs at a modest rate (∼6 × 10(exp -12)M(sub ⨀) yr(exp -1) in a tall shock above the WD, while the star seems to be spinning in equilibrium and to have low magnetic fields. Further studies of CTCV J2056-3014 potentially have broad implications on the origin of magnetic fields in WDs, on the population and evolution of magnetic cataclysmic variables, and also on the physics of matter around rapidly rotating magnetic WDs.

Cataclysmic variable stars↗

Java Source Code Analysis for API Migration to Embedded Systems

Embedded systems form an integral part of our technological infrastructure and oftentimes play a complex and critical role within larger systems. From the perspective of reliability, security, and safety, strong arguments can be made favoring the use of Java over C in such systems. In part, this argument is based on the assumption that suitable subsets of Java’s APIs and extension libraries are available to embedded software developers. In practice, a number of Java-based embedded processors do not support the full features of the JVM. For such processors, source code migration is a mechanism by which key abstractions offered by APIs and extension libraries can made available to embedded software developers. The analysis required for Java source code-level library migration is based on the ability to correctly resolve element references to their corresponding element declarations. A key challenge in this setting is how to perform analysis for incomplete source-code bases (e.g., subsets of libraries) from which types and packages have been omitted. This article formalizes an approach that can be used to extend code bases targeted for migration in such a manner that the threats associated the analysis of incomplete code bases are eliminated.

Winter, Victor↗

Expanding NREL's Advanced Research on Integrated Energy Systems (ARIES) Capabilities

NREL's Integrated Energy Pathways vision represents a transformed, future integrated energy system that is more affordable, clean, secure, and resilient than today. Key to this vision is the unique Advanced Research on Integrated Energy Systems (ARIES) research platform. With a focus on advancing modern grid infrastructure, making investments in energy efficiency building technology research, and innovating battery storage and much more, the unique ARIES research platform can be used to accelerate the integration of new technologies into a modern grid.

advanced research↗

The Design and Evaluation of Zero Trust Architecture for Electric Vehicle Charging Infrastructure: EVs @ Scale Series on EV Charging Station Cybersecurity

Implementing a zero trust architecture can significantly bolster the security of electric vehicle (EV) charging infrastructure. EV charging infrastructure includes numerous networked interfaces, each of which can present potential vulnerabilities. When these vulnerabilities are exploited, they can compromise the entire system, leading to severe operational and security risks. Zero trust is a security model that operates on the principle of "never trust, always verify," which helps manage the attack surface and limit the scope of any potential compromises. Fundamentally, this model ensures that no entity, whether inside or outside the network, is trusted by default. The design principles of zero trust include continuous verification, strict deny-by-default access controls, and micro-segmentation. Continuous verification ensures that every request is thoroughly checked, regardless of its origin. Strict access controls enforce the principle of least privilege, allowing users and devices only the minimum necessary access to perform their functions. Micro-segmentation involves dividing the network into smaller, isolated segments to prevent lateral movement in case of a breach. In the context of EV charging infrastructure, zero trust can be implemented through various strategies. For example, multi-factor authentication (MFA) can be required for engineers to access the management interfaces and control systems of charging stations. Real-time monitoring and analysis of network traffic can help detect and respond to anomalies. Systems that do not need to communicate with each other can be micro-segmented to enhance security. All communications should adhere to predefined policies to be permitted. Additionally, encrypting communications can protect sensitive information exchanged between chargers and management systems. This paper presents a zero trust architecture specifically designed for EV charging infrastructure. Implementing zero trust not only mitigates risks but also builds a resilient infrastructure capable of withstanding and quickly recovering from cyber threats. The architecture addresses six defined security objectives. A comprehensive test plan is developed to assess the architecture against these objectives, and the results of the evaluation are reported. This approach is essential for maintaining the reliability and integrity of EV charging services in an increasingly interconnected and vulnerable digital landscape. This is the first in a planned series of papers exploring the implementation of zero trust in EV charging infrastructure. Each paper will delve into different aspects and applications of zero trust, highlighting how various work processes and requirements can lead to distinct architectural designs. These architectures will be tailored to address specific security challenges and operational needs within the EV charging ecosystem, ensuring a robust and adaptable security framework.

33 ADVANCED PROPULSION SYSTEMS↗

Quantum optical microcombs

We present that a key challenge for quantum science and technology is to realize large-scale, precisely controllable, practical systems for non-classical secured communications, metrology and, ultimately, meaningful quantum simulation and computation. Optical frequency combs represent a powerful approach towards this goal, as they provide a very high number of temporal and frequency modes that can result in large-scale quantum systems. The generation and control of quantum optical frequency combs will enable a unique, practical and scalable framework for quantum signal and information processing. Here, we review recent progress on the realization of energy–time entangled optical frequency combs and discuss how photonic integration and the use of fibre-optic telecommunications components can enable quantum state control with new functionalities, yielding unprecedented capability.

42 ENGINEERING↗

2023 Operational Assessment Report: Argonne Leadership Computing Facility

In 2004, the U.S. Department of Energy’s (DOE’s) Advanced Scientific Computing Research (ASCR) program established the Leadership Computing Facility (LCF) with a mission to provide the world’s most advanced computational resources to the open science community. The LCF is a huge investment in the nation’s scientific and technological future, inspired by a growing demand for large-scale computing and its impact on science and engineering. The LCF operates two world-class centers in support of open science at Argonne National Laboratory (Argonne) and at Oak Ridge National Laboratory (Oak Ridge) and deploys diverse machines that are among the most powerful systems in the world today. The LCF ranks among the top U.S. scientific facilities delivering impactful science. The work performed at these centers informs policy decisions and advances innovations in far-reaching areas such as energy assurance, ecological sustainability, and global security. The leadership-class systems at Argonne and Oak Ridge operate around the clock every day of the year. The high level of services these centers provide and the exceptional science they produce justify their existence to the DOE Office of Science and the U.S. Congress

97 MATHEMATICS AND COMPUTING↗

Preliminary Cyber-Informed Dynamic Branch Conditions for Analysis with the Dynamic Simplified Cyber MELCOR Model

Instrumentation and control of nuclear power is transforming from analog to modern digital assets. These control systems perform key safety and security functions. This transformation is occurring in new plant designs as well as in the existing fleet of plants as the operation of those plants is extended to 60 years. This transformation introduces new and unknown exploits involving both digital asset induced safety issues and security exploits. Traditional the open literature of nuclear power risk assessment tools and cyber security assessment methods have not been modified or developed to address the unique nature of cyber failure modes and of cyber security threats. Starting in 2015, Sandia National Laboratories (SNL) embarked on a two year dynamic cyber-risk informed project to facilitate the analysis of unique cyber failure modes and the time sequencing of cyber faults, both malicious and non-malicious, and impose those cyber exploits and cyber faults onto a nuclear power plant accident sequence simulator code to assess how cyber exploits and cyber faults could interact with a plant's digital instrumentation and control (DI and C) system in the absence of digital controls. This will be achieved by coupling SNL's existing dynamic scheduler code (ADAPT), nuclear accident simulator code (MELCOR), and cyber Emulytics code (SCEPTRE) to demonstrate real-time simulation of cyber exploits and their impact on automatic DI and C responses. Studying such potential time-sequenced cyber-attacks and their risks (i.e., the associated impact and the associated degree of difficulty to achieve the attack vector) as they pertain to accident management will provide a risk informed basis for developing effective cyber security controls for nuclear power. This paper will discuss the rationale behind the proposed generic cyber exploits for an abstracted Pressurized Water Reactor that has adopted a unified DI and C System. Other papers related to this project submitted to this conference discuss: - The MELCOR model for this abstracted reactor, called the Dynamic Simplified Cyber (DSC) model, - Modifications to ADAPT to: Extend the framework for multiple simulators, Incorporation of importance measures into dynamic event tree analysis, Sort and reduce the dynamic event tree based upon inputs to or outputs from the tree, and - A feasibility study for using density based clustering methods with dynamic time wrapping to cluster and prune dynamic event trees. (authors)

21 SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLANTS↗

IEC 62859: A new international standard on the coordination between safety and cybersecurity for nuclear I and C systems - 160

Cybersecurity requirements and controls for digital I and C systems are increasingly added to well-established safety-oriented provisions. Interactions and potential side-effects are possible and must be mastered, taking into account the nuclear I and C system specificities as well as their normative and regulatory contexts. The new international standard IEC 62859 'Nuclear power plants - Instrumentation and control systems - Requirements for coordinating safety and cyber security' aims to optimize the integration of cybersecurity provisions in nuclear I and C architecture and systems, to prevent conflicts between safety and cybersecurity provisions, and to aid the identification and the leveraging of the potential synergies between safety and cybersecurity. The paper presents the structure and the key aspects of this standard. IEC 62859 is structured along three main sections: one dealing with the overall I and C architecture, a second one focusing on the system level, a third one dealing with organizational and procedural issues. The paper also discusses related work in the nuclear industry, and in other sectors. (authors)

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

Final Report to the National Energy Technology Laboratory on FY14- FY15 Cooperative Research with the Consortium for Electric Reliability Technology Solutions

The Power System Engineering Research Center (PSERC) engages in technological, market, and policy research for an efficient, secure, resilient, adaptable, and economic U.S. electric power system. PSERC, as a founding partner of the Consortium for Electric Reliability Technology Solutions (CERTS), conducted a multi-year program of research for U.S. Department of Energy (DOE) Office of Electricity Delivery and Energy Reliability (OE) to develop new methods, tools, and technologies to protect and enhance the reliability and efficiency of the U.S. electric power system as competitive electricity market structures evolve, and as the grid moves toward wide-scale use of decentralized generation (such as renewable energy sources) and demand-response programs. Phase I of OE’s funding for PSERC, under cooperative agreement DE-FC26-09NT43321, started in fiscal year (FY) 2009 and ended in FY2013. It was administered by DOE’s National Energy Technology Laboratory (NETL) through a cooperative agreement with Arizona State University (ASU). ASU provided sub-awards to the participating PSERC universities. This document is PSERC’s final report to NETL on the activities for OE, conducted through CERTS, from September 2015 through September 2017 utilizing FY 2014 to FY 2015 funding under cooperative agreement DE-OE0000670. PSERC is a thirteen-university consortium with over 30 industry members. Since 1996, PSERC has been engaged in research and education efforts with the mission of “empowering minds to engineer the future electric energy system.” Its work is focused on achieving: • An efficient, secure, resilient, adaptable, and economic electric power infrastructure serving society • A new generation of educated technical professionals in electric power • Knowledgeable decision-makers on critical energy policy issues • Sustained, quality university programs in electric power engineering. PSERC core research is funded by industry, with a budget supporting approximately 30 principal investigators and some 70 graduate students and other researchers. Its researchers are multi-disciplinary, conducting research in three principal areas: power systems, power markets and policy, and transmission and distribution technologies. The research is collaborative; each project involves researchers typically at two universities working with industry advisors who have expressed interest in the project. Examples of topics for recent PSERC research projects include grid integration of renewables and energy storage, new tools for taking advantage of increased penetration of real-time system measurements, advanced system protection methods to maintain grid reliability, and risk and reliability assessment of increasingly complex cyber-enabled power systems. A PSERC’s objective is to proactively address the technical and policy challenges of U.S. electric power systems. To achieve this objective, PSERC works with CERTS to conduct technical research on advanced applications and investigate the design of fair and transparent electricity markets; these research topics align with CERTS research areas 1 and 2: Real-time Grid Reliability Management (Area 1), and Reliability and Markets (Area 2). The CERTS research areas overlap with the PSERC research stems: Power Systems, Power Markets, and Transmission and Distribution Technologies, as described on the PSERC website (see http://www.pserc.org/research/research_program.aspx). The performers were with Arizona State University (ASU), Cornell University (CU), University of California at Berkeley (UCB), and University of Illinois at Urbana-Champaign (UIUC). PSERC research activities in the area of reliability and markets focused on electric market and power policy analyses. The resulting studies suggest ways to frame best practices using organized markets for managing U.S. grid assets reliably and to identify highest priority areas for improvement. PSERC research activities in the area of advanced applications focused on mid- to long-term software research and development, with anticipated outcomes that move innovative ideas toward real-world application. Under the CERTS research area of Real-time Grid Reliability Management, PSERC has been focused on Advanced Applications Research and Development (AARD), a subgroup of activities that works to develop advanced applications and tools to more effectively operate the electricity delivery system, by enabling advanced analysis, visualization, monitoring and alarming, and decision support capabilities for grid operators.

24 POWER TRANSMISSION AND DISTRIBUTION↗

Secure State Estimation with Asynchronous Measurements for Coordinated Cyber Attack Detection in Active Distribution Systems

Coordinated cyber attacks tamper with measurement data to disrupt the situational awareness of active distribution systems. Various sensors report measurements asynchronously at different rates, which introduces challenges during state estimation. In addition, this forces cyber intruders to exert greater effort to compromise multiple communication channels and launch coordinated attacks. Therefore, multi-channel and asynchronous measurements could be harnessed to develop more secure cyber defense strategies. In this paper, a prediction-correction-based multi-rate observer is designed to exploit the value of asynchronous measurements for the detection of coordinated false data injection (FDI) attacks. First, a time-function-dependent prediction-correction strategy is proposed to adjust the sampling interval for each sensor’s measurement. Then, an observer is designed based on the trade-off between estimation error and the optimal period of the most recent sampling instant, with the convergence of estimation error with the maximum permitted sampling interval. Moreover, the conditions for exponential stability are developed using the Lyapunov–Krasovskii functional technique. Next, a coordinated FDI attack detection strategy is developed based on the dual nonlinear minimization problem. The proposed attack detection and secure state estimation strategies are tested on the IEEE 13-node system. Simulation results show that these schemes are effective in enhancing attack detection based on asynchronous measurements or compromised data.

asynchronous measurements↗

The Impact of Flooding on Food Security Across Africa

Recent record rainfall and flood events have prompted increased attention to flood impacts on human systems. Information regarding flood effects on food security is of particular importance for humanitarian organizations and is especially valuable across Africa's rural areas that contribute to regional food supplies. We quantitatively evaluate where and to what extent flooding impacts food security across Africa, using a Granger causality analysis and panel modeling approaches. Within our modeled areas, we find that ∼12% of the people that experienced food insecurity from 2009 to 2020 had their food security status affected by flooding. Furthermore, flooding and its associated meteorological conditions can simultaneously degrade food security locally while enhancing it at regional spatial scales, leading to large variations in overall food security outcomes. Dedicated data collection at the intersection of flood events and associated food security measures across different spatial and temporal scales are required to better characterize the extent of flood impact and inform preparedness, response, and recovery needs.

Connor Reed↗

Impact of Blockchain Delay on Grid-Tied Solar Inverter Performance

This paper investigates the impact of the delay resulting from a blockchain, a promising security measure, for a hierarchical control system of inverters connected to the grid. The blockchain communication network is designed at the secondary control layer for resilience against cyberattacks. To represent the latency in the communication channel, a model is developed based on the complexity of the blockchain framework. Taking this model into account, this work evaluates the plant’s performance subject to communication delays, introduced by the blockchain, among the hierarchical control agents. In addition, this article considers an optimal model-based control strategy that performs the system’s internal control loop. The work shows that the blockchain’s delay size influences the convergence of the power supplied by the inverter to the reference at the point of common coupling. In the results section, real-time simulations on OPAL-RT are performed to test the resilience of two parallel inverters with increasing blockchain complexity.

41 EE - Solar Energy Technologies Office (EE-4S)↗

New Prototype Safeguards Technology Offers Improved Confidence and Automation for Uranium Enrichment Facilities

An important requirement for the international safeguards community is the ability to determine the enrichment level of uranium in gas centrifuge enrichment plants and nuclear fuel fabrication facilities. This is essential to ensure that countries with nuclear nonproliferation commitments, such as States Party to the Nuclear Nonproliferation Treaty, are adhering to their obligations. However, current technologies to verify the uranium enrichment level in gas centrifuge enrichment plants or nuclear fuel fabrication facilities are technically challenging and resource-intensive. NNSA’s Office of Nonproliferation and International Security (NIS) supports the development, testing, and evaluation of future systems that will strengthen and sustain U.S. safeguards and security capabilities—in this case, by automating the monitoring of uranium enrichment in the entire inventory of a fuel fabrication facility. One such system is HEVA—hybrid enrichment verification array. This prototype was developed to provide an automated, nondestructive assay verification technology for uranium hexafluoride (UF6) cylinders at enrichment plants.

automated, nondestructive assay verification techn↗

Grid Architecture Mapping to Understand Transformation (GAMUT): Concept Definition

The electric power system is undergoing significant transformation driven by changes in the generation mix, increasing reliance on information and communication technologies, evolving customer expectations, and a dynamic cyber-physical environment. To address these challenges, substantial investments will be made over the next decade to create a flexible, affordable, secure, reliable, and resilient electric system. In response, the U.S. Department of Energy's Office of Electricity is developing knowledge management tools aimed at systematically documenting technology pilots and demonstration projects. This initiative seeks to improve understanding of operating contexts, planning steps, and integration requirements for innovative grid technologies. The Department of Energy project leverages Grid Architecture principles to collect and organize insights into the interdependencies, requirements, and capabilities of various grid solutions. By employing a systematic approach, the project aims to perform a feasibility study for the development of a software tool that will support stakeholders, including regulators, transmission and distribution system operators, distributed energy resources aggregators, and technology providers. By offering a systematic, software-based framework to document technologies, understand their benefits and impacts, and inform deployment strategies, the proposed Grid Architecture Mapping to Understand Transformation (GAMUT) Tool is intended to reduce costs, enhance decision-making, and facilitate scaling and effective deployment of new technologies. The feasibility study will evaluate the technical and financial viability of the GAMUT Tool, identifying stakeholder needs and assessing risks and mitigation strategies. Ultimately, the GAMUT team aims to develop an initial minimal viable product, followed by staged improvements, to aid in the modernization of the electric grid, contributing to a more sustainable and resilient energy future.

24 POWER TRANSMISSION AND DISTRIBUTION↗

A mixed finite difference/Galerkin method for three-dimensional Rayleigh-Benard convection

A fast and accurate numerical method, for nonlinear conservation equation systems whose solutions are periodic in two of the three spatial dimensions, is presently implemented for the case of Rayleigh-Benard convection between two rigid parallel plates in the parameter region where steady, three-dimensional convection is known to be stable. High-order streamfunctions secure the reduction of the system of five partial differential equations to a system of only three. Numerical experiments are presented which verify both the expected convergence rates and the absolute accuracy of the method.

Buell, Jeffrey C.↗

Impact of Inverter Based Resource Negative Sequence Current Injection on Transmission System Protection

This report documents the results of analysis performed to investigate the impact of inverter-based resource (IBR) response to unbalanced faults on transmission system protective relay dependability and security. Electromagnetic transient (EMT) simulations were performed to simulate IBR response to these faults using existing manufacturer-developed EMT models for four separate IBRs. The study team was composed of IBR manufacturers, relay manufacturers, transmission providers, reliability coordinators and industry consultants with experience in EMT simulation and system protection. The results indicate that under certain conditions, IBR response can result in protective relay misoperations if current protection practices, which were developed based on conventional power sources, are not adapted to the characteristics of IBRs.

24 POWER TRANSMISSION AND DISTRIBUTION↗

Data Security Defense: Modeling and Detection of Synchrophasor Data Spoofing Attack for Grid Edge

Data security and cyberattack have become critical issues in the distributed power system where adversaries can swap the source information of sensors or even spoof and alter measurements. However, the cyber security of the power system is challenged by the unpredictability and stealth of the spoofing attacks. Here, to protect the data security at the grid edge, this paper developed a synchrophasor data spoofing attack detection framework based on the time-frequency feature extraction techniques including the short-time Fourier transform (STFT) and object detection network for real-time synchrophasor data categorization and spoofing attack localization. The proposed approach outperforms earlier work in terms of spoofing attack detection and offers a vital localization function employing distributed synchrophasor sensors.

24 POWER TRANSMISSION AND DISTRIBUTION↗