Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “Computer security”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 1,405 records · Page 78

Energy Management Information Systems Cybersecurity Best Practices

Energy management information systems (EMIS) are a broad and rapidly evolving family of tools that monitor, analyze, and control building energy use and system performance. Critical systems are often integrated with or operate on the same networks as EMIS scope systems, necessitating stable, continuous, and secure communication. When connecting EMIS to building automation and utility control systems, there are also many physical assets that could cause harm to the building and its occupants if a malicious act or human error were introduced. It is imperative to ensure all EMIS scope systems are connected securely to the EMIS and do not open vulnerable pathways to other facility networks and operations. The Federal Energy Management Program (FEMP) promotes best practices for impactful utilization of EMIS at federal facilities. This best practice document is part of a series of fact sheets created to help accelerate the market adoption and use of EMIS in the federal sector. It provides an overview of required EMIS cybersecurity standards for compliance and authority to operate along with additional recommendations.

cybersecurity↗

The Cybersecurity Value-at-Risk Framework

Hydropower remains one of the strongest forms of renewable energy generation methods. It is crucial to address the increasing risks associated with the rapid digitization. The push towards decarbonization also factors in the need to ensure security and resilience for grid-connected renewable energy resources. This report summarizes the U.S. Department of Energy's Water Power Technologies Office's effort to develop a cybersecurity valuation methodology that assists hydropower stakeholders in assessing risks associated with plan operations and gathers valuation guidance through a web-based applicaiton. The Hydropower Cybersecurity Value-at-Risk Framework delivers a platform for industry members to perform self assessments and make informed decisions on their cybersecurity investments.

CVF↗

Cybersecurity Guidance for Distributed Energy Resource Management Systems (DERMS)

As part of the Securing Solar for the Grid (S2G): Cybersecurity for Solar Systems workshop at RE + in Las Vegas, Nevada, NREL researchers discuss an ongoing effort to develop cybersecurity guidance for vendors and operators of distributed energy resource management systems (DERMS). This guide will prioritize cybersecurity best practices that can be testing and developed for a potential future standard. This presentation will highlight NREL's ongoing work in this area and future areas of research.

cyber↗

University Coalition for Fossil Fuel Energy Research

Following a nationwide open competition, the University Coalition for Fossil Energy Research (UCFER) was established in October 2015 through a cooperative agreement between Penn State and the Department of Energy (DOE) National Energy Technology Laboratory (NETL). Penn State lead UCFER with the objective of advancing basic and applied research for clean and low-carbon energy based on fossil fuels in support of the DOE’s mission. UCFER focused on research that improves the efficiency of production and use of fossil energy resources, while minimizing the environmental impacts and reducing greenhouse gas emissions. Penn State lead a team of nine universities (Massachusetts Institute of Technology, The Pennsylvania State University, Princeton University, Texas A&M University, University of Kentucky, University of Southern California, The University of Tulsa, University of Wyoming, and Virginia Polytechnic and State University) during the competition stage, adding seven more universities in 2017 (Carnegie Mellon University, Louisiana State University, The Ohio State University, University of North Dakota, University of Pittsburgh, University of Utah, and West Virginia University). This Coalition exhibited a wide geographical distribution across the U.S. bringing a wide variety of fossil energy expertise. This national university alliance was a major collaborative effort with NETL to address specific topics of R&D in NETL’s mission area, which involved one or more of NETL’s five core competencies (Geologic and Environmental Systems, Materials Engineering and Manufacturing, Energy Conversion Engineering, Systems Engineering and Analysis, and Computational Science and Engineering). The first five to six months of the project was the definitization stage. During this period, Penn State worked closely with NETL to finalize the Coalition organizational structure and By- Laws, prepare a statement of substantial involvement and a statement of project objectives, and develop operations and membership plans. A major component of this stage included preparing an execution plan to solicit research, evaluate proposals, recommend selected projects to NETL, and award projects. In addition, a plan was prepared to monitor projects, review projects, disseminate knowledge from research projects and develop an online system for Coalition research portfolio management. This included developing a website and several databases. The first of six rounds of solicitations started in mid-2016. Projects from the sixth solicitation started February 1, 2021, and ended January 31, 2023. Projects that were selected represented twelve technology lines. Approximately $16.6 million in funding was available for the six solicitations. Most of the funding was provided by DOE, Office of Fossil Energy (DOEFE) with the DOE Fuel Cells Technologies Office (DOE-FCTO) providing funding for a few projects. Coalition universities submitted 259 proposals in response to the solicitations, requesting approximately $67.0 million in funding, and forty-three projects were selected. However, one project withdrew after the principal investigator left the university. The management of the Coalition projects was a major activity by Penn State. Managing the Coalition projects consisted of monitoring the projects, reviewing the projects through annual technical review meetings, disseminating knowledge from the research projects, and developing an online system for Coalition research portfolio management. Penn State’s OMT monitored projects to ensure that all milestones (technical, schedule, budget) were met, expenditures were allowable, cost share (when applicable) were reported, and all technical reports were submitted. The OMT also posted the technical reports electronically on a secure members-only website for access and review by the Coalition members. Disseminating knowledge from the research projects was done through a website, newsletters, various meetings, conferences, journal articles, publicity/press releases, and project summaries that were prepared after each project was completed. Penn State kept NETL apprised of UCFER progress through quarterly reports (thirtyone were submitted by Penn State), verbal and written communications, yearly updates at the annual technical review meetings, and cost accrual reports. The UCFER project had a significant impacty. The UCFER program established the first national university alliance in fossil energy research with a major collaboration effort with DOE NETL that addressed specific topics in NETL’s research and development mission areas. It generated inter-university collaborations, which was another program interest. Twenty-two out of 259 proposals contained collaborations (≈8.5%) and three of forty-two funded projects involved inter-university collaborations (≈7.0%). The forty-two funded projects provided support at fourteen universities involving 269 personnel. Research was conducted by 106 faculty, 115 graduate and undergraduate students, forty-six research staff and post-doctoral scholars, and two visiting scholars. Students and post-doctoral scholars were also on-site at NETL through CRADAs. In addition, non-Coalition participants included six universities and sixteen companies and national laboratories. The non-Coalition participants were involved as subcontractors, providers of cost share, performed unpaid consultation and sample analysis, served as advisory board members, or were providers of samples and materials for testing. UCFER also produced visibility in that fifty-six refereed journal articles were published, fifty-seven conference papers and twenty-three posters were prepared, 190 presentations were given, eight patent applications were filed, two books/book chapters were written, and ten software codes were developed. Collaboration between NETL and the individual projects was a major requirement for all funded projects. This included NETL staff time to support collaboration, consultation, technical guidance, sample preparation and analysis, internships at NETL, on-site testing and equipment usage by Coalition participants at NETL, co-mentoring students, and coauthoring journal articles and conference papers. Collaboration was impacted by COVID-19 in that not all on-site activities could be performed. NETL personnel were coauthors on eight of the conference papers (fourteen percent of the conference papers that were prepared) and seventeen of the journal articles (thirty percent of the journal articles that were prepared). A website was developed for an online proposal solicitation and review process and to provide exposure to UCFER. A website analysis highlighted the large amount of member and general public interest in UCFER by interpreting access statistics from March 2016 through June 2023. Visitors to the site originated from many different organizations, businesses, and countries. The website provided a means to disseminate information to both the general public and the UCFER members and was successfully used for outreach activities. In addition, NETL required that RFP release, proposal submission, and proposal reviews all be performed online. Penn State successfully developed these capabilities in a secure section of the website, which were used throughout the UCFER project. It is recognized that each project had its technical successes. In addition, highlighted successes were compiled and summarized from the research projects. Information was requested from the PIs of completed projects. In addition, Penn State’s Operations Management Team reviewed subcontract reports to identify project successes. Examples of information requested from PIs included (not all-inclusive): new projects that have been funded as a result of UCFER funding; new commercial products; establishment of a new center; new patent; new software; best paper awards; highly-cited work; and graduate student successes. A total of forty-eight highlighted successes were reported.

01 COAL, LIGNITE, AND PEAT↗

Database tomography for commercial application

Database tomography is a method for extracting themes and their relationships from text. The algorithms, employed begin with word frequency and word proximity analysis and build upon these results. When the word 'database' is used, think of medical or police records, patents, journals, or papers, etc. (any text information that can be computer stored). Database tomography features a full text, user interactive technique enabling the user to identify areas of interest, establish relationships, and map trends for a deeper understanding of an area of interest. Database tomography concepts and applications have been reported in journals and presented at conferences. One important feature of the database tomography algorithm is that it can be used on a database of any size, and will facilitate the users ability to understand the volume of content therein. While employing the process to identify research opportunities it became obvious that this promising technology has potential applications for business, science, engineering, law, and academe. Examples include evaluating marketing trends, strategies, relationships and associations. Also, the database tomography process would be a powerful component in the area of competitive intelligence, national security intelligence and patent analysis. User interests and involvement cannot be overemphasized.

Kostoff, Ronald N.↗

Low Emissions Alternative Power (LEAP) Project Office Business Team of the Aeropropulsion Research Program Office (ARPO) Org. 0140

The program for which I am working at this summer is Propulsion and Power/Low Emissions Alternative Power (P&P/LEAP). It invests in a fundamental TRL 1-6 research and technology portfolio that will enable the future of: Alternative fuels and/or alternative propulsion systems, non-combustion (electric) propulsion systems. P&P/LEAP will identify and capitalize on the highest potential concepts generated both internal and external to the Agency. During my 2004 summer at NASA Glenn Research Center, I worked with my mentor Barbara Mader, in the Project Office with the Business Team completing various tasks for the project and personnel. The LEAP project is a highly matrixed organization. The Project Office is responsible for the goals advocacy and dollar (budget) of the LEAP project. The objectives of the LEAP Project are to discover new energy sources and develop unconventional engines and power systems directed towards greatly reduced emissions, enable new vehicle concepts for public mobility, new science missions and national security. The Propulsion and PowerLow Emissions Alternative Power directly supports the environmental, mobility, national security objectives of the Vehicle Systems Program and the Aeronautics Technology Theme. Technology deliverables include the demonstration through integrated ground tests, a constant volume combustor in an engine system, and UAV/small transport aircraft all electric power system. My mentor serves as a key member of the management team for the Aeropropulsion Research Program Office (ARPO). She has represented the office on numerous occasions, and is a member of a number of center-wide panels/teams, such as the Space management Committee and is chair to the Business Process Consolidation Team. She is responsible for the overall coordination of resources for the Propulsion and Power Project - from advocacy to implementation. The goal for my summer at NASA was to document processes and archive program documents from the past years. I used the computer and office machines, and also worked with personnel in setting up a Cost Estimation Plan. I gained office experience in Word, Excel, and Power Point, with the completion of a variety of tasks. I made spreadsheets that pertained to the budget plan for Journey to Tomorrow, to name a few I have supported the office by tracking resource information: including programmatic travel, project budget at the center level to budgets for individual research sub-projects and grants. I also assisted the Program Support Office in their duties including, representing the office on numerous occasions on center-wide team/panels, such as the Space management committee, IFMP Budget Formulation, Journey to Tomorrow Committee, and the Vehicle Systems Program Business Process Team.

Buttler, Jennifer A.↗

A Cybersecurity Event Simulation Tool and Platform

Digital Instrumentation and Control Systems (ICSs) have replaced analog control systems in nuclear power plants raising cybersecurity concerns. To study and understand the cybersecurity risks of nuclear power plants both high fidelity models of the plant physics and controllers must be created, and a framework to test and evaluate cyber security events must be established. A testing and evaluation framework of cybersecurity events consists of a method of interfering with control systems, a simulation of the plant network, and a network packet capture and recording tool. Sandia National Labs (SNL) in collaboration with the University of New Mexico’s Institute for Space and Nuclear Power Studies (UNM-ISNPS) is developing such a cybersecurity testing framework.

21 SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLANTS↗

LDRD Abbreviated report: High-Order General-Discrete-Ordinates Method Enabling Efficient Deterministic Transport in Hydrodynamic Simulations

Deterministic transport simulations for national-security and energy applications often operate in high-dimensional phase-space, where accuracy and cost both become major challenges. A common numerical artifact in such problems is the “ray-effect,” which appears as unphysical streaks. Beyond misinterpretation, these artifacts can contaminate tightly coupled physics, such as fluid dynamics, radiation-hydrodynamics, and laser-plasma interactions, eroding the predictive capability of entire multiphysics workflows. Our objective was to make high-dimension studies practical on modern hardware while mitigating the ray-effect without relying on prohibitively expensive sampling approaches such as Monte Carlo methods. We developed the Generic Discretization Library (GenDiL), a Graphics Processing Unit (GPU)-first framework that uses high-order Discontinuous Galerkin (DG) methods and matrix-free algorithms to reduce memory usage and improve computational efficiency, critical for phase-space simulations. GenDiL supports phase-space adaptivity in both mesh size and polynomial order (hp-adaptivity) to place resolution only where it is needed. A central capability is Local Dimensional Refinement (LDR), which couples lower-dimension continuum models to higher-dimension kinetic models through stable and conservative interfaces, so that high-fidelity physics is applied only in regions where it is essential. Building on the GenDiL framework, we developed the General SN (GSN) family of algorithms as a true generalization of the polar SN approach (discrete ordinates, often denoted SN). Rather than tying discrete ordinates to a specific polar change of coordinates, GSN formulates transport on an arbitrary change of coordinates chosen to reduce ray-effect. We studied two complementary variants: an analytic variant, where the coordinate map is prescribed in advance by a closed-form function; and a data-driven variant, where a quantity of interest, such as the net flux, guides the coordinate system. GenDiL provides the library infrastructure for efficient GPU execution, but the GSN concept is algorithmic and independent of any one library. Across representative high-dimension tests, including non-symmetric solutions, both variants delivered strong ray-effect mitigation at practical cost, moving four- to six-dimensional analysis toward repeatable, routine studies.

73 NUCLEAR PHYSICS AND RADIATION PHYSICS↗

Generating SBoMs Utilizing Structured Threat Information Expression JSON bundles

With cyber-attacks on the rise, information is one of the first lines of defense. Now more than ever, security experts and developers need efficient ways to know if their software may be outdated or vulnerable to emerging threats. By generating a Software Bill of Material based on STIX2/JSON bundles, security experts and developers can ensure that they know where to find what can go wrong with their systems before the hackers do. As part of the Infrastructure Expression project, Idaho National Laboratory (INL) is currently working on ways that can aid in the development of efficient SBOMs using Structured Threat Information Expression (STIX). Doing so can provide an efficient first line of defense for detection and monitoring that can be easily used by cyber personnel from beginners to highly skilled experts.

97 MATHEMATICS AND COMPUTING↗

Industry Level Feasibility of LiDAR Data into Fire Modeling Using Fire Risk Investigation in 3D (FRI3D)

Many evaluation, assessment, and modeling tasks at nuclear power plants require spatial information this often requires physical visits to locations within the facility because the 2D or 3D schematics and current models do not contain enough detail or do not capture as-built and real-world conditions. These visits require extensive manual labor for not only the requesting party, but support groups such as security. LIDAR mapping is trying to solve that problem by providing very detailed 3D models for low costs. However, the use of these models can be very limited because either component reference information is missing and too costly to add, or there is no way to extract specific spatial data needed for other tools. This report presents Idaho National Lab's work with Environmental Intellect (Ei) covering two main efforts. First, to reduce the effort of "tagging" data in large 3D models. By using both existing plant database information, and artificial intelligence (AI) to find and read equipment labels. This research explores the ability of to provide a simple way for the user to tag items and verify plant data, capturing both the speed of AI and human verification. The second part of the work is the development of an interface for importing pieces needed for Modeling & Simulation. Analysis work such as that for fire, flood, or physical security all require spatial or 3D models in various levels of detail. This interface will allow for the retrieval of item location or boundaries, enabling the auto generation of models for varying tools. The application program interface (API) of the fire risk investigation in 3D (FRI3D) was used to test feasibility of exporting the LiDAR tagged spatial information. Outcomes from this work provide preliminary data to determine if the tools and methods could provide substantial industry benefit if fully matured.

97 MATHEMATICS AND COMPUTING↗

Secure NTP Implementation for Power System Synchronization

Network Time Protocol (NTP), originally developed in the 1980s, remains one of the most widely adopted protocols for synchronizing clocks over Internet Protocol (IP)-based networks. It distributes time with millisecond-level accuracy across Ethernet-based systems and continues to be a standard in both enterprise and operational technology environments.

97 MATHEMATICS AND COMPUTING↗

Perturbation-Based Diagnosis of False Data Injection Attack Using Distributed Energy Resources

Modern smart grid relies on various sensor measurements for its operational control. In a successful false data injection attack, the attacker manipulates the measurements from the grid sensors such that undetected errors are introduced into the estimates of the system parameters leading to catastrophic situations. This paper proposes a novel perturbation based false data injection attack detection mechanism that utilizes inverter based distributed energy resources (DERs) to create low magnitude perturbation signal in the distribution system voltage that is inconsequential to the normal grid operation. Two voltage sensitivity analysis based algorithms are designed to identify the optimal set of DERs that can create the voltage perturbation signal of desired magnitude. An analytical method of voltage sensitivity analysis is used to compute the magnitude of voltage perturbation signal at each node in a computationally efficient manner. Then, a detection mechanism is developed that checks for the presence of the perturbation sequence in each sensor measurement. A sensor measurement is deemed authentic if the voltage perturbation signal is present in the data. In case of sensor malfunction or cyber-attack, the perturbation signal will not be present in the measurement data. Performance of the proposed attack detection mechanism is validated via simulation of the IEEE 69 bus test system.

24 POWER TRANSMISSION AND DISTRIBUTION↗

pdas-experiments

SAND2025-04589O pdas-experiments automates computational experiments of fluid flow simulations. It uses the pressio-demoapps-schwarz package as a basis to break down complex simulations into smaller, manageable parts. This application is an extension of the Sandia Pressio software which uses domain decomposition to work with complex simulations more efficiently. Users can test different simulation setups, while keeping a detailed record of their experiments so they can be reproduced later. The software includes a C++ program that runs individual experiments based on user-defined settings in a YAML file, as well as a Python script that can manage multiple simulations at once. Sandia National Laboratories is a multimission laboratory managed and operated by National Technology & Engineering Solutions of Sandia, LLC, a wholly owned subsidiary of Honeywell International Inc., for the U.S. Department of Energy’s National Nuclear Security Administration under contract DE-NA0003525.

Tezaur, Irina [Sandia National Lab. (SNL-CA), Live↗

CReST-VCT System Integration Framework

In this paper, we propose a system integration framework for deploying the Coordinated Real-time Sub-Transmission Volt-var Control Tool (CReST VCT) functionality between the transmission system, the distribution system, and DERs. This represents one possible set of design choices to implement the coordinated optimization capabilities in an operating environment. The framework provides the following: An architectural reference model that describes how the CReST VCT solution maps into a broader grid architecture that accommodates and enables higher levels of DER penetration and utilization: A system integration reference model that defines a possible allocation of CReST VCT functionality within a utility’s operational environment. This includes one possible system design approach for allocation of functionality within software and protocol selections across the various interfaces; A list of potential performance and security issues that should be considered during an implementation. This framework does not represent a specific implementation of the CReST VCT algorithm or integration into a specific utility environment. It is intended to serve as a reference for those who plan to implement such a solution into their environment. The general model provided by the framework can be tailored to a specific environment based on its specific constraints and requirements.

24 POWER TRANSMISSION AND DISTRIBUTION↗

Power Over Ethernet Investigation Report

This report provides insight into collaboration between Savannah River National Laboratory’s (SRNL) Global Security Directorate, Augusta University (AU) and the Georgia Cyber Center (GCC) team with regards to device analysis, investigation, and R&D efforts. Most recently, the GCC/AU team approached SRNL to receive cybersecurity expertise in a joint effort to identify differences between a potentially questionable PoE injector recovered by Columbia County and an identical one purchased by the GCC. The questionable device was installed at a fire station operated in Columbia County, shown in the figure 1-1 below.

45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗

Threat Sources for Creating Synthetic Urban Search Data

Equivalent point source energy emission distributions were computed for various threat sources for use in simulating the detector responses for urban search scenarios. The sources include standard isotopic sources used in detector testing, medical and industrial sources occasionally encountered in urban searches, and several types of special nuclear materials. Most of the equivalent point source distributions represent small sources inside some amount of shielding, but the special nuclear material sources represent volumetrically distributed sources in spheres of metal. Text-based inputs for emission distributions are available for the Monte Carlo transport codes Monte Carlo N-Particle, SCALE/MAVRIC, and Omnibus/Shift, any of which can easily be converted to other formats. These sources were developed for use in the Radiological Anomaly Detection and Identification (RADAI) project and the follow-on project, the RADAI-Extended project, sponsored by the National Nuclear Security Administration Office of Defense Nuclear Nonproliferation Research and Development.

46 INSTRUMENTATION RELATED TO NUCLEAR SCIENCE AND ↗

Science & Technology Review: October-November 2024 DarkStar

At Lawrence Livermore National Laboratory, we focus on science and technology research to ensure our nation’s security. We also apply that expertise to solve other important national problems in energy, bioscience, and the environment. Science & Technology Review is published eight times a year to communicate, to a broad audience, the Laboratory’s scientific and technological accomplishments in fulfilling its primary missions. The publication’s goal is to help readers understand these accomplishments and appreciate their value to the individual citizen, the nation, and the world.

99 GENERAL AND MISCELLANEOUS↗