Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “cloud security”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 145 records · Page 8
All sourcesNASA NTRSDOE OSTI
DOE OSTI2023

Cybersecurity Platform and Certification Framework Development for Extreme Fast Charging (XFC)-Integrated Charging Ecosystem (Final Project Report)

This report summarizes a pioneering effort in Electric Vehicle charging infrastructure ecosystem cybersecurity requirements, assessment methodologies, functional verification, as well as embodiment of the key technologies in the form of hardware and software tools being made available to the public. EPRI led a team of experts, as well as a stakeholder coalition encompassing all key actors in the EV charging infrastructure ecosystem that includes eXtreme Fast Charging (XFC) equipment (defined as 200kW or above). EV charging infrastructure in the United States is a patchwork of networks that have continued to grow organically and have been designed to serve the charging needs of the EV owners, who are their customers. In doing so, each network provider, as well as their connected entities such as the cloud Electric Vehicle Service Providers or EVSPs, utility back office, utility AMI networks, payment networks, as well as Original Equipment Manufacturer (EV manufacturer) telematics networks, have designed systems that may work well individually, but no single entity is responsible for the entire ecosystem to be secure in terms of data exchange. Furthermore, there is no uniformity in how each actor has implemented the cybersecurity requirements since no system-wide cybersecurity requirements existed prior to this project. The final project report describes the technical approach guided by the EV charging infrastructure cybersecurity working group, convened specifically for this project. The technical approach included definition of requirements at the ecosystem level, treated as a ‘system of systems’, and then passed down to individual systems (EVSE, EV, cloud EVSP, utility, and the payment networks), followed by developing the cybersecurity risk and vulnerability assessment methods, that were later applied to real-world cyber-physical systems at EPRI, ANL, and NREL laboratories, to validate both the process and the results. Finally, in a spotlight over the most vulnerable equipment, which is the EV charge station (AC or DC), the team developed a multi-layer cybersecurity implementation in the embedded domain embodied by the open-source Secure Network Interface Card (SNIC) demonstrating the various ways in which the infrastructure can be secured protecting against the identified attack surfaces. Finally, the entire process of EV infrastructure cybersecurity assessment was encapsulated in the Electric Vehicle Charging Cybersecurity Management (EVC2M) online GUI-based tool, that is expected to be released to the public. The report presents the objectives, the technical approach, the key results, and recommendations for future work.

24 POWER TRANSMISSION AND DISTRIBUTION↗
DOE OSTI2025

Advanced Transmission Technologies – GETs and HPCs Session 1: ATT Foundations and Dynamic Line Ratings (DLRs)

The INL TADA GETs Cohort Session 1, held on November 4, 2025, convened experts to address the integration of advanced transmission technologies, including Grid-Enhancing Technologies (GETs) and High Performance Conductors (HPCs), with a focus on digital assurance challenges. The session highlighted the growing importance of cybersecurity, supply chain transparency, reliability, and business risk management in deploying GETs, especially Dynamic Line Ratings (DLRs). Participants examined how expanded attack surfaces, limited vendor pools, and new regulatory requirements—such as FERC Orders 881, 2023, and 1920—are influencing utilities and technology providers. The workshop underscored the need for cyber-informed engineering, secure-by-design principles, and practical risk management strategies, while fostering collaboration and knowledge sharing among industry peers. Technical discussions covered the evolution from static to dynamic line ratings, complexities of cloud-based architectures, and NERC CIP compliance challenges. The session concluded with a collaborative risk exercise and a preview of future workshops on advanced power flow control and transmission topology optimization, reinforcing the cohort’s commitment to advancing digital assurance in the energy sector.

24 - POWER TRANSMISSION AND DISTRIBUTION↗
DOE OSTI2019

Enabling Technologies for Multinational Interconnected Smart Grid

The multinational interconnected smart grid is a crucial part for the construction of global energy internet, which requires various technologies to support. Based on the key technologies of multinational grid, this paper first states the importance of emerging information communication technologies, such as distributed cloud computing and blockchain, to the safe and stable operation of the grid. Then this paper discusses smart-grid control technologies for power dispatch and grid security. Finally, this paper talks about enabling power electronic technology and analyzes the relationship between power electronics, flexible AC transmission and HVDC transmission technology. To conclude, all these technologies play key roles in enabling multinational interconnected power systems.

Yang, Jianlin↗
NASA NTRS2013

B- and A-Type Stars in the Taurus-Auriga Star-Forming Region

We describe the results of a search for early-type stars associated with the Taurus-Auriga molecular cloud complex, a diffuse nearby star-forming region noted as lacking young stars of intermediate and high mass. We investigate several sets of possible O, B, and early A spectral class members. The first is a group of stars for which mid-infrared images show bright nebulae, all of which can be associated with stars of spectral-type B. The second group consists of early-type stars compiled from (1) literature listings in SIMBAD, (2) B stars with infrared excesses selected from the Spitzer Space Telescope survey of the Taurus cloud, (3) magnitude- and color-selected point sources from the Two Micron All Sky Survey, and (4) spectroscopically identified early-type stars from the Sloan Digital Sky Survey coverage of the Taurus region. We evaluated stars for membership in the Taurus-Auriga star formation region based on criteria involving: spectroscopic and parallactic distances, proper motions and radial velocities, and infrared excesses or line emission indicative of stellar youth. For selected objects, we also model the scattered and emitted radiation from reflection nebulosity and compare the results with the observed spectral energy distributions to further test the plausibility of physical association of the B stars with the Taurus cloud. This investigation newly identifies as probable Taurus members three B-type stars: HR 1445 (HD 28929), τ Tau (HD 29763), 72 Tau (HD 28149), and two A-type stars: HD 31305 and HD 26212, thus doubling the number of stars A5 or earlier associated with the Taurus clouds. Several additional early-type sources including HD 29659 and HD 283815 meet some, but not all, of the membership criteria and therefore are plausible, though not secure, members.

B- and A-Type↗
NASA NTRS2015

Technical Challenges and Opportunities of Centralizing Space Science Mission Operations (SSMO) at NASA Goddard Space Flight Center

The NASA Goddard Space Science Mission Operations project (SSMO) is performing a technical cost-benefit analysis for centralizing and consolidating operations of a diverse set of missions into a unified and integrated technical infrastructure. The presentation will focus on the notion of normalizing spacecraft operations processes, workflows, and tools. It will also show the processes of creating a standardized open architecture, creating common security models and implementations, interfaces, services, automations, notifications, alerts, logging, publish, subscribe and middleware capabilities. The presentation will also discuss how to leverage traditional capabilities, along with virtualization, cloud computing services, control groups and containers, and possibly Big Data concepts.

Science↗
DOE OSTI2025

Improving Cyber Situational Understanding

Effective cybersecurity operations require the ability to analyze large amounts of information to assess security risks and formulate defensive strategies against adversaries. This has become more complex in recent years as the sprawl and interconnectivity of devices grows through implementation of virtualization, cloud computing, and Internet of Things (IoT). The amount of data and analysis required for effective cybersecurity command and control decisions far exceeds humans’ capacity to perform manually. We characterize the analysis problem as cyber situational understanding. The research presented to improve cyber situational understanding focuses on vulnerability analysis and threat intelligence. Regarding vulnerabilities, entities must analyze and plan work for between thousands and tens of thousands of software vulnerabilities annually. Entities heavily use network firewalls to limit vulnerability exposure. As a result, some of these vulnerabilities permit exposure to adversarial exploitation, whereas others are inaccessible and therefore present negligible risk of exploitation. Distinguishing between high and low risk software vulnerabilities requires a deep understanding of the vulnerability, network firewall protection, and characteristics of the targeted device. This problem is solved by extracting network service features from vulnerability data features using both machine-learning and natural language processing. Then, the network firewall topology is parsed to determine which vulnerabilities are reachable by adversaries. Ultimately, a state-based safety analysis ascertains which vulnerabilities are unsafe. A related vulnerability analysis problem occurs in cybersecurity operations when associating an entity’s hardware and software assets to public vulnerability databases. Assets often reveal hardware and software through installation artifacts and network service identification, and entities store these artifacts in inventory databases. However, software and hardware vendors apply a standard Common Platform Enumeration (CPE) naming convention when publicly reporting vulnerabilities. Associating these two datasets often requires many hours to days of manual inspection. The proposed solution automates the mapping approach of human analysts using fuzzy matching techniques, natural language processing, and, ultimately, machine learning to present a small set of recommendations for mapping the two datasets. The result significantly reduces human analysis time and reduces the occurrence of false positives in vulnerability notifications. Finally, cyber threat intelligence (CTI) requires associating cyber observable artifacts, such as IP addresses, URIs, and file hashes, with cyber threat tactics, techniques, and procedures. Unfortunately, most CTI data is compartmentalized across multiple organizations and cannot be shared due to the legal and reputational risk with cyber threat being associated with the entity. The approach to solving this problem inovlves using a distributed ledger with anonymous token spending and authentication. This allows a consortium of semi-trusted entities to share the workload of curating CTI for a threat sharing community’s cooperative benefit.

Huff, Philip↗
DOE OSTI2014

WE-B-BRD-01: Innovation in Radiation Therapy Planning II: Cloud Computing in RT

As defined by the National Institute of Standards and Technology, cloud computing is “a model for enabling ubiquitous, convenient, on-demand network access to a shared pool of configurable computing resources (e.g., networks, servers, storage, applications, and services) that can be rapidly provisioned and released with minimal management effort or service provider interaction.” Despite the omnipresent role of computers in radiotherapy, cloud computing has yet to achieve widespread adoption in clinical or research applications, though the transition to such “on-demand” access is underway. As this transition proceeds, new opportunities for aggregate studies and efficient use of computational resources are set against new challenges in patient privacy protection, data integrity, and management of clinical informatics systems. In this Session, current and future applications of cloud computing and distributed computational resources will be discussed in the context of medical imaging, radiotherapy research, and clinical radiation oncology applications. Learning Objectives: Understand basic concepts of cloud computing. Understand how cloud computing could be used for medical imaging applications. Understand how cloud computing could be employed for radiotherapy research.4. Understand how clinical radiotherapy software applications would function in the cloud.

60 APPLIED LIFE SCIENCES↗
DOE OSTI2019

Enabling a Decentralized Smart Grid Using Autonomous Edge Control Devices

As a large number of distributed devices are connected to the modern smart grid, the traditional centralized connectivity models fail to provide economic value. These models have relied on sending data to the cloud for processing and receiving commands to exert control actions, resulting in an ‘on-demand system’ with high bandwidth, low latency and an overload of data on the cloud. For realizing a decentralized system, there is a strong need to embed intelligence at the ‘edge of the network’. These intelligent devices, capable of sensing, local data processing and exerting control actions, report only actionable information to the cloud, acting as an edge control node. The system can then function autonomously, without constant cloud inputs, tolerating longer delays in communication, making the overall system ultra-low cost. The Global Asset Monitoring, Management and Analytics (GAMMA) Platform is a novel ultralow- cost, secure platform that operates through a Bluetooth based delay tolerant network. It relies on so-called ‘data mules’ to bridge the last mile connectivity gap in an inherently secure way. Due to this model, the platform requires no in-country certifications, does not rely on a dedicated backhaul technology and is immune to technology migration. This architecture also addresses some gaps identified in traditional IoT-based solutions in remote areas and sparse connectivity. A functional unit of the edge computing node has been built, taking into account various constraints like costs, customizations, data storage, cybersecurity and power management. Here, the platform has been built, deployed and has demonstrated distributed smart grid applications like power quality sensing, automated metering infrastructure and utility asset monitoring.

42 ENGINEERING↗
NASA NTRS1984

The detection of interstellar methylcyanoacetylene

A new interstellar molecule, methylcyanoacetylene (CH3C3N), has been detected in the molecular cloud TMC-1. The J = 8 to 7, J = 7 to 6, J = 6 to 5, and J = 5 to 4 transitions have been observed. For the first three of these, both the K = 0 and K = 1 components are present, while for J = 5 to 4, only the K = 0 line has been detected. The observed frequencies were calculated by assuming a value of radial velocity V(LSR) = 5.8 km/s for TMC-1, typical of other molecules in the cloud. All observed frequencies are within 10 kHz of the calculated frequencies, which are based on the 1982 laboratory constants of Moises et al. (1982), so the identification is secure. The lines are broadened by hyperfine splitting, and the J = 5 to 4, K = 0 transition shows incipient resolution into three hyperfine components. The rotational temperature determined from these observations is quite low, with T(rot) in the range from 2.7 to 4 K. The total column density is approximately 5 x 10 to the 12th per sq cm.

Broten, N. W.↗
NASA NTRS2020

Names Don't Fly: Smart Filters for Profanity Detection and Classification in User-Generated Content

Generally, names associate with a person’s identity. But what if in the pretext of a legitimate name and given the opportunity, users of software provide names to online web forms that carry along offensive language, slurs, and other profanity that is then sent to Mars ? The answer is simple: they don’t fly. In this paper,we perform model explorations to detect and classify inappropriate content in the names submitted from people across the world to ‘Send Your Names to MARS’ public engagement campaign.We propose a novel pipeline approach, that can effectively overcome the issues of lack of negative samples, noisy labels by gathering expert knowledge over time with human(s) in the loop and data augmentation, and achieve high accuracy in classifying inappropriate names with very little or no context. We describe cloud-based infrastructure to deploy our application and run predictions on large-scale data through our pipeline and achieve significant speedup over offline processes, with enhanced reliability and security.

Soderstrom, Tomas↗
DOE OSTI2016

Co-Operative Resource Allocation: Building an Open Cloud Market Using Shared Infrastructure

In this paper we present DRIVE, a distributed service-based system designed to facilitate an open economic market for federating Cloud providers. Additionally, to address the challenges associated with market ownership and operation we propose the use of a cooperative (co-op) infrastructure in which the services that make up DRIVE are hosted across participants' resources. To prevent malicious behavior we use cryptographic, secure and privacy preserving allocation protocols as a means of establishing trust in the allocation infrastructure. Finally, we investigate through simulation the effect of different strategies, pricing functions, and penalty models on allocation performance and revenue, and show that the overhead of running DRIVE's services on commodity infrastructure is modest.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2016

The Medical Science DMZ

Objective We describe use cases and an institutional reference architecture for maintaining high-capacity, data-intensive network flows (e.g., 10, 40, 100 Gbpsþ) in a scientific, medical context while still adhering to security and privacy laws and regulations. Materials and Methods High-end networking, packet filter firewalls, network intrusion detection systems. Results We describe a “Medical Science DMZ” concept as an option for secure, high-volume transport of large, sensitive data sets between research institutions over national research networks. Discussion The exponentially increasing amounts of “omics” data, the rapid increase of high-quality imaging, and other rapidly growing clinical data sets have resulted in the rise of biomedical research “big data.” The storage, analysis, and network resources required to process these data and integrate them into patient diagnoses and treatments have grown to scales that strain the capabilities of academic health centers. Some data are not generated locally and cannot be sustained locally, and shared data repositories such as those provided by the National Library of Medicine, the National Cancer Institute, and international partners such as the European Bioinformatics Institute are rapidly growing. The ability to store and compute using these data must therefore be addressed by a combination of local, national, and industry resources that exchange large data sets. Maintaining data-intensive flows that comply with HIPAA and other regulations presents a new challenge for biomedical research. Recognizing this, we describe a strategy that marries performance and security by borrowing from and redefining the concept of a “Science DMZ”—a framework that is used in physical sciences and engineering research to manage high-capacity data flows. Conclusion By implementing a Medical Science DMZ architecture, biomedical researchers can leverage the scale provided by high-performance computer and cloud storage facilities and national high-speed research networks while preserving privacy and meeting regulatory requirements.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2018

A Cloud-Based Decision Support System Framework for Hydropower Biological Evaluation

Hydropower has become one of the most important energy sources: it accounts for more than 80% of the world’s renewable energy and about 16% of all the energy in the world. Significantly more hydropower capacity is planned to be developed. However, hydro-structures, including powered dams, may have adverse biological effects on fishes, especially on migrating fish. For instance, fish can be injured or even killed when they pass through turbines. This is why biological evaluations on hydro-structures are greatly needed to estimate fish injury and mortality rates. The Hydropower Biological Evaluation Toolset (HBET) is an integrated suite of science-based desktop tools designed to evaluate whether the hydraulic conditions of hydropower structures are fish friendly by analyzing collected data and providing estimated injury and mortality rates. Sensor Fish, a small, autonomous sensor package, is used by HBET to record data describing the conditions that live fish passing through a hydropower structure will face. In this paper, we incorporated cloud computing into HBET, and migrated it into a cloud-based decision support system framework for hydropower biological evaluation. This will make the evaluation systems more scalable and flexible; however, this also introduces a significant challenge: how to maintain the security while retaining scalability and flexibility. We discuss the technical methodologies and algorithms implemented in the proposed framework, and analyze the countermeasures implemented therein.

Decision Support System, Hydropower, Dam, Fish Inj↗
DOE OSTI2026

Work With Us to Advance Cybersecurity for the Current and Future Grid

The energy sector is undergoing rapid change. Advanced technologies and controls, digitally connected devices, and a mix of generation sources offer increased energy reliability and security, reduced energy costs, and enhanced grid operations. But they can also carry physical and cybersecurity risks that are not yet fully understood. With deep expertise in advanced energy technologies, the National Laboratory of the Rockies is examining the cybersecurity implications of evolving systems and developing cutting-edge tools, novel approaches, and innovative research capabilities to address sector-wide challenges. Together with our partners, we are working to achieve a more secure, defensible, and reliable grid.

29 ENERGY PLANNING, POLICY, AND ECONOMY↗
NASA NTRS1932

Meteorological conditions during the formation of ice on aircraft

These are the results of a number of records recently secured from autographic meteorological instruments mounted on airplanes at times when ice formed. Ice is found to collect on an airplane only when the airplane is in some form of visible moisture, such as cloud, fog, mist, rain. etc., and the air temperature is within certain critical limits. Described here are the characteristics of clear ice and rime ice and the specific types of hazards they present to airplanes and lighter than air vehicles. The weather records are classified according to the two general types of formation (clear ice and rime) together with the respective temperatures, relative humidities, clouds, and elevations above ground at which formations occurred. This classification includes 108 cases where rime formed, 43 cases in which clear ice formed, and 4 cases when both rime and clear ice formed during the same flight. It is evident from the above figures that there was a preponderance of rime by the ratio of 2.5 to 1, while in only a few cases both types of ice formation occurred during the same flight.

Samuels, L T↗
NASA NTRSDate not supplied

DRF: A Software Architecture for a Data Marketplace to Support Advanced Air Mobility

Advanced Air Mobility is a new aviation vision, where unmanned aerial systems will trans- port passengers and cargo across urban and rural areas. Critical to the realization of this vision is the development of a digital marketplace, which allows service providers and consumers operating in the airspace ecosystem to securely exchange data and reasoning insights. In this paper, we present the architecture of a decentralized data marketplace that connects data and reasoning service providers to vehicles and other service consumers along the cloud-to-edge continuum. We also present two example use cases to demonstrate the value of our approach.

Autonomy↗
DOE OSTI2022

A Fast VANET-Assisted Scheme for Event Data Recorders

An event data recorder (EDR) is a device installed in a vehicle to record information. Similar to a black box in an airplane, an EDR is used in the study of automobile accidents. Many schemes have been proposed that use vehicle network technology to help record EDR data, including schemes involving storing data on roadside units or nearby vehicles and schemes leveraging blockchain technology. However, these schemes do not take into account the vehicle company’s server; with the increased use of autonomous vehicles, the data related to these vehicles are always uploaded to the vehicle company’s server. In this scenario, we classify the situation into different cases, according to whether or not it is an emergency and whether the vehicle and the server are connected. For these cases, we propose a scheme whereby a vehicle uploads the EDR data to a cloud server and sends the evidence of storage to the nearby vehicle through a vehicular ad hoc network. Our scheme offers a fast response due to the use of symmetric cryptography algorithms while also considering security requirements.

Liu, Wei↗