Results for “security assessment” — Page 8

DOE OSTI2022

Development of a leading simulator/trailing simulator methodology as part of an integrated safety-security analysis for nuclear power plants

Nuclear power plant (NPP) risk assessment is broadly separated into disciplines of nuclear safety, security, and safeguards. Different analysis methods and computer models have been constructed to analyze each of these as separate disciplines. However, due to the complexity of NPP systems, there are risks that can span all these disciplines and require consideration of safety-security (2S) interactions which allows a more complete understanding of the relationship among these risks. In this work, a novel leading simulator/trailing simulator (LS/TS) method is introduced to integrate multiple generic safety and security computer models into a single, holistic 2S analysis. A case study is performed using this novel method to determine its effectiveness. The case study shows that the LS/TS method avoided introducing errors in simulation, compared to the same scenario performed without the LS/TS method. A second case study is then used to illustrate an integrated 2S analysis which shows that different levels of damage to vital equipment from sabotage at a NPP can affect accident evolution by several hours.

42 ENGINEERING↗

DOE OSTI2026

Smart Inverters, Dumb Risk: Taking Control of IBR Security in the Digital Age

This presentation addresses the security challenges posed by Inverter-Based Resources (IBRs) in the modern energy landscape. The presentation highlights the vulnerabilities and risks associated with IBRs, including the potential for cyber-attacks, the impact of insecure defaults, and the systemic risks posed by supply chain dependencies. Key topics covered include: 1) The increasing digital transformation in energy systems and the associated security risks. 2) Specific vulnerabilities in IBRs, including weak passwords, hardcoded credentials, and insecure web application interfaces. 3) The implications of persistent connectivity and the strategic risks posed by foreign-manufactured components. 4) The role of regulatory frameworks, such as NERC CIP, in addressing these challenges and the limitations of current oversight. 5) Practical solutions for mitigating risks, including secure design practices, vendor risk assessments, and the importance of strong passwords and role-based access control. The presentation underscores the necessity of a comprehensive, system-of-systems approach to securing IBRs, emphasizing the need for collaboration across various stakeholders, including operators, developers, and regulators, to ensure the resilience and security of the energy grid.

24 - POWER TRANSMISSION AND DISTRIBUTION↗

DOE OSTI2022

Water Electrolyzers and Fuel Cells Supply Chain: Supply Chain Deep Dive Assessment

The report “America’s Strategy to Secure the Supply Chain for a Robust Clean Energy Transition” lays out the challenges and opportunities faced by the United States in the energy supply chain as well as the federal government plans to address these challenges and opportunities. It is accompanied by several issue-specific deep dive assessments, including this one, in response to Executive Order 14017 “America’s Supply Chains,” which directs the Secretary of Energy to submit a report on supply chains for the energy sector industrial base. The Executive Order is helping the federal government to build more secure and diverse U.S. supply chains, including energy supply chains. This report is one of a series that supports the analysis of the energy industrial base called for in Executive Order 14017 on America’s supply chains (Exec. Order No. 14017, 2021). Specifically, it provides a review of the supply chain for water electrolyzers and fuel cells with a focus on polymer electrolyte membrane electrolyzer cells (PEMEC), polymer electrolyte membrane fuel cells (PEMFC), solid oxide electrolyzer cells (SOEC), and solid oxide fuel cells (SOFC). Water electrolysis and fuel cells are a nascent industry with little prior information related to supply chain needs and constraints. This report provides a preliminary assessment; further industry peer review and revisions are expected.

08 HYDROGEN↗

DOE OSTI2021

UNREVIEWED DISPOSAL QUESTION EVALUATION: Disposal of the TRU Waste Processing Center Mixed Low Level Waste at the Area 5 Radioactive Waste Management Site, Nevada National Security Site, Nye County, Nevada

This Unreviewed Disposal Question Evaluation (UDQE) assesses whether the U.S. Department of Energy (DOE), National Nuclear Security Administration (NNSA) Transuranic (TRU) Waste Processing Center Mixed Low Level Waste (MLLW), FWORCHMLLW103, Revision 13 [TWPC 2021]), is suitable for shallow land burial (SLB) at the Area 5 Radioactive Waste Management Site (RWMS) on the Nevada National Security Site (NNSS). Disposal of the TRU Waste Processing Center MLLW meets all performance objectives of DOE Manual DOE M 435.1-1, Radioactive Waste Management Manual, Chapter IV, Section P (DOE 1999). The TRU Waste Processing Center MLLW waste stream is recommended for acceptance without conditions.

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗

DOE OSTI2022

Grid Energy Storage: Supply Chain Deep Dive Assessment

The report “America’s Strategy to Secure the Supply Chain for a Robust Clean Energy Transition” lays out the challenges and opportunities faced by the United States in the energy supply chain as well as the Federal Government plans to address these challenges and opportunities. It is accompanied by several issue-specific deep dive assessments, including this one, in response to Executive Order 14017 “America’s Supply Chains,” which directs the Secretary of Energy to submit a report on supply chains for the energy sector industrial base. The Executive Order is helping the Federal Government to build more secure and diverse U.S. supply chains, including energy supply chains. To combat the climate crisis and avoid the most severe impacts of climate change, the U.S. is committed to achieving a 50 to 52 percent reduction from 2005 levels in economy-wide net greenhouse gas pollution by 2030, creating a carbon pollution-free power sector by 2035, and achieving net zero emissions economy-wide by no later than 2050. The U.S. Department of Energy (DOE) recognizes that a secure, resilient supply chain will be critical in harnessing emissions outcomes and capturing the economic opportunity inherent in the energy sector transition. Potential vulnerabilities and risks to the energy sector industrial base must be addressed throughout every stage of this transition. The DOE energy supply chain strategy report summarizes the key elements of the energy supply chain as well as the strategies the U.S. Government is starting to employ to address them. Additionally, it describes recommendations for Congressional action. DOE has identified technologies and crosscutting topics for analysis in the one-year time frame set by the Executive Order. Along with the capstone policy report, DOE is releasing 11 deep dive assessment documents, including this one, covering the following technology sectors: carbon capture materials; electric grid including transformers and high voltage direct current (HVDC); energy storage; fuel cells and electrolyzers; hydropower including pumped storage hydropower (PSH); neodymium magnets; nuclear energy; platinum group metals and other catalysts; semiconductors; solar photovoltaics (PV); and wind. DOE is also releasing two deep dive assessments on the following crosscutting topics: Commercialization and competitiveness; and cybersecurity and digital components. More information can be found at www.energy.gov/policy/supplychains.

25 ENERGY STORAGE↗

DOE OSTI2021

Airport Risk Assessment Model Stakeholder Symposium Event Report

On June 22-23, 2021, the Pacific Northwest National Laboratory hosted a two-day virtual stakeholder symposium to share how the Airport Risk Assessment Model (ARAM) is putting security resource allocation planning into the hands of our airport’s front lines of defense. This report highlights the key takeaways from the discussions.

42 ENGINEERING↗

DOE OSTI2022

Hydropower: Supply Chain Deep Dive Assessment

The report “America’s Strategy to Secure the Supply Chain for a Robust Clean Energy Transition” lays out the challenges and opportunities faced by the United States in the energy supply chain as well as the federal government plans to address these challenges and opportunities. It is accompanied by several issue-specific deep dive assessments, including this one, in response to Executive Order 14017 “America’s Supply Chains,” which directs the Secretary of Energy to submit a report on supply chains for the energy sector industrial base. The Executive Order is helping the federal government to build more secure and diverse U.S. supply chains, including energy supply chains. Hydropower is a vital component of the U.S. Energy Sector Industrial Base. The United States has mature conventional hydropower and pumped storage hydropower (PSH) fleets with corresponding mature supply chains. Given the slow pace of new construction over the past few decades, the U.S. hydropower industry primarily supports the existing domestic fleets—the U.S. conventional hydropower fleet (80.3 GW) is the 4 th largest in the world and the U.S. PSH fleet (21.8 GW) is the third largest in the world. Additionally, U.S. hydropower manufacturing facilities export part of their output. This report examines the hydropower supply chain to identify potential bottlenecks, challenges, and opportunities, particularly if the U.S. demand for hydropower components grows significantly to meet decarbonization targets.

13 HYDRO ENERGY↗

DOE OSTI2022

Rare Earth Permanent Magnets: Supply Chain Deep Dive Assessment

The report “America’s Strategy to Secure the Supply Chain for a Robust Clean Energy Transition” lays out the challenges and opportunities faced by the United States in the energy supply chain as well as the federal government plans to address these challenges and opportunities. It is accompanied by several issue-specific deep dive assessments, including this one, in response to Executive Order 14017 “America’s Supply Chains,” which directs the Secretary of Energy to submit a report on supply chains for the energy sector industrial base. The Executive Order is helping the federal government to build more secure and diverse U.S. supply chains, including energy supply chains. This report focuses on the supply chain for rare earth permanent magnets, specifically sintered neodymiumiron-boron (NdFeB) magnets, used in clean energy technologies. Sintered NdFeB magnets are the strongest magnets commercially available and provide a host of benefits to wide-ranging applications in consumer and industrial electronics, especially in advanced motor and drive systems. Within the Energy Sector Industrial Base, and clean energy in particular, NdFeB magnets are key intermediate components of permanent magnet synchronous (direct drive) generators in wind turbines (especially for offshore turbines) and electric synchronous traction motors for propulsion systems in battery and hybrid electric vehicles.

29 ENERGY PLANNING, POLICY, AND ECONOMY↗

DOE OSTI2022

Nuclear Energy: Supply Chain Deep Dive Assessment

The report “America’s Strategy to Secure the Supply Chain for a Robust Clean Energy Transition” lays out the challenges and opportunities faced by the United States in the energy supply chain as well as the federal government plans to address these challenges and opportunities. It is accompanied by several issue-specific deep dive assessments, including this one, in response to Executive Order 14017 “America’s Supply Chains,” which directs the Secretary of Energy to submit a report on supply chains for the energy sector industrial base. The Executive Order is helping the federal government to build more secure and diverse U.S. supply chains, including energy supply chains. This report responds to Executive Order 14017 by describing the current and potential future roles for nuclear energy in the United States and abroad, the various segments of the nuclear energy supply chain, and the main risks facing the sector. Some issues, such as uranium imports, relate both to existing nuclear reactors and advanced reactors under development, while other issues, such as production of high-assay low-enriched uranium, relate primarily to plans for advanced reactors.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

DOE OSTI2022

Platinum Group Metal Catalysts: Supply Chain Deep Dive Assessment

The report “America’s Strategy to Secure the Supply Chain for a Robust Clean Energy Transition” lays out the challenges and opportunities faced by the United States in the energy supply chain as well as the federal government plans to address these challenges and opportunities. It is accompanied by several issue-specific deep dive assessments, including this one, in response to Executive Order 14017 “America’s Supply Chains,” which directs the Secretary of Energy to submit a report on supply chains for the energy sector industrial base. The Executive Order is helping the federal government to build more secure and diverse U.S. supply chains, including energy supply chains. This report focuses on the supply chain for catalysts, specifically platinum group metal (PGM) catalysts, used for decarbonizing energy technologies. Catalysts are substances that increase the rate, conversion, and selectivity of chemical reactions and are used in a variety of applications such as chemical manufacturing, petroleum refining, and catalytic converters. Catalysts containing PGMs (“PGM catalysts”) are particularly useful in widespread industrial applications, including the production of high-volume chemicals such as ammonia, acetic acid, nitric acid, and the refining of crude oil into petroleum products. The PGM metals possess extraordinary properties such as being active oxidation and hydrogenation catalysts; excellent electrical conductors and electrodes; and outstanding adsorbers of oxygen and hydrogen. Within the energy industrial base, PGM catalysts improve the energy and materials efficiency of petroleum refining and chemical industry processes and reduce energy consumption in manufacturing. In addition to their use in catalytic converters, PGM catalysts are important to maximizing the efficiency of emerging decarbonization technologies, specifically in proton exchange membrane (PEM) electrolyzers for green hydrogen production from water and PEM fuel cells for transportation and stationary energy storage. Green hydrogen is expected to play a significant role in decarbonization scenarios.

29 ENERGY PLANNING, POLICY, AND ECONOMY↗

DOE OSTI2022

Wind Energy: Supply Chain Deep Dive Assessment

The report “America’s Strategy to Secure the Supply Chain for a Robust Clean Energy Transition” lays out the challenges and opportunities faced by the United States in the energy supply chain as well as the federal government plans to address these challenges and opportunities. It is accompanied by several issue-specific deep dive assessments, including this one, in response to Executive Order 14017 “America’s Supply Chains,” which directs the Secretary of Energy to submit a report on supply chains for the energy sector industrial base. The Executive Order is helping the federal government to build more secure and diverse U.S. supply chains, including energy supply chains. To inform the DOE team’s supply chain review, researchers at the National Renewable Energy Laboratory (NREL) conducted research and analyses that characterize supply chain strengths, weaknesses, opportunities, and threats within the wind industry, including both land-based and offshore wind. The team also conducted interviews with industry stakeholders and subject matter experts. This report documents these findings and provides a foundation for addressing the observed vulnerabilities and enhancing U.S. wind supply chain competitiveness.

17 WIND ENERGY↗

DOE OSTI2022

Competitiveness and Commercialization of Energy Technologies: Supply Chain Deep Dive Assessment

The report “America’s Strategy to Secure the Supply Chain for a Robust Clean Energy Transition” lays out the challenges and opportunities faced by the United States in the energy supply chain as well as the federal government plans to address these challenges and opportunities. It is accompanied by several issue-specific deep dive assessments, including this one, in response to Executive Order 14017 “America’s Supply Chains,” which directs the Secretary of Energy to submit a report on supply chains for the energy sector industrial base. The Executive Order is helping the federal government to build more secure and diverse U.S. supply chains, including energy supply chains. Competitive U.S.-based clean energy manufacturers and rapid commercialization of U.S.-developed technologies are critical to secure energy supply chains, generate high quality jobs, and meet the United States’ national security, energy and climate objectives. The February 2021 “Executive Order on America’s Supply Chains” (E.O. 14017) directs the U.S. Department of Energy (DOE) to evaluate supply chains that encompass the energy industrial base, focusing on technologies that are critical to meet U.S. decarbonization goals by 2050. Understanding and analyzing the end-to-end supply chain through economic analysis is crucial to mitigating risks and identifying opportunities to enhance U.S. competitiveness in the clean energy industry. This insight will allow the Department of Energy (DOE) to leverage its research, development, demonstration and deployment (RDD&D) capabilities to most fully realize the objectives of E.O. 14017.

29 ENERGY PLANNING, POLICY, AND ECONOMY↗

DOE OSTI2022

Cybersecurity and Digital Components: Supply Chain Deep Dive Assessment

The report “America’s Strategy to Secure the Supply Chain for a Robust Clean Energy Transition” lays out the challenges and opportunities faced by the United States in the energy supply chain as well as the federal government plans to address these challenges and opportunities. It is accompanied by several issue-specific deep dive assessments, including this one, in response to Executive Order 14017 “America’s Supply Chains,” which directs the Secretary of Energy to submit a report on supply chains for the energy sector industrial base. The Executive Order is helping the federal government to build more secure and diverse U.S. supply chains, including energy supply chains. As the energy sector has become more globalized and increasingly complex, digitized, and even virtualized, its supply chain risk for digital components – the software, virtual platforms and services, and data – in energy systems has evolved and expanded. All digital components in U.S. energy sector systems are vulnerable and may be subject to cyber supply cha in risks stemming from a variety of threats, vulnerabilities, and impacts. This includes digital components in all systems within the ESIB, namely those systems operated by asset owners across different energy subsectors (e.g., electricity, oil and natural gas, and renewables) and the systems operated by a worldwide industrial complex with capabilities to perform research and development and design, produce, operate, and maintain energy sector systems, subsystems, components, or parts to meet U.S. energy requirements. Supply chain risks for digital components including software, virtual platforms and services, and data have grown in recent years as increasingly sophisticated cyber adversaries have targeted exploiting vulnerabilities in these digital assets. Supply chain risks for digital components in energy sector systems will continue to evolve and likely increase as these systems are increasingly interconnected, digitized, and remotely operated.

29 ENERGY PLANNING, POLICY, AND ECONOMY↗

DOE OSTI2026

Assessing Energy Infrastructure Devices for Vulnerabilities

Industrial control systems prove to be vital to the health and security of the nation in our critical infrastructure. Critical infrastructure includes the most foundational systems to support modern civilization which includes water and wastewater systems, communications, and the electricity we use to name a few sectors. However, these devices' overall composition remains largely unknown and are untested from a cyber security perspective. As part of the Cyber Testing for Resilient Industrial Control Systems (CyTRICS) program, I analyzed one such energy infrastructure device to better understand how it functions, what hardware and software components are present within it, and assess it for security vulnerabilities. To achieve this, I reverse engineered binary files using Ghidra to understand system functionality and learned more about how to collaborate with other researchers on a shared Ghidra project. I learned more about how web sockets function and how to interact with them through Python to test if they are secure or not. This work led me to assess possible vulnerabilities in this device and provide a better understanding of its composition and function, which are essential to INL's mission of securing our nation's energy infrastructure.

99 - GENERAL AND MISCELLANEOUS↗

DOE OSTI2023

Opportunities and Challenges for Remote Microreactor Operations

The nuclear industry is developing new advanced reactor technologies, and many companies are embracing this advancement by pursuing the development of microreactors. The term microreactor generally refers to a nuclear reactor with an operating power of 20 MW or less. The power range of microreactors makes them appealing for many use cases, such as powering remote communities, mining sites, and military bases. Most of the microreactor designs being pursued will incorporate remote facility operations into the final product. However, no framework has yet been developed to determine what remote operations systems require for reliable, resilient, and secure operation of a microreactor. This work identifies the challenges unique to remote operations and monitoring for microreactors specifically regarding instrumentation and control, communication methods, regulatory requirements, and operational policies. The types of commands and sensor measurements that must be transmitted between the facilities as well as methods for verifying the trustworthiness of these signals are assessed. This work evaluates the security, reliability, and performance requirements that must be met when considering the selection of communication hardware and protocols for use in remote operations. Also, an assessment was performed to study how remote operations fit within current regulatory requirements and what may need to be updated in regulatory policy to allow for remote operation. Finally, the operational contingencies unique to remote operations that must be in place for response to abnormal events are identified. This paper details these challenges and research opportunities to provide a foundation for the design of remote operation systems.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

DOE OSTI2024

Opportunities, Challenges, and Research Needs for Remote Microreactor Operations

As the nuclear industry develops new advanced reactor technologies, many companies are embracing this advancement by pursuing the development of microreactors. The term microreactor generally refers to a nuclear reactor with an operating power of 20 MW(thermal) or less. The power range of microreactors makes them appealing for many use cases, such as powering remote communities, mining sites, and military bases. Most of the microreactor designs being pursued are expected to incorporate remote facility operations into the final product. However, no framework has yet been developed to determine what remote operations systems require for reliable, resilient, and secure operation of a microreactor. Here, this work identifies the research needs for challenges that are unique to remote operations and monitoring for microreactors, specifically regarding instrumentation and control, communication methods, regulatory requirements, and operational policies. The types of commands and sensor measurements that must be transmitted between the facilities, as well as methods for verifying the trustworthiness of these signals, are assessed. This work evaluates the security, reliability, and performance requirements that must be met when considering the selection of communication hardware and protocols for use in remote operations. Also, an assessment was performed to study how remote operations fit within current regulatory requirements and what may need to be updated in regulatory policy to allow for remote operation. Finally, the operational contingencies unique to remote operations that must be in place for responses to abnormal events are identified. This paper identifies the challenges and research opportunities within the areas of importance for the design of remote operation systems.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

DOE OSTI2021

Health Analysis and Research for Public Events (HARPE) Tool (Final CRADA Report)

Based on its experience in building assessment tools, Argonne National Laboratory (Argonne) has demonstrated expertise in developing comparative methodologies and question sets that provide both a physical and cyber-based risk assessment for the commercial facilities sector. A high-level risk assessment tool can be beneficial for venues and organizations that fall under a wide array of facility characterizations, ultimately accommodating the evolving landscape of threats specific to these facilities. The Health Analysis and Research for Public Events (HARPE) Tool is an assessment that seeks to help facility managers assess and mitigate aspects of safety, security, and emergency management within their venues. With the pandemic featuring prominently in today’s landscape, we have adapted and extended the scope of the HARPE tool so that it offers users the ability to integrate assessments of their preparation for, response to, and recovery from threats faced at the venue arising from the COVID-19 pandemic. Traditional threats and hazards remain prevalent in today’s landscape, and the best defense is a proactive approach to preventing and mitigating these threats. At the very core of prevention and mitigation is the first step of conducting a risk assessment—this is the gap that HARPE fills. While it is obvious that the response to COVID-19 is health and sanitation driven, leaders within the commercial facilities sector must also know where to best extend their efforts in mitigating future threats arising from the pandemic. Public events and mass gatherings are directly impacted by COVID-19; however, with the help of HARPE, leaders can focus their attention on core impact areas related to the safety and security of returning to a new normal, as they assess their risks using the Argonne-developed tool. HARPE provides an important solution to the COVID-19 situation by assisting venue managers and health officials in identifying their risks.

59 BASIC BIOLOGICAL SCIENCES↗

DOE OSTI2025

Cybersecurity Considerations for Hydrogen Infrastructure in Airport Environments

This report explores key cybersecurity concerns and best practices within environments that serve as reference points for the development of hydrogen fueling infrastructure for aviation. This cybersecurity analysis leverages prior NREL studies: 1) hydrogen fueling station component validation to identify vulnerabilities and failure events documented in physical equipment, and 2) electric aircraft charging infrastructure analysis to explore primary cybersecurity vulnerabilities. It reviews the criticality of digitized technologies in sustaining hydrogen fuel production, storage, and fueling systems, noting cybersecurity concerns that are universal to power systems and industrial control systems in general. In considering cybersecurity vulnerabilities within a future landscape of hydrogen energy for aviation applications, a reference architecture was intended to reveal the points of connection between assets and the potential sensors that are vulnerable to manipulation in the event of compromised access or communication within a SCADA system. A generalized reference architecture can help stakeholders, engineers, or strategists understand connections, criticalities, and standard practices when it comes to designing and planning for new systems. There are several gaps to account for in assessing the future of hydrogen production, storage, and fueling for aviation. Engaging stakeholders, including aircraft manufacturers, electric utilities, site property owners, and local communities, will inform decision-making around site structure, operations, and resources for future hydrogen fueling infrastructure to understand operational needs and cybersecurity awareness. Cybersecurity mitigation strategy must consider physical attack vectors that emerge with the integration of hydrogen systems into existing airport security requirements. The cybersecurity risk assessment contained in this report is an entry point into potential future granular-level analyses to be conducted as part of hazard and risk assessments for safe aviation hydrogen infrastructure, determining how the scale of hydrogen fuel infrastructure for aviation impacts the volume of cyber attack vectors, and what, if any, are the vulnerabilities associated with different types of on-board hydrogen systems. In this nascent development phase, assessing how best to integrate cybersecurity practices into an evolving U.S. aviation landscape provides critical insights into building increased awareness and stakeholder engagement to support a cyber-resilient infrastructure.

08 HYDROGEN↗