Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “security systems”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 145 records · Page 8
All sourcesNASA NTRSDOE OSTI
DOE OSTI2022

International Radiological/Nuclear Training for Emergency Response - Major Public Events Virtual Workshop: Major Public Events Overview and Nuclear Security Threats (Day 1) [Slides]

The International Radiological/Nuclear Training for Emergency Response - Major Public Event (IRAD-MPE) Virtual Workshop is an advanced training course designed to provide international partners with specialized training on best practices for conducting nuclear security planning and operations at a Major Public Event. This presentation will provide an overview of the following: (1) Historical perspective on past MPE events, (2) National strategy and integrated security operations, (3) Best practices for nuclear security operations, (4) Radiological/nuclear threats and common alarms, (5) Lessons Learned and Challenges, and (5) IAEA NSS-18 publication: Nuclear Security Systems and Measures for Major Public Events.

61 RADIATION PROTECTION AND DOSIMETRY↗
DOE OSTI2021

Characterizing Human Performance: Detecting Targets at High False Alarm Rates [Slides]

Analysts develop a “no threat” bias with high false alarms. If only shown alarms for actual attacks, may never actually see an alarm. We see this in the laboratory, but not often studied in applied environments. (TSA is an exception.) In this work, near-operational paradigms are useful, but difficult to construct well. Pilot testing is critical before engaging time-limited professionals. Experimental control is difficult to balance with operational realism. Grounding near-operational experiments in basic research paradigms has both advantages and disadvantages. Despite shortcomings in our second experiment, we now have a platform for experimental investigations into the human element of physical security systems.

45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗
DOE OSTI2021

Managing Army Plug Load Equipment Energy Use: Workstation Computing Systems

Improvements in computing system security updates and purchasing policies could save the Army as much as 85 million kWh and $5 million per year when applied to the Army’s more than one million computers. This represents the largest and highest-priority plug load energy-and cost-saving measure identified by a recent study focused on Army buildings.

32 ENERGY CONSERVATION, CONSUMPTION, AND UTILIZATI↗
DOE OSTI2024

Quantum Computing and Simulations for Energy Applications

While quantum computing (QC) is considered as a paradigm shift in our basic understanding of physical computation, effective implementation of QC in energy applications also depends on progress and development in the dimensions of both QC hardware and algorithms. To fully address the status and future challenges of QC applied within the energy sector, in this presentation, we firstly summarize recent advancements on the applications of QC to energy infrastructure and materials, complex energy system processes, advanced manufacturing, and energy system security. Then, we will demonstrate the results of QC performed both on a simulator and a quantum device targeting on energy-related applications.

Paudel, Hari P.↗
DOE OSTI2023

Active High Assurance Authentication Protocol (AHAAP)

The AHAAP Maturation Project involves maturation and evaluation of a patented zero-trust tamper-resistant high-assurance session-less dynamic and active device authentication protocol that simultaneously authenticates identity and provides integrity verification in a single step, substantially reducing the risk of cyberattack, and eliminating the need for costly and complex conventional communication security systems requirements (i.e., cryptography, Public Key Infrastructure (PKI), and key management). These cybersecurity attributes of the technology must be preserved when applying the technology to different cybersecurity solutions, including Command & Control (C&C), Over-the-Air (OTA) update, Common Access Card (CAC), and distributed energy resource (DER) implementations, among others. The technology research objective is to test and verify that the cybersecurity attributes of the technology are not degraded in different cybersecurity applications. The primary technology development objective is to build minimum viable products to demonstrate the technology addresses today’s cybersecurity threats so that prospective investors, strategic partners, regulatory agencies, and commercial customers can interact with and assess the protection assured by the technology. The AHAAP Maturation Project goal is to develop, test, and validate one or more AHAAP implementations. The AHAAP Maturation Project tasks are: (i) engineer AHAAP implementation software, (ii) build a functional prototype that implements the AHAAP software for demonstration, testing, analysis, and evaluation purposes, and (iii) generate a report detailing the results of the AHAAP C&C software and hardware implementation. The final project deliverables are: (i) AHAAP software implementation and prototype, (ii) a report from Sandia National Laboratories detailing the results of the AHAAP implementations.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2025

Building Cybersecurity Educational Materials for Students: The Windfarm Capture-The-Flag Exercise

Securing and protecting critical infrastructure in an increasingly digital world is vital but it is all too often an afterthought. It is especially important that students become aware of internet safety and security at an early age. However, the availability of interactive and educational cybersecurity material targeted toward students is minimal in the United States. Here we show an example of interactive cyber security educational material that an educator can use in their classroom to encourage students to think about the interaction between real-world physical objects, cyber security, and information security. By putting together a “capture-the-flag” exercise, students can see in real time how hackers and cybercriminals exploit vulnerabilities and gain access information. The students try to “capture” the “flag” (i.e., information) in the wind farm by looking for oddities in the code or by taking advantage of weaknesses in everyday protocols. Students can also see how cybersecurity interacts with the power grid through the wind farm project scenario and how a hacker could cause serious problems to a critical infrastructure sector. Our goal for the project is getting students interested in cybersecurity and help them develop an awareness of how important having robust security systems is. We also hope that this project demonstrates the importance of introducing these concepts early and inspires others to create similar projects geared toward students.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2022

Detecting the Presence of Intrusive Drilling in Secure Transport Containers Using Non-Contact Millimeter-Wave Radar

We employ a 77–81 GHz frequency-modulated continuous-wave (FMCW) millimeter-wave radar to sense anomalous vibrations during vehicle transport at highway speeds for the first time. Secure metallic containers can be breached during transport by means of drilling into their sidewalls but detecting a drilling signature is difficult because the large vibrations of transport drown out the small vibrations of drilling. For the first time, we demonstrate that it is possible to use a non-contact millimeter-wave radar sensor to detect this micron-scale intrusive drilling while highway-speed vehicle movement shakes the container. With the millimeter-wave radar monitoring the microdoppler signature of the container’s vibrating walls, we create a novel signal-processing pipeline consisting of range–angle tracking, time–frequency analysis, horizontal stripe image convolution, and principal component analysis to create a robust and powerful detection statistic to alarm if drilling is present. To support this pipeline, we develop a statistical model combining the vibrating container and the random vibrations induced by vehicle movement to explore the robustness of the sensor’s detection capabilities. The presented results strongly support the inclusion of a millimeter-wave radar vibration sensor into a transport security system.

Wagner, Samuel↗
DOE OSTI2021

Companion Assisted Software Based Remote Attestation in SCADA Networks

Critical infrastructure such as power generation and water distribution systems have become a priority target in cyber warfare because of their recent computerization and introduction to the internet. As a result, Supervisory Control and Data Acquisition (SCADA) system security has become a hot topic in academic and industrial research. Among these topics, Remote Attestation is a security method intended to detect the presence of fileless malware in remote devices as they continue to operate. This allows for the detection of malware in the absence of long-term storage artifacts before symptoms of compromise begin to appear. In general, a trusted device (the verifier) makes a request for evidence of innocence from the untrusted device (the prover). In software-based schemes, the verifier can then measure the delay between its request and the prover’s response. If this delay is greater than the known computational time of the evidence gathering algorithm performed by the prover, then evidence may have been forged. Multi-hop networks often introduce too much network jitter to allow accurate measurement of prover response time, which limits the effectiveness of software based Remote Attestation in a real-world setting. In this work, we introduce a companion device that the verifier can trust to perform a subset of attestation, thereby removing any network jitter. This device is a Field Programmable Gate Array (FPGA) that is physically connected to the prover. We provide a communication protocol between the verifier, prover, and companion. To evaluate our scheme, we simulate it in a common SCADA network environment under normal and heavy traffic loads. Our simulations are performed in the discrete event network simulator NS-3, and we perform statistical analysis over our results to show that our scheme allows for tight timing constraints to be placed on the prover such that the verifier can more easily determine the validity of the evidence that it receives.

Johnson, William A.↗
DOE OSTI2022

The NREL Cyber Range

With the National Renewable Energy Laboratory's (NREL's) cyber range, researchers can replicate cybersecurity scenarios as they would occur on real, complex energy systems. With supercomputing and advanced emulation capabilities, the cyber range allows users to build digital twins of real systems and connect the emulated environment to actual physical devices throughout NREL's laboratories. The space offers unlimited potential to test the frontier of energy systems security.

cyber range↗
DOE OSTI2024

Healthcare Cybersecurity

Updated healthcare cybersecurity with a focus in patient data security, system interoperability, and medical device vulnerability mitigation

99 GENERAL AND MISCELLANEOUS↗
DOE OSTI2024

Network visualization, intrusion detection, and network healing

The present disclosure is related to a cyber-security system that includes a Supervisory Control and Data Acquisition (SCADA) network monitor configured to receive a data set from a power system network, an event manager, and a mitigation system, where the SCADA network monitor includes an anomaly detector.

Rivera, Joshua Eli↗
DOE OSTI2023

Lifecycle Management of Nuclear Security Radiation Detection Systems: Testing and Evaluation

The lifecycle of radiation detection systems functioning within a State’s Nuclear Security Detection Architecture encompasses all activities associated with acquisition, deployment, and eventual disposal. Throughout a system’s lifecycle, testing and evaluation activities are needed to ensure requirements are continually met, as underscored by recent experiences.This paper provides:1.A discussion of reasons why testing should be part of the radiation detection equipment lifecycle before, during, and after acquisition.2.A general process for determining applicable evaluation methods.3.A discussion of issues related to integrating testing and evaluation into procurement and operational processes and mitigation strategies.

Harris, Tyrone↗
DOE OSTI2020

Hypergames and Cyber-Physical Security for Control Systems

The identification of the Stuxnet worm in 2010 provided a highly publicized example of a cyber attack that physically damaged an industrial control system. This raised public awareness about the possibility of similar attacks against other industrial targets—including critical infrastructure. Here, we use hypergames to analyze how strategic perturbations of sensor readings and calibrated parameters can be used to manipulate a system that employs optimal control. Hypergames form an extension of game theory that enables us to model strategic interactions where the players may have significantly different perceptions of the game(s) they are playing. Past work with hypergames has focused on relatively simple interactions consisting of a small set of discrete choices for each player. Here, we apply single-stage hypergames to larger systems with continuous variables. We find that manipulating constraints can be a more effective attacker strategy than manipulating objective function parameters. Moreover, the attacker need not change the underlying system to carry out a successful attack—it may be sufficient to deceive the defender controlling the system. It is possible to scale our approach up to even larger systems, but this will depend on the characteristics of the system in question, and we identify several characteristics that will make those systems amenable to hypergame analysis.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2023

Our teams design high-resolution MeV x-ray radiography systems for National security missions [Poster]

The NNSS has been at the forefront of custom high-fidelity x-ray/gamma radiographic imaging solutions that serve our national security for over five decades. Our radiography team utilizes expertise in physics modeling and analysis, along with optical, mechanical, and electrical design, in close collaboration with our customers, to develop imaging methods and capabilities that go beyond their needs. Conceptual designs are developed through R&D efforts to provide solutions for the specific problem at hand. Field systems are designed and built in-house, then qualified utilizing a range of facilities across the National Security Enterprise. Radiographic imaging systems are deployed by our team in the most challenging environments. The NNSS has a strong math and programming team that provides novel on-site image analysis methods that extract crucial information from data returned in field tests.

46 INSTRUMENTATION RELATED TO NUCLEAR SCIENCE AND ↗
DOE OSTI2025

Dynamic security assessment of systems powered only by grid-forming power plants with uncertain dispatch using polynomial vectors

A modern challenge in power engineering is to perform the dynamic security assessment (DSA) of grids that are 100% powered by inverter-based resources (IBRs). Addressing this challenge is difficult because: (i) the dispatch of IBRs can be uncertain as a result of the variability of renewable resources and (ii) they have hard current control limits that cannot be neglected, contrasting synchronous machines. To address this problem, this paper sets forth a framework to conduct DSA of bulk power systems that are 100% powered by grid-forming IBRs. Furthermore, the framework considers that IBR operational conditions are unknown but bounded by a zonotope which is also expressed as a polynomial vector for uncertainty propagation via Dormand–Prince integration. The framework is applied to modified versions of the WSCC 9-bus and IEEE 39-bus grids.

14 SOLAR ENERGY↗
DOE OSTI2020

Intel® DOE Grid Security Enhancement Security in Power System Edge. Final Technical Report

Intel® and its partners, Schneider Electric and LiveData Utilities, were tasked by Department of Energy to explore solutions in two areas of grid security. One, secure the existing communication network and the legacy devices with minimal disruption to the infrastructure, and second, to develop capabilities in semiconductor chips such that they come with built-in security to order to provide secure communication and protection from cyberattacks with minimal effort from operation technology (OT) application developers.

24 POWER TRANSMISSION AND DISTRIBUTION↗
DOE OSTI2023

Quantification of storage required for preserving frequency security in wind‐integrated systems

Abstract The penetration of wind power generation into the power grid has been accelerated in recent times due to the aggressive emission targets set by governments and other regulatory authorities. Although wind power has the advantage of being environment‐friendly, wind as a resource is intermittent in nature. In addition, wind power contributes little inertia to the system as most wind turbines are connected to the grid via power electronic converters. These negative aspects of wind power pose serious challenges to the frequency security of power systems as penetration increases. In this work, an approach is proposed where an energy storage system (ESS) is used to mitigate frequency security issues of wind‐integrated systems. ESSs are well equipped to supply virtual inertia to the grid due to their fast‐acting nature, thus replenishing some of the energy storage capability of displaced inertial generation. In this work, a probabilistic approach is proposed to estimate the amount of inertia required by a system to ensure frequency security. Reduction in total system inertia due to the displacement of conventional synchronous generation by wind power generation is considered in this approach, while also taking into account the loss of inertia due to forced outages of conventional units. Monte Carlo simulation is employed for implementing the probabilistic estimation of system inertia. An ESS is then sized appropriately, using the system swing equation, to compensate for the lost inertia. The uncertainty associated with wind energy is modeled into the framework using an autoregressive moving average technique. Effects of increasing the system peak load and changing the wind profile on the expected system inertia are studied to illustrate various factors that might affect system frequency security. The proposed method is validated using the IEEE 39‐bus test system.

17 WIND ENERGY↗