Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “operating systems security”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 1,441 records · Page 80

Using simulators to assess knowledge and behavior of “novice” operators of critical infrastructure under cyberattack events

—The transition from the traditional power grid to the smart grid improves reliability, performance, and management, while simultaneously increasing its susceptibility to cyberattacks. One of the biggest weaknesses in grid security is the human agent responsible for its maintenance and operations. As such, it is crucial to embed hands-on understanding of grid operations and security, especially for students in the Electrical and Computer Engineering (ECE) fields. This paper presents a case study where ECE students from Temple University used an interactive microgrid simulator, "Grid Game", a program developed by Idaho National Laboratory. This case study offers insights into the ECE students’ understanding of key engineering principles (microgrid stability, generation control system, generator inertia, energy storage, and grid security) gained by using the simulator program. Furthermore, the human behavior (strategies to prepare for and respond to cyberattacks, and cooperation and conflict in decision-making) of defenders/ECE students as they experience cyberattacks are also discussed. The paper then offers some limitations and possible suggestions for future research.

24 POWER TRANSMISSION AND DISTRIBUTION↗

Radiabeam Industrial Accelerator Commissioning

Radiabeam is building an industrial accelerator funded by the Defense Nuclear Detection Office in the Department of Homeland Security. The accelerator is designed as a radiation source for systems intended to find Special Nuclear Materials or contraband in cargo containers. Fermilab staff will travel to Radiabeam to help in commissioning of the accelerator. This work would primarily be focused on optimization of beam dynamics. In doing this, Fermilab would gain valuable general information about industrial linac operation and commissioning. Fermilab will also gain specific information about this new accelerator in support of a planned larger collaboration with Radiabeam.

43 PARTICLE ACCELERATORS↗

Lifecycle Study of the Electronic Optical Sealing System (EOSS): Assessment of Technical Challenges and Needs

Action Sheet 1 between the United States Department of Energy (DOE) National Nuclear Security Administration (NNSA) and Forschungszentrum Julich (FZJ) for "Assessment of Lifecycle Challenges for the Electronic Optical Sealing System (EOSS)" explores the lifecycle challenges of the EOSS and identifies a strategy for the further management of the EOSS within the context of Germany's safeguards implementation. Specifically, the assessment explores lifecycle challenges for use of the seal during reactor operation, shutdown and removal of spent fuel, and the decommissioning process in Germany, identifying possible upgrades to the seal, and providing recommendations to the International Atomic Energy Agency (IAEA) and the European Atomic Energy Community (Euratom) on what should be done to ensure the reliability and usability of the EOSS over the next decade.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

Herbaceous Feedstock 2020 (State of Technology Report)

The Energy Independence and Security Act (EISA) of 2007 required a minimum supply of 36 million gallons of renewable fuels per year by 2022. In order to achieve these goals, the Bioenergy Technologies Office (BETO) has set cost and technology targets for producing advanced and cellulosic biofuels. One of the targets is to validate feedstock supply infrastructures and systems with 90% overall operating effectiveness and field-to-reactor throat delivered cost less than $85.51/dry ton (2016). As stated by the 2017 Multi-Year Program Plan (DOE 2017), the research and development focus of the Feedstock Technologies (FT) platform is reducing the cost, improving the supply chain logistic efficiency, improving biomass quality, and increasing the supply volume. In addition, BETO oversees annual State of Technology (SOT) report that assesses current technologies that are relevant to BETO’s targets based on actual data and experimental results. Feedstocks are essential to achieving BETO goals because the cost, quality, and quantity of feedstock available and accessible at any given time limit the maximum volume of biofuels that can be produced. In accordance with the 2016 Multi-Year Program Plan (DOE 2016a), FT focuses on (1) reducing the delivered cost of sustainably produced biomass, (2) preserving and improving the physical and chemical quality parameters of harvested biomass to meet the individual needs of biorefineries and other biomass users, and (3) expanding the quantity of feedstock materials accessible to the bioenergy industry. This is done by identifying, developing, demonstrating, and validating efficient and economical integrated systems for harvest and collection, storage, handling, transport, and preprocessing raw biomass from a variety of crops to reliably deliver the required supplies of high-quality, affordable feedstocks to biorefineries as the industry expands. The elements of cost, quality, and quantity are key considerations when developing advanced feedstock supply concepts and systems (DOE 2016a).

09 BIOMASS FUELS↗

Characterizing Plug Load Energy Use and Savings Potential in Army Buildings

The Assistant Secretary of the Army (Installations, Energy and Environment) tasked the Pacific Northwest National Laboratory to examine plug loads in typical Army buildings. Plug loads (also known as miscellaneous electric loads (MELs)) represent the electricity used by appliances and devices that are plugged in or hardwired and serve functions outside of a building’s core end uses. Common plug loads include computers, printers, copiers, networking devices, refrigerators, and vending machines. They also include personal electronic devices such as televisions, smart phones, tablets, and gaming systems. Examples of hardwired MELs include elevators, air compressors, and fire and security systems. The findings from this study confirm that significant energy is consumed within Army buildings by plug load devices and hardwired MEL equipment. A number of opportunities are identified for reducing unnecessary energy use that could save the Army over $5 million per year when broadly applied. Army regulations clearly spell out expectations for the purchase and operation of information technology equipment (computers, laptops, monitors, printers, and multi-function devices). However, the policies regarding the shutdown or activation of sleep and other lower power modes after 30 minutes of inactivity (15 minutes for monitors) do not appear to be consistently followed. There are many effective approaches and pathways for impacting change as it relates to improving awareness, implementing measures, and adjusting behaviors to identify and reduce plug load energy use. The Army should prioritize and consider deploying all of these to better understand and manage plug load equipment to save energy and enhance resilience across their facilities. Engaging the building occupants who use these devices daily via outreach and education should be a strong component of the strategy. The focus should be on reducing waste without sacrificing productivity or the benefits that many of these devices provide. Continued evaluation of plug loads beyond that performed here is important to gather lessons from additional building and equipment types, and to stay aware of evolving device technology and management options. This will highlight additional needs for policies, best practices, control technologies, and education of personnel to achieve real reductions in energy waste from plug load equipment. It is recommended that this study may serve as the foundation for a broader and sustained focus on plug loads and MELs, towards simultaneously enhancing the productivity, readiness, and resilience of the Army while reducing energy use and demand, and freeing up resources to better support the mission.

32 ENERGY CONSERVATION, CONSUMPTION, AND UTILIZATI↗

Cybersecurity Certification Requirements for Distributed Energy Resources: A Survey of SunSpec Alliance Standards

This survey paper explores the cybersecurity certification requirements defined by the SunSpec Alliance for Distributed Energy Resource (DER) devices, focusing on aspects such as software updates, device communications, authentication mechanisms, device security, logging, and test procedures. The SunSpec cybersecurity standards mandate support for remote and automated software updates, secure communication protocols, stringent authentication practices, and robust logging mechanisms to ensure operational integrity. Furthermore, the paper discusses the implementation of the SAE J3072 standard using the IEEE 2030.5 protocol, emphasizing the secure interactions between electric vehicle supply equipment (EVSE) and plug-in electric vehicles (PEVs) for functionalities like vehicle-to-grid (V2G) capabilities. This research also examines the SunSpec Modbus standard, which enhances the interoperability among DER system components, facilitating compliance with grid interconnection standards. This paper also analyzes the existing SunSpec Device Information Models, which standardize data exchange formats for DER systems across communication interfaces. Finally, this paper concludes with a detailed discussion of the energy storage cybersecurity specification and the blockchain cybersecurity requirements as proposed by SunSpec Alliance.

Tsikteris, Sean (ORCID:0009000524202250)↗

AAM NC ATI TechTalk - Aerograph Architecture v1

Aerograph is NASA’s data management system for Advanced Air Mobility. Its mission is to support AAM research by providing a reliable and secure system that collects, stores, protects, and shares AAM data. Its vision is to provide a system that AAM research scientists, aerospace engineers, data scientists, and analysts trust for obtaining NC data and performing key analyses. The types of data Aerograph manages involves data related to flight test events, including: Aircraft Performance and Characterization (e.g., position reports) Airspace (e.g., operation intent, waypoints, and constraints) Environment (e.g., surface and wind weather) Infrastructure (e.g., surveillance coverage) Derivative Analytical Artifacts (e.g., glide path performance chart, 3D position chart, Integrated Data Product)

Aerograph↗

Maximum-impact Adversary Design for Network-based Control System: A Case Study on Grid-interactive Efficient Buildings

The Internet of Things (IoT) technology has dramatically improved the efficiency of today's building operation and management. By connecting controllable devices into a communication network, control signals can be easily passed to the devices, and operating status can be acquired from measurable ends with minimal effort. However, this all-connected configuration could also expose the network-based control system (NBCS) to malicious actions, such as cyberattacks. One of the common NBCSs is the building automation system. With the promotion of grid-interactive efficient buildings (GEBs), there has been increasing attention on securing the buildings from the network perspective. This research proposes a maximum-impact adversary design framework so that the adversary can provide the most adversarial impact on the controlled system while remaining stealthy. The proposed framework is numerically demonstrated on a network-based building energy and control system. The building energy system is built in a Modelica-based simulation environment and controlled by the state-of-the-art ASHRAE Guideline 36 control sequences. The control commands at the supervisory level, generated from the Guideline 36 controller, are assumed to be sent to local devices through communication networks using the BACnet protocol. Simulation results show that the proposed maximum-impact adversary on such a system can stealthily affect the building system's performance to its maximum extent. It is anticipated that results can be used by researchers and practitioners in the building automation industry to design efficient and robust cyber-attack detection algorithms, especially for stealthy attacks.

Chu, Mengyuan↗

A Managed Tokens Service for Securely Keeping and Distributing Grid Tokens

Fermilab is transitioning authentication and authorization for grid operations to using bearer tokens based on the WLCG Common JWT (JSON Web Token) Profile. One of the functionalities that Fermilab experimenters rely on is the ability to automate batch job submission, which in turn depends on the ability to securely refresh and distribute the necessary credentials to experiment job submit points. Thus, with the transition to using tokens for grid operations, we needed to create a service that would obtain, refresh, and distribute tokens for experimenters' use. This service would avoid the need for experimenters to be experts in obtaining their own tokens and would better protect the most sensitive long-lived credentials. Further, the service needed to be widely scalable, as Fermilab hosts many experiments, each of which would need their own credentials. To address these issues, we created and deployed a Managed Tokens Service. The service is written in Go, taking advantage of that language's native concurrency primitives to easily be able to scale operations as we onboard experiments. The service uses as its first credentials a set of kerberos keytabs, stored on the same secure machine that the Managed Tokens service runs on. These kerberos credentials allow the service to use htgettoken via condor_vault_storer to store vault tokens in the HTCondor credential managers (credds) that run on the batch system scheduler machines (HTCondor schedds); as well as downloading a local, shorter-lived copy of the vault token. The kerberos credentials are then also used to distribute copies of the locally-stored vault tokens to experiment submit points.

46 INSTRUMENTATION RELATED TO NUCLEAR SCIENCE AND ↗

Cyber-Resilient Design Methodology for Microgrids

Recent advancement in tools has helped with microgrid design, development, planning and operation. Microgrids offer a unique application based on users with different requirements for tools. The process of designing, constructing, commissioning, and assessing a microgrid is not always straightforward due to these distinct requirements. Additionally, metrics are needed for performance evaluation. This panel will offer an overview and description of tools that helps with microgrid design, construction, planning, operation, cyber security, and metrics-driven performance assessment driven by multiple diverse applications and use cases.

CCE↗

Review of Authentication Strategies and Trends for Distributed Energy Resources (DERs)

In this study we review literature on machine to machine (M2M) authentication and encryption pertaining to communication with grid-attached power inverters. We regard security recommendations from NIST, constrained device recommendations from CoAP, as well as influences from the existing markets. We will not focus on passwordless or multifactor schemes of user authentication, the handover/roaming authentication of mobile systems, or the group authentication of WiMAX/LTE communications. The de-facto standards for authentication and encryption are certificate-based public key cryptography and AES, respectively. While certificate-based public key cryptography is widely adopted, certificate management is seen as an Achilles heel of public key infrastructure (PKI). State of the art authentication system research includes work on certificateless authentication; however, much work in the areas of privacy preservation, efficient or lightweight systems continue to be based in public key methods. We will see efforts such as bilinear pairing, aggregate message authentication codes, one-time signatures, and Merkle trees surface and resurface with improved authentication approaches. Though research continues to produce new encryption schemes, AES prevails as a viable choice, as it can be implemented across a variety of resource constrained devices. Other lightweight encryption algorithms often employ the same fundamental addition-rotation-xor operations as AES while achieving higher efficiency, but at steep tradeoffs to security. Despite mathematical proofs of the security of cryptographic algorithms, in practice the greatest weaknesses continue to be incurred during implementation. Security researchers will find edge cases and bugs that allow unintentional behavior. In the following sections, accepted methodologies of authentication and encryption are discussed. Due diligence for securing M2M communications requires consideration during planning, design, implementation and product lifetime, as opposed to a set-it and forget-it policy. Best practices can be gleaned from published successes and failures, with no single end-all, be-all detailed solution.

97 MATHEMATICS AND COMPUTING↗

OSIRIS-REx Asterod Sample Return Mission

OSIRIS-REx is NASA's third New Frontiers Program mission, following New Horizons that completed a flyby of Pluto in 2015 and the Juno mission to Jupiter that has just begun science operations. The OSIRIS-REx mission's primary objective is to collect pristine surface samples of a carbonaceous asteroid and return to Earth for analysis. Carbonaceous asteroids and comets are 'primitive' bodies that preserved remnants of the Solar System starting materials and through their study scientists can learn about the origin and the earliest evolution of the Solar System. The OSIRIS-REx spacecraft was successfully launched on September 8, 2016, beginning its seven year journey to asteroid 101955 Bennu. The robotic arm will collect 60-2000 grams of material from the surface of Bennu and will return to Earth in 2023 for worldwide distribution by the Astromaterials Curation Facility at NASA Johnson Space Center. The name OSIRIS-REx embodies the mission objectives (1) Origins: Return and analyze a sample of a carbonaceous asteroid, (2) Spectral Interpretation: Provide ground-truth for remote observation of asteroids, (3) Resource Identification: Determine the mineral and chemical makeup of a near-Earth asteroid (4) Security: Measure the non-gravitational that changes asteroidal orbits and (5) Regolith Explorer: Determine the properties of the material covering an asteroid surface. Asteroid Bennu may preserve remnants of stardust, interstellar materials and the first solids to form in the Solar System and the molecular precursors to the origin of life and the Earth's oceans. Bennu is a potentially hazardous asteroid, with an approximately 1 in 2700 chance of impacting the Earth late in the 22nd century. OSIRIS-REx collects from Bennu will help formulate the types of operations and identify mission activities that astronauts will perform during their expeditions. Such information is crucial in preparing for humanity's next steps beyond low Earthy orbit and on to deep space destinations.

Nakamura-Messinger, Keiki↗

A method of evaluating efficiency during space-suited work in a neutral buoyancy environment

The purpose was to investigate efficiency as related to the work transmission and the metabolic cost of various extravehicular activity (EVA) tasks during simulated microgravity (whole body water immersion) using three space suits. Two new prototype space station suits, AX-5 and MKIII, are pressurized at 57.2 kPa and were tested concurrently with the operationally used 29.6 kPa shuttle suit. Four male astronauts were asked to perform a fatigue trial on four upper extremity exercises during which metabolic rate and work output were measured and efficiency was calculated in each suit. The activities were selected to simulate actual EVA tasks. The test article was an underwater dynamometry system to which the astronauts were secured by foot restraints. All metabolic data was acquired, calculated, and stored using a computerized indirect calorimetry system connected to the suit ventilation/gas supply control console. During the efficiency testing, steady state metabolic rate could be evaluated as well as work transmitted to the dynamometer. Mechanical efficiency could then be calculated for each astronaut in each suit performing each movement.

Greenisen, Michael C.↗

Pressure Sensitive Tape in the Manufacture of Reusable Solid Rocket Motors

ATK Launch Systems Inc. manufactures the reusable solid rocket motor (RSRM) for NASA's Space Shuttle program. They are used in pairs to launch the Space Shuttle. Pressure sensitive tape (PST) is used throughout the RSRM manufacturing process. A few PST functions are: 1) Secure labels; 2) Provide security seals; and 3) Protect tooling and flight hardware during various inert and live operations. Some of the PSTs used are: Cloth, Paper, Reinforced Teflon, Double face, Masking, and Vinyl. Factors given consideration for determining the type of tape to be used are: 1) Ability to hold fast; 2) Ability to release easily; 3) Ability to endure abuse; 4) Strength; and 5) Absence of adhesive residue after removal.

Champneys, Jeff↗

International Coordination and Cooperation on LunaNet Spectrum

LunaNet is planned to be the network of networks operated by a set of cooperating organizations to provide interoperable Communications, networking, Position, Navigation, and Timing (CPNT) services to users on and around the Moon based on a framework of mutually agreed-upon standards, protocols, frequency bands and interface requirements. LunaNet follows a service-oriented architecture that is agnostic about the types of organizations that provide services, e.g., government, industry, or academia. LunaNet is open, scalable, resilient, secure, and extensible. To achieve these goals, LunaNet Service Providers (LNSP) must coordinate with each other to define and develop the architecture, to plan initial and evolved capabilities, and to operate their networks. One of the central LunaNet tenets is the use of shared spectrum. For example, the Lunar Augmented Navigation Service (LANS) acts like a Global Navigation Satellite System (GNSS) such as the US Global Positioning System (GPS) or European Galileo but the LNSPs’ contributions to LunaNet must use the same frequency band (2483.5 MHz-2500.0 MHz) and transmit the same waveform synchronized by highly accurate clocks so that Users ‘see’ one virtual network and use the same multilateration algorithm to determine their positions. This necessitates a high degree of spectrum coordination. NASA’s Lunar and Human Spaceflight Spectrum Management Team has been actively supporting development of the LunaNet Interoperability Specification (LNIS), soliciting inputs from spectrum policy and planning experts across NASA, ESA and JAXA. Cislunar spectrum use considerations have been studied and adjudicated within the Space Frequency Coordination Group (SFCG) and inform the ongoing discussion of a lunar communication and navigation architecture within the existing radio regulatory framework of the International Telecommunication Union, leading to the 2027 World Radiocommunication Conference (WRC-27). The frequency plan contained in the publicly released draft of the LunaNet Interoperability Specification reflects the initial phase of exploration (roughly to 2030) defining an optimal set of radio frequencies in appropriately allocated services consistent with WRC-23 decisions for use by known or planned CPNT applications, while striving to maximize coexistence and compatibility amongst cislunar systems and other systems within the near-Earth regime (< 2 million km from Earth). Important considerations include: protection of extremely sensitive receive-only radio astronomy systems on the lunar far side, known as the Shielded Zone of the Moon (SZM); compatibility between Direct with Earth (DWE) communications links and links needed to support relay satellites in lunar orbit with their customer systems on orbit or on the lunar surface; compatibility between multiple lunar surface communications systems and capabilities over varied and challenging terrain and distances; as well as ensuring compatibility and interoperability between navigation systems which either leverage Earth-based or in-situ lunar systems. In addition, the lunar CPNT architecture is envisioned to be the basis – with adjustments – of the future Mars CPNT architecture as we expand into the solar system using Interplanetary Networking (IPN). The second phase of lunar spectrum definition will address planned international capabilities for the next decade that will require action at WRC-27 and beyond. This paper will discuss each of these considerations in more depth and how the current LunaNet frequency plan addresses them.

LunaNet↗

Feasibility Study for a Proposed Subcritical Assembly at Oak Ridge National Laboratory

Nuclear Criticality Safety (NCS) staff use the guidelines in the ANSI/ANS-8.26 standard to establish and maintain their training and qualifications. Section 7.4 of the standard requires NCS staff to participate in hands-on experiments meant to “…demonstrate how varying the properties of a fissionable material system can affect neutron multiplication.” This training is performed to ensure NCS and operations staff are aware of the risks involved with conducting operations with fissionable materials outside reactors. A new, inherently safe, subcritical assembly, to be housed at Oak Ridge National Laboratory (ORNL) is being considered to augment the current training capabilities of the US Department of Energy/National Nuclear Security Administration (DOE/NNSA) Nuclear Criticality Safety Program (NCSP), which conducts hands-on subcritical and critical experiments to support the training and qualifications of NCS staff. This paper reports the results of a feasibility study performed by ORNL.

46 INSTRUMENTATION RELATED TO NUCLEAR SCIENCE AND ↗

RS-34 (Peacekeeper Post Boost Propulsion System) Orbital Debris Application Concept Study

The Advanced Concepts Office (ACO) at the NASA Marshall Space Flight Center (MSFC) lead a study to evaluate the Rocketdyne produced RS-34 propulsion system as it applies to an orbital debris removal design reference mission. The existing RS-34 propulsion system is a remaining asset from the de-commissioned United States Air Force Peacekeeper ICBM program; specifically the pressure-fed storable bi-propellant Stage IV Post Boost Propulsion System. MSFC gained experience with the RS-34 propulsion system on the successful Ares I-X flight test program flown in the Ares I-X Roll control system (RoCS). The heritage hardware proved extremely robust and reliable and sparked interest for further utilization on other potential in-space applications. Subsequently, MSFC is working closely with the USAF to obtain all the remaining RS-34 stages for re-use opportunities. Prior to pursuit of securing the hardware, MSFC commissioned the Advanced Concepts Office to understand the capability and potential applications for the RS-34 Phoenix stage as it benefits NASA, DoD, and commercial industry. Originally designed, the RS-34 Phoenix provided in-space six-degrees-of freedom operational maneuvering to deploy multiple payloads at various orbital locations. The RS-34 Concept Study, preceded by a utilization study to understand how the unique capabilities of the RS-34 Phoenix and its application to six candidate missions, sought to further understand application for an orbital debris design reference mission as the orbital debris removal mission was found to closely mimic the heritage RS-34 mission. The RS-34 Orbital Debris Application Concept Study sought to identify multiple configurations varying the degree of modification to trade for dry mass optimization and propellant load for overall capability and evaluation of several candidate missions. The results of the RS-34 Phoenix Utilization Study show that the system is technically sufficient to successfully support all of the missions analyzed. The results and benefits of the RS-34 Orbital Debris Application Concept Study are presented in this paper.

Esther, Elizabeth A.↗

Crossing the Digital Divide

Nuclear utilities continue to upgrade aging instrumentation and control (I&C) systems with modern digital-based systems to address reliability and obsolescence concerns. In addition, the industry has demonstrated that these systems can be successfully developed and deployed even for highly safety-significant applications, such as reactor protection. However, three factors have retarded wide-scale implementation of digital technology for plant modernization and business innovation: *Large-scale digital upgrades entail considerable risk; *The upgrades are very costly and have not led to bottom-line business improvement, financial or otherwise; *Cyber Security concerns discourage wide-scale digital integration. A new national research program is under way that has been designed to address these industry concerns about expanding the use of digital technology. The Idaho National Laboratory (INL) has lead responsibility for the Advanced Instrumentation, Information, and Control Systems Technologies research pathway within the Light Water Reactor Sustainability (LWRS) Program. The LWRS Program is a research and development (R&D) program sponsored by the U.S. Department of Energy (DOE) and performed in close collaboration with industry R&D and improvement programs (as defined in INL’s FY2009–2013 Light Water Reactor Sustainability Research and Development Program Plan, INL/MIS08-14918). Its purpose is to provide the technical foundations for licensing and managing the long-term, safe, and economical operation of existing nuclear power plants. The DOE’s program focus is on longer-term and higher-risk/reward research that contributes to the national policy objectives of energy security and environmental security. The specific concern addressed by this program is that large-scale I&C obsolescence could become a life-limiting issue for the current nuclear operating fleet.

46 INSTRUMENTATION RELATED TO NUCLEAR SCIENCE AND ↗