Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “secure data”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 1,459 records · Page 81
All sourcesNASA NTRSDOE OSTI
DOE OSTI2016

Data Analysis for NEPA Supplement Analysis of Chemistry and Metallurgy Research Building Replacement Project at LANL - 16017

The Department of Energy/National Nuclear Security Administration (DOE/NNSA) is proposing to provide analytical chemistry (AC) and materials characterization (MC) capabilities at the Los Alamos National Laboratory (LANL) by using a combination of existing space in two existing buildings: The Radiological Laboratory/Utility/Office Building (RLUOB) and the Plutonium Facility, Building 4 (PF-4) in TA-55. This represents a change from decisions made by DOE as informed by previous National Environmental Policy Act (NEPA) analyses. In accordance with Council on Environmental Quality and DOE requirements, NNSA prepared a Supplement Analysis to evaluate the potential environmental impacts of the proposed action. The focus of this analysis is on determining whether the proposal to provide AC and MC laboratory capabilities in existing space in RLUOB and PF-4 rather than building a new nuclear facility is a substantial change that is relevant to environmental concerns or whether new circumstance or information relevant to environmental concerns and bearing on the proposed action or its impacts are significant. The determination of the analysis is that the existing Chemistry and Metallurgy Research Building Replacement Environmental Impact Statement (CMRR EIS) need not be supplemented, nor is a new EIS required, because 'the proposed changes do not represent a substantial change that is relevant to environmental concerns.'[1 p.49] No further NEPA analysis is necessary. This report describes the analysis used to create data needed for the Supplement Analysis. Los Alamos subject matter experts estimated equipment lists, facility modifications, waste quantities, labor needs and radiological doses. Los Alamos NEPA experts assisted in compiling existing data from the LANL Site-Wide EIS and CMRR EIS for public and other impacts. Bounding conditions were used to determine NEPA estimates. (authors)

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗
DOE OSTI2019

Light hydrocarbon and noble gas migration as an analogue for potential CO 2 leakage: numerical simulations and field data from three hydrocarbon systems

Abstract Sites where anthropogenic CO 2 captured from industrial sources is stored in deep geological formations for climate change mitigation are required to show secure retention of the injected CO 2 . Monitoring, reporting, and verification (MRV) plans are needed to indicate that no CO 2 release has occurred. We explored the degree to which direct comparison between a surface anomaly and reservoir geochemistry using various geochemical parameters can be used for attribution. We used data collected on light hydrocarbons and noble gases throughout the sedimentary column at three CO 2 enhanced oil recovery (EOR) sites to understand the processes that may cause fluid evolution. Light hydrocarbon and noble gases were sampled from reservoirs, gas‐bearing intervals above reservoirs, and groundwater. Vertical profiles indicated that lighter components are relatively enriched during migration (i.e. chromatographic separation). Static and numerical models were designed to simulate episodic gas migration and geochemical alteration of these geochemical parameters from solubility and sorption. The effects of hydrocarbon solubility were minimal (Bernard ratio changes within 5.2%) although field data were within the range of expected alterations from sorption. Forward models of CO 2 migration and noble gas interactions showed that CO 2 stripping causes an enrichment of crustal noble gases. In areas where natural fluxes of CO 2 from depth are non‐existent, the occurrence of crustal noble gas signature may distinguish fugitive CO 2 from the reservoir from natural near‐surface sources, and could be considered to explain apparent fluid anomalies. © 2019 Society of Chemical Industry and John Wiley & Sons, Ltd.

Anderson, Jacob↗
DOE OSTI2022

Energy Resilient Recovery in Puerto Rico: Hurricane Maria Recovery Support

This report covers microgrids as a special application of distributed energy resources (DERs) in Puerto Rico. This is one of a series of reports describing the U.S. Department of Energy (DOE) multi-laboratory efforts undertaken. To ensure the sustainable, long-term recovery of Puerto Rico's electric power grid from hurricanes Maria and Irma and to build capacity to manage future potential natural disasters in the most secure and resilient way, DOE convened experts from multiple national laboratories to develop a comprehensive set of data, models, analytic tools, and studies, considering inputs from a wide variety of stakeholder groups, to support technically sound recommendations for Puerto Rico's energy investment decisions. In Phase 1 of the multi-laboratory effort to support Puerto Rico's recovery, the National Renewable Energy Laboratory (NREL) provided the utility company Puerto Rico Electric Power Authority (PREPA) recommendations for a new framework of interconnection standards to accelerate the integration of utility-scale, transmission-connected, renewable electrical generation and energy storage that ensure cross-technology compatibility and enable high deployment levels without compromising grid reliability, safety, or security (https://www.nrel.gov/docs/fy19osti/73848.pdf). In Phase 2, NREL published a report focused on the interconnection of distributed energy resources (DERs) to the electric distribution system in Puerto Rico (https://www.nrel.gov/docs/fy21osti/77127.pdf). This report familiarized the reader with Puerto Rico's distribution infrastructure and operational practices and procedures that are relevant to DER interconnection. The report also provided considerations for streamlining the interconnection process given the expected increase in deployments resulting from Puerto Rico's renewable portfolio standard goal of 100% renewables by 2050. Accordingly, the report identifies considerations and concerns associated with the increase in intermittent generation, strategies for DER interconnection best practices, and the potential use of the latest technological solutions identified in the latest revision of the Institute of Electrical and Electronics Engineers 1547-2018 interconnection standard. Additionally, the report identified ways to improve the physical resiliency of installed DERs. This task describes how distributed energy systems may participate in and contribute to improving the resiliency of Puerto Rico's energy infrastructure in the future. This report presents an analysis of the Puerto Rico grid to illustrate the possible different microgrid and minigrid scenarios. The capability to form sustained microgrids and minigrids has the potential to provide a high level of resiliency during disturbances on the grid. DERs, on the other hand, have the capability to aid in the microgrid operation by providing grid support as well as grid-forming functionality. Other tasks in Phase 3 include voltage regulation in distribution networks using DERs and transmission-and-distribution co-simulation.

24 POWER TRANSMISSION AND DISTRIBUTION↗
NASA NTRS2017

Security Vulnerability Profiles of Mission Critical Software: Empirical Analysis of Security Related Bug Reports

While some prior research work exists on characteristics of software faults (i.e., bugs) and failures, very little work has been published on analysis of software applications vulnerabilities. This paper aims to contribute towards filling that gap by presenting an empirical investigation of application vulnerabilities. The results are based on data extracted from issue tracking systems of two NASA missions. These data were organized in three datasets: Ground mission IVV issues, Flight mission IVV issues, and Flight mission Developers issues. In each dataset, we identified security related software bugs and classified them in specific vulnerability classes. Then, we created the security vulnerability profiles, i.e., determined where and when the security vulnerabilities were introduced and what were the dominating vulnerabilities classes. Our main findings include: (1) In IVV issues datasets the majority of vulnerabilities were code related and were introduced in the Implementation phase. (2) For all datasets, around 90 of the vulnerabilities were located in two to four subsystems. (3) Out of 21 primary classes, five dominated: Exception Management, Memory Access, Other, Risky Values, and Unused Entities. Together, they contributed from 80 to 90 of vulnerabilities in each dataset.

Goseva-Popstojanova, Katerina↗
DOE OSTI2022

Precursor Analysis Report: Doppelpaymer Ransomware Attack on Petroleos Mexicanos (PEMEX) 2019

The DoppelPaymer Ransomware Attack on Petroleos Mexicanos (PEMEX) 2019 Precursor Analysis Report leverages publicly available information about the PEMEX cyber attack and catalogs anomalous observables for each technique employed in the attack. This analysis is based upon the methodology of the Cybersecurity for the Operational Technology Environment (CyOTE) program. The 2019 DoppelPaymer ransomware attack on PEMEX, Mexico’s nationalized petroleum corporation, highlights a unique threat that ransomware and cybercriminal extortion poses to Operational Technology (OT) environments in critical infrastructure. The incident began with an employee downloading commodity malware that allowed adversaries to gain initial access to PEMEX’s enterprise environment. After conducting privilege escalation, tool ingress, and data exfiltration, the adversaries deployed DoppelPaymer ransomware throughout the PEMEX enterprise environment, resulting in the company having to take dozens of systems offline for at least several days. Although PEMEX stated that their operations were not affected, the data exfiltrated from PEMEX was made available for download on DoppelPaymer’s leak site, as well as on other illicit criminal forums. This stolen data included not only company information, but also sensitive OT-specific configuration data. This incident showcases how cybercriminal exfiltration and posting of sensitive OT architecture documentation can pose security concerns for the targeted organization for years due to the long lifespan of OT assets and architectures. Researchers and analysts identified 18 unique techniques utilized during the attack with a total of 190 observables using MITRE ATT&CK® for Industrial Control Systems. The CyOTE program assesses observables accompanying techniques used prior to the triggering event to identify opportunities to detect malicious activity. If observables accompanying the attack techniques are perceived and investigated prior to the triggering event, earlier comprehension of malicious activity can take place. Fifteen of the identified techniques used during the DoppelPaymer ransomware attack were precursors to the triggering event. Analysis identified 163 observables associated with these precursor techniques, 34 of which were assessed to have an increased likelihood of being perceived in the 60 days preceding the triggering event. The response and comprehension time could have been reduced if the observables had been identified earlier. The information gathered in this report contributes to a library of observables tied to a repository of artifacts, data sources, and technique detection references for practitioners and developers to support the comprehension of indicators of attack. Asset owners and operators can use these products if they experience similar observables or to prepare for comparable scenarios.

45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗
DOE OSTI2018

Exploiting the Shape of CAN Data for In-Vehicle Intrusion Detection

Modern vehicles rely on scores of electronic control units (ECUs) broadcasting messages over a few controller area networks (CANs). Bereft of security features, in-vehicle CANs are exposed to cyber manipulation and multiple researches have proved viable, life-threatening cyber attacks. Complicating the issue, CAN messages lack a common mapping of functions to commands, so packets are observable but not easily decipherable. We present a transformational approach to CAN IDS that exploits the geometric properties of CAN data to inform two novel detectors - one based on distance from a learned, lower dimensional manifold and the other on discontinuities of the manifold over time. Proof-of-concept tests are presented by implementing a potential attack approach on a driving vehicle. The initial results suggest that (1) the first detector requires additional refinement but does hold promise; (2) the second detector gives a clear, strong indicator of the attack; and (3) the algorithms keep pace with high-speed CAN messages. As our approach is data-driven it provides a vehicle-agnostic IDS that eliminates the need to reverse engineer CAN messages and can be ported to an after-market plugin.

Tyree, Zachariah↗
NASA NTRS1996

Derived virtual devices: a secure distributed file system mechanism

This paper presents the design of derived virtual devices (DVDs). DVDs are the mechanism used by the Netstation Project to provide secure shared access to network-attached peripherals distributed in an untrusted network environment. DVDs improve Input/Output efficiency by allowing user processes to perform I/O operations directly from devices without intermediate transfer through the controlling operating system kernel. The security enforced at the device through the DVD mechanism includes resource boundary checking, user authentication, and restricted operations, e.g., read-only access. To illustrate the application of DVDs, we present the interactions between a network-attached disk and a file system designed to exploit the DVD abstraction. We further discuss third-party transfer as a mechanism intended to provide for efficient data transfer in a typical NAP environment. We show how DVDs facilitate third-party transfer, and provide the security required in a more open network environment.

VanMeter, Rodney↗
NASA NTRS2000

Geographical Database Integrity Validation

Airport Safety Modeling Data (ASMD) was developed at the request of a 1997 White House Conference on Aviation Safety and Security. Politicians, military personnel, commercial aircraft manufacturers and the airline industry attended the conference. The objective of the conference was to study the airline industry and make recommendations to improve safety and security. One of the topics discussed at the conference was the loss of situational awareness by aircraft pilots. Loss of situational awareness occurs when a pilot loses his geographic position during flight and can result in crashes into terrain and obstacles. It was recognized at the conference that aviation safety could be improved by reducing the loss of situational awareness. The conference advised that a system be placed in the airplane cockpit that would provide pilots with a visual representation of the terrain around airports. The system would prevent airline crashes during times of inclement weather and loss of situational awareness. The system must be based on accurate data that represents terrain around airports. The Department of Defense and the National Imagery and Mapping Agency (NIMA) released ASMD to be used for the development of a visual system for aircraft pilots. ASMD was constructed from NIMA digital terrain elevation data (DTED).

Jacobs, Derya↗
DOE OSTI2022

Date Release Report for Large Surface Explosion Coupling Experiment (LSECE) Nevada National Security Site

The DTRA sponsored 2020-2022 Large Surface Explosion Coupling Experiment (LSECE) consists of two large ground surface chemical explosions, data collection, analysis and modeling carried out in 2020-2022. The LSECE chemical explosions were carried out at the site of prior NNSA sponsored buried chemical explosions that were part of the Source Physics Experiment (SPE) Phase II in Dry Alluvium Geology (DAG). This report described the data collected under LSECE that is being made publicly available. The prior buried explosion DAG data are described in a separate report (https://www.osti.gov/biblio/1825534) and are also publicly available. The LSECE explosions, data analysis and numerical modeling work sponsored by DTRA were intended to address three objectives: 1) Generate seismo-acoustic data to test and improve numerical models of explosion energy coupling in dry alluvium geology; 2) To improve seismo-acoustic yield estimation techniques as a function of depth and medium properties; 3) To study and improve acoustic propagation modeling under two different atmospheric conditions. The LSECE data that were collected have expanded the prior DAG buried explosion dataset to include surface chemical explosions recorded on a common set of seismo-acoustic stations. They have allowed a more detailed study of above and below surface seismo-acoustic energy coupling with applications to explosion monitoring and assessment. The two approximately 1-ton TNT equivalent yield LSECE explosions were detonated at different times of the day to explore the effects of the different atmospheric conditions. The first chemical explosion “Artemis” was conducted before dawn when temperature inversions were present. The second chemical explosion “Apollo” was conducted on a sunny afternoon when the temperature gradient was more linear. The LSECE chemical explosion data were also collected across a variety of different sensor types to allow evaluation of their effectiveness in recovering useful information. The LSECE instrumentation included fiber optic or Distributed Acoustic Sensing (DAS), a dense array or Large-N array of seismometers, borehole accelerometers, DAS and a velocity meter, airborne acoustic instruments and a variety of visual and remote sensing data.

58 GEOSCIENCES↗
DOE OSTI2019

Data from: Nitrogen fertilization challenges the climate benefit of cellulosic biofuels

Cellulosic biofuels are intended to improve future energy and climate security. Nitrogen (N) fertilizer is commonly recommended to stimulate yields but can increase losses of the greenhouse gas nitrous oxide (N2O) and other forms of reactive N, including nitrate. We measured soil N2O emissions and nitrate leaching along a switchgrass (Panicum virgatum) high resolution N-fertilizer gradient for three years post-establishment. Results revealed an exponential increase in annual N2O emissions that each year became stronger (R 2 > 0.9, P < 0.001) and deviated further from the fixed percentage assumed for IPCC Tier 1 emission factors. Concomitantly, switchgrass yields became less responsive each year to N fertilizer. Nitrate leaching (and calculated indirect N2O emissions) also increased exponentially in response to N inputs, but neither methane (CH4) uptake nor soil organic carbon changed detectably. Overall, N fertilizer inputs at rates greater than crop need curtailed the climate benefit of ethanol production almost two-fold, from a maximum mitigation capacity of −5.71 ± 0.22 Mg CO2e ha−1 yr−1 in switchgrass fertilized at 56 kg N ha−1 to only −2.97 ± 0.18 Mg CO2e ha−1 yr−1 in switchgrass fertilized at 196 kg N ha−1. Minimizing N fertilizer use will be an important strategy for fully realizing the climate benefits of cellulosic biofuel production.

09 BIOMASS FUELS↗
DOE OSTI2025

Closure Report for Corrective Action Unit 116: Area 25 Test Cell C Facility, Nevada National Security Site, Nevada with ROTC-1

CR loaded to this OSTI record. Just adding new file which includes CR plus new ROTC 1 and update the metadata to the following: This Closure Report (CR) presents information supporting closure of Corrective Action Unit (CAU) 116, Area 25 Test Cell C Facility. This CR complies with the requirements of the Federal Facility Agreement and Consent Order (FFACO) that was agreed to by the State of Nevada; the U.S. Department of Energy (DOE), Environmental Management; the U.S. Department of Defense; and DOE, Legacy Management (FFACO, 1996 [as amended March 2010]). CAU 116 consists of the following two Corrective Action Sites (CASs), located in Area 25 of the Nevada National Security Site: (1) CAS 25-23-20, Nuclear Furnace Piping and (2) CAS 25-41-05, Test Cell C Facility. CAS 25-41-05 consisted of Building 3210 and the attached concrete shield wall. CAS 25-23-20 consisted of the nuclear furnace piping and tanks. Closure activities began in January 2007 and were completed in August 2011. Activities were conducted according to Revision 1 of the Streamlined Approach for Environmental Restoration Plan for CAU 116 (U.S. Department of Energy, National Nuclear Security Administration Nevada Site Office [NNSA/NSO], 2008). This CR provides documentation supporting the completed corrective actions and provides data confirming that closure objectives for CAU 116 were met. Site characterization data and process knowledge indicated that surface areas were radiologically contaminated above release limits and that regulated and/or hazardous wastes were present in the facility. The Record of Technical Change 1 updated the use restriction information.

54 ENVIRONMENTAL SCIENCES↗
DOE OSTI2023

A geospatial risk analysis graphical user interface for identifying hazardous chemical emission sources

Background: Performing back trajectory and forward trajectory using the Hybrid Single-Particle Lagrangian Integrated Trajectory Model (HYSPLIT) is a reliable approach for assessing particle transport after release among mid-field atmospheric models. HYSPLIT has an externally facing online interface that allows non-expert users to run the model trajectories without requiring extensive training or programming. However, the existing HYSPLIT interface is limited if simulations have a large amount of meteorological data and timesteps that are not coincident. The objective of this study is to design and develop a more robust tool to rapidly evaluate hazard transport conditions and to perform risk analysis, while still maintaining an intuitive and user-friendly interface. Methods: HYSPLIT calculates forward and backward trajectories of particles based on wind speed, wind direction, and the corresponding location, timestamp, and Pasquill stability classes of the regions of the atmosphere in terms of the wind speed, the amount of solar radiation, and the fractional cloud cover. The computed particle transport trajectories, combined with the online Proton Transfer Reaction-Mass Spectrometry (PTR-MS) data (https://figshare.com/articles/dataset/ARL_Data_from_PROS_station_at_Hanford_site/19993964), can be used to identify and quantify the sources and affected area of the hazardous chemicals’ emission using the potential source distribution function (PSDF). PSDF is an improved statistical function based on the well-known potential source contribution function (PSCF) in establishing the air pollutant source and receptor relationship. Performing this analysis requires a range of meteorological and pollutant concentration measurements to be statistically meaningful. The existing HYSPLIT graphical user interface (GUI) does not easily permit computations of trajectories of a dataset of meteorological data in high temporal frequency. To improve the performance of HYSPLIT computations from a large dataset and enhance risk analysis of the accidental release of material at risk, a geospatial risk analysis tool (GRAT-GUI) is created to allow large data sets to be processed instantaneously and to provide ease of visualization. Results: The GRAT-GUI is a native desktop-based application and can be run in any Windows 10 system without any internet access requirements, thus providing a secure way to process large meteorological datasets even on a standalone computer. GRAT-GUI has features to import, integrate, and convert meteorological data with various formats for hazardous chemical emission source identification and risk analysis as a self-explanatory user interface. The tool is available at https://figshare.com/articles/software/GRAT/19426742.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2025

Enhancing Modeling and Simulation for Effective Protection Strategies

This report was created by Sandia National Laboratories (SNL) to document the principles and methodology of performance data collection and integration with modeling and simulation tools to better facilitate the performance evaluation of physical protection systems (PPS). Results and conclusions from the use of modeling and simulation tools are only as good as the data employed by the tools when conducting analysis. Acquiring the performance testing data necessary to ensure effective evaluation can be a complex and sometimes daunting process. It is the desire of the organization to provide guidance that eases the burdens associated with pursuit of these objectives. This document draws heavily upon longstanding principles of systems engineering that have been developed and employed by SNL in the discipline of security since the 1970s. The scope of this document is constrained to the testing of system components and integration of data that is applicable within the context of PPS performance analysis using two tools that have been developed by SNL, PathTrace© and Scribe3D©. For guidance related to testing and evaluation more broadly, the manuals and reports referenced by this document can be consulted.

42 ENGINEERING↗
DOE OSTI2021

Automated Cyber Security Testing Platform for Industrial Control Systems

Nuclear Power Plants (NPPs) are a complex system of coupled physics controlled by a network of Programmable Logic Controllers (PLCs). These PLCs communicate process data across the network to coordinate control actions with each other and inform the operators of process variables and control decisions. Networking the PLCs allows more effective process control and provides the operator more information which results in more efficient plant operation. This interconnectivity creates new security issues, as operators have more access to the plant controls, so will bad actors. As plant networks become more digitized and encompass more sophisticated controllers, the network surface exposed to cyber interference grows. Understanding the dynamics of these coupled systems of physics, control logic, and network communications is critical to their protection. The research into the cybersecurity of the Operational Technologies of NPPs is developing and requires a platform that can allow high fidelity physics simulations to interact with digital networks of controllers. This will require three main components: a network simulation environment, a physics simulator, and virtual PLCs (vPLC) that represent typical industry hardware. A platform that incorporates these three components to provide the most accurate representation of actual NPP networks and controllers is developed in this paper.

21 SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLANTS↗
DOE OSTI2013

U.S. Department of Energy Office of Health, Safety and Security Illness and Injury Surveillance Program Worker Health at a Glance, 2000-2009

The Worker Health at a Glance, 2000 – 2009 provides an overview of selected illness and injury patterns among the current DOE contractor workforce that have emerged over the 10-years covered by this report. This report is a roll-up of data from 16 individual DOE sites, assigned to one of three program offices (Office of Environmental Management, Office of Science and the National Nuclear Security Administration). In this report, an absences is defined as 40 or more consecutive work hours (5+ calendar days) off the job. Shorter absences were not included.

29 ENERGY PLANNING, POLICY, AND ECONOMY↗
NASA NTRS1984

Land remote sensing commercialization: A status report

The current offer by the United States Department of Commerce to transfer the U.S. land remote sensing program to the private sector is described. A Request for Proposals (RFP) was issued, soliciting offers from U.S. firms to provide a commercial land remote sensing satellite system. Proposals must address a complete system including satellite, communications, and ground data processing systems. Offerors are encouraged to propose to take over the Government LANDSAT system which consists of LANDSAT 4 and LANDSAT D'. Also required in proposals are the market development procedures and plans to ensure that commercialization is feasible and the business will become self-supporting at the earliest possible time. As a matter of Federal Policy, the solicitation is designed to protect both national security and foreign policy considerations. In keeping with these concerns, an offeror must be a U.S. Firm. Requirements for data quality, quantity, distribution and delivery are met by current operational procedures. It is the Government's desire that the Offeror be prepared to develop and operate follow-on systems without Government subsidies. However, to facilitate rapid commercialization, an offeror may elect to include in his proposal mechanisms for short term government financial assistance.

Bishop, W. P.↗