Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “System Security”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 1,531 records · Page 85
All sourcesNASA NTRSDOE OSTI
DOE OSTI2020

Communication-efficient certificate revocation management for Advanced Metering Infrastructure and IoT Integration

Advanced Metering Infrastructure forms a communication network for the collection of power data from smart meters in Smart Grid. As the communication between smart meters could be secured utilizing public-key cryptography, however, public-key cryptography still has certain challenges in terms of certificate revocation and management particularly related distribution and storage overhead of revoked certificates. To address this challenge, in this work, we propose a novel revocation management approach by utilizing cryptographic accumulators which reduces the space requirements for revocation information significantly and thus enables efficient distribution of such information to all smart meters. We implemented the proposed approach on both ns-3 network simulator and a testbed. We demonstrated its superior performance with respect to traditional methods for revocation management.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2021

Trust-but-Verify in Cyber-Physical Systems

Cyber-physical systems span a wide spectrum, from long-lived legacy systems to more modern installations. Trust is an issue that arises across the spectrum, albeit with different variants of goals and constraints. On the one end of the spectrum, legacy systems are characterized by function-based designs in which trust is an implicitly in-built concept -- the operation is historically designed, implemented, and optimized in a benign stance with respect to intended use. On the other end of the spectrum, modern systems are characterized by offerings from manufacturers, vendors, and system installers -- the devices and deployments use a variety of security features that offer promises of increased trust. All along this spectrum of cyber-physical systems, extending trust beyond the traditional cyber portions to the arteries that connect the physical portions to the cyber portions is a major challenge. Here, we identify a Trust-but-Verify approach that spans this spectrum in addressing trust.

Perumalla, Kalyan↗
NASA NTRS1985

Visual Alert System

A visual alert system resulted from circuitry developed by Applied Cybernetics Systems for Langley as part of a space related telemetry system. James Campman, Applied Cybernetics president, left the company and founded Grace Industries, Inc. to manufacture security devices based on the Langley technology. His visual alert system combines visual and audible alerts for hearing impaired people. The company also manufactures an arson detection device called the electronic nose, and is currently researching additional applications of the NASA technology.

Source record↗
DOE OSTI2025

Leveraging System Dynamics to Predict the Commercialization Success of Emerging Energy Technologies: Lessons from Wind Energy

The United States urgently needs to tackle the climate crisis while enhancing energy security and resiliency. The complexity of the U.S. energy system, with its interconnected elements, makes predicting future states challenging, especially with the introduction of novel energy systems like wind, solar, clean hydrogen, and advanced nuclear technologies. Modern systems engineering methods and tools can provide deeper insights into these dynamics and future behaviors. This research aims to develop a comprehensive model that captures the main elements and behaviors of new energy technologies within the existing energy system. We hypothesized that the market uptake of novel energy systems is influenced by multiple diverse factors, such as technological learning, availability of resources, and economic incentives; examined the history of electricity generation using land-based wind technologies; and developed a system dynamics model to investigate the relationships between capacity growth and influencing factors, both internal and external. The developed model yielded outcomes that confirmed the hypothesized dynamics of wind energy system diffusion through a quantitative comparison of installed capacity and highlighted the significant influence of resource availability, federal incentives (production tax credits), and technological learning on capacity growth and cost reduction. This research aims to support informed decision-making for investments in novel energy systems and aid in developing effective policies for technology deployment.

17 WIND ENERGY↗
DOE OSTI2022

Development of a leading simulator/trailing simulator methodology as part of an integrated safety-security analysis for nuclear power plants

Nuclear power plant (NPP) risk assessment is broadly separated into disciplines of nuclear safety, security, and safeguards. Different analysis methods and computer models have been constructed to analyze each of these as separate disciplines. However, due to the complexity of NPP systems, there are risks that can span all these disciplines and require consideration of safety-security (2S) interactions which allows a more complete understanding of the relationship among these risks. In this work, a novel leading simulator/trailing simulator (LS/TS) method is introduced to integrate multiple generic safety and security computer models into a single, holistic 2S analysis. A case study is performed using this novel method to determine its effectiveness. The case study shows that the LS/TS method avoided introducing errors in simulation, compared to the same scenario performed without the LS/TS method. A second case study is then used to illustrate an integrated 2S analysis which shows that different levels of damage to vital equipment from sabotage at a NPP can affect accident evolution by several hours.

42 ENGINEERING↗
DOE OSTI2023

Cyber-Informed Engineering Guidance—Implementing CIE in Early Systems Engineering Lifecycle Stages

Traditionally, cybersecurity is not considered in the design process. Design engineers typically focus on building safety and reliability into their products and applications. Security against malicious cyber incidents is often an afterthought, resulting in deployment of security solutions during installation or operation. Unfortunately, waiting to consider cybersecurity until later in the systems engineering lifecycle often results in less effective and more expense security. Idaho National Laboratory (INL) developed the concept of Cyber-Informed Engineering (CIE) in 2015 to provide a framework that enables cybersecurity to be built into systems beginning at the conceptual design stage. In addition to ongoing research by INL, the U.S. Department of Energy (DOE) Office of Cybersecurity, Energy Security, and Emergency Response has recently developed a National CIE Strategy document for incorporating CIE into the design and operation of infrastructure systems reliant on digital monitoring or controls. This paper provides a brief review of this National CIE Strategy as well as a roadmap to historical, current, and future CIE research by INL through the U.S. DOE Office of Nuclear Energy (NE) Cybersecurity Crosscutting Technology Development Program. A near-term focus of the DOE-NE’s research and development is to extend the foundational CIE work into detailed guidance for implementation during initial systems engineering stages in nuclear digital instrumentation and control projects and to demonstrate use of the guidance in an integrated energy systems project.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗
DOE OSTI2020

An Assessment of the Usability of Machine Learning Based Tools for the Security Operations Center

Gartner, a large research and advisory company, anticipates that by 2024 80% of security operation centers (SOCs) will use machine learning (ML) based solutions to enhance their operations. 1 1 https://www.ciodive.com/news/how-data-science-tools-can-lighten-the-load-for-cybersecurity-teams/572209/ In light of such widespread adoption, it is vital for the research community to identify and address usability concerns. This work presents the results of the first in situ usability assessment of ML-based tools. With the support of the US Navy, we leveraged the national cyber range-a large, air-gapped cyber testbed equipped with state-of-the-art network and user emulation capabilities-to study six US Naval SOC analysts' usage of two tools. Our analysis identified several serious usability issues, including multiple violations of established usability heuristics for user interface design. We also discovered that analysts lacked a clear mental model of how these tools generate scores, resulting in mistrust a and/or misuse of the tools themselves. Surprisingly, we found no correlation between analysts' level of education or years of experience and their performance with either tool, suggesting that other factors such as prior background knowledge or personality play a significant role in ML-based tool usage. Our findings demonstrate that ML-based security tool vendors must put a renewed focus on working with analysts, both experienced and inexperienced, to ensure that their systems are usable and useful in real-world security operations settings.

Oesch, T↗
DOE OSTI2022

Resilience Evaluation and Enhancement for Island City Integrated Energy Systems

Extreme natural hazards, such as hurricanes or earthquakes, have a high probability of threatening energy supply security and causing high-order contingencies to island city-integrated energy systems (IC-IESs). To better evaluate and enhance resilience, a novel approach is proposed in this work for IC-IESs. The resilience of an IC-IES is analyzed from both the system level and the component level. At the system level, the impacts of extreme natural disasters are quantified. At the component level, the importance of individual components is analyzed through pre-failure and post-failure indices. The pre-failure index identifies the system’s weak links before an energy interruption, and the post-failure index determines the optimal repair strategy to restore the service. The proposed indices are solved by the impact increment method (IIM), which significantly improves computational efficiency without much affecting result accuracy. Numerical simulation studies are conducted on the modified Barry Island IES and IES E123-G48-H32 test systems. Furthermore, the results validate the effectiveness of the proposed approach.

24 POWER TRANSMISSION AND DISTRIBUTION↗
DOE OSTI2017

Using simulators to assess knowledge and behavior of “novice” operators of critical infrastructure under cyberattack events

—The transition from the traditional power grid to the smart grid improves reliability, performance, and management, while simultaneously increasing its susceptibility to cyberattacks. One of the biggest weaknesses in grid security is the human agent responsible for its maintenance and operations. As such, it is crucial to embed hands-on understanding of grid operations and security, especially for students in the Electrical and Computer Engineering (ECE) fields. This paper presents a case study where ECE students from Temple University used an interactive microgrid simulator, "Grid Game", a program developed by Idaho National Laboratory. This case study offers insights into the ECE students’ understanding of key engineering principles (microgrid stability, generation control system, generator inertia, energy storage, and grid security) gained by using the simulator program. Furthermore, the human behavior (strategies to prepare for and respond to cyberattacks, and cooperation and conflict in decision-making) of defenders/ECE students as they experience cyberattacks are also discussed. The paper then offers some limitations and possible suggestions for future research.

24 POWER TRANSMISSION AND DISTRIBUTION↗
DOE OSTI2017

Nevada National Security Site Environmental Report 2016

This Nevada National Security Site Environmental Report (NNSSER) was prepared to satisfy DOE Order DOE O 231.1B, “Environment, Safety and Health Reporting.” Its purpose is to (1) report compliance status with environmental standards and requirements, (2) present results of environmental monitoring of radiological and nonradiological effluents, (3) report estimated radiological doses to the public from releases of radioactive material, (4) summarize environmental incidents of noncompliance and actions taken in response to them, (5) describe the National Nuclear Security Administration Nevada Field Office (NNSA/NFO) Environmental Management System and characterize its performance, and (6) highlight significant environmental programs and efforts. This NNSSER summarizes data and compliance status for calendar year 2016 at the Nevada National Security Site (NNSS) and its two Nevada-based support facilities, the North Las Vegas Facility (NLVF) and the Remote Sensing Laboratory–Nellis (RSL-Nellis). It also addresses environmental restoration (ER) projects conducted at the Tonopah Test Range (TTR) and the Nevada Test and Training Range (NTTR). NNSA/NFO directs the management and operation of the NNSS and six sites across the nation. In addition to the NNSA itself, the six sites include two in Nevada (NLVF and RSL-Nellis) and four in other states (RSL-Andrews in Maryland, Livermore Operations in California, Los Alamos Operations in New Mexico, and Special Technologies Laboratory in California). Los Alamos, Lawrence Livermore, and Sandia National Laboratories are the principal organizations that sponsor and implement the nuclear weapons programs at the NNSS. National Security Technologies, LLC (NSTec), is the current Management and Operating contractor accountable for the successful execution of work and ensuring that work is performed in compliance with environmental regulations. The six sites all provide support to enhance the NNSS as a location for its multiple missions. The three major NNSS missions include National Security/Defense, Environmental Management, and Nondefense. The major programs that support these missions are Stockpile Stewardship and Management, Nonproliferation and Counterterrorism, Nuclear Emergency Response, Strategic Partnership Projects, Environmental Restoration, Waste Management, Conservation and Renewable Energy, Other Research and Development, and Infrastructure. The major facilities that support the programs include the U1a Facility, Big Explosives Experimental Facility (BEEF), Device Assembly Facility, Dense Plasma Focus Facility, Joint Actinide Shock Physics Experimental Research Facility, Radiological/Nuclear Countermeasures Test and Evaluation Complex, Nonproliferation Test and Evaluation Complex (NPTEC), Radiological/Nuclear Weapons of Mass Destruction Incident Exercise Site, the Area 5 Radioactive Waste Management Complex (RWMC), and the Area 3 Radioactive Waste Management Site (RWMS).

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗
DOE OSTI2016

Testing of the Authenticatable Container Tracking System (ACTS)

The Authenticatable Container Tracking System (ACTS) is being designed to provide a secure container tag that can be used to optimize chain-of-custody monitoring for packaged nuclear materials as they are being stored, processed, and transported. ACTS is an active device that uses an almost-universal core platform that can be appropriately configured to provide the necessary data acquisition, data logging, and communications functions needed for 21st century material accountancy, monitoring, and tracking applications. The core design supports active monitoring of containment, movement, and location and provides secure data transmission via selectable communication methods that can be used throughout the world. This core architecture enables appropriately designed modules to be easily interfaced to the basic system, thus providing an integration path for current and new technologies. ACTS contains a built-in set of sensors but also supports an expansion bus for up to six additional communications, tracking, or sensing modules that may enhance monitoring and tracking of particular containers for specific applications. ACTS stores events in memory, communicates activity to Argonne National Laboratory’s ARG-US TransPort tracking and information server, and provides options for data encryption and authentication. We are currently beginning a testing phase that will field five devices outdoors in a controlled environment to allow evaluation of the functionality of the systems and the hardness of the devices to outdoor conditions. Partners for this system are Oak Ridge National Laboratory, Argonne National Laboratory, Savannah River National Laboratory, Pacific Northwest National Laboratory, and commercialization partner The Aquila Group.

Britton Jr, Chuck↗
DOE OSTI2021

Cybersecurity Certification Recommendations for Interconnected Grid Edge Devices and Inverter Based Resources

Escalating deployment of PV and grid-edge devices on the distribution grid has increased the sustainability and efficiency of the electric grid. However, the increasing number of distributed energy resources (DERs) deployed creates a heightened cyber-physical interdependency on the distribution grid and thus creates more vectors for cyber-attacks to exploit through information and communication technology (ICT) systems and networks. For example, control signal packets can be modified, intercepted, or corrupted due to vulnerabilities in communication protocols used by microgrid controllers and grid edge devices for power control. Therefore, to mitigate and prevent cyber-attacks on grid edge devices and the inverter-based resources connected to the distribution grid, the U.S. Department of Solar Energy Technologies Office (SETO) awarded funding to the National Renewable Energy Laboratory and Sandia National Laboratory (SNL) to research, develop, and harmonize cybersecurity standards for Photovoltaic (PV) systems and for other kinds of DERs. To help develop a standard for DER cybersecurity, NREL established certification recommendations and test cases, in consensus with the solar industry and UL, for ensuring intrinsic design security for DERs. These recommendations were developed to bolster the cybersecure functionalities such as TLS, MAC, CRL, session resumption/renegotiation, and password, system, and service security management within the DER devices. The proposed test cases verify authentication, authorization, confidentiality, and data integrity for data and communications of DERs that use Transmission Control Protocol/Internet Protocol (TCP/IP). They were also developed to protect DER communications from eavesdropping, replay, man-in-the-middle, denial of service (DoS), spoofing through security certificates, least-privilege violation, and brute-force credentials. This report, which has been validated and reviewed by UL, expands upon those test cases to provide DER cybersecurity certification recommendations which increase DER resiliency and help to mitigate cyber-attacks. UL's collaboration with NREL and approval of this document will accelerate the adoption of a UL standard for DER cybersecurity.

24 POWER TRANSMISSION AND DISTRIBUTION↗
NASA NTRS2008

Enhanced Flight Termination System (EFTS): Flight Demonstration and Results

The Enhanced Flight Termination System (EFTS) program was initiated and propelled due to the inadvertent terminations of Global Hawk and the Strategic Target System and the NASA Inspector General's assessment letter and recommendations regarding the exploration of low-cost, lightweight space COMSEC for FTS. Additionally, the standard analog and high alphabet systems most commonly used in FTS are secure, but not encrypted. A study group was initiated to select and document a robust, affordable, reliable technology that provides encrypted FTS capability. A flight demonstration was conducted to gain experience using EFTS in an operational environment, provide confidence in the use of the EFTS components, integrate EFTS into an existing range infrastructure to demonstrate the scalability of system components, to provide a command controller that generated the EFTS waveform using an existing range infrastructure, and to provide a report documenting the results of the demonstration. The primary goal of the demonstration was to obtain operational experience with EFTS. Areas of operational experience include: mission planning, pre-flight configuration and testing, mission monitoring and recording, vehicle termination, developing mission procedures. and post mission data reduction and other post mission activities. An Advanced Medium-Range Air-to-Air Missile (AMRAAM) was selected to support the EFTS demonstration due to interest in future use of EFTS by the AMRAAM program, familiarity of EFTS by range personnel, and the availability of existing operational environment to support EFTS testing with available program funding. For demonstration purposes, the AMRAAM was successfully terminated using an EFTS receiver and successfully demonstrating EFTS. The EFTS monitoring software with spectrum analyzer and digital graphical display of aircraft, missile, and target were also demonstrated.

Tow, David↗
DOE OSTI2016

Multi-phased Approach for Detection Systems and Measures for Nuclear and other Radioactive Material Out of Regulatory Control

The Office of Nuclear Incident Policy and Cooperation and the Office of Nuclear Security Deterrence and Detection at the U.S. Department of Energy, National Nuclear Security Administration provide a multi-phased approach for detection systems and measures for nuclear and other radioactive material out of regulatory control in cargo shipments. The approach is designed using best practices to deter, detect, interdict, characterize, adjudicate, and recover illicit radiation sources. Two case studies will be presented which demonstrate the multi-phased approach to nuclear security.

46 INSTRUMENTATION RELATED TO NUCLEAR SCIENCE AND ↗
DOE OSTI2023

Cyber100 Compass User Guide

This document provides an overview of the Cyber100 Compass tool and serves as a guide to users interested in understanding the cybersecurity risks facing their clean energy transition. The National Renewable Energy Laboratory (NREL) developed the Cyber100 Compass tool for cyber risk assessment at the system-of-systems level for system planners trying to reach high levels of renewables. Two offices of the U.S. Department of Energy (DOE) - the Office of Electricity and the Office of Cybersecurity, Energy Security, and Emergency Response-funded NREL to develop this framework that will enable grid system planners to understand and mitigate cybersecurity risk for grids transitioning to high levels of renewable generation, including 100%. Cyber100 Compass can help systems planners apply the principle of security-by-design at scale. Investing in an upfront understanding of system-of-systems (where the constituent systems are operating entities of the different renewable resources) risks from high-renewable grids will result in a more resilient grid at a lower long-term cost.

24 POWER TRANSMISSION AND DISTRIBUTION↗
DOE OSTI2016

Game Theory for Proactive Dynamic Defense and Attack Mitigation in Cyber-Physical Systems

While there has been a great deal of security research focused on preventing attacks, there has been less work on how one should balance security and resilience investments. In this work we developed and evaluated models that captured both explicit defenses and other mitigations that reduce the impact of attacks. We examined these issues both in more broadly applicable general Stackelberg models and in more specific network and power grid settings. Finally, we compared these solutions to existing work in terms of both solution quality and computational overhead.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2017

FY16 Analysis report: Financial systems dependency on communications

Within the Department of Homeland Security (DHS), the Office of Cyber and Infrastructure Analysis (OCIA)'s National Infrastructure Simulation and Analysis Center (NISAC) develops capabilities to support the DHS mission and the resilience of the Nation’s critical infrastructure. At Sandia National Laboratories, under DHS/OCIA direction, NISAC is developing models of financial sector dependence on communications. This capability is designed to improve DHS's ability to assess potential impacts of communication disruptions to major financial services and the effectiveness of possible mitigations. This report summarizes findings and recommendations from the application of that capability as part of the FY2016 NISAC program plan.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2018

Analysis of Design Constraints and System Impact of DER Cryptographic Module

In designing a security module for inverter communications in a DER environment, it is critical to consider the impact of the additional security on the environment as well as what types of security is required for the various messages that must pass from the inverter to and from a utility. Also, since cyber security is more than just preventing an unauthorized user from viewing data, mechanisms for proving identity and ensuring that data cannot be altered without such a modification being discovered are needed. This is where the security principles of confidentiality, integrity, and availability come into play. For different types of communications, these different security principles may be important or not needed at all. Furthermore, the cost and constraints for applying cryptography for securing DER communications must be considered to help determine what is feasible within this environment and what will be the impact and cost of applying common cryptographic protections to inverter communications.

97 MATHEMATICS AND COMPUTING↗