Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “System Security”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 1,567 records · Page 87

Zero Trust Strategies for Chemical, Biological, Radiological, and Nuclear Detection Systems: D.1 Cyber Scenarios

The evolving landscape of cybersecurity necessitates a paradigm shift to a Zero Trust (ZT) model, which assumes breaches and continuously verifies trust. This approach reshapes how trust boundaries are established, focusing on identities, devices, networks, applications, and data, rather than solely relying on perimeter defenses such as firewalls. Central to this transformation is the National Institute of Standards and Technology's (NIST) Special Publication 800-207, outlining the Zero Trust Architecture (ZTA), along with Executive Order 14028, which mandates federal agencies to adopt ZT principles. Complementary to these efforts, the Cybersecurity and Infrastructure Security Agency (CISA) developed the Zero Trust Maturity Model (ZTMM), providing a framework with five pillars and three cross-cutting capabilities to guide agencies toward enhanced cybersecurity maturity. In support of these initiatives, the DHS Countering Weapons of Mass Destruction Office (CWMD) is applying ZT principles to secure Chemical, Biological, Radiological, and Nuclear (CBRN) detection systems. Recognizing the diverse deployment models and network connectivity of these systems—from stationary, non-networked units to mobile, cloud-connected devices—the Pacific Northwest National Laboratory (PNNL) is developing cybersecurity scenarios specifically for CBRN environments. These scenarios examine various configurations and technological capabilities, offering insights into the application of ZTMM pillars in enhancing the security postures of CBRN devices. The cybersecurity scenarios presented by PNNL are hypothetical, crafted to explore theoretical situations and stimulate discussion on the potential use or compromise of CBRN detection systems in varied contexts. These narratives are illustrative and do not reference any real events or actual networks. Instead, they employ generalized reference models to highlight concepts and potential issues within CBRN security, focusing on how Zero Trust strategies can be adapted to address these challenges effectively.

45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗

Analyzing Insider Risk Threat to the Internet of Things (IoT)

Recent technological advancement has created a growing convergence of innovation. From machine learning to ubiquitous computing to wireless networks and automation, the world is seeing new technology increasingly capable of connecting with each other. Devices and systems use open communications networks to interact, process information, and react. This is called the Internet of Things (IoT) and is comprised of physical devices that exchange data over networks, creating revolutionary possibilities. The most common way most people interact with an IoT is through ‘smart home’ products like Amazon’s Alexa, which use microphones, speakers, and phones to control a variety of devices, from lights and thermostats, to cameras, to appliances and vacuum cleaners. But the open nature of IoT networks—necessary for their ability to communicate and operate—also introduces privacy and security concerns. At a personal level, this might mean a hack into a home to steal private information, but when applied in broader industries like healthcare, transportation, manufacturing, or the military, this vulnerability can have serious consequences. As IoT usage and interconnectivity increases, so too does the susceptibility to malicious actors. And the entire system is only as secure as its least secure member. This creates particular risk and vulnerability to radiological material industries, as a competent insider adversary could utilize the IoT to potentially steal or access classified or sensitive information about employees, sites, or systems; or simply sabotage security or maintenance from a more remote—and less secure—device. The IoT relies on a secure network across the entire system, especially in transport which may lack the security of more permanent locations; if one device fails, it can create a ripple effect and an insider threat may seek to exploit that connectivity. While IoT benefits drive increased innovation and usage, there are also vulnerabilities an insider threat could exploit; this risk of an IoT to radiological material must be addressed in any mitigation effort.

Kinney, Justin↗

Manual Asset Inventory: NASA Kennedy Space Center

The National Aeronautics and Aerospace Administration (NASA) relies in the security and protection of the information and information systems to know the devices that are connected to the Agency networks whether these are business, mission, research, or engineering devices. The Agency uses different Information Technology resources in order to do this process automatically, however, there are some devices that need to be reported manually. As a result of this, every month the Agency distributes among its Information System Owners (ISOs) the Manual Asset Inventory, a document that consists of a Microsoft Excel spreadsheet with twenty field descriptions cells that has to be filled out by the ISO of every Security Plan in the Center [fifty three in total] and uploaded into the IT Security Enterprise Data Warehouse (ITSEC-EDW).

Presentation↗

Developing VSC-HVDC Oscillation Damping Control Constraints in Unit Commitment

High-voltage direct current (HVDC) systems within the existing power grids will play a pivotal role in enabling high share of renewable power integration and transportation electrification. There is a need for transmission planning models to accurately capture the impact of VSC-HVDC oscillation damping control on the system planning and model the constraints in the security constrained unit commitment (SCUC) problem. In this paper, the SCUC problem in a hybrid DC-AC grid considering damping on electromechanical inter-area oscillation is studied. An electromechanical oscillation-driven transmission capability constraints are derived from system swing equation and incorporated into the SCUC. Multiple system damping control scenarios are set based on the extracted plausible bounds of damping coefficient and inertia constant to linearize the nonlinear expressions. The SCUC problem with proposed constraints is tested on the IEEE 73-bus reliability test system (RTS) case via PLEXOS. The impact of the proposed constraints on regional generation, inertia, power flow, annual system cost, and renewable energy curtailment are fully assessed.

damping control↗

Towards a New Food System Assessment: AgMIP Coordinated Global and Regional Assessments of Climate Change

Agricultural stakeholders need more credible information on which to base adaptation and mitigation policy decisions. In order to provide this, we must improve the rigor of agricultural modelling. Ensemble approaches can be used to address scale issues and integrated teams can overcome disciplinary silos. The AgMIP Coordinated Global and Regional Assessments of Climate Change and Food Security (CGRA) has the goal to link agricultural systems models using common protocols and scenarios to significantly improve understanding of climate effects on crops, livestock and livelihoods across multiple scales. The AgMIP CGRA assessment brings together experts in climate, crop, livestock, economics, and food security to develop Protocols to guide the process throughout the assessment. Scenarios are designed to consistently combine elements of intertwined storylines of future society including, socioeconomic development, greenhouse gas concentrations, and specific pathways of agricultural sector development. Through these approaches, AgMIP partners around the world are providing an evidence base for their stakeholders as they make decisions and investments.

Ensembles↗

TPSAS-NF1676L-34012-DND

Earth’s climate system is highly interconnected, meaning that changes to the global climate influence the United States climatically and economically. In much the same way as European and Asian financial markets affect the U.S. economy, changes to ice sheet mass and energy flows in the far reaches of the planet affect our climate. Life on Earth is sensitive to climate conditions; human society is especially susceptible due to the climate-vulnerable, complex, and often fragile systems that provide food, water, energy, and security. Observed changes to the global climate affecting the United States include rising global temperatures, diminishing sea ice, melting ice sheets and glaciers, rising sea levels, etc. These documented changes have global economic and national security implications, including for the United States. For example, sea level rise alone is putting $100 billion dollars of U.S. military assets at risk, according to the Dept. of Defense. Arctic climate change continues to outpace the rest of the globe. Over the last 30 years, rapid and, in many cases, unprecedented changes to Arctic temperatures, sea ice, snow cover, land ice, and permafrost have occurred. While the Arctic may seem far away, changes in the Arctic climate system have a global reach, affecting sea level, the carbon cycle, atmospheric winds, ocean currents, and potentially the frequency of extreme weather. This presentation discusses the changes in the observed in the Arctic, the projected changes, and the potential impacts to us living the U.S.

Patrick C Taylor↗

Famine Early Warning Systems and Remote Sensing Data

This book describes the interdisciplinary work of USAID's Famine Early Warning System Network (FEWS NET) and its influence on how food security crises are identified, documented and the kind of responses that result. The book describes FEWS NET's systems and methods for using satellite remote sensing to identify and describe how biophysical hazards impact the lives and livelihoods of the population where they occur. It presents several illustrative case studies that will demonstrate the integration of both physical and social science disciplines in its work. FEWS NET s operational needs have driven science in biophysical remote sensing applications through its collaboration with the US Geological Survey, the National Aeronautics and Space Administration, National Oceanographic and Atmospheric Administration, and US Department of Agriculture, as well as methodologies in the social science domain through its support of the US Agency for International Development, UNWorld Food Program and numerous international non-governmental organizations such as Save the Children, Oxfam and others. Because FEWS NET is an organization that must provide a global picture of food insecurity to decision makers, the information it relies on are by necessity observable and able to be documented. Thus many aspects of traditional livelihood analysis, for example, cannot be used by FEWS NET as they rely upon relationships, and ways of expressing power and knowledge at the local scale that cannot be easily scaled up to express variations in access to food at a community level. The book focuses on the ways that remote sensing information is transformed into an understanding of the actions that must be taken in order to ensure that lives and livelihoods are protected, including describing the remote sensing observations and models needed to identify hazards and the information gathering requirements and analytical frameworks needed to understand their impact. Its focus is primarily analysis conducted in Africa, but also touches upon FEWS NET s work in Central America, Haiti and Afghanistan. As an organization that seeks to integrate social and physical science methodologies and strategies into its work on a daily basis, it is a fascinating and rich example of interdisciplinary knowledge generation and innovation.

Brown, Molly E.↗

UAS Service Supplier Framework for Authentication and Authorization

The Unmanned Aircraft Systems (UAS) Traffic Management (UTM) Service Supplier (USS) Framework for Authentication and Authorization (UFAA) is the basis for secure and confident data exchanges between the Flight Information Management System (FIMS) and the USS Network and within the USS Network itself. UFAA is built upon the OAuth 2.0 approach to federated authorization, with details supplied by various Internet Engineering Task Force (IETF) Request for Comment documents (RFCs). Whenever possible, a specific standard is used to support a design decision within UFAA, and when an applicable standard is not found/used, the technical decision is explained as much as possible. This document describes UFAA in detail. It is intended to serve as a reference for other key UTM documents and should be useful to many UTM stakeholders. This is an informative document. The requirements stated or implied in this document will need to be fully vetted and reviewed by appropriate stakeholders before becoming operational. It is highly encouraged that in any design decisions for future applicable standards that are counter to or missing from the decisions presented herein be justified in that future standard.

UTM↗

Nuclear Computational Resource Center Progress and Status Report

The Nuclear Computational Resource Center (NCRC) at Idaho National Laboratory (INL), supported by the United States Department of Energy Office of Nuclear Energy (DOE-NE), provides access to supercomputer systems and protected software in support of nuclear energy research and development. The NCRC vision recognizes the central role modeling and simulation plays in nuclear energy innovation as well as ensuring the safe, secure, and efficient operations of existing nuclear energy systems. To accomplish this vision, the NCRC supports processes and systems which provide access to computational tools, supercomputing systems, and training in support of nuclear energy innovation.

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗

Cutting planes for the multistage stochastic unit commitment problem

As renewable energy penetration rates continue to increase in power systems worldwide, new challenges arise for system operators in both regulated and deregulated electricity markets to solve the security-constrained coal-fired unit commitment problem with intermittent generation (due to renewables) and uncertain load, in order to ensure system reliability and maintain cost effectiveness. In this paper, we study a security-constrained coal-fired stochastic unit commitment model, which we use to enhance the reliability unit commitment process for day-ahead power system operations. In our approach, we first develop a deterministic equivalent formulation for the problem, which leads to a large-scale mixed-integer linear program. Then, we verify that the turn on/off inequalities provide a convex hull representation of the minimum-up/down time polytope under the stochastic setting. Next, we develop several families of strong valid inequalities mainly through lifting schemes. In particular, by exploring sequence independent lifting and subadditive approximation lifting properties for the lifting schemes, we obtain strong valid inequalities for the ramping and general load balance polytopes. Lastly, branch-and-cut algorithms are developed to employ these valid inequalities as cutting planes to solve the problem. Our computational results verify the effectiveness of the proposed approach.

29 ENERGY PLANNING, POLICY, AND ECONOMY↗

Robotic tape library system level testing at NSA: Present and planned

In the present of declining Defense budgets, increased pressure has been placed on the DOD to utilize Commercial Off the Shelf (COTS) solutions to incrementally solve a wide variety of our computer processing requirements. With the rapid growth in processing power, significant expansion of high performance networking, and the increased complexity of applications data sets, the requirement for high performance, large capacity, reliable and secure, and most of all affordable robotic tape storage libraries has greatly increased. Additionally, the migration to a heterogeneous, distributed computing environment has further complicated the problem. With today's open system compute servers approaching yesterday's supercomputer capabilities, the need for affordable, reliable secure Mass Storage Systems (MSS) has taken on an ever increasing importance to our processing center's ability to satisfy operational mission requirements. To that end, NSA has established an in-house capability to acquire, test, and evaluate COTS products. Its goal is to qualify a set of COTS MSS libraries, thereby achieving a modicum of standardization for robotic tape libraries which can satisfy our low, medium, and high performance file and volume serving requirements. In addition, NSA has established relations with other Government Agencies to complete this in-house effort and to maximize our research, testing, and evaluation work. While the preponderance of the effort is focused at the high end of the storage ladder, considerable effort will be extended this year and next at the server class or mid range storage systems.

Shields, Michael F.↗

Developing VSC-HVDC Oscillation Damping Control Constraints in Unit Commitment

High-voltage direct current (HVDC) systems within the existing power grids will play a pivotal role in enabling high share of renewable power integration and transportation electrification. There is a need for transmission planning models to accurately capture the impact of VSC-HVDC oscillation damping control on the system planning and model the constraints in the security constrained unit commitment (SCUC) problem. In this paper, the SCUC problem in a hybrid DC-AC grid considering damping on electromechanical inter-area oscillation is studied. An electromechanical oscillation-driven transmission capability constraints are derived from system swing equation and incorporated into the SCUC. Multiple system damping control scenarios are set based on the extracted plausible bounds of damping coefficient and inertia constant to linearize the nonlinear expressions. The SCUC problem with proposed constraints is tested on the Reliability Test System Grid Modernization Lab Consortium (RTS-GMLC) via PLEXOS. The impact of the proposed constraints on regional generation, inertia, power flow, annual system cost, and renewable energy curtailment are fully assessed.

damping control↗

Certification and prediction of post-disturbance states in dynamic security assessment

Dynamic security assessment usually involves the simulation of system dynamics under large disturbances. The instant large disturbance occurs, the post-disturbance state of the system could deviate significantly from the pre-disturbance one. It is desirable and necessary to develop an efficient method to certify the existence of state and predict the approximate post-disturbance state because: (1) faster warning can be made in online assessment; and (2) the dynamic simulator can be given better initial values to calculate precise solutions, which prevents convergence failure brought on by poor initial values. We propose a novel approach for efficiently certifying and predicting the post-disturbance states in dynamic security assessment. Based on the fixed-point power flow mapping approach applied to salient pole generator models, the criterion for determining the existence and uniqueness of the post-disturbance solution is derived, and the bounds of post-disturbance solution can be rigorously characterized.

24 POWER TRANSMISSION AND DISTRIBUTION↗

High Fidelity Simulations of Large-Scale Wireless Networks (Plus-Up)

Sandia has built a strong reputation in scalable network simulation and emulation for cyber security studies to protect our nation’s critical information infrastructures. Georgia Tech has preeminent reputation in academia for excellence in scalable discrete event simulations, with strong emphasis on simulating cyber networks. Many of the experts in this field, such as Dr. Richard Fujimoto, Dr. George Riley, and Dr. Chris Carothers, have strong affiliations with Georgia Tech. The collaborative relationship that we intend to immediately pursue is in high fidelity simulations of practical large-scale wireless networks using ns-3 simulator via Dr. George Riley. This project will have mutual benefits in bolstering both institutions’ expertise and reputation in the field of scalable simulation for cyber-security studies. This project promises to address high fidelity simulations of large-scale wireless networks. This proposed collaboration is directly in line with Georgia Tech’s goals for developing and expanding the Communications Systems Center, the Georgia Tech Broadband Institute, and Georgia Tech Information Security Center along with its yearly Emerging Cyber Threats Report. At Sandia, this work benefits the defense systems and assessment area with promise for large-scale assessment of cyber security needs and vulnerabilities of our nation’s critical cyber infrastructures exposed to wireless communications.

Onunkwo, Uzoma↗

Volatile-rich Asteroids in the Inner Solar System

Bennu (101195), target of the Origins, Spectral Interpretation, Resource Identification, Security, Regolith Explorer (OSIRIS-REx) mission, is a type-B asteroid with abundant spectral evidence for hydrated silicates, low thermal inertia “boulders” and frequent bursts of particle emission. We suggest that Bennu’s parent body formed in the outer solar system before it was perturbed into the asteroid belt and then evolved into a near-Earth object. We show that this is consistent with models of planetesimal evolution. Bennu has many characteristics expected for a dormant comet, and could potentially contain a minimum of 1 wt.% adsorbed water if its gross mineralogy is consistent with the Orgueil meteorite. This is in addition to any ice or water contained within the hydrous minerals themselves. Based on this hypothesis, we predict the properties of the samples that will be returned to Earth by the OSIRIS-REx mission, including abundant phyllosilicate minerals, amorphous hydrated silicates and low-density, very high-porosity aggregates, already observed by the OSIRIS-REx instrument suite. We predict enrichments in D/H and 15N/14N, high C/Mg ratios (>∼7 wt%), and a greater range of organic compositions than found in meteorites, including an organic component poor in aromatics, and a more labile organic fraction. Ammonium salts, ranging from NH4Cl to ammonium–organic acid salts could carry much of the nitrogen in comets, yet only NH4CH3COO and heavier salts are sufficiently stable to be found in these returned samples. Water adsorbed onto highly porous grains should also be detected provided that the sample return capsule remains below 300 K during Earth return, and this water should be isotopically heavy.

Joseph A. Nuth, III↗

Transportation Network Topologies

The existing U.S. hub-and-spoke air transportation system is reaching saturation. Major aspects of the current system, such as capacity, safety, mobility, customer satisfaction, security, communications, and ecological effects, require improvements. The changing dynamics - increased presence of general aviation, unmanned autonomous vehicles, military aircraft in civil airspace as part of homeland defense - contributes to growing complexity of airspace. The system has proven remarkably resistant to change. NASA Langley Research Center and the National Institute of Aerospace conducted a workshop on Transportation Network Topologies on 9-10 December 2003 in Williamsburg, Virginia. The workshop aimed to examine the feasibility of traditional methods for complex system analysis and design as well as potential novel alternatives in application to transportation systems, identify state-of-the-art models and methods, conduct gap analysis, and thus to lay a foundation for establishing a focused research program in complex systems applied to air transportation.

Alexandrov, Natalia↗

Employing a Hardware-in-the-Loop Approach to Realize a Fully Homomorphic Controller for a Small Modular Advanced High Temperature Reactor

This paper addresses the cybersecurity challenges of advanced nuclear reactors by integrating fully homomorphic encryption (FHE) into their control systems, enabling encrypted processing of control signals without compromising functionality. Advanced nuclear reactors, including Small Modular Reactors (SMRs) and microreactors, aim to achieve autonomous and remote operations, reducing costs and enhancing competitiveness. However, these advancements expand the attack surface for cyberattacks, particularly in autonomous and remote operation scenarios. Cyberattacks can exploit vulnerabilities to manipulate physical processes, causing shutdowns, asset damage, or public harm. Such attacks begin with passive reconnaissance, where adversaries intercept communications or observe behaviors to gather information, which is then leveraged to execute cyber-physical attacks by injecting malicious commands. Nuclear power must adopt cybersecurity protection measures to secure the integrity and availability of their digital control systems. This paper demonstrates the application of FHE to secure operations by enabling encrypted processing of sensitive signals and parameters -- ensuring privacy without exposing data. FHE supports secure mathematical operations on encrypted data without requiring decryption. Using a hardware-in-the-loop (HIL) approach, this paper implements an FHE-integrated controller on a BeagleBone Black (BBB) controlling a simulation of the Small Modular Advanced High Temperature Reactor (SmAHTR). By doing so, the encrypted controller protects the integrity of critical set points and control signals during transmission and processing. Thus, FHE-integrated controllers enhance secure operations of advanced nuclear reactors while maintaining functionality.

control systems↗