Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “operating systems security”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 1,603 records · Page 89

Formal Verification of Large Software Systems

We introduce a scalable proof structure to facilitate formal verification of large software systems. In our approach, we mechanically synthesize an abstract specification from the software implementation, match its static operational structure to that of the original specification, and organize the proof as the conjunction of a series of lemmas about the specification structure. By setting up a different lemma for each distinct element and proving each lemma independently, we obtain the important benefit that the proof scales easily for large systems. We present details of the approach and an illustration of its application on a challenge problem from the security domain

Yin, Xiang↗

Towards Reliable Evaluation of Anomaly-Based Intrusion Detection Performance

This report describes the results of research into the effects of environment-induced noise on the evaluation process for anomaly detectors in the cyber security domain. This research was conducted during a 10-week summer internship program from the 19th of August, 2012 to the 23rd of August, 2012 at the Jet Propulsion Laboratory in Pasadena, California. The research performed lies within the larger context of the Los Angeles Department of Water and Power (LADWP) Smart Grid cyber security project, a Department of Energy (DoE) funded effort involving the Jet Propulsion Laboratory, California Institute of Technology and the University of Southern California/ Information Sciences Institute. The results of the present effort constitute an important contribution towards building more rigorous evaluation paradigms for anomaly-based intrusion detectors in complex cyber physical systems such as the Smart Grid. Anomaly detection is a key strategy for cyber intrusion detection and operates by identifying deviations from profiles of nominal behavior and are thus conceptually appealing for detecting "novel" attacks. Evaluating the performance of such a detector requires assessing: (a) how well it captures the model of nominal behavior, and (b) how well it detects attacks (deviations from normality). Current evaluation methods produce results that give insufficient insight into the operation of a detector, inevitably resulting in a significantly poor characterization of a detectors performance. In this work, we first describe a preliminary taxonomy of key evaluation constructs that are necessary for establishing rigor in the evaluation regime of an anomaly detector. We then focus on clarifying the impact of the operational environment on the manifestation of attacks in monitored data. We show how dynamic and evolving environments can introduce high variability into the data stream perturbing detector performance. Prior research has focused on understanding the impact of this variability in training data for anomaly detectors, but has ignored variability in the attack signal that will necessarily affect the evaluation results for such detectors. We posit that current evaluation strategies implicitly assume that attacks always manifest in a stable manner; we show that this assumption is wrong. We describe a simple experiment to demonstrate the effects of environmental noise on the manifestation of attacks in data and introduce the notion of attack manifestation stability. Finally, we argue that conclusions about detector performance will be unreliable and incomplete if the stability of attack manifestation is not accounted for in the evaluation strategy.

cyber defense↗

Wind Energy Deployment in Isolated Islanded Power Systems: Challenges & Realities (Poster)

Rising costs of fuels, energy surety, and the carbon impacts of diesel fuel are driving remote and islanded communities dependent on diesel power generation to look for alternatives. Over the past few years, interest in using wind energy to reduce diesel fuel consumption has increased dramatically, potentially providing economic, environmental, social, and security benefits to the energy supply of isolated and islanded communities. However, the task of implementing such systems has remained elusive and subject to many cases of lower-than-expected performance. This poster describes the current status of integrating higher contribution wind technology into islanded power systems, the progress of recent initiatives implemented by the U.S. Department of Energy and Interior, and some of the lingering technical and commercial challenges. Operating experience from a number of power systems is described. The worldwide market for wind development in islanded communities (some of these supplying large domestic loads) provides a strong market niche for the wind industry, even in the midst of a slow global recovery.

17 WIND ENERGY↗

Synchrophasors-based Master State Awareness Estimator for Cybersecurity in Power Grid: Testbed Implementation & Field Demonstration

The integration of distributed energy resources(DERs) and expansion of complex network in the distribution grid requires an advanced distributed state estimator to monitor the grid health at micro-level. The distribution state estimator will improve the situational awareness and resiliency of distributed power system. This paper proposes a synchrophasors-based master state awareness (MSA) estimator to enhance the cybersecurity in distribution grid by providing a real-time estimation of system operating states to control center operators. In this paper, the proposed MSA estimator utilizes only phasor measurements, bus magnitudes and angles, from phasor measurement units (PMUs),deployed in local substations, to estimate the system states and also detects data integrity attacks, such as load tripping attack that disconnects the load. To validate the proof of concept, we implement the proposed methodology in cyber-physical testbed environment at the Idaho National Laboratory (INL) Electric Grid Security Testbed. Further, to address the “valley of death” and support technology commercialization, field demonstration is also performed at the Critical Infrastructure Test Range Complex(CITRC) at the INL. Our experimental results reveal a promising performance in detecting load tripping attack and providing an accurate situational awareness through an alert visualization dashboard in real-time

42 ENGINEERING↗

Development and Application of the Stakeholder Tool for Assessing Radioactive Transportation (START) - 16516

The U.S. Department of Energy, Office of Nuclear Energy is laying the groundwork for implementing interim storage of spent nuclear fuel (SNF) pursuant to the Administration's Strategy for the Management and Disposal of Used Nuclear Fuel and High-Level Radioactive Waste. This effort includes planning to address technical and logistical aspects of transporting SNF to an interim storage facility. A key project component is the development and utilization of a decision-support tool to evaluate transportation routing options and emergency preparedness. START (Stakeholder Tool for Assessing Radioactive Transportation) is a web-based application that utilizes geographic information systems (GIS) technology to represent transportation network operations as well as proximate features, such as tribal lands, emergency response capability, schools and environmentally-sensitive areas. Modes and routes between shipment origins and destinations designated by the user can be evaluated according to multiple routing criteria, and users can impose constraints that require the route to pass through or avoid specified locations. Considerable information is produced describing route efficiency, safety, security and environmental exposure that enable stakeholders to understand the implications of alternative route options. This paper describes START's capabilities and illustrates its use. (authors)

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗

Small CaH{sub 2} Moderated Thermal Reactor for Surface Power Generation I: Conceptual Design

National Aeronautics and Space Administration (NASA) published 'Journey to Mars' on October 8, 2015, stating their plan to send human to Mars for exploration, scientific research and colonization of Mars. Mission time on Martian surface is supposed to be ∼1 year, therefore, a surface power generation system is required for human habitation on Mars. Even though solar power and chemical battery have been used for the past missions, the former cannot generate power during month-scale dust storm on Mars, and the latter is not reliable for long-term use under a cold environment. On the other hand, nuclear power provides stable power even on Mars surface and, since kilowatt class power system is required in the planned mission, a fission power system is better than a radioisotope battery. An 8-year operation is required for the Mars surface power generation system with electrical power of 10 to 100 kWe and specific power of >5 We/kg, which means the system weight needs to be below 2000 kg in the case of 10 to 100 kWe system. In the current study, stretch goals for surface fission power system were set as follows: electric power of 20 kWe and total system weight below 1000 kg. In addition, nuclear security and critical safety are essential features for the surface fission power system considering launch accidents. A sufficient level of nuclear security is needed to prevent terrorists from obtaining nuclear materials even the reactor falls in a geographic area dominated by terrorists. From this view point, it is preferable not to use highly enriched uranium with a space reactor that can be diverted to nuclear weapons. Also, a nuclear reactor core should not reach criticality during a launch accident where the reactor core can be compressed by collision with sea or land. A novel concept of surface power reactor system that satisfies the above requirements is proposed in the current study. (authors)

21 SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLANTS↗

Pilot-Scale Modular Research Facility for Acidic Water Pollution Cleanup and Domestic Production of Critical Minerals for National Security

A recent study by Penn State researchers revealed that Pennsylvania AMD streams originate from abandoned mines, with coal refuse piles of the lower Kittanning coal seam containing the most valuable heavy rare earth elements. Penn State has developed a three-stage process to recover these critical minerals, tested it for proof of concept, and secured a patent. Funded by the US DOE, a modular pilot-scale research and development unit has been designed and built to process 1,000 gallons per day of AMD from a site managed by the Pennsylvania Department of Environmental Protection (PA DEP). The system will selectively recover iron, aluminum, rare earth elements, and cobalt-nickel-manganese concentrates from AMD, followed by a proprietary downstream purification process. These operations aim to produce concentrates of critical minerals while treating acid mine drainage to meet environmental standards and evaluate different feedstocks. This presentation will describe the design, operation, and innovations of the proposed process and pilot facility, emphasizing its role in promoting sustainable recovery of critical minerals from legacy waste streams.

Pisupati, Sarma V [Center for Critical Minerals, T↗

Security System Responsive to Optical Fiber Having Bragg Grating

An optically responsive electronic lock is disclosed comprising an optical fiber serving as a key and having Bragg gratings placed therein. Further, an identification system is disclosed which has the optical fiber serving as means for tagging and identifying an object. The key or tagged object is inserted into a respective receptacle and the Bragg gratings cause the optical fiber to reflect a predetermined frequency spectra pattern of incident light which is detected by a decoder and compared against a predetermined spectrum to determine if an electrical signal is generated to either operate the lock or light a display of an authentication panel.

Gary, Charles K.↗

Analysis of Unit-Level Changes in Operations with Increased SPP Wind from EPRI/LCG Balancing Study

Wind power development in the United States is outpacing previous estimates for many regions, particularly those with good wind resources. The pace of wind power deployment may soon outstrip regional capabilities to provide transmission and integration services to achieve the most economic power system operation. Conversely, regions such as the Southeastern United States do not have good wind resources and will have difficulty meeting proposed federal Renewable Portfolio Standards with local supply. There is a growing need to explore innovative solutions for collaborating between regions to achieve the least cost solution for meeting such a renewable energy mandate. The Department of Energy funded the project 'Integrating Midwest Wind Energy into Southeast Electricity Markets' to be led by EPRI in coordination with the main authorities for the regions: SPP, Entergy, TVA, Southern Company and OPC. EPRI utilized several subcontractors for the project including LCG, the developers of the model UPLAN. The study aims to evaluate the operating cost benefits of coordination of scheduling and balancing for Southwest Power Pool (SPP) wind transfers to Southeastern Electric Reliability Council (SERC) Balancing Authorities (BAs). The primary objective of this project is to analyze the benefits of regional cooperation for integrating mid-western wind energy into southeast electricity markets. Scenarios were defined, modeled and investigated to address production variability and uncertainty and the associated balancing of large quantities of wind power in SPP and delivery to energy markets in the southern regions of the SERC. DOE funded Oak Ridge National Laboratory to provide additional support to the project, including a review of results and any side analysis that may provide additional insight. This report is a unit-by-unit analysis of changes in operations due to the different scenarios used in the overall study. It focuses on the change in capacity factors and the number of start-ups required for each unit since those criteria summarize key aspects of plant operations, how often are they called upon and how much do they operate. The primary analysis of the overall project is based on security-constrained unit commitment (SCUC) and economic dispatch (SCED) simulations of the SPP-SERC regions as modeled for the year 2022. The SCUC/SCED models utilized for the project were developed through extensive consultation with the project utility partners, to ensure the various regions and operational practices are represented as best as possible in the model. SPP, Entergy, Oglethorpe Power Company (OPC), Southern Company, and the Tennessee Valley Authority (TVA) actively participated in the project providing input data for the models and review of simulation results and conclusions. While other SERC utility systems are modeled, the listed SERC utilities were explicitly included as active participants in the project due to the size of their load and relative proximity to SPP for importing wind energy.

17 WIND ENERGY↗

A Low-Tech, Low-Budget Storage Solution for High Level Radioactive Sources

The need for safe, secure, and economical storage of radioactive material becomes increasingly important as beneficial uses of radioactive material expand (increases inventory), as political instability rises (increases threat), and as final disposal and treatment facilities are delayed (increases inventory and storage duration). Several vendor-produced storage casks are available for this purpose but are often costly — due to the required design, analyses, and licensing costs. Thus the relatively high costs of currently accepted storage solutions may inhibit substantial improvements in safety and security that might otherwise be achieved. This is particularly true in areas of the world where the economic and/or the regulatory infrastructure may not provide the means and/or the justification for such an expense. This paper considers a relatively low-cost, low-technology radioactive material storage solution. The basic concept consists of a simple shielded storage container that can be fabricated locally using a steel pipe and a corrugated steel culvert as forms enclosing a concrete annulus. Benefits of such a system include 1) a low-tech solution that utilizes materials and skills available virtually anywhere in the world, 2) a readily scalable design that easily adapts to specific needs such as the geometry and radioactivity of the source term material), 3) flexible placement allows for free-standing above-ground or in-ground (i.e., below grade or bermed) installation, 4) the ability for future relocation without direct handling of sources, and 5) a long operational lifetime . ‘Le mieux est l’ennemi du bien’ (translated: The best is the enemy of good) applies to the management of radioactive materials – particularly where the economic and/or regulatory justification for additional investment is lacking. Development of a low-cost alternative that considerably enhances safety and security may lead to a greater overall risk reduction than insisting on solutions that remain economically and/or politically ‘out of reach’.

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗

Communication Network Layer State Estimation Measurement Model for a Cyber-Secure Smart Grid

Network communication has been proven to be a very important tool and a key factor in the recent development and progress of the power grid operation. It is also considered as the foundation for the smart grid because information and communication are integrated into electricity distribution to achieve reliable and accurate knowledge of the power grid. In previous years, absorbing energy from substations and delivering it to customers was the only type of interaction we knew between utility companies and customers. Presently, the growing connections of small distributed generation units caused by the cost reduction of most of the technologies used in generation and storage of electrical energy, along with the potential benefits of renewable energy have pushed many researchers to look into the improvement of information and communication technologies (ICT) in order to ensure a bidirectional flow of power and data. Moreover, the evolution of information and communication technologies and its applications to smart grid have converted the smart grid into a cyber-physical system where vulnerabilities and additional security challenges such as cyber-threats and cyber-attacks have emerged. Previously, we have demonstrated that using machine learning-based processing on data gathered from communication networks and the power grid was a promising solution for detecting cyber threats by implementing a co-simulation of cyber-security for cross-layer strategy. Since the majority of the challenges observed can only be solved in the network communication layer, we present in this work a physics-based state estimation model of the communication network system towards enhanced cyber-physical security of the smart grid. Information integration with the previously developed machine learning model is developed, providing a enhanced cyber-physical security application for the smart grid. Easy-to-implement model, without hard-to-derive parameters, highlight potential aspects of the model for real-life applications.

Mathieu, Reynold↗

A Scalable HPC Insider Threat Monitoring System

Cyber Equations, Inc. is reporting on the results of its DOE SBIR Phase I project for the development of a Scalable HPC Insider Threat Monitoring System. This final report to the Department of Energy for Task DE-FOA-0001618 covers the period from 02/21/2017 to 02/20/2018 and summarizes the larger research accomplishments, which can be divided in theoretical and laboratory experiments. One of the many challenges for the U.S. Department of Energy (DOE) is the support of the high-performance computing (HPC) centers while providing quality information services, strategic vision, leadership, technical expertise, and capabilities necessary to enable the DOE to deliver effective, efficient, economical, and secure HPC services. In order to realize a secure DOE laboratory enterprise, DOE facilities operations must counter a wide range of cyber insider threats, from unsophisticated adversaries up to advanced, nation state sponsored actors. The DOE laboratories also presents an enormous insider attack surface of an ever-growing number of computers, networks, and devices all running a myriad of software. In addition, the DOE laboratories are connected to a variety of external organizations which multiplies the possibility of insider threat. During this SBIR project Cyber Equations developed a strategic combination of supervised and unsupervised machine learning techniques to control scale and classify whether entities, such as hosts, actors, or documents, are showing suspicious insider behavior. We conducted experiments using real cyber data to show that changes in observable behavior (e.g., changes in outbound traffic patterns) are indicative of attacks executing (e.g., insiders exfiltrating data, bots calling home, or an attack spreading). The features and methods we use, have been used in the anomaly detection research and development community for a significant amount of time and robust implementations are openly available. K-Means clustering, Decision Trees, and Support Vector Machine based classifiers are readily available through the R language and open source H20 machine learning framework. The Cyber Equations approach is novel in its use of these classifiers combined with Hadoop based parallel processing technology. The five stages of processing used by CyberInsider improve scalability and reduce the high number of false positives normally associated with network anomaly detection. In summary, the Cyber Equations has successfully accomplished all of its Phase I tasks and demonstrated the feasibility of the Insider Threat Monitoring System.

97 MATHEMATICS AND COMPUTING↗

The Asteroid Redirect Mission (ARM): Exploration of a Former Binary NEA?

The National Aeronautics and Space Administration (NASA) is developing the Asteroid Redirect Mission (ARM) as a capability demonstration for future human exploration, including use of high-power solar electric propulsion, which allows for the efficient movement of large masses through deep space. The ARM will also demonstrate the capability to conduct proximity operations with natural space objects and crewed operations beyond the security of quick Earth return. The Asteroid Redirect Robotic Mission (ARRM), currently in formulation, will visit a large near-Earth asteroid (NEA), collect a multi-ton boulder from its surface, conduct a demonstration of a slow push planetary defense technique, and redirect the multi-ton boulder into a stable orbit around the Moon. Once returned to cislunar space in the mid-2020s, astronauts aboard an Orion spacecraft will dock with the robotic vehicle to explore the boulder and return samples to Earth. The ARM is part of NASA's plan to advance technologies, capabilities, and spaceflight experience needed for a human mission to the Martian system in the 2030s. The ARM and subsequent availability of the asteroidal material in cis-lunar space, provide significant opportunities to advance our knowledge of small bodies in the synergistic areas of science, planetary defense, and in-situ resource utilization (ISRU). The current reference target for the ARM is NEA (341843) 2008 EV5, which may have been the primary body of a former binary system (Busch et al., 2011; Tardivel et al., 2016). The ARRM will perform several close proximity operations to investigate the NEA and map its surface. A detailed investigation of this object may allow a better understanding of binary NEA physical characteristics and the possible outcomes for their evolution. An overview of the ARM robotic and crewed segments, including mission operations, and a discussion of potential opportunities for participation with the ARM will be provided in this presentation.

Abell, P. A.↗

Dynamic Role-Based Access Control Policy for Smart Grid Applications: An Offline Deep Reinforcement Learning Approach

Role-based access control (RBAC) is adopted in the information and communication technology domain for authentication purposes. However, due to a very large number of entities within organizational access control (AC) systems, static RBAC management can be inefficient, costly, and can lead to cybersecurity threats. In this paper, a novel hybrid RBAC model is proposed, based on the principles of offline deep reinforcement learning (RL) and Bayesian belief networks. The considered framework utilizes a fully offline RL agent, which models the behavioral history of users as a Bayesian belief-based trust indicator. Thus, the initial static RBAC policy is improved in a dynamic manner through off-policy learning while guaranteeing compliance of the internal users with the security rules of the system. By deploying our implementation within the smart grid domain and specifically within a Distributed Energy Resources (DER) ecosystem, we provide an end-to-end proof of concept of our model. Finally, detailed analysis and evaluation regarding the offline training phase of the RL agent are provided, while the online deployment of the hybrid RL-based RBAC model into the DER ecosystem highlights its key operation features and salient benefits over traditional RBAC models.

32 ENERGY CONSERVATION, CONSUMPTION, AND UTILIZATI↗

Stormwater Pollution Prevention Plan for the TA-03-22 Power and Steam Plant, Los Alamos National Laboratory, Revision 3, January 2018

This Storm Water Pollution Prevention Plan (SWPPP) was developed in accordance with the provisions of the Clean Water Act (33 U.S.C. §§1251 et seq., as amended), and the Multi-Sector General Permit for Storm Water Discharges Associated with Industrial Activity (U.S. EPA, June 2015) issued by the U.S. Environmental Protection Agency (EPA) for the National Pollutant Discharge Elimination System (NPDES) and using the industry specific permit requirements for Sector O-Steam Electric Generating Facilities as a guide. This SWPPP applies to discharges of stormwater from the operational areas of the TA-03-22 Power and Steam Plant at Los Alamos National Laboratory. Los Alamos National Laboratory (also referred to as LANL or the “Laboratory”) is owned by the Department of Energy (DOE), and is operated by Los Alamos National Security, LLC (LANS). Throughout this document, the term “facility” refers to the TA-03-22 Power and Steam Plant and associated areas. The current permit expires at midnight on June 4, 2020.

54 ENVIRONMENTAL SCIENCES↗

Developing a Strategy for Full Nuclear Plant Modernization

Recognizing the important role commercial nuclear power generation plays in the powering the economy and providing energy security to the nation, the U.S. Department of Energy (DOE) has established the Light Water Reactor Sustainability (LWRS) program to perform research and development (R&D) that further establishes the technical foundations for managing the long-term, safe, and economical operation of nuclear power plants (NPPs). One particular R&D area in the LWRS program is the Plant Modernization pathway, which includes human factors R&D and instrumentation and control systems engineering to enable full plant modernization. By funding R&D on plant modernization, the LWRS program provides important technical information that can be used by decision makers on how to best proceed with modernizing the existing fleet of NPPs. Under the LWRS program Plant Modernization pathway, a considerable amount of R&D has been performed in the human factors and I&C engineering areas. This work has been done in collaboration with many different U.S. utilities, and focused on both control room instrumentation and control (I&C) upgrades, and I&C upgrades in the field. The work performed to date under the LWRS program has had a notable impact on the ability for these utilities to continue to operate their respective fleets of reactors, and LWRS program researchers are intent on doing even more. In order to do this, a more unified strategy for full nuclear plant modernization needs to be developed. This report documents the latest step LWRS program researchers have taken to develop this strategy. Taken together with prior reports written on this specific topic the work described here provides an even clearer picture on what the strategy for full nuclear plant modernization should look like.

99 GENERAL AND MISCELLANEOUS↗

MSGP Stormwater Pollution Prevention Plan for: TA-03-38 Carpentry and Metal Fabrication Shops, Triad National Security, LLC (Triad), Los Alamos National Laboratory, January 2019, Revision 0

This Stormwater Pollution Prevention Plan (SWPPP) was developed in accordance with the provisions of the Clean Water Act (33 U.S.C. §§1251 et seq., as amended), and the United States Environmental Protection Agency (EPA) National Pollutant Discharge Elimination System (NPDES) Multi-Sector General Permit for Stormwater Discharges Associated with Industrial Activity (MSGP) (U.S. EPA, June 2015) issued by EPA, and using the industry specific permit requirements for Sector A-Timber Products and Sector AA-Fabricated Metal Products as a guide. The applicable stormwater discharge permit is EPA General Permit Tracing Number NMR050013 [Triad National Security, LLC (Triad)]. This SWPPP applies to discharges of stormwater from the operational areas of the TA-03-38 Carpentry and Metal Fabrication Shops (38 Shops) at Los Alamos National Laboratory. Los Alamos National Laboratory (also referred to as LANL or the “Laboratory”) is owned by the Department of Energy (DOE), and is operated by Triad. Throughout this document, the term “facility” refers to the TA-03-38 Carpentry Shop (CS) and/or the Metal Fabrication Shop (MFS). The current MSGP expires at midnight on June 4, 2020.

54 ENVIRONMENTAL SCIENCES↗

PLC Vulnerabilities and Mitigations

Programmable Logic Controllers (PLCs) are used extensively in many high-importance industrial and nonindustrial settings including controlling elevators, manufacturing machines, and utility facilities such as power and natural gas, however cybersecurity protection for them has been neglected. Within recent years, PLCs have been put under more security scrutiny and experts have advocated for changes from the addition of protocol encryption and network segmentation to intrusion detection systems on the PLCs themselves. While PLC security is critical, a large portion of the PLCs available today will never receive these changes due to being legacy or the difficulty of overhauling the security on existing systems. Due to the infeasibility of applying many recommended security measures towards currently available machines, we aim to provide realistic and affordable best practices for hardening PLCs. We will first conduct security analysis and consider attack vectors within our target PLC. Once we’ve analyzed the device’s security, we will evaluate a variety of mitigation methods and create guidelines to effectively reduce the threat posed by PLC attacks with minimal disruption to operations.

42 ENGINEERING↗