Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “IT security”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 163 records · Page 9
All sourcesNASA NTRSDOE OSTI
NASA NTRS2018

Securing and Auto-Synchronizing Communication over Free-Space Optics Using Quantum Key Distribution and Chaotic Systems

Free-Space Optical (FSO) communication provides very large bandwidth, relatively low cost, low power, low mass of implementation, and improved security when compared to conventional Free-Space Radio-Frequency (FSRF) systems. In this paper, we demonstrate a communication protocol that demonstrates improved security and longer-range FSO communication, compared to existing FSO security techniques, such as N-slit interferometers. The protocol integrates chaotic communications with Quantum Key Distribution (QKD) techniques. A Lorenz chaotic system, which is inherently secure and auto-synchronized, is utilized for secure data communications over a classical channel, while QKD is used to exchange crucial chaotic system parameters over a secure quantum channel. We also provide a concept of operations for a NASA mission combining chaotic communications and QKD operating synergistically in an end-to-end space communications link. The experimental simulation results and analysis are favorable towards our approach.

Chaotic Communication↗
DOE OSTI2023

Methodology and Tool for the Physical Security Analysis of Micro and Advanced Reactors

This work proposes a dynamic evaluation methodology to relax the conservatism in physical security evaluation, by leveraging an ongoing work in the Light Water Reactor Sustainability pathway. This methodology is implemented in a dynamic risk assessment tool named Event Modeling Risk Assessment using Linked Diagrams (EMRALD). The work extends EMRALD’s capability to support a sandbox feature where analysts can easily create attack scenarios and modify advanced/small modular reactor (A/SMR) security and safety features using templates. This approach saves time and cost since the analysis does not require creating detailed computer-aided design models, as is commonly required in commercial force-on-force software tools. EMRALD is completely free to use at https://emraldapp.inl.gov. We have developed basic templates including physical barriers, intrusion sensors, physical areas, and safety actions, that can be downloaded from EMRALD’s GitHub site: https://github.com/idaholab/EMRALD. These templates use generic data commonly used for training purposes, which do not reflect any actual operating nuclear reactor. Users may adjust the data in the templates with their own dataset and/or create new templates in EMRALD. The proposed methodology combines security and safety by assessing sabotage effects up to the radiological consequence to the public instead of merely the core damage state. This practice follows the industry standard for advanced non-light-water reactors currently proposed for endorsement by the Nuclear Regulatory Commission. The combination of security and safety is expressed in an achievability-consequence chart. EMRALD can be used to generate data for this chart. A hypothetical case study using a representative sodium-cooled fast reactor (SFR) facility is presented in this report to demonstrate this methodology. This case study does not contain any actual nuclear plant information. This work will benefit A/SMR vendors and utilities to implement security by design during the reactor design iteration phase, such that they do not have to perform upgrades and retrofits to the reactor after it is installed to improve its physical protection system. The tool may also be used to analyze domestic or foreign reactor designs to support the International Nuclear Security Techniques for Advanced Reactors (INSTAR) bilateral missions. Future works are planned to implement the methodology on a reference SFR reactor and a reference high-temperature gas-cooled reactor to obtain insights and lessons-learned for the A/SMR community.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2024

Conceptualizing Energy Security and Resilience

Climate resilience and energy resilience are inextricably linked, since the transition to a safe and secure grid powered by renewables is central to both adaptation and mitigation efforts. As geopolitical tensions intensify and it becomes clear how integral supply chains are to our clean energy future, the term "energy security" has become a central concept, similar to resilience in the climate and energy lexicon. This project seeks to understand the role of energy system resilience within energy security. The key research questions are: "How are energy system resilience and energy security related?" and "What is the role of renewables within both security and resilience?" A strong conceptual understanding of these terms will set the stage for truly accelerating secure and resilient innovations at scale.

climate resilience↗
DOE OSTI2020

Introducing the Journal of Chemical Education’s Special Issue on Chemical Security

Chemical security can be described as the practice of protecting chemicals from people. This editorial introduces the Special Issue on Chemical Security. In this article, we present a concise history of the use of chemicals as weapons and briefly describe consolidated global approaches needed to decrease the security risks from chemicals. We briefly introduce the contributions to this Special Issue from scientists and educators around the world on the topic of chemical security. Given recent high-profile global events that involved chemicals as weapons, improving chemical security awareness and competency is a critical need. We hope this Special Issue continues to generate conversation and collaboration on this important topic and enables educators to teach chemical security principles in their classrooms and laboratories.

37 INORGANIC, ORGANIC, PHYSICAL, AND ANALYTICAL CH↗
DOE OSTI2024

Blockchain-Enabled Secure Device-to-Device Communication in Software-Defined Networking

The Internet of Things (IoT) continues to increase the demand for seamless communication among IoT devices. The rapid growth of IoT devices has led to an exponential increase in device-to-device (D2D) communication within the Software-Defined Networking (SDN), though it enables a flexible archi-tecture for managing network resources. However, traditional security models face challenges (e.g., Security, privacy, and trust) in addressing the dynamic and decentralized nature of these communications. Despite of these challenges, this paper proposes a novel approach that leverages blockchain technology to enhance the security, privacy, and trustworthiness of D2D communication within an SDN environment. The proposed approach integrates blockchain nodes in sDN components to establish a decentralized ledger for transparent and verifiable records. Smart contracts enforce authentication rules to ensure that only authenticated devices can access the network and engage in transactions securely. It also automates the security policies to ensure temper resistance execution using the cryptographic mechanism for data integrity and authentic communication. The Implementation of the proposed algorithms validates the resilience of the proposed approach against cyberattacks. Overall, the proposed approach enables efficient and secure D2D communication for resilient SDN infrastructure in IoT ecosystems.

Das, Debashis↗
DOE OSTI2020

Light Water Reactor Sustainability Program: September 2019 Physical Security Stakeholder Working Group Meeting

The LWRS Program Physical Security Pathway held the first meeting of the Physical Security Stakeholder working group on September 10-12, 2019 at Sandia National Laboratories. This working group is comprised of nuclear enterprise physical security stakeholders and the meeting included over 10 Utilities representing roughly 60 nuclear power plants, two staff from the Nuclear Regulatory Commission, physical security vendors, the Nuclear Energy Institute, the Electric Power Research Institute, and staff from Sandia National Laboratories and Idaho National Laboratory. The working group was established with the objectives of providing stakeholder feedback to the LWRS Program on their research and development needs and priorities, socializing the progress of Physical Security Pathway initiatives, and identifying opportunities for additional engagement and participation of stakeholders in the pathway research activities. The working group also provided a forum for physical security professionals to share common experiences and recommend prioritized activities based on their common needs.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗
DOE OSTI2020

National-Tribal Critical Infrastructure Protection: Collaboration for Extraordinary National Security Benefit

This paper examines national and tribal collaborative opportunities to get ahead of the critical infrastructure insecurity problem. Recommendations are viewed through the lens of the Sandia Labs Tribal Cyber-Energy initiative and national security projects. Recommendations include 1) Collaboratively address national priority and shared challenges to gain faster and better solutions to national priority problems on a smaller yet comprehensive American Indian and Alaskan Native sovereign single-point of authority scale 2) Utilize newer standards-based technologies to provide scalable, capable, and manageable solutions for greatly expanded and connected national critical infrastructures 3) Employ Cyber-Physical-Resilient design preliminary analysis to define concept- to-disposition design requirements for preemptive critical infrastructure risk mitigation and baked-in security; 4) Develop data-centric protection to provide increased information asset protection as data shifts from data-owner operated on-premises infrastructure to virtual service provider data-steward owned and operated off-premises infrastructure; and 5) Balance shared solutions with the National Institute of Science and Technology (NIST) Cybersecurity and Risk Management frameworks, and the System Security Engineering Guidelines. As yet unallocated federal funding would support research, development, the timely application of National-Tribal critical infrastructure protection, and critical infrastructure Cyber disruption response and recovery with extraordinary mutual benefits for the foreseeable future. The Critical Infrastructure Insecurity Problem: Rapid modernization and expansive connectivity are due to advances in Information and Communications Technologies that have sweeping cyber impact across all critical infrastructure sectors. Supervisory Control and Data Acquisition and Industrial Control Systems are particularly impacted as systems long separated from the Internet are now being connected and computerized. Virtualization and mobility create a Data Everywhere-User Anywhere paradigm that has evaporated the enterprise network perimeter. There are multi-front technological challenges at play, where long depended on technologies simply don't scale to current needs resulting in a digital dichotomy of competing old and new standards. New standards-based technologies scale but are not as well-known or as widely deployed, which leaves decision makers, stakeholders, and the workforce in a quandary, caught mid-stream between the technological past and the virtual future. Rapid and expansive cyber threat accompanies disruptive change in connectivity and computational dependencies. A lack of action will exacerbate the problem if new technologies roll out without baked-in security design. The Risk: If National-Tribal CIP collaboration to design in security is not done, then an ongoing state of insufficient bolt-on security and elevated threat exposure will remain for years to come.

29 ENERGY PLANNING, POLICY, AND ECONOMY↗
DOE OSTI2020

Report of the Sixth Regional Review Meeting of the Radiological Security Partnership.

The Sri Lanka Atomic Energy Regulatory Commission (AERC) and the United States Department of Energy (U.S. DOE) co-hosted the 6th Regional Review Meeting on Radiological Security involving representatives from over 20 countries, the International Atomic Energy Agency (IAEA), the International Criminal Police Organization (INTERPOL), and the World Institute for Nuclear Security. The purpose of the event was to discuss the implementation of, and plans for, high-activity radioactive source security (RSS). The U.S. DOE’s National Nuclear Security Administration (NNSA) Office of Radiological Security (ORS) fully sponsored this review meeting. Participants were welcomed to Colombo, Sri Lanka, and the meeting was formally opened by Nirmali Karunarathna of the Sri Lanka Atomic Energy Regulator Council who emphasized the strong partnerships among the participants. The opening Ceremony and Lamp Lighting included dignitaries from the sponsoring countries. Robert Hilton, Deputy Chief of Mission at the U.S. Embassy in Colombo, and Kristin Hirsch of the ORS gave other opening remarks that highlighted the social benefit from radiological sources in medicine, industry, and agriculture, while stressing the importance of addressing the risks associated with the malicious use of radiological sources. Emphasis was placed on the importance of partnerships among all the participants to help ensure the success of securing radiological materials throughout the world and the opportunity to share information and experiences. AERC was acknowledged with special thanks for hosting this event. A participant list is included as Attachment A, and the meeting agenda is provided as Attachment B. All presentations were made available to participants. The following sections summarize the meeting’s presentations, discussions, issues, suggestions, and recommendations.

61 RADIATION PROTECTION AND DOSIMETRY↗
DOE OSTI2020

Blockchain based Communication Architectures with Applications to Private Security Networks

Existing communication protocols in high consequence security networks are highly centralized. While this naively makes the controls easier to physically secure, external actors require fewer resources to disrupt the system because there are fewer points in the system can be destroyed or interrupted without the entire system failing. We present a solution to this problem using a proof-of-work-based blockchain implementation built on MultiChain. We construct a test-bed network containing two types of data input: visual imagers and microwave sensor information. These data types are ubiquitous in perimeter intrusion detection security systems and allow a realistic representation of a real-world network architecture. The cameras in this system use an object detection algorithm to nd important targets in the scene. The raw data from the camera and the outputs from the detection algorithm are then placed in a transaction on the distributed ledger. Similarly, microwave data is used to detect relevant events and are placed in a transaction. These transactions are then bundled into blocks and broadcast to the rest of the network using the Bitcoin-based MultiChain protocol. We develop five tests to examine the security metrics of our network. We performed the five security metric test using different sized networks from 7 to 39 nodes to determine how the metrics scale with respect to size. We nd that when compared to a centralized architecture our implementation provides a resiliency increase that is expected from a blockchain-based protocol without slowing the system so much that a human operator would notice. Furthermore, our approach is able to detect tampering in real time. Based on these results, we theorize that security networks in general could use a blockchain-based approach in a meaningful way.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2020

Recommendations for Data-in-Transit Requirements for Securing DER Communications

With the adoption of Distributed Energy Resource (DER) interoperability standards, common communication protocols are now being deployed between power system operators and DER devices. In 2018, a revision to the US interconnection and interoperability standard, Institute of Electrical and Electronics Engineers (IEEE) Std. 1547, required DER equipment to have an IEEE 2030.5, IEEE 1815, or SunSpec Modbus communication exchange interface. This change supports the future transition to secure connection and exchange of information between the DER equipment and implementing parties, such as grid operators. Adoption of standardized communication protocols and associated information models is a critical step toward interoperability between power system operators and DER, such as photovoltaic (PV) and energy storage systems. However, security requirements for these standardized communication protocols are not comprehensive, resulting in non-standard and vendor-specific implementation that may leave DER equipment susceptible to cyberattacks. This paper examines the data-in-flight security requirements for standardized DER communication protocols, per IEEE 1547-2018 revision, as it relates to device authentication, key management, and encryption. The state of the art for these security features is also explored, addressing their impact on communication and performance of low-cost single board computers, which are typical of DER devices. In conclusion, a recommendation is provided to adopt a common set of communication requirements, which are intended to achieve interoperability and implement data security over DER network pathways, while ensuring reliable, secure, and real-time information delivery.

42 ENGINEERING↗
DOE OSTI2021

INS–Support for Formal Cyber Security Education in Brazil–After Action Report

The adoption of digital technology into Instrumentation and Control (I&C) systems in nuclear facilities fundamentally changes the nature of these systems. Greater interconnectivity of reprogrammable, and functionally interdependent control systems has given rise to the need for computer security consideration in digital I&C Systems. The cyber security of I&C systems presents a growing risk to nuclear facilities and requires the development of educational and research tools to ensure the safety of these facilities. Currently there is a major gap in formal educational offerings on cyber security for these Operational Technology (OT) systems. To provide formal cyber security education resources, DOE’s office of International Nuclear Security (INS) partnered with the University of São Paulo (USP) to develop a training course on the cyber security of nuclear facility I&C systems using the hypothetical Nuclear Power Plant, Asherah.

46 INSTRUMENTATION RELATED TO NUCLEAR SCIENCE AND ↗
DOE OSTI2021

Security by Design Economics Analysis for Advanced Reactors and Small Modular Reactors Project Interim Report for FY2021

Advanced Reactor and Small Modular Reactor (AR/SMR) designs have the potential to provide clean, reliable baseload energy. Ensuring the capability to deploy these reactors in an economically viable fashion is of interest to industry. A large portion of the expected operating costs of AR/SMRs involves the security of the plant. Security by Design (SeBD) is the practice of including features in the design and construction of the site, with the intent to decrease the operating costs related to security. Quantifying the increase or decrease in the overall lifetime cost to the plant as a result of SeBD is of paramount importance in understanding the disadvantages and benefits of such activities. The National Nuclear Security Administration’s (NNSA) Office of International Nuclear Security (INS) is funding the development of a methodology whereby the capital expenses and operating expenses, as well as the physical security effectiveness, of SeBD can be quantified for AR/SMRs. This report is an interim report on the progress of the work performed by Sandia National Laboratories (SNL), Idaho National Laboratory, and Oak Ridge National Laboratory (ORNL). It is the second annual report on this work.

21 SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLANTS↗
DOE OSTI2023

Oak Ridge National Laboratory Security by Design: A Plant Design and Component-Based Approach to Technical Solutions to Insider and Outsider Threat

Security costs for nuclear reactors have been shown to rise over the lifecycle of a nuclear facility as new threats, security weaknesses, and the generic threat profile of the plant location change over time. This paper conducts a review of the technological gaps that currently exist in Security by Design (SeBD) based on the literature available and attempts to close those gaps through proposing technological constructs and processes that can integrate safety and security in the design process of a plant, with a primary focus on SMR technology. Under the new modular and mass manufacturing regime, where plant designs attempt to reduce costs with potential economies of scale and modular construction, the current SeBD definitions focusing on state level regulators are not considered adequate since the licensing stage is often too late in the design process to integrate the true cost savings of SeBD. Thus, this paper attempts to remedy the current logic in order to allow for continuous implementation of security alongside the development of the safety concept for the plant. If adopted within the design process the establishment of this type of technology will allow for a technological ecosystem to evolve that will imbed security concepts into the physical design of the components of the plant.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗
DOE OSTI2021

A Nuclear Security Enterprise Study of High-Reliability Systems, Collaboration, and Data

It may seem simple and trivial, but defining the difference between data and information is contested and has implications that may affect the security of United States interests and even cost lives. For security, data are raw facts or figures without context, while information is the compilation or articulation of data that forms context. Security depends on clarity in the differences between data and information and controlling them. Control is necessary to ensure that data and information are not inadvertently released to foreign governments, the public, or those without Need-to-Know. A primary concern in the practice of security is the control of data to avoid the inadvertent conversion to sensitive information. The complexity of this concern is further augmented when institutions are part of tightly coupled networks that informally share data and information. Additionally, those that share data as a function of legislative action—and/or formally integrate data and information system infrastructures—may be a higher security risk. This paper will present a case study that utilizes elements of literature from Knowledge Management and networks to tell a story of an issue in security—specifically, controlling the conversion of data to information.

96 KNOWLEDGE MANAGEMENT AND PRESERVATION↗
DOE OSTI2023

Finding of No Adverse Effect for the Façade Alteration of Building 23-117, Administration Building, Mercury, Area 23, Nevada National Security Site, Nye County, Nevada

The U.S. Department of Energy (DOE), National Nuclear Security Administration Nevada Field Office (NNSA/NFO) plans to update the façade of Building 23-117 in the town of Mercury (Nevada State Historic Preservation Office [SHPO] Resource No. B15256), which is on the Nevada National Security Site (NNSS) in Nye County, Nevada. The purpose of the undertaking is to incorporate Building 23-117 into the new Mercury campus in accordance with the master plan for the modernization of Mercury. The NNSA/NFO will implement this undertaking in accordance with the Programmatic Agreement between the National Nuclear Security Administration Nevada Field Office and the Nevada State Historic Preservation Officer Regarding Modernization and Operational Maintenance of the Nevada National Security Site, at Mercury in Nye County, Nevada, hereafter referred to as the Mercury PA. Building 23-117 was built in 1982 as the architect-engineer Administration Building1 for Holmes & Narver, a government contractor who helped design and engineer the town of Mercury and other areas on the NNSS from its inception until the termination of their contract in 1990. The building continued to be used by subsequent government contractors and is currently still in use by MSTS. The town of Mercury and the immediate surrounding area have been formally determined eligible for listing in the National Register of Historic Places (National Register, NRHP) as the Mercury Historic District (MHD, SHPO Resource No. D230) under Criteria A and C for its importance in supporting nuclear testing and scientific research from 1951 through 1992. Building 23-117 was identified as a contributing element to the MHD in a 2018 architectural survey of the district (Reno et al.) and recorded on a Nevada Architectural Resource Assessment (ARA) form (Reno et al. 2017). It is a historic property for the purposes of compliance with Section 106 of the National Historic Preservation Act (NHPA) and is subject to the stipulations of the Mercury PA. The NNSA/NFO requested that Desert Research Institute (DRI), cultural resource subject matter experts, analyze the effects of the proposed project on historic properties in the Area of Potential Effect (APE) and make a recommended finding for the undertaking in accordance with Section 106 of the NHPA and the Mercury PA. The purpose of this letter report is to submit documentation related to the mitigation of the façade alteration of Building 23-117 (Nevada State Historic Preservation Office [SHPO] Resource No. B15256) in the Mercury Historic District (MHD, SHPO Resource No. D230). This submission is intended to comply with the stipulations in the Programmatic Agreement between the National Nuclear Security Administration Nevada Field Office and the Nevada State Historic Preservation Officer Regarding Modernization and Operational Maintenance of the Nevada National Security Site at Mercury in Nye County, Nevada, hereafter referred to as the Mercury PA.

54 ENVIRONMENTAL SCIENCES↗
DOE OSTI2023

Experiences of Member States in Building a Nuclear Security Infrastructure for New Nuclear Power Programmes

A nuclear power programme has many benefits, but it is a major undertaking that requires careful planning and preparation as well as a substantial investment in time. It also necessitates the establishment of a sustainable national infrastructure with committed and sustained financial and human resources. While nuclear power is not unique in this respect, it is different from other sources of energy because of the risks associated with the use of nuclear material, as well as the need for compliance with international legal instruments, internationally accepted nuclear safety standards, nuclear security guidance, and safeguards requirements. The IAEA’s Milestones in the Development of a National Infrastructure for Nuclear Power, IAEA Nuclear Energy Series No. NG-G-3.1 (Rev. 1), defines a phased approach that identifies 19 infrastructure issues that should be addressed in each of the three phases of the development of a nuclear infrastructure for a nuclear power programme. The publication Evaluation of the Status of National Nuclear Infrastructure Development IAEA Nuclear Energy Series NG-T-3.2 (Rev. 2) provides a methodology to determine the status of the infrastructure conditions covering all 19 issues identified in the Milestones Approach. A companion IAEA Implementing Guide, Establishing the Nuclear Security Infrastructure for a Nuclear Power Programme, IAEA Nuclear Security Series No. 19, provides guidance on the recommended actions to be taken by a State to establish an effective national nuclear security infrastructure for a nuclear power programme using the Milestones Approach. This publication is intended to provide guidance based on the experiences and good practices of Member States with embarking nuclear power programmes as well as Member States that are expanding their nuclear power programmes. The guidance is in the form of case studies, which highlight challenges, issues, and solutions identified by Member States as lessons learned for new nuclear power programmes. This TECDOC is designed to present the experiences of Member States to assist other Member States in developing a nuclear security programme. It addresses the key actions necessary to establish an effective national nuclear security infrastructure for a nuclear power programme consistent with the three phases of the IAEA Milestones Approach. The Member States that provided case studies in this document are at different stages in the development of a nuclear power programme.

42 ENGINEERING↗
DOE OSTI2024

Integrating PCTRAN with AI-Driven Host-Intrusion Detection and Secured Container Systems for Advanced Malware Analysis (Summer Internship Report)

This study presents a solution for enhancing the security of the Personal Computer Transient Analyzer (PCTRAN) PC-based Nuclear Power Plant Simulator by integrating the software with an artificial intelligence (AI)-driven host-intrusion detection system (HIDS), in addition to a secured container system, for malware analysis. PCTRAN is a Windows XP-based software package that has the ability to simulate a variety of accident and transient conditions for nuclear power plants (NPPs). It offers a high-resolution replica of the Nuclear Steam Supply System (NSSS) and displays the status of important parameters allowing for operator interaction. By including AI-driven HIDS for the NSSS, the framework can identify security threats in real-time, ensuring the integrity of the nuclear simulation environment. Additionally, the secured container system offers the ability to isolate and analyze malware, preventing potential threats from affecting core systems. The integration process involves extensive testing and validation in order to ensure accuracy, reliability, and compliance with security policies. This framework sets a new precedent for secure simulation and training in NPP operations, and offers insight for future advancements in cybersecurity.

21 SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLANTS↗
DOE OSTI2024

Small Modular Reactor and Microreactor Security-by-Design Lessons Learned: Integrated PPS Designs

U.S. nuclear power facilities face increasing challenges in meeting dynamic security requirements caused by evolving and expanding threats while keeping costs reasonable to make nuclear energy competitive. The past approach has often included implementing security features after a facility has been designed and without attention to optimization, which can lead to cost overruns. Incorporating security into the design process can provide robust, cost-effective, and sufficient physical protection systems. The purpose of this report is to capture lessons learned by the Advanced Reactor Safeguards and Security (ARSS) program that may be beneficial for other advanced and small modular reactor (SMR) vendors to use when developing security systems and postures. This report will capture relevant information that can be used in the security-by-design (SeBD) process for SMR and microreactor vendors.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗