Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “security assessment”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 163 records · Page 9

New Jersey Transit Grid Distributed Generation Program. Cybersecurity Design Assurance Assessment

Superstorm Sandy caused a major disruption to passenger-rail and other commuter systems throughout New York and New Jersey. To address this issue, New Jersey Transit (NJT) established the NJ TRANSITGRID project, an effort designed to power bus, ferry, and limited passenger-rail service during natural or man-made disasters. Given the importance of these transportation systems, NJT partnered with Sandia National Laboratories (Sandia) to assess the cyber-resilience of the information systems that monitor and control the electrical systems within the microgrid. The Sandia “tabletop” assessment is based on the most recent 20% design packages. From this assessment, the Sandia team identified several security areas that were undefined or did not implement industry best practices. Finally, the Sandia team presented possible follow-on assessment activities and recommended investigating multiple hardening technologies. Addressing these findings and adding state-of-the-art detection and mitigation technologies will help ensure the NJ TRANSITGRID is built with more comprehensive cyber-resilience features.

24 POWER TRANSMISSION AND DISTRIBUTION↗

Methods of Securing Chemical and Pharmaceutical Knowledge and Recommendations for International Institutions to Enhance Research Integrity

Here, this paper examines strategies for securing chemical and pharmaceutical expertise in a globalized research environment, focusing on safeguarding intellectual property and preventing the misuse of sensitive and potentially dual-use information. The product of collective efforts between Pacific Northwest National Laboratory, Carol Davila University of Medicine and Pharmacy, and New Bulgarian University, highlights the challenges and opportunities posed by cross-border research collaborations, particularly in the context of differing regulatory frameworks and research cultures. It explores current mechanisms to prevent data loss and unauthorized access to sensitive information while assessing the effectiveness of existing security measures, frameworks, and international export control regimes. The approach examines the differing methodologies for promoting transparency, trust-building, and mutual accountability in joint research projects to cultivate secure data-sharing practices and intellectual property. It provides recommendations for international institutions to implement security guidelines in framing research priorities, encourages continual training and education programs, and the integration of processes for monitoring research compliance. This partnership aims to advance scientific innovation while maintaining global stability, ensuring compliance with international norms, and safeguarding valuable intellectual property as measures in chemical and pharmaceutical research security practices continue to expand due to international collaboration and knowledge exchange.

37 INORGANIC, ORGANIC, PHYSICAL, AND ANALYTICAL CH↗

Distributed Energy Resource Cybersecurity Framework and Cyber Range Integration

Distributed energy resource (DER) systems feature complex, data-driven communications networks that require careful system coordination and constant vigilance to ensure that grid assets are secure. Because DERs are an important component of the decarbonization strategy, agencies need to secure energy data that could implicate issues of national security if compromised. To help federal energy managers assess, monitor, and manage cybersecurity while achieving decarbonization, the National Renewable Energy Laboratory's (NREL's) Distributed Energy Resource Cybersecurity Framework (DER-CF) offers a comprehensive, web-based assessment tool focusing on cyber governance or policies, technical management, and physical security. The DER-CF currently presents users with a series of pertinent cybersecurity questions that are used to generate a site-specific report and recommendations. This paper outlines a plan to integrate the DER-CF with another key asset-NREL's cyber range-to visualize cybersecurity resilience and compliance and to enhance the usability and accessibility of the DER-CF for federal facility energy managers and planners. This integration will result in a visualization environment to interpret and interact with compliance data. Its development will include regular conversations with stakeholders to assess the effectiveness of these efforts, refine the visualization capability, and ensure its value to our partners.

24 POWER TRANSMISSION AND DISTRIBUTION↗

Consequence Based Framework for Deployment of Cloud Solutions in the Digital Energy Transition

This study proposes a framework for evaluating cloud computing deployment in the electric sector, focusing on the digital transition of energy systems. It assesses the implications of cloud technology adoption, particularly in terms of security, operational resilience, and efficiency. The paper introduces a method for consequence-driven risk analysis, enabling utilities to prioritize and mitigate potential threats effectively. It also discusses the shared responsibility model in cloud computing, highlighting the need for collaborative security efforts. The research aims to provide utilities with a strategic assessment tool for cloud adoption, emphasizing the importance of security culture in enhancing cloud computing's role in critical infrastructure.

99 GENERAL AND MISCELLANEOUS↗

Consequence Based Framework for Deployment of Cloud Solutions in the Digital Energy Transition

This study proposes a framework for evaluating cloud computing deployment in the electric sector, focusing on the digital transition of energy systems. It assesses the implications of cloud technology adoption, particularly in terms of security, operational resilience, and efficiency. The paper introduces a framework for consequence-driven applied risk analysis, enabling utilities to prioritize and mitigate potential threats effectively, and responsibly deploy cloud applications. It also discusses the shared responsibility model in cloud computing, highlighting the need for collaborative security efforts. The research aims to provide utilities with a strategic assessment tool for cloud adoption, emphasizing the importance of security culture in enhancing cloud computing's role in critical infrastructure.

29 ENERGY PLANNING, POLICY, AND ECONOMY↗

Panel Session 145: Challenges and Opportunities in Establishing a System for Transportation of SNF/UNF

Issues associated with establishing a SNF Transportation System in the U.S. are complex. In part, this is because in the US when discussing SNF, there are two distinct categories. The two categories represent significant differences in ownership, transportation-regulator, and even the physical characteristics of the SNF. Specifically, the physical differences in the SNF include size of the rods, associated quantities to be shipped, cladding material, and radionuclide content/enrichment. The first is commercial SNF (i.e., that associated with nuclear power plants), owned by utilities, until a permanent repository is built with DOE obligated by law to then assume the responsibility for shipping and ownership of the SNF. Since no-permanent repository currently exists, most commercial SNF is stored near the reactor in which it was installed, hence requiring no shipments. Although current shipments of commercial SNF are very limited, the few that do occur are generally performed to support a utilities SNF consolidation effort utility and for post irradiation examination/testing. However, with approximately 83,000 metric tons currently being stored at more than 70 sites around the U.S., when a permanent repository becomes available, the required number of shipments will be extensive. The second category is DOE and research reactor fuel. These fuel rods are generally much smaller in length than commercial fuel rods, with the quantity of rods transported in a shipment significantly less than the number of rods in a typical commercial fuel assembly. Currently, most of the SNF shipments within the U.S come from this category. DOE is currently managing about 2500 metric tons of heavy metal of SNF. This panel focused on updates and status of transportation of SNF/UNF. Panelists provided updates and information on continuing impacts, risk assessment, equipment (rail cars, handling, securement), possible rail routing, and proposed inspection equipment/routing prior to shipments. Panelists with presentations: Preparing for Nuclear Waste Transportation (Daniel Ogg); Challenges and Opportunities in Establishing a System for Transportation of SNF/UNF (Kathy Langan); UNF Transportation: Challenges and Opportunities (Michael Valenzano)

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗

Cybersecurity Risk Assessment Framework for Externally Exposed Energy Delivery Systems

Securing the energy delivery system (EDS) from complex, nonlinear, and evolving cyber threats requires a complex set of changing and interwoven classes of technologies, policies, relationships, and personnel. One key area in this technological milieu is assessment methodologies to compare information, gathered by a variety of means, about networked devices with publicly known possible threat information about said devices. This information is used to generate risk-based characterizations that allow for the adjudication and proper corresponding management action chains to be assigned.

Gourisetti, Sri Nikhil G.↗

SoK: What does it Mean to Benchmark Database Forensics?

Relational Database Management Systems are the backbone of modern enterprises and public-sector services, and are thus frequent targets of security incidents, insider threats, and thorough regulatory audits. Consequently, databases have become key sources of digital evidence, requiring investigators to reconstruct past activity from audit logs, transaction logs, and backups. Although benchmarking frameworks such as those developed by the Transaction Processing Performance Council (TPC) are widely used to evaluate database performance, they do not capture forensic requirements such as evidentiary completeness, tamper-evidence, chain of custody, or regulatory compliance under GDPR and CCPA. This survey examines the emerging domain of forensic database benchmarking. We gathered prior research on database forensics, secure logging, and tamper-evident data structures; we analyze modern forensic-ready features in commercial and open-source systems (SQL Server Ledger, Oracle Blockchain Tables, PostgreSQL pgAudit, Db2 Audit, Aurora Database Activity Streams, Oracle Real Application Security and IBM Guardium) and assess why existing benchmarks are insufficient. We propose forensic workloads, metrics, and methodologies that incorporate adversarial stressors, deleted-record recovery, and backup analysis. We also identify open research problems and call for a community-driven forensic benchmark suite. The result is an idea for evaluating not only database performance but also forensic soundness, bridging the gap between system engineering, compliance, and digital investigations.

Lenard, Ben↗

Impact of Reordering on the LU Factorization Performance of Bordered Block-Diagonal Sparse Matrix

Power engineers rely on computer-based simulation tools to assess grid performance and ensure security. At the core of these tools are solvers for sparse linear equations. When transformed into a bordered block-diagonal (BBD) structure, part of the sparse linear equation solving can be parallelized. This work focuses on using the Schur-complement-based method for LU factorization on BBD matrices, specifically, Jacobian matrices from large-scale systems. Our findings show that the natural ordering method outperforms the default ordering method in computational performance for each block of the BBD matrix. This observation is validated using synthetic 25k-bus and 70k-bus cases, showing a speedup of up to 38% when using natural ordering without permutation. Additionally, the impact of the number of partitions is studied, and the result shows that computational performance improves with more, smaller partitions in the BBD matrices.

BBD matrix↗

CMIP6-based Multi-model Hydroclimate Projection over the Conterminous US, Version 1.1

This dataset presents a suite of high-resolution downscaled hydro-climate projections over the conterminous United States (CONUS) based on multiple selected Global Climate Models (GCMs) from the Coupled Models Intercomparison Project phase 6 (CMIP6). The CMIP6 GCMs are downscaled using either statistical (DBCCA) or dynamical (RegCM) downscaling approaches based on two meteorological reference datasets (Daymet and Livneh). Subsequently, the downscaled precipitation, temperature, and wind speed are employed to drive two calibrated hydrologic models (VIC and PRMS), enabling the simulation of projected future hydrologic responses across the CONUS. Each ensemble member covers the 1980-2019 baseline and 2020-2059 near-future periods under the high-end (SSP585) emission scenario. Moreover, utilizing only DBCCA and Daymet, the projections are further extended to the 2060-2099 far-future period and across three additional emission scenarios (SSP370, SSP245, and SSP126). This dataset is formulated to support the SECURE Water Act Section 9505 Assessment for the US Department of Energy (DOE) Water Power Technologies Office (WPTO). For further details on this dataset, please refer to Kao et al. (2022) and Rastogi et al. (2022).

13 HYDRO ENERGY↗

Strategic National Level Exercises Program White Paper - Draft

The general objective of this white paper is to share lessons learned and provide interdisciplinary recommendations on how to use NLE to evaluate, assess and improve national nuclear security regimes. The specific objectives of this white paper are: — To describe the type of exercises, benefits and requirements — To outline the different capacity areas and capability performance levels — To provide concrete and actionable recommendations to INS’s partners on how to use NLE to improve national nuclear security regimes.

45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗

CMIP6-based Multi-model Streamflow Projections over the Conterminous US

This dataset presents an ensemble of streamflow projections based on the hydroclimate projections dataset supporting the SECURE Water Act Section 9505 Assessment for the US Department of Energy (DOE) Water Power Technologies Office (WPTO). The six-member General Climate Model (GCM) ensemble from the Coupled Models Intercomparison Project phase 6 (CMIP6) downscaled using statistical (i.e., DBCCA) and dynamical (i.e., RegCM) and bias-corrected using two meteorological reference observations (Daymet & Livneh) are driven through two calibrated hydrologic models (VIC & PRMS) to simulate projected future hydrologic responses. This leads to the production of an ensemble of hydroclimate projections, including total runoff (surface runoff and baseflow) for 1980–2019 baseline and 2020–2059 near-term future periods under multiple emission scenarios at 1/24° (~4 km) spatial resolution across the CONUS. The total runoff projections are routed through the Routing Application for Parallel computatIon of Discharge (RAPID) routing model to produce an ensemble of streamflow projections for both periods across 2.7 million NHDPlusV2 stream reaches in the CONUS.

13 HYDRO ENERGY↗

CMIP6-based Multi-model Hydroclimate Projection over the Conterminous US

We present a suite of high-resolution downscaled hydro-climate projections over the conterminous United States (CONUS) based on a six-member General Climate Model (GCM) ensemble from the Coupled Models Intercomparison Project phase 6 (CMIP6). The CMIP6 GCMs are downscaled using two different downscaling approaches (statistical-based DBCCA & dynamical-based RegCM) based on two meteorological reference observations (Daymet & Livneh), and then fed to two calibrated hydrologic models (VIC & PRMS) to simulate projected future hydrologic responses. Each ensemble member covers 1980–2019 in the historic period and 2020–2059 in the near-term future period under the high-end (SSP585) emission scenario. Major variables such as daily maximum temperature (tmax), daily minimum temperature (tmin), daily total precipitation (prcp), daily average wind speed (wind), and daily total runoff (runoff) at 1/24° (~4 km) spatial resolution across the CONUS are provided through this data portal. This dataset is derived to support the SECURE Water Act Section 9505 Assessment for the US Department of Energy (DOE) Water Power Technologies Office (WPTO). Further details of this dataset can be referred to Kao et al. (2022) and Rastogi et al. (2022).

13 HYDRO ENERGY↗

The Fast Modular Reactor (FMR) Pre-Application Regulatory Engagement Plan

The Fast Modular Reactor (FMR) is a 50 MWe Gascooled Fast Reactor (GFR) being developed by General Atomics Electromagnetic Systems (GA-EMS) under U.S. Department of Energy’s (DOE’s) Advanced Reactor Demonstration Program (ARDP), specifically Advanced Reactor Concepts 2020 (ARC-20). The 3-year conceptual design of the FMR is being conducted with verifications of key metrics in fuel, safety, and operational performance. GAEMS is pursuing design, licensing, and commercialization of the proposed reactor, with demonstration by 2030 and deployment by the mid-2030s. The U.S. Nuclear Regulatory Commission (NRC) recommends the pre-application regulatory engagement to provide for early identification of regulatory requirements for advanced reactors and to provide all interested parties with a timely, independent assessment of the safety and security characteristics of advanced reactor designs. As such, GAEMS is developing a pre-application regulatory engagement plan (REP) of the FMR.

21 SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLANTS↗

Historic Significance and Current Condition Assessment of Building 06-CP-10, Device Assembly Building, Area 6, Nevada National Security Site, Nye County, Nevada

This report was produced in partial fulfillment of the mitigation of adverse effects to Building 06-CP-10, the first device assembly building on the Nevada National Security Site (NNSS), and is intended to comply with the 2021 Memorandum of Agreement DE-GM58-21NA25543 Between the U.S. Department of Energy and the Nevada State Historic Preservation Officer Regarding Demolition of Fourteen Buildings and Structures in Area 6 of the Nevada National Security Site, Nye County (hereafter referred to as the MOA). This MOA was executed to resolve adverse effects from the U.S. Department of Energy (DOE) plan to demolish 14 architectural resources at the Control Point and in the vicinity in Area 6 of the NNSS. The management and operations contractor for the NNSS identified these 14 architectural resources as environmental hazards unsafe for human occupation due to deterioration and rodent infestation. Building 06-CP-10 and two small magazine bunkers (06-CP-10A and 06-CP-805) associated with Building 06-CP-10 are scheduled for demolition as part of this undertaking. Building 06-CP-10 was originally recorded in 2003 during a historical evaluation of four buildings in Area 6. In consultation with the Nevada State Historic Preservation Office, the building was determined individually eligible for inclusion in the NRHP under the Secretary of the Interior’s Significance Criterion A because of its association with nuclear testing and under Significance Criterion C as a distinct type of construction associated with the nuclear industry. Building 06-CP-10A, a munitions magazine, and 06- CP-805, a cap-and-fuse bunker, have been recorded as contributing accessory resources to 06-CP-10. Pursuant to Stipulation III.C.3 of the MOA, this report provides a summary of the historic significance of Building 06-CP-10 and a description of its current condition and accessory resources. In addition, an updated Architectural Resource Assessment (ARA) form with new information and photographs is included in the appendix in fulfillment of Stipulation III.C.2.

54 ENVIRONMENTAL SCIENCES↗