Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “operating systems security”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 1,621 records · Page 90
All sourcesNASA NTRSDOE OSTI
DOE OSTI2019

MSGP Stormwater Pollution Prevention Plan for: TA-03-38 Carpentry and Metal Fabrication Shops, Triad National Security, LLC (Triad), Los Alamos National Laboratory, January 2019, Revision 0

This Stormwater Pollution Prevention Plan (SWPPP) was developed in accordance with the provisions of the Clean Water Act (33 U.S.C. §§1251 et seq., as amended), and the United States Environmental Protection Agency (EPA) National Pollutant Discharge Elimination System (NPDES) Multi-Sector General Permit for Stormwater Discharges Associated with Industrial Activity (MSGP) (U.S. EPA, June 2015) issued by EPA, and using the industry specific permit requirements for Sector A-Timber Products and Sector AA-Fabricated Metal Products as a guide. The applicable stormwater discharge permit is EPA General Permit Tracing Number NMR050013 [Triad National Security, LLC (Triad)]. This SWPPP applies to discharges of stormwater from the operational areas of the TA-03-38 Carpentry and Metal Fabrication Shops (38 Shops) at Los Alamos National Laboratory. Los Alamos National Laboratory (also referred to as LANL or the “Laboratory”) is owned by the Department of Energy (DOE), and is operated by Triad. Throughout this document, the term “facility” refers to the TA-03-38 Carpentry Shop (CS) and/or the Metal Fabrication Shop (MFS). The current MSGP expires at midnight on June 4, 2020.

54 ENVIRONMENTAL SCIENCES↗
DOE OSTI2024

PLC Vulnerabilities and Mitigations

Programmable Logic Controllers (PLCs) are used extensively in many high-importance industrial and nonindustrial settings including controlling elevators, manufacturing machines, and utility facilities such as power and natural gas, however cybersecurity protection for them has been neglected. Within recent years, PLCs have been put under more security scrutiny and experts have advocated for changes from the addition of protocol encryption and network segmentation to intrusion detection systems on the PLCs themselves. While PLC security is critical, a large portion of the PLCs available today will never receive these changes due to being legacy or the difficulty of overhauling the security on existing systems. Due to the infeasibility of applying many recommended security measures towards currently available machines, we aim to provide realistic and affordable best practices for hardening PLCs. We will first conduct security analysis and consider attack vectors within our target PLC. Once we’ve analyzed the device’s security, we will evaluate a variety of mitigation methods and create guidelines to effectively reduce the threat posed by PLC attacks with minimal disruption to operations.

42 ENGINEERING↗
DOE OSTI2025

Engineering Services in a Mission Critical Environment: Engineering Services - Science and Technology Operations’ Infrastructure Support at Los Alamos National Laboratory

As an engineering team within a facilities-driven organization, Engineering Services – Science and Technology Operations (ES-STO), supports Los Alamos National Laboratory (LANL), playing a pivotal role in the U.S. nuclear stockpile mission. This report outlines ES-STO’s contributions through the installation of crucial systems such as HVAC units, compressors, and scientific specialty equipment, as well as providing expert consultation to optimize laboratory operations. ES-STO’s goal is to ensure that LANL's infrastructure and research facilities are aligned with mission-critical needs, supporting both operational efficiency and safety in the nuclear stockpile management and maintenance. This report discusses the installation processes, ongoing consultations, and the significant impact of our efforts on national security objectives.

42 ENGINEERING↗
NASA NTRS1999

Partitioning in Avionics Architectures: Requirements, Mechanisms, and Assurance

Automated aircraft control has traditionally been divided into distinct "functions" that are implemented separately (e.g., autopilot, autothrottle, flight management); each function has its own fault-tolerant computer system, and dependencies among different functions are generally limited to the exchange of sensor and control data. A by-product of this "federated" architecture is that faults are strongly contained within the computer system of the function where they occur and cannot readily propagate to affect the operation of other functions. More modern avionics architectures contemplate supporting multiple functions on a single, shared, fault-tolerant computer system where natural fault containment boundaries are less sharply defined. Partitioning uses appropriate hardware and software mechanisms to restore strong fault containment to such integrated architectures. This report examines the requirements for partitioning, mechanisms for their realization, and issues in providing assurance for partitioning. Because partitioning shares some concerns with computer security, security models are reviewed and compared with the concerns of partitioning.

Rushby, John↗
NASA NTRS2002

The SeaWiFS Bio-Optical Archive and Storage System (SeaBASS): Current Architecture and Implementation

Satellite ocean color missions require an abundance of high-quality in situ measurements for bio-optical and atmospheric algorithm development and post-launch product validation and sensor calibration. To facilitate the assembly of a global data set, the NASA Sea-viewing Wide Field-of-view (SeaWiFS) Project developed the Seafaring Bio-optical Archive and Storage System (SeaBASS), a local repository for in situ data regularly used in their scientific analyses. The system has since been expanded to contain data sets collected by the NASA Sensor Intercalibration and Merger for Biological and Interdisciplinary Oceanic Studies (SIMBIOS) Project, as part of NASA Research Announcements NRA-96-MTPE-04 and NRA-99-OES-99. SeaBASS is a well moderated and documented hive for bio-optical data with a simple, secure mechanism for locating and extracting data based on user inputs. Its holdings are available to the general public with the exception of the most recently collected data sets. Extensive quality assurance protocols, comprehensive data and system documentation, and the continuation of an archive and relational database management system (RDBMS) suitable for bio-optical data all contribute to the continued success of SeaBASS. This document provides an overview of the current operational SeaBASS system.

Werdell, P. Jeremy↗
DOE OSTI2017

Real-time supervisory control implementation of SmAHTR power plant - 143

This paper discusses an implementation of a supervisory control system for a nuclear power plant model using Small modular Advanced High Temperature Reactors (SmAHTR). The simulation operates in real-time using a network of computer agents, implemented on Raspberry Pi's (RPi's), where each major task is performed by one or more RPi's running calculations in parallel. The system architecture contains local, module, master, and operator actions to automate all aspects of the plant. Local level controllers run individual control loops to ensure the desired reference signals are met. The module level controllers set the local level reference signals within each SMR unit and detect sensor and actuator failures to adjust those reference signals as needed. Master level controllers balance plant power by calculating required heat power from each reactor and electric power from each generator and sending that data to the module controllers. Finally, the operator level contains an operator interface to summarize data and faults gathered through the controller levels, with options to review plant and reactor details as desired. This control implementation allows the plant to run autonomously, load follow a desired electrical power curve, and detect a growing number of fault scenarios. Ultimately, this type of supervisory control system will reduce labor-intensive surveillance and testing and allow fewer operators to more safely monitor an entire plant. (authors)

21 SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLANTS↗
DOE OSTI2026

FY25 Electric Grid Security Annual Report

Sandia’s Electric Grid Security program advances a national vision of energy dominance and accessibility, while applying our national security -emphasis on ensuring of a secure, resilient, and affordable electric system for all users. Our achievements reflect a strategic approach combining technology development; modeling, simulation, and data analytics; and partnered demonstrations and outreach to further the adoption of advanced grid and storage technologies. Our FY25 efforts leverage the strengths of our partnerships—spanning Sandia’s core science and technology competencies as well as external technology leaders—to develop the solutions today which enable the grid of tomorrow. Key accomplishments in this report that support our strategy span our technical program areas and include: • New open-source analytical tools for systems -level planning and optimization, including significant advances to the QuESt analytical environment; • Further advancement of artificial intelligence and machine learning to enhanced grid operations and planning as we rise to the challenge of new large loads; • Development of solid-state power conversion technologies and a new medium-voltage research lab; • New technologies to assess wildfire vulnerabilities and mitigate potential impacts; • Advanced applications of new cybersecurity technologies with industry partners; • Contributions to understanding the impacts of electromagnetic pulses and geomagnetic disturbances on grid components; and • Digital twin development for hybrid microgrids with multiple generators, storage, and loads. This report indicates key areas of research and engagement and summarizes the impact of Sandia’s contributions through notable accomplishments, journal publications, patents, and technical conferences and presentations. It is provided with the hope that readers discover ways we can further team to create our modern grid and apply the outcomes of our efforts. The bulk of work described herein is funded by several offices within the U.S. Department of Energy (USDOE), including the Office of Electricity (OE); Cybersecurity, Energy Security, and Emergency Response (CESER); former offices such as the Office of Energy Efficiency and Renewable Energy (EERE), the Grid Deployment Office (GDO), the Office of Clean Energy Demonstrations (OCED), and other key programs at USDOE. As we continue to state in these annual reports, the contributors to our successes are too numerous to name here, though our team wishes to express our deep gratitude to the numerous program and project sponsors at the US Department of Energy, who often function equally as technical collaborators; our many partners in industry, academia, utilities, and other national labs; and fellow researchers and business partners at Sandia whose leadership and creativity have enabled the accomplishments described herein.

24 POWER TRANSMISSION AND DISTRIBUTION↗
DOE OSTI2021

Data-Driven Cyber-Attack Detection for PV Farms via Time-Frequency Domain Features

The internetworking of grid-connected power electronics converters (PECs) in photovoltaic (PV) farms has inevitably expanded the cyber-attack surfaces. Here this paper presents a comprehensive study on cyber-attack detection and diagnosis for PEC-enabled PV farms via single waveform sensor to distinguish between normal conditions, open-circuit faults, short-circuit faults, and cyber-attacks. To our knowledge, this has not been attempted before. Firstly, we propose frequency-domain magnitude-based residuals to identify short-circuit faults and a time-domain mean current vector-based feature to distinguish open-circuit faults from other threats. These features can fully reflect the specific physical characteristics of PV farms during threat duration. Secondly, unlike micro phasor measurement units (µPMU) and raw electric waveform-based methods, the proposed innovative features can address novel cyber-attacks that are excluded from the training process. Thirdly, an online hardware-in-the-loop (HIL) testbed using the OPAL-RT real-time digital simulator has verified the effectiveness. The monitoring system runs in real-time while using HIL as an operational solar farm and a National Instruments (NI) data acquisition card as the electric waveform sensor at the point of coupling.

42 ENGINEERING↗
DOE OSTI2017

Characterizing cyber tools for monitoring power grid systems: what information is available and who needs it?

Abstract—The power grid is a complex, interconnected system that requires the coordination of multiple entities ensure the reliability of the system. System operators must be aware of the impacts of various natural and man-made contingencies through telemetry from their control systems, and they must also be aware of the integrity and availability of the cyber assets on their systems. A team of researchers from PNNL and INL have conducted a series of observations and interviews at power utilities to identify what information needs to be available for both control room dispatchers and cyber security analysts to maintain situation awareness of cyber security to effectively monitor the cyber assets on utility control systems. The researchers interviewed and observed control room dispatchers and spoke with regional control system engineers and cyber security analysts to define the context in which such information would be used. The results of this work will inform the design of a tool that will enhance cyber situation awareness and help facilitate effective communication between the various roles and organizations with utility and other regional authorities during contingencies. Index Terms—

24 POWER TRANSMISSION AND DISTRIBUTION↗
DOE OSTI2018

Constructing Convex Inner Approximations of Steady-State Security Regions

Here, we propose a scalable optimization framework for estimating convex inner approximations of the steady-state security sets. The framework is based on Brouwer fixed point theorem applied to a fixed-point form of the power flow equations. It establishes a certificate for the self-mapping of a polytope region constructed around a given feasible operating point. This certificate is based on the explicit bounds on the nonlinear terms that hold within the self-mapped polytope. The shape of the polytope is adapted to find the largest approximation of the steady-state security region. While the corresponding optimization problem is nonlinear and non-convex, every feasible solution found by local search defines a valid inner approximation. The number of variables scales linearly with the system size, and the general framework can naturally be applied to other nonlinear equations with affine dependence on inputs. Test cases, with the system sizes up to 1354 buses, are used to illustrate the scalability of the approach. The results show that the approximated regions are not unreasonably conservative and that they cover substantial fractions of the true steady-state security regions for most medium-sized test cases.

42 ENGINEERING↗
DOE OSTI2025

Integrase-on-Demand

SAND2025-07449O Integrase-on-Demand is a software tool that allows users to identify regions in genomic sequences where genetic material can be integrated with high probability. It uses a database of integrases and their DNA attachment sites to search against any genomic sequence, producing a list of open sites, the integrase sequence, and the source of the genomic island. The program requires MASH software to be available on the system. It consists of a main script and a precomputed input file, with a taxonomy mode that searches closely related genomes and a search mode that looks for identical attachment site matches in the integrase/attachment input file. Sandia National Laboratories is a multimission laboratory managed and operated by National Technology & Engineering Solutions of Sandia, LLC, a wholly owned subsidiary of Honeywell International Inc., for the U.S. Department of Energy’s National Nuclear Security Administration under contract DE-NA0003525.

Williams, Kelly [Sandia National Lab. (SNL-CA), Li↗
DOE OSTI2023

Los Angeles Air Force Base Vehicle-to-Grid Demonstration (Final Project Report)

Electrification of non-tactical vehicle fleets represents a key efficiency and energy security objective for the United States Department of Defense. To achieve electrification, the department targeted vehicle-to-grid services as a way to decrease the overall cost of operating the vehicle fleet and achieve rough parity with traditional internal combustion engine vehicle fleets. This report describes efforts to aggregate a fleet of bi-directional electric vehicles and charging stations to provide regulation up and regulation down in the California Independent System Operator ancillary services market. A 29-vehicle electric vehicle demonstration fleet, consisting of mixed purpose and duty vehicles such as sedans, pickups, vans, and medium-duty trucks, was deployed at the Los Angeles Air Force base. The fleet provided frequency regulation to the California Independent System Operator’s wholesale electricity market to determine the capability of recouping some of the additional costs of procuring electric vehicles and their supporting infrastructure. Lawrence Berkeley National Laboratory, with its partner Kisensum, LLC, developed the fleet scheduling, optimization, and control software to allow the vehicle fleet at the air force base to participate in the ancillary services markets. This report focuses on the control software and market interactions, the significant challenges faced and solutions devised to address them, and examines the potential of using the electric vehicle fleet as an energy storage resource for the base buildings, an application known as vehicle-tobuilding, in providing demand response and emergency backup power. The report discusses key findings related to providing frequency regulation to the California Independent System Operator market, electric vehicle fleet performance, compatibility of varying resource parameters of vehicle fleet aggregation, the need for automated methods for communicating hour-ahead energy bidding, challenges related to battery capacity and charge/discharge rates, and monthly settlement revenue.

32 ENERGY CONSERVATION, CONSUMPTION, AND UTILIZATI↗
DOE OSTI2026

Cybersecurity Workforce Training for SMR Integration into Distribution Grids: A Competency Framework and Containerized Hands-On Lab for the SMR/DER/Microgrid Boundary

Small modular reactors (SMRs) and microreactors are entering the U.S. distribution grid as synchronous generation on feeders designed for loads and inverter-based distributed energy resources (DERs). No existing cybersecurity training program addresses this intersection of nuclear operations, DER management, and operational technology security. As subcontractor to Iowa State University on the CyDERMS Center, Argonne analyzed the relevant standards and training landscape, translated the resulting gaps into a twelve-objective competency framework across distribution-operator and graduate-analyst role tracks, and built a containerized training lab using a ∼400-bus composite grid model behind a realistically simulated Modbus TCP SCADA stack. The analysis isolates the balance-of-plant / energy-management-system (BOP/EMS) boundary as the critical jurisdictional seam where, as of March 2026, neither NRC nor NERC CIP cleanly claims cybersecurity responsibility for distribution-connected SMRs. The framework maps each objective across NIST CSF 2.0, ISA/IEC 62443, NIST NICE Task–Knowledge–Skill statements, and NRC RG 5.71 awareness-and-training controls. The training lab implements operator-recognition assessment scenarios spanning grid-side disturbances and telemetry-layer anomalies.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗
NASA NTRS1979

NASA Technology Utilization House technical support package Summary of results and house description

The Technology Utilization House (Tech House) was designed and constructed to demonstrate to the building industry and the public the benefits of aerospace technology and other new technology that are presently available or will be in very near future. Use of solar energy, conservation of energy and of water, safety, and security were incorporated in the design of the house. The terms to be incorporated into the house and to assist in the design of the house were evaluated. An architectural engineering team was employed to investigate energy conservation ideas, determine cost effectiveness of new materials and systems, and prepare specifications and drawings for the house. The Tech House was constructed during the spring of 1976. All the systems were monitored to insure proper operation, and data were collected during a one year occupancy. Results obtained during the family live-in period, comments on the acceptance of the various energy-saving systems by the family, and suggestions for improvement of the systems are presented.

Source record↗
DOE OSTI2020

ModuleOT: A Hardware Security Module for Operational Technology: Preprint

With increasing penetration levels of distributed energy resources (DERs) on the distribution grid, as well as new technological advancements in the cyber space, new cyberattack vectors are being introduced, and the available attack surface is constantly increasing. Despite this increasing risk, the standard IEEE 1547-2018 does not yet recommend cybersecurity measures for DERs. To address this and to better protect data on the distribution grid - from the standpoints information security as well as operational security - ModuleOT has been developed. The module aims to significantly reduce cyberattack vectors by improving data privacy for user applications. This is accomplished by performing the core functions of encryption, authentication, authorization, certificate management, and user access control. The module integrates a custom security application with hardware cryptographic acceleration. The application secures all communications using Transmission Control Protocol over Internet Protocol (TCP/IP). These include the three most commonly used communications protocols for power systems information exchange: Modbus, Distributed Network Protocol 3 (DNP3), and Smart Energy Profile 2.0 (SEP2.0). These three protocols are also supported by IEEE 1547-2018 for all DER devices. This paper tests the data encryption/decryption feature on a physical networking test bed with emulated Modbus devices reporting grid data and presents the results.

24 POWER TRANSMISSION AND DISTRIBUTION↗
NASA NTRS2001

Secure Large-Scale Airport Simulations Using Distributed Computational Resources

To fully conduct research that will support the far-term concepts, technologies and methods required to improve the safety of Air Transportation a simulation environment of the requisite degree of fidelity must first be in place. The Virtual National Airspace Simulation (VNAS) will provide the underlying infrastructure necessary for such a simulation system. Aerospace-specific knowledge management services such as intelligent data-integration middleware will support the management of information associated with this complex and critically important operational environment. This simulation environment, in conjunction with a distributed network of supercomputers, and high-speed network connections to aircraft, and to Federal Aviation Administration (FAA), airline and other data-sources will provide the capability to continuously monitor and measure operational performance against expected performance. The VNAS will also provide the tools to use this performance baseline to obtain a perspective of what is happening today and of the potential impact of proposed changes before they are introduced into the system.

McDermott, William J.↗
DOE OSTI2019

Full-Scale Retrieval and Transfer System Mockup for Pneumatic Conveyance of High-Level Calcine Waste - 19563

The Idaho National Laboratory reprocessed spent nuclear fuel from 1953 to 1994. The reprocessing used solvent extraction to separate uranium, resulting in a high-level radioactive liquid waste. A calcination process was used to convert the liquid waste to a high-level radioactive granular solid, referred to as calcine. The calcine is stored in stainless-steel bins contained within six concrete vaults called the Calcined Solids Storage Facilities (CSSFs). The Calcine Disposition Project is tasked with demonstrating the ability to retrieve the calcine from the bins of CSSF 1 and transferring it to the bins of CSSF 6. CSSF 1 was constructed to be a final calcine repository, with no forethought of retrieval. It represents the greatest technical hurdle to calcine extraction of all the CSSFs. The challenges inherent with accessing the calcine, safely extracting it, and securely transporting it are copious and complex. To overcome those challenges in a timely and objective manner, a full-scale mockup will be constructed. The mockup includes a full-size model of a concentric group of bins from CSSF 1 and a storage vessel representing CSSF 6. Mockup equipment will include an air compressor, filtration, blower/vacuum, and retrieval devices. In addition to defining process parameters, the mockup testing scope will demonstrate the amount of residual calcine that can be expected to be in the bins following extraction. This will be key to preparing for closure of CSSF 1 following removal of the calcine. Once testing is complete, the mockup will constitute a model of the calcine extraction and transport system and will be prepared to fulfill a second advantageous objective: the operators that will carry out the calcine transfer from CSSF 1 to CSSF 6 will be trained using the mockup. The control system will be identical, the major pieces of equipment will be representative, and the procedures will be analogous; hence, high-fidelity training can take place at the mockup. Once radiological operations commence at CSSF 1, the mock-up's commission will still not be completed. If any problems arise during calcine transport, the mockup will be ready to serve as a simulator to more effectively reproduce dilemmas and deduce solutions. The mock-up's mission spans the duration of the project. Its usefulness begins with helping to identify process criteria. Operations personnel will benefit greatly from its use as a training tool. And finally, the immediate availability of a simulator to reproduce problems encountered during radiological extraction and transfer will be invaluable. The knowledge gained during this process will also be of continued benefit as future work is done to remove various types of calcine from the remaining CSSFs. The methodology of safe and secure pneumatic transfer of radioactive material may be of benefit to others throughout the U.S. Department of Energy complex. (authors)

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗
DOE OSTI2013

Chemical supply chain modeling for analysis of homeland security events

The potential impacts of man-made and natural disasters on chemical plants, complexes, and supply chains are of great importance to homeland security. To be able to estimate these impacts, we developed an agent-based chemical supply chain model that includes: chemical plants with enterprise operations such as purchasing, production scheduling, and inventories; merchant chemical markets, and multi-modal chemical shipments. Large-scale simulations of chemical-plant activities and supply chain interactions, running on desktop computers, are used to estimate the scope and duration of disruptive-event impacts, and overall system resilience, based on the extent to which individual chemical plants can adjust their internal operations (e.g., production mixes and levels) versus their external interactions (market sales and purchases, and transportation routes and modes). As a result, to illustrate how the model estimates the impacts of a hurricane disruption, a simple example model centered on 1,4-butanediol is presented.

29 ENERGY PLANNING, POLICY, AND ECONOMY↗