Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “secure operation”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 1,639 records · Page 91

Laser Holder Aids Centering of X-Ray Head

Laser holder used when alining X-ray head makes procedure safer and more reliable. Laser holder assembly attached to X-ray head to enable head to be alined optically before X-ray exposure. When laser in operating position laser beam shines on spot later illuminated with X-rays. New holder grips laser securely, maintains alinement, does not interfere with head placement, and requires only one 110-V power cord.

Bulthuis, D. V.↗

Motion of the two-control airplane in rectilinear flight after initial disturbances with introduction of controls following an exponential law

An airplane in steady rectilinear flight was assumed to experience an initial disturbance in rolling or yawing velocity. The equations of motion were solved to see if it was possible to hasten recovery of a stable airplane or to secure recovery of an unstable airplane by the application of a single lateral control following an exponential law. The sample computations indicate that, for initial disturbances complex in character, it would be difficult to secure correlation with any type of exponential control. The possibility is visualized that the two-control operation may seriously impair the ability to hasten recovery or counteract instability.

Klemin, Alexander↗

Cloud Computing for Mission Design and Operations

The space mission design and operations community already recognizes the value of cloud computing and virtualization. However, natural and valid concerns, like security, privacy, up-time, and vendor lock-in, have prevented a more widespread and expedited adoption into official workflows. In the interest of alleviating these concerns, we propose a series of guidelines for internally deploying a resource-oriented hub of data and algorithms. These guidelines provide a roadmap for implementing an architecture inspired in the cloud computing model: associative, elastic, semantical, interconnected, and adaptive. The architecture can be summarized as exposing data and algorithms as resource-oriented Web services, coordinated via messaging, and running on virtual machines; it is simple, and based on widely adopted standards, protocols, and tools. The architecture may help reduce common sources of complexity intrinsic to data-driven, collaborative interactions and, most importantly, it may provide the means for teams and agencies to evaluate the cloud computing model in their specific context, with minimal infrastructure changes, and before committing to a specific cloud services provider.

cloud computing↗

Hyperion

The Hyperion system was designed to "look inside" an executable program and determine software's function or "behavior" without the use of the software's source code. Hyperion accomplishes this by generating associated program behaviors and the complete set of conditions under which they occur. These behaviors can be automatically checked for known malicious signatures and inspected by domain experts to assure correct operation and the absence of malicious content. Hyperion can also be used to check a program's security properties and to optimize a program.

Prowell, Stacy↗

Analysis of Cygnus Electrical Signals

The United States initiated the Subcritical Experiment (SCE) program to support a stockpile stewardship mission shortly after the 1992 moratorium on underground nuclear testing was established. Many SCE’s are conducted at the Nevada National Security Site (NNSS) in Nevada. Cygnus is a high-energy radiation generating device (RGD) located and operated at the NNSS and is a primary diagnostic for the SCE program. The Cygnus Dual Beam Radiographic Facility consists of two identical radiographic sources, Cygnus 1 and Cygnus 2. From creation of the high power V-I drive to energy transport and X-ray conversion at the rod-pinch diode, the Cygnus machines utilize the following components: oil-filled Marx generator, water-filled pulse-forming line (PFL), water-filled coaxial transmission line (CTL), three-cell vacuum induction voltage adder (IVA), and rod-pinch diode. The diode pulse has the following electrical specifications: 2.25 MV, 60 kA, 60 ns. Each source has the following X-ray specifications: 1 mm diameter, 4 rad at 1 m, and 50 ns radiation pulse. SCEs are both single-event and high-value; therefore, a high level of performance in reliability and reproducibility are key issues of Cygnus. Prior to executing such a SCE, there are a formidable number of shots (e.g., each of the two Cygnus RGDs charging and discharging properly into the rod-pinch diode load) that must be executed to determine reliability and reproducibility of the Cygnus RGDs. For every shot on Cygnus, voltages and currents along the machine are recorded and analyzed. In this paper we summarize attributes of the voltage and current waveforms at different locations using distribution plots. These distribution plots are used to quantify the reliability and reproducibility for Cygnus. This analysis methodology will provide a standard to trouble shoot results of individual Cygnus shots, and also to monitor long term Cygnus performance. Accordingly, this type of extensive analysis will contribute to optimized Cygnus performance on SCEs.

42 ENGINEERING↗

Scalable Stochastic Transmission Expansion: A Use Case for ExaSGD

The intermittent nature of renewable energy poses new challenges for power grids due to its variable and un- certain power output. These features of renewable generation are becoming more relevant to transmission planning as grids reach higher penetration levels of renewable energy. In this paper we present an approach for transmission planning based on scalable computational approaches which enable the explicit consideration of operational uncertainties in the planning process. Using three-stage stochastic programming and the progressive hedging algorithm, we compute transmission expansion decisions on a modified RTS-GMLC test system. We augment the grid with large amounts of wind generation and consider many operational scenarios subject to wind uncertainty. This is an example of a possible use of the ExaSGD security constrained AC optimal power flow solver.

Exascale Computing Project↗

Companion Assisted Software Based Remote Attestation in SCADA Networks

Critical infrastructure such as power generation and water distribution systems have become a priority target in cyber warfare because of their recent computerization and introduction to the internet. As a result, Supervisory Control and Data Acquisition (SCADA) system security has become a hot topic in academic and industrial research. Among these topics, Remote Attestation is a security method intended to detect the presence of fileless malware in remote devices as they continue to operate. This allows for the detection of malware in the absence of long-term storage artifacts before symptoms of compromise begin to appear. In general, a trusted device (the verifier) makes a request for evidence of innocence from the untrusted device (the prover). In software-based schemes, the verifier can then measure the delay between its request and the prover’s response. If this delay is greater than the known computational time of the evidence gathering algorithm performed by the prover, then evidence may have been forged. Multi-hop networks often introduce too much network jitter to allow accurate measurement of prover response time, which limits the effectiveness of software based Remote Attestation in a real-world setting. In this work, we introduce a companion device that the verifier can trust to perform a subset of attestation, thereby removing any network jitter. This device is a Field Programmable Gate Array (FPGA) that is physically connected to the prover. We provide a communication protocol between the verifier, prover, and companion. To evaluate our scheme, we simulate it in a common SCADA network environment under normal and heavy traffic loads. Our simulations are performed in the discrete event network simulator NS-3, and we perform statistical analysis over our results to show that our scheme allows for tight timing constraints to be placed on the prover such that the verifier can more easily determine the validity of the evidence that it receives.

Johnson, William A.↗

Radiological Verification for the Remediation of LLRW at the Port Granby Project - 19210

The Port Granby Project is part of the Port Hope Area Initiative (PHAI) that Canadian Nuclear Laboratory (CNL) is using to manage long-term historic low level radioactive waste (LLRW) resulting from 60 years of uranium and radium processing operations in the urban setting of Port Hope, Ontario. Port Granby remediation scope includes constructing a new, secure long-term waste management facility (LTWMF) and supporting infrastructure and excavating and relocating LLRW and marginally contaminated soil from the Port Granby Waste Management Facility (PGWMF) which accepted waste until the 1980's to the newly constructed LTWMF. The PGWMF contains an estimated 450,000 cubic meters of LLRW deposited in unmarked and unlined trenches throughout the southern portion of the site that borders Lake Ontario. Project requirements include excavating contaminated material, verifying that the trench bottoms are below action levels using Multi-Agency Radiation Survey and Site Investigation Manual (MARSSIM) guidance, and final restoration. This paper describes challenges of meeting remediation verification requirements using traditional field and laboratory confirmation methods in areas of deep trench areas located in rugged terrain with ponded water and mud and presents a process that has expedited the traditional MARSSIM method for verification with greater productivity, and with enhanced safety and reliability as compared to the use of traditional methods alone. This enhanced process has been successfully employed for in-situ verification so that the excavated area can be backfilled and returned to a vegetative state. This enhanced process has been examined by federal regulatory staff through the course of their onsite audits and outcomes from these examinations have all been positive. The method involves a visual inspection and traditional walkover of the area to identify any areas with radiation measurements above the region's background followed by a full area survey performed using Wood's proprietary Orion ScanPlotSM system. The ScanPlotSM data is evaluated, mapped and overlaid on top of an aerial image of the surveyed area allowing remaining radiological material at surface or near surface to be quickly and easily identified for removal. Field staff then collect soil samples from evenly distributed points within the surveyed area and field screen the samples using an X-ray fluorescence (XRF) analysis for the three primary contaminates of potential concern (CoPCs) (arsenic, uranium and lead) that are indicative of the historical contamination. Samples passing XRF field screening are packaged and sent to a local laboratory for a full suite of analyses and checked against the CoPC list to assess whether the soil matches the profile for nearby native soils and passes the remediation goals. (authors)

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗

Dose Rate Investigation for Cobalt Isotope Rods Retrieval Campaign

GE-Hitachi (GEH) partnered with Exelon for a first of a kind program to generate cobalt-60 (Co-60) sources at Clinton Power Station (CPS). The cobalt targets are placed within the fuel bundle, double encapsulated in metal rods, and irradiated in the Boiling Water Reactor for activation. After the bundle is discharged, the Co-60 sources are harvested for medical and industrial applications. In order to ensure safe shipment of the Co-60 sources, shielding evaluations are required. As required by 10 CFR 71, a licensing basis evaluation was performed and submitted to the Nuclear Regulatory Commission (NRC) and approved as a Letter Authorization. This 10 CFR 71 evaluation utilizes bounding design inputs to demonstrate compliance with the regulatory limits. The retrieval campaign of the Co-60 rods involves disassembly of the bundle/rods, loading into a material basket, and then loading the material basket into GEHitachi's Model 2000 cask that is part of the Type B Transportation Package. As part of conservative decision making, CPS wanted confidence that measurements taken at various locations around the material basket loaded with Co-60 rods are consistent or bounded by the dose rate calculations performed by GEH. This would ensure that after all loading operations are completed, and the Model 2000 package is in the shipping configuration (i.e., cask drained and secured within the Model 2000 overpack), the dose rates would meet 10 CFR 71 shipping requirements. In addition, dose rate predictions were used to develop an ALARA plan at CPS to ensure radiological safety of the workers. To support CPS, a second, more realistic shielding evaluation was performed to verify the as planned loading. (authors)

07 ISOTOPE AND RADIATION SOURCES↗

Advancing Cybersecurity Through Technical Assistance

Electric grids around the world are undergoing rapid structural and operational change, making it more important than ever to understand evolving risks and improve grid resilience and security against natural and human disruptions. Through tailored technical assistance, NREL is working with partners to support the secure and resilient deployment of energy systems and address grid integration challenges.

97 MATHEMATICS AND COMPUTING↗

Comprehensive Characterization of Silicon Photomultipliers for Nuclear Security Applications

Scintillation detectors are an essential instrument in a variety of fields, serving as an effective means of detecting radiation for industrial, defense, medical, and basic-research applications. Light sensors are an integral part of all scintillation detectors and can affect detector performance as much as the scintillator itself. The photomultiplier tube (PMT) has been the standard light sensor for over half a century, but alternatives have been developed recently, and the silicon photomultiplier (SiPM) is perhaps the most promising of these new technologies. SiPMs can produce gains of the same order of magnitude as most PMTs and have shown reduced noise levels in the newest generations. Additionally, they posses benefits characteristic of solid-state devices such as insensitivity to magnetic fields, mechanical ruggedness, compactness, low operating voltages, and high quantum efficiencies. The timing properties of light sensors are an important characteristic for many applications, including nuclear security. For example, accurate timing is necessary for time of flight experiments, scatter cameras, and background suppression. This work aims to characterize the time resolution of many commercially available new-generation SiPMs, specifically in a time coincidence setting. SiPMs have been acquired from five leading manufacturers possessing a variety of pixel and microcell sizes. Results are presented with an organic scintillator p-terphenyl and coincidence time resolution of less than 300 picoseconds is achieved. Comparison with PMTs shows that the PMT pair tested has a superior time resolution of 83 picoseconds.

46 INSTRUMENTATION RELATED TO NUCLEAR SCIENCE AND ↗

Molten Salt Reactor Signatures and Modeling Study

Molten salt reactor (MSR) technologies, either liquid fueled and cooled or only liquid cooled, pose specific, unique challenges for safeguards of the special nuclear material during the operation, fueling, and maintenance of the reactor. MSRs are one type of Generation IV technologies being invested in and considered for U.S. domestic fabrication primarily for electricity and process heat production. These designs have generated growing commercial interest for several reasons, including high (≈40%) thermal efficiency, ease of fueling, improved use of uranium fuel, potential utilization of thorium fuel, and proposed inherent safety features. U.S. companies have several planned designs that differ in fuel, cooling, and neutron energy spectrum. Driven by commercial interest and the intent of licensing MSRs, the U.S. Nuclear Regulatory Commission (NRC) has developed a vision and strategy to accommodate non-light water reactors (LWR), which include MSRs (U.S. Nuclear Regulatory Commission 2019). In addition, the Department of Energy (DOE) through the Office of Nuclear Energy (NE) Office of Advanced Reactor Technologies (ART), …sponsors research, development and deployment (RD&D) activities through its Next Generation Nuclear Plant (NGNP), Advanced Reactor Concepts (ARC), and Advanced Small Modular Reactor (aSMR) programs to promote safety, technical, economical, and environmental advancements of innovative Generation IV nuclear energy technologies. Reactor types considering the use of salts, liquid metals, or gases for coolant fall under both ARC and aSMR. Therefore, Research Design & Development is being pursued by DOE-NE through national laboratories, universities, and international and industrial collaborations. Additionally, the U.S. is a member of the Gen IV International Forum (GIF). The GIF is a cooperative, multinational organization to guide and carry out research and development needed for the GEN IV reactor systems (Forum 2018). GIF evaluated numerous reactor concepts and down-selected to the six most feasible advanced reactor technologies: gas-cooled fast reactor (GFR), lead-cooled fast reactor (LFR), MSR, supercritical watercooled reactor (SCWR), sodium-cooled fast reactor (SFR), and very high temperature reactor (VHTR). In support of the growing interest domestically and internationally, the Materials Protection, Accounting, and Control Technologies (MPACT) campaign, under the DOE-NE Fuel Cycle Technologies (FCT) program, engages in R&D activities by developing advanced instrumentation and analysis for safeguards and security of modern, advanced nuclear fuel cycle (non-LWR) facilities. Because of the historic experience in the operation of the Aircraft Reactor Experiment (ARE) and the Molten Salt Reactor Experiment (MSRE) (Robertson, MSRE Design and Operations Report Part I 1965), Oak Ridge National Laboratory (ORNL) is heavily engaged in the various R&D activities through the DOE complex related to MSRs including national technical leadership of the DOE-NE MSR campaign. This report discusses and presents the outcomes of the FY19 MPACT MSR Safeguards task. The challenges presented by MSRs for nuclear material accountancy and control (NMAC) and associated safeguards will be investigated. The objective of this research is to explore and compile the safeguards requirements and identify measurement signatures through an initial high-level MSR design and develop complementary advanced simulation and modeling capabilities. A high-level ORNL-developed MSR design called the Molten Salt Demonstration Reactor (MSDR) (Bettis, Alexander and Watts 1972) was used as the target reactor design for this research. The MSDR model incorporates technology from the MSRE and the Molten Salt Breeder Reactor (Robertson, Conceptual Design of a Single-Fluid Molten-Salt Breeder Reactor 1971). But the MSDR is a 750 MWth graphite moderated liquid fueled (low-enriched uranium) MSR compared to the MSRE’s of 7.5 MWth. The focus of this report is to discuss the evaluation of novel signatures, correlations, and indicators to understand the applicability of current safeguards instrumentation to MSRs using the modeling results from the MSDR.

21 SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLANTS↗

Automated Adversary-in-the-Loop Cyber-Physical Defense Planning

Security of cyber-physical systems (CPS) continues to pose new challenges due to the tight integration and operational complexity of the cyber and physical components. To address these challenges, this article presents a domain-aware, optimization-based approach to determine an effective defense strategy for CPS in an automated fashion—by emulating a strategic adversary in the loop that exploits system vulnerabilities, interconnection of the CPS, and the dynamics of the physical components. Our approach builds on an adversarial decision-making model based on a Markov Decision Process (MDP) that determines the optimal cyber (discrete) and physical (continuous) attack actions over a CPS attack graph. The defense planning problem is modeled as a non-zero-sum game between the adversary and defender. We use a model-free reinforcement learning method to solve the adversary’s problem as a function of the defense strategy. We then employ Bayesian optimization (BO) to find an approximate best-response for the defender to harden the network against the resulting adversary policy. This process is iterated multiple times to improve the strategy for both players. We demonstrate the effectiveness of our approach on a ransomware-inspired graph with a smart building system as the physical process. Numerical studies show that our method converges to a Nash equilibrium for various defender-specific costs of network hardening.

97 MATHEMATICS AND COMPUTING↗

Secure ICCP Final Report

Inter-Control Center Communications Protocol (ICCP), defined by the IEC 60870-6 TASE.2 standard, was developed to enable data exchange over wide area networks between electric system entities, including utility control centers, Independent System Operators (ISOs), Regional Transmission Operators (RTOs) and Independent Power Producers (IPP) also known as Non-Utility Generators (NUG). ICCP is an unprotected protocol, and as a result is vulnerable to such actions as integrity violation, interception or alteration, spoofing, and eavesdropping. Because of these vulnerabilities with unprotected ICCP communication, security enhancements, referred to as Secure ICCP, have been added and are included in the ICCP products that utilities have received since 2003 when the standard was defined. This has resulted in an ICCP product whose communication can be encrypted and authenticated to address these vulnerabilities.

97 MATHEMATICS AND COMPUTING↗

Secure and Cost-Effective Micro Phasor Measurement Unit (PMU)-Like Metering for Behind-the-Meter (BTM) Solar Systems Using Blockchain-Assisted Smart Inverters: Preprint

Recently, there is increasing interest in using behind-the-meter (BTM) solar systems for grid services. However, providing visibility and operational situational awareness of BTM solar systems mainly operated by small-scale solar inverters is challenging due to the requirement of relatively expansive networked observation tools (e.g., micro phasor measurement units (uPMUs)) and consequent cybersecurity threats through networks. This paper presents a secure, cost-effective, uPMUs-like metering method using a blockchain-assisted smart (BAS) inverters for a BTM solar system. The proposed BAS inverter consisting of an internet-of-things device as a node of a local blockchain network enables the secure provision of inverter measurement data for grid services. The BAS inverter sends the encrypted local measurement data with a timestamp to a local blockchain miner. Once the blockchain miner generates a tamper-resistant metering ledger including the measurements, it is used to assess the situational awareness of the BTM solar system. The concept of the proposed metering using the BAS inverters is validated by experimental studies.

24 POWER TRANSMISSION AND DISTRIBUTION↗

Dual-Doppler Feasibility Study

When two or more Doppler weather radar systems are monitoring the same region, the Doppler velocities can be combined to form a three-dimensional (3-D) wind vector field thus providing for a more intuitive analysis of the wind field. A real-time display of the 3-D winds can assist forecasters in predicting the onset of convection and severe weather. The data can also be used to initialize local numerical weather prediction models. Two operational Doppler Radar systems are in the vicinity of Kennedy Space Center (KSC) and Cape Canaveral Air Force Station (CCAFS); these systems are operated by the 45th Space Wing (45 SW) and the National Weather Service Melbourne, Fla. (NWS MLB). Dual-Doppler applications were considered by the 45 SW in choosing the site for the new radar. Accordingly, the 45th Weather Squadron (45 WS), NWS MLB and the National Aeronautics and Space Administration tasked the Applied Meteorology Unit (AMU) to investigate the feasibility of establishing dual-Doppler capability using the two existing systems. This study investigated technical, hardware, and software requirements necessary to enable the establishment of a dual-Doppler capability. Review of the available literature pertaining to the dual-Doppler technique and consultation with experts revealed that the physical locations and resulting beam crossing angles of the 45 SW and NWS MLB radars make them ideally suited for a dual-Doppler capability. The dual-Doppler equations were derived to facilitate complete understanding of dual-Doppler synthesis; to determine the technical information requirements; and to determine the components of wind velocity from the equation of continuity and radial velocity data collected by the two Doppler radars. Analysis confirmed the suitability of the existing systems to provide the desired capability. In addition, it is possible that both 45 SW radar data and Terminal Doppler Weather Radar data from Orlando International Airport could be used to alleviate any radar geometry issues at the NWS MLB radar, such as the "cone of silence" or beam blockage. In the event of a radar outage at one of the sites, the multi-radar algorithms would provide continuing coverage of the area through use of the data from the remaining operational radar sites. There are several options to collect, edit, synthesize and display dual-Doppler data sets. These options include commercial packages available for purchase and a variety of freeware packages available from the National Center for Atmospheric Research (NCAR) for processing raw radar data. However, evaluation of the freeware packages revealed that they do not have sufficient documentation and configuration control to be certified for 45 SW use. Additionally, a TI data line must be installed/leased from the NWS MLB office and CCAFS to enable the receipt of NWS MLB raw radar data to use in the dual-Doppler synthesis. Integration of the TI data line into the Eastern Range infrastructure that will meet the security requirements necessary for 45 SW use is time-consuming and costly. Overall evaluation indicates that establishment of the dual-Doppler capability using the existing operational radar systems is desirable and feasible with no technical concerns. Installation of such a system represents a significant enhancement to forecasting capabilities at the 45 WS and at NWS MLB. However, data security and cost considerations must be evaluated in light of current budgetary constraints. In any case, gaining the dual-Doppler capability will provide opportunities for better visualization of the wind field and better forecasting of the onset of convection and severe weather events to support space launch operations at KSC and CCAFS.

Huddleston, Lisa L.↗

Demand Response and Smart Buildings: A Survey of Control, Communication, and Cyber-Physical Security

In this paper, we perform a comprehensive survey of the technical aspects related to the implementation of demand response and smart buildings. Specifically, we discuss various smart loads such as heating, ventilating, and air-conditioning (HVAC) systems and plug-in electric vehicles (PEVs); the power architecture with multibus characteristics; different control algorithms such as the hybrid centralized and decentralized control and the distributed coordination among buildings; the communication technologies and network architectures; and the potential cyber-physical security issues and possible mechanisms for enhancing the system security at both cyber and physical layers. Finally, the current status of the demand response in United States, Europe, Japan, and China is reviewed, and the benefits, costs, and challenges of implementing and operating demand response and smart buildings are also discussed.

42 ENGINEERING↗

Perspectives on Regulatory Design and Development for Transport Security of Nuclear and other Radioactive Materials

The responsibility for nuclear security rests entirely with the State but the International Atomic Energy Agency (IAEA) recognizes that a cornerstone in the development of a nuclear security regime is the development of regulations that address security of nuclear material and other radioactive material in transport. While the IAEA provides recommendations and guidance for security of materials in transport through Nuclear Security Series (NSS) documents, the challenge of integrating those recommendations into a Member State’s national legal framework is significant. Specifically, the development of transport security regulations requires coordination between both legal and technical experts within the country’s competent authority and multiple governmental agencies, as well as input from transport operators and other stakeholders. In addition to these interactions, the regulations must reflect the legal traditions of the Member State to fit within its overall national legal framework. Recognizing the challenge, the IAEA has requested input from international legal and technical experts to develop a methodology for drafting regulations on transport security of nuclear material and other radioactive material. This paper discusses the progress made so far in developing the methodology and provides a perspective on the need for transport security regulations and the challenges associated with their development. Ultimately, the goal of this paper is to introduce the IAEA-proposed methodology and to facilitate the discussion of this methodology with Member States that need support in developing their transport security regulations.

Ladsous, David↗