Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “security systems”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 1,675 records · Page 93
All sourcesNASA NTRSDOE OSTI
NASA NTRSDate not supplied

The In-time Aviation Safety Management System Concept for Part 135 Operators

Transformations of the National Airspace System, such as envisioned with Advanced Air Mobility, will enable improvements for managing and assuring safety for Part 135 transportation of passengers and cargo. The purpose of this paper is to describe the In-time Aviation Safety Management System (IASMS) Concept of Operations (ConOps) and how its innovations such as using predictive analytics could benefit operators for risk management and safety assurance. The National Academies recommended development of an IASMS ConOps to secure a safe future NAS. Part 135 operators are currently not required to have a formal safety management system.

Kyle K. Ellis↗
DOE OSTI2025

Distribution System Blackstart and Restoration Using DERs and Dynamically Formed Microgrids

Extreme weather events have led to long-duration outages in the distribution system (DS), necessitating novel approaches to blackstart and restore the system. Existing blackstart solutions utilize blackstart units to establish multiple microgrids (MGs), sequentially energize non-blackstart units, and restore loads. However, these approaches often result in isolated MGs. In DERs-aided blackstart, the continuous operation of these MGs is limited by the finite energy capacity of commonly used blackstart units like battery energy storage (BES)-based gridforming inverters (GFMIs). To address this issue, this article proposes a holistic blackstart and restoration framework that incorporates synchronization between dynamic MGs and the entire DS with the transmission grid (TG). To support synchronization, we leveraged virtual synchronous generator-based control for GFMIs to estimate their frequency response to load pick-up events using only initial/final quasi-steady-state points. Subsequently, a synchronization switching condition is developed to model synchronizing switches, aligning them seamlessly with a linearized branch flow problem. Finally, we designed a bottomup blackstart and restoration framework that considers the switching structure of the DS, energizing/synchronizing switches, DERs with grid-following inverters, and BES-based GFMIs with frequency security constraints. In conclusion, the proposed framework is validated in IEEE-123-bus system, considering cases with two and four GFMIs under various TG recovery instants.

24 POWER TRANSMISSION AND DISTRIBUTION↗
DOE OSTI2020

Systems and methods for optical physical unclonable parameters

An article of manufacture includes a substrate and a security primitive deposited on the substrate. The security primitive includes a transition metal dichalcogenide having a varying thickness. According to various embodiments, the transition metal dichalcogenide comprises a chalcogen atom (X) selected from the group consisting of S, Se, and Te and a transition metal (M) selected from the group consisting of Mo, W, Hf, and Zr. The security primitive is pixelated into a plurality of discrete regions having different luminescence. A security primitive key includes a first set of data values corresponding to a first set of coordinates of a first region and a second set of data values corresponding to a second set of coordinates of a second region. In some embodiments, the security primitive key is digitally captured through an optical reader and verified by querying a database.

Shahrjerdi, Davood↗
DOE OSTI2026

Firmware Tampering Detection in Heavy-Duty Vehicles through J1939 CAN Analysis

Modern heavy-duty vehicles rely on complex networks of Electronic Control Units (ECUs) that communicate using the J1939 protocol. While this system makes it easier to update and configure vehicle components, it also opens the door to serious cybersecurity risks if not properly secured. This work investigates the potential for firmware tampering through the J1939 communication protocol, which enables ECU configuration and reprogramming over the Controller Area Network (CAN) bus. By monitoring CAN traffic during legitimate maintenance operations and reverse-engineering OEM diagnostic software, we identified common and proprietary J1939 message identifiers, authentication patterns, and vulnerabilities within Unified Diagnostic Services (UDS). These findings demonstrate that inadequate authentication mechanisms can allow malicious actors to alter ECU firmware or disable safety functions, posing severe operational and safety risks. Our analysis contributes to the development of vehicle intrusion detection systems capable of recognizing abnormal reprogramming activity and future firmware fingerprinting methods to verify software integrity across ECUs. This work highlights the importance of standardizing secure firmware authentication across manufacturers to strengthen cyber resilience in heavy-duty vehicle systems.

33 ADVANCED PROPULSION SYSTEMS↗
DOE OSTI2023

Methodology and Tool for the Physical Security Analysis of Micro and Advanced Reactors

This work proposes a dynamic evaluation methodology to relax the conservatism in physical security evaluation, by leveraging an ongoing work in the Light Water Reactor Sustainability pathway. This methodology is implemented in a dynamic risk assessment tool named Event Modeling Risk Assessment using Linked Diagrams (EMRALD). The work extends EMRALD’s capability to support a sandbox feature where analysts can easily create attack scenarios and modify advanced/small modular reactor (A/SMR) security and safety features using templates. This approach saves time and cost since the analysis does not require creating detailed computer-aided design models, as is commonly required in commercial force-on-force software tools. EMRALD is completely free to use at https://emraldapp.inl.gov. We have developed basic templates including physical barriers, intrusion sensors, physical areas, and safety actions, that can be downloaded from EMRALD’s GitHub site: https://github.com/idaholab/EMRALD. These templates use generic data commonly used for training purposes, which do not reflect any actual operating nuclear reactor. Users may adjust the data in the templates with their own dataset and/or create new templates in EMRALD. The proposed methodology combines security and safety by assessing sabotage effects up to the radiological consequence to the public instead of merely the core damage state. This practice follows the industry standard for advanced non-light-water reactors currently proposed for endorsement by the Nuclear Regulatory Commission. The combination of security and safety is expressed in an achievability-consequence chart. EMRALD can be used to generate data for this chart. A hypothetical case study using a representative sodium-cooled fast reactor (SFR) facility is presented in this report to demonstrate this methodology. This case study does not contain any actual nuclear plant information. This work will benefit A/SMR vendors and utilities to implement security by design during the reactor design iteration phase, such that they do not have to perform upgrades and retrofits to the reactor after it is installed to improve its physical protection system. The tool may also be used to analyze domestic or foreign reactor designs to support the International Nuclear Security Techniques for Advanced Reactors (INSTAR) bilateral missions. Future works are planned to implement the methodology on a reference SFR reactor and a reference high-temperature gas-cooled reactor to obtain insights and lessons-learned for the A/SMR community.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2023

Clean Energy Cybersecurity Accelerator Cohort 1: Authentication and Authorization

In the 2023 National Cybersecurity Strategy, the Biden-Harris Administration defines the need for a "defensible, resilient digital ecosystem where it is costlier to attack systems than defend them." The strategy cites the Clean Energy Cybersecurity Accelerator (CECA) as an exemplary effort to bolster the security and resilience of clean energy generation. These efforts help "secure the clean energy grid of the future and [generate] security best practices that extend to other critical infrastructure sectors" and promise broad and far-reaching impacts to bridge the capabilities of private industry and the needs of energy production. Cohort 1 of CECA launched in the fall of 2022 with a focus on solutions that provide strong authentication and authorization for industrial control systems to mitigate attacks on the energy grid. Authentication and authorization verify that the identity (authentication) and permissions (authorization) of a user or device are aligned with their assigned roles. Weaknesses in either can have serious repercussions. To assess the strength of Cohort 1's solutions, CECA devised threat scenarios grounded in historical precedents: the CECA team reviewed exploits from real-world case studies of state-sponsored actors to match the assessment's attack paths and targets. Cohort 1 results provided the energy industry, product vendors, and related agencies valuable insights into the efficacy and applicability of solutions in common system configurations under realistic threat scenarios. The results of the assessment highlight points for interrogation and improvement in subsequent technology iterations. CECA's evaluations are part of an ongoing conversation and collaboration to bolster U.S. cyber resilience against adversaries today and in the future.

24 POWER TRANSMISSION AND DISTRIBUTION↗
NASA NTRS1972

Remote sensing of soils, land forms, and land use in the northern Great Plains in preparation for ERTS applications

Research to determine the optimum time or season for obtaining imagery to identify and map soil limitations was conducted in the proposed Oahe irrigation project area in South Dakota. The optimum time for securing photographs or imagery is when the soil surface patterns are most apparent. For cultivated areas similar to the study area, May is the optimum time. The density slicing analysis of the May image provided additional and more accurate information than did the existing soil map. The soil boundaries were more accurately located. The use of a density analysis system for an operational soil survey has not been tested, but is obviously dependent upon securing excellent photographs for interpretation. The colors or densities of photographs will have to be corrected for sun angle effects, vignetting effects, and processing to have maximum effectiveness for mapping soil limitations. Rangeland sites were established in Bennett County, South Dakota to determine the usefulness of ERTS imagery. Imagery from these areas was interpreted for land use and drainage patterns.

Frazee, C. J.↗
DOE OSTI2023

A Systematic Study to Determine 5G Baseline Performance for Scientific Computing

The fifth-generation (5G) cellular networks envisions achieving higher data rates, improved connectivity, reduced latency, and better quality of service (QoS) than the fourthgeneration (4G) cellular networks. Such improved performance can be utilized to address the challenges in applications such as electricity generation in power systems. The traditional power grids responsible for electricity generation suffer from drawbacks such as life-threatening blackout crises, and energy storage proliferation as they are not robust to extreme climatic conditions. A recent study proposed the idea of extending the capabilities of advanced wireless technologies such as the current 5G to develop a robust, energy-efficient, and secure smart grids. However there are two main challenges associated with the integration of power systems and wireless technologies. First, it is imperative to understand the architecture and the enabling technologies of 5G to ensure that the performance requirements of the smart grids are met. Second, an end-to-end testbed is required to determine if the performance requirements are met by estimating the 5G characteristics such as latency, and throughput. Our proposed alleviates the aforementioned concerns in the following manner. To begin with, a systematic study of the 5G architecture including both the StandAlone (SA) and Non-Standalone (NSA) operations is presented. Furthermore, a detailed survey of the possible 5G enabling technologies is elicited. In addition to these, an end-toend testbed that can estimate the 5G characteristics is explained in detail with appropriate preliminary results.

5G, 5G Communication↗
NASA NTRS2007

A Support Database System for Integrated System Health Management (ISHM)

The development, deployment, operation and maintenance of Integrated Systems Health Management (ISHM) applications require the storage and processing of tremendous amounts of low-level data. This data must be shared in a secure and cost-effective manner between developers, and processed within several heterogeneous architectures. Modern database technology allows this data to be organized efficiently, while ensuring the integrity and security of the data. The extensibility and interoperability of the current database technologies also allows for the creation of an associated support database system. A support database system provides additional capabilities by building applications on top of the database structure. These applications can then be used to support the various technologies in an ISHM architecture. This presentation and paper propose a detailed structure and application description for a support database system, called the Health Assessment Database System (HADS). The HADS provides a shared context for organizing and distributing data as well as a definition of the applications that provide the required data-driven support to ISHM. This approach provides another powerful tool for ISHM developers, while also enabling novel functionality. This functionality includes: automated firmware updating and deployment, algorithm development assistance and electronic datasheet generation. The architecture for the HADS has been developed as part of the ISHM toolset at Stennis Space Center for rocket engine testing. A detailed implementation has begun for the Methane Thruster Testbed Project (MTTP) in order to assist in developing health assessment and anomaly detection algorithms for ISHM. The structure of this implementation is shown in Figure 1. The database structure consists of three primary components: the system hierarchy model, the historical data archive and the firmware codebase. The system hierarchy model replicates the physical relationships between system elements to provide the logical context for the database. The historical data archive provides a common repository for sensor data that can be shared between developers and applications. The firmware codebase is used by the developer to organize the intelligent element firmware into atomic units which can be assembled into complete firmware for specific elements.

FROM↗
DOE OSTI2023

Methodology for physics-informed generation of synthetic neutron time-of-flight measurement data

Accurate neutron cross section data are a vital input to the simulation of nuclear systems for a wide range of applications from energy production to national security. The evaluation of experimental data is a key step in producing accurate cross sections. There is a widely recognized lack of reproducibility in the evaluation process due to its artisanal nature and therefore there is a call for improvement within the nuclear data community. This can be realized by automating/standardizing viable parts of the process, namely, parameter estimation by fitting theoretical models to experimental data. This automation effort could greatly benefit from a synthetic data resource. This work leverages problem-specific physics, Monte Carlo sampling, and a general methodology for data synthesis to generate unlimited, labelled experimental cross-section data that is statistically indistinguishable to the observed data. Heuristic and, where applicable, rigorous statistical comparisons to observed data support this claim. The demonstration is based on/limited to transmission measurements at Rensselaer Polytechnic Institute (RPI) and energy-differential cross sections in the resolved resonance region (RRR). An open-source software is published alongside this article that executes the complete methodology to produce high-utility synthetic datasets. The goal of this work is to provide an approach and corresponding tool that will allow the evaluation community to begin exploring more data-driven, ML-based solutions to long-standing challenges in the field.

73 NUCLEAR PHYSICS AND RADIATION PHYSICS↗
DOE OSTI2021

Man‐in‐the‐middle attacks and defence in a power system cyber‐physical testbed

Abstract Man‐in‐The‐Middle (MiTM) attacks present numerous threats to a smart grid. In a MiTM attack, an intruder embeds itself within a conversation between two devices to either eavesdrop or impersonate one of the devices, making it appear to be a normal exchange of information. Thus, the intruder can perform false data injection (FDI) and false command injection (FCI) attacks that can compromise power system operations, such as state estimation, economic dispatch, and automatic generation control (AGC). Very few researchers have focused on MiTM methods that are difficult to detect within a smart grid. To address this, we are designing and implementing multi‐stage MiTM intrusions in an emulation‐based cyber‐physical power system testbed against a large‐scale synthetic grid model to demonstrate how such attacks can cause physical contingencies such as misguided operation and false measurements. MiTM intrusions create FCI, FDI, and replay attacks in this synthetic power grid. This work enables stakeholders to defend against these stealthy attacks, and we present detection mechanisms that are developed using multiple alerts from intrusion detection systems and network monitoring tools. Our contribution will enable other smart grid security researchers and industry to develop further detection mechanisms for inconspicuous MiTM attacks.

Wlazlo, Patrick↗
DOE OSTI2022

A multi-chord, two-color interferometer using Hilbert transform phase detection for measuring electron density in spheromak plasmas

A new, four-chord, CO 2 /He–Ne heterodyne interferometer has been designed and built for measuring line-averaged plasma density in the HIT-SI3 and subsequent HIT-SIU sustained spheromak devices. The two-color system successfully eliminates vibration-induced errors caused by mirrors that are secured to the vacuum chamber and is able to resolve electron densities ne in the full operating range of 10 18 –10 20 m –3 in both experiments with an integrated error of 4.7 × 10 17 m –2 . Here, data are presented from high toroidal current plasma discharges, showing the time evolution of electron densities n e and j Φ /n e along multiple chords.

70 PLASMA PHYSICS AND FUSION TECHNOLOGY↗
DOE OSTI2021

Nomenclatural issues concerning cultured yeasts and other fungi: why it is important to avoid unneeded name changes

The unambiguous application of fungal names is important to communicate scientific findings. Names are critical for (clinical) diagnostics, legal compliance, and regulatory controls, such as biosafety, food security, quarantine regulations, and industrial applications. Consequently, the stability of the taxonomic system and the traceability of nomenclatural changes is crucial for a broad range of users and taxonomists. The unambiguous application of names is assured by the preservation of nomenclatural history and the physical organisms representing a name. Fungi are extremely diverse in terms of ecology, lifestyle, and methods of study. Predominantly unicellular fungi known as yeasts are usually investigated as living cultures. Methods to characterize yeasts include physiological (growth) tests and experiments to induce a sexual morph; both methods require viable cultures. Thus, the preservation and availability of viable reference cultures are important, and cultures representing reference material are cited in species descriptions. Historical surveys revealed drawbacks and inconsistencies between past practices and modern requirements as stated in the International Code of Nomenclature for Algae, Fungi, and Plants (ICNafp). Improper typification of yeasts is a common problem, resulting in a large number invalid yeast species names. With this opinion letter, we address the problem that culturable microorganisms, notably some fungi and algae, require specific provisions under the ICNafp. We use yeasts as a prominent example of fungi known from cultures. But viable type material is important not only for yeasts, but also for other cultivable Fungi that are characterized by particular morphological structures (a specific type of spores), growth properties, and secondary metabolites. We summarize potential proposals which, in our opinion, will improve the stability of fungal names, in particular by protecting those names for which the reference material can be traced back to the original isolate.

59 BASIC BIOLOGICAL SCIENCES↗
DOE OSTI2026

Advanced Micro Combined Heat and Power Device

U.S. buildings account for approximately 40% of total U.S. energy consumption and 75% of electricity use, emphasizing the need for efficient, resilient, and secure energy solutions. Micro-combined heat and power (micro-CHP) systems provide an effective approach by simultaneously generating electricity and recovering waste heat for thermal use. However, current commercial micro-CHPs face challenges in achieving higher efficiency, lower emissions, and reduced cost. To address these limitations, a novel micro-CHP prototype powered by a unique opposed-piston four-stroke (OP4S) engine was developed. The OP4S features a simplified, low-cost design with reduced heat losses and dual-piston operation that enables higher thermal efficiency. Experimental results demonstrated up to 35.2% AC electrical efficiency under lean combustion, surpassing the best-performing ICE-based micro-CHPs reported publicly. In addition, the micro-CHP enables a total CHP efficiency exceeding 93%. The prototype operates reliably for over 600 hours, providing flexible and efficient thermal and electrical outputs. This novel OP4S-based micro-CHP offers a resilient, low-cost, and energy-efficient solution suitable for residential, light commercial, and remote community applications across diverse climate zones.

Gao, Zhiming [ORNL] (ORCID:0000000271397995)↗
DOE OSTI2021

W-8 Production Liaison brochure [Slides]

W-8 is part of the Weapon Systems (W) Engineering Division. W Division provides the system engineering and program management necessary to sustain the safety, reliability, and security of Los Alamos National Laboratory’s assets in the active United States nuclear stockpile: the B61, W76, W78, and W88.

42 ENGINEERING↗
DOE OSTI2022

An Introduction to Los Alamos National Laboratory [Slides]

The Weapon Systems Engineering Division (W) provides the system engineering and program management necessary to sustain the safety, reliability, and security of the Los Alamos National Laboratory’s assets in the active United States nuclear stockpile - the B61, W76, W78 and W88. The Division generates key certification data for Annual Assessment supporting the Laboratory Director's letter to the President on the health of those warheads. This role demands ongoing surveillance of the active stockpile and evaluation of the potential impact of any issues through design, engineering, fabrication, testing using state-of-the-art computational simulation tools and engineering test facilities. The Division works in close liaison with the several production facilities across the nuclear security complex as well as with the customers in the US Navy and Air Force.

98 NUCLEAR DISARMAMENT, SAFEGUARDS, AND PHYSICAL P↗
DOE OSTI2022

ACES: Infrastructure As Code. Model Optimization and Performance Capability

Infrastructure as Code (IaC) refers to managing infrastructure (networks, physical/virtual machines, storage, and connection topology) in a descriptive model/language, rather than configuring it manually or using interactive configuration tools. Just like source code can be compiled to generate the same binary code, IaC enables generating the same environment every time it is applied. IaC is a key DevOps practice and is generally used in conjunction with continuous integration (CI) and continuous delivery (CD). In CI, all code changes are merged into a mainline branch and validated multiple times a day as developers check in their changes to the source code. In CD on the other hand, code changes are automatically packaged for a new release-to-production on a regular basis. This typically enables teams to deliver software changes much more quickly and often. Developing and managing the ACES platform using (IaC) is vital for the robust deployment and continued sustainment of this foundational computing capability. IaC and DevOps practices will help us solve many of the common challenges often encountered in developing and maintaining compute infrastructure. First, it will make the provisioning, deployment, and maintenance of the compute infrastructure across multiple environments much more efficient. Second, these processes help make the overall system much more stable by continuously testing new changes as they are introduced to the system. Third, it allows us to be much more confident of the security controls in place since they can be tested as part of the CI process and all new changes can be audited and tracked. Finally, IaC enables the ACES Platform to be adaptable to the emerging technologies due to its ability to spin up different test beds to evaluate and incorporate these technologies. This document addresses common infrastructure-management challenges, describes what happens if they are not addressed, and highlights the value of utilizing IaC to tackle them. Finally, we will provide a high-level overview of the IaC and DevOps practices being utilized by the ACES Platform team.

97 MATHEMATICS AND COMPUTING↗