Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “Critical Function Assurance”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 19 records
All sourcesNASA NTRSDOE OSTI
DOE OSTI2023

CRITICAL FUNCTION ASSURANCE: Understanding Critical Function and Critical Function Delivery is Foundational for Meaningful ICS Security Improvement and Policy Efforts

Modern life is enabled by a complex and interdependent web of critical functions, including energy, communications, transportation, food, and water. Automation has significantly reduced or replaced human interactions in the delivery of these functions, resulting in a web of goods and services that are made available 24/7 only through unique and intentional deployments of microprocessors, software, and firmware technologies. The prospect of cyber-enabled sabotage of these processes disrupts traditional risk determination models. Critical Function Assurance (CFA) is a foundational approach to identifying, prioritizing, and mitigating the risk that is inherent in the delivery of critical functions that depend on digital technology. It provides rapid focus to what matters most and illuminates elements and areas of risk that otherwise are often overlooked. This focus enables effective application of available security resources and optimizes security strategy and policy efforts. This paper introduces CFA to decision makers and risk executives (including CEOs, COOs, CFOs, and CISOs) whose organizations support and deliver the critical functions that underpin national defense, societal health and safety, and a vibrant economy.

29 ENERGY PLANNING, POLICY, AND ECONOMY↗
DOE OSTI2024

Cyber-Enabled Sabotage, Critical Function Assurance, and Cyber-Informed Engineering

Cyber-enabled Sabotage, Critical Function Assurance, and Cyber-Informed Engineering: This discussion will introduce the idea of cyber-enabled sabotage, and the role engineering plays in the cyber defense of critical functions with a focus on electric power systems. It will outline how and why engineering practice must be used to apply cybersecurity principles to establish safe and reliable operations even in the face of determined and skilled adversaries, and give an overview of INL’s Consequence-Driven Cyber-Informed Engineering methodology to apply these principles. There will be an opportunity for audience questions and answers at the end of the session.

42 ENGINEERING↗
DOE OSTI2023

Function-based Taxonomy Implementation

Function-based taxonomies are relational mapping tools used to clearly illustrate how an organization delivers Critical Functions by using various people, processes, technologies, information, and infrastructure (PPTII). Critical Functions are the actions or activities that make up the organization’s primary purpose. Enabling Functions are the combination of PPTII used by the organization to deliver their Critical Functions. A function-based taxonomy provides a framework to categorize information and related artifacts that document an organization’s unique implementation of PPTII for Critical Function delivery. The ideal state of a function-based taxonomy is to organize the existing knowledge the organization already has throughout their numerous systems, policies, people, procedures, and configurations. A well-organized taxonomy helps organizations to effectively leverage their knowledge by clearly identifying dependencies and connections. This document is the result of combined engineering and analytical experience and describes a repeatable method for producing function-based taxonomies.

42 ENGINEERING↗
DOE OSTI2026

Digital-Threat Bias and Psychological Distance: Barriers to Foundational Digital-Security Improvement

Modern life is held together by a web of digital dependencies that enable and provide delivery of critical services and functions—think the provision of utilities such as electricity and water, as well as our dependency on digital services for social and economic services (internet, communication, etc.). As this dependency grows, the complexity related to the delivery of these critical services increases as well. As complexity increases, the understanding of the risk and impact associated with potential disruption, degradation, or destruction—due to either malicious or non-malicious events of those digitally enabled functions—decreases. One potential explanation for the difficulty to 1) understand the risks faced and 2) address them appropriately and effectively is the abstractness and psychological distance assigned to “digital threat.” The complexity of these digitally enabled services creates a perceived complicatedness; as a result, digital threats are treated differently than similarly devasting (but more easily understood) kinetic or physical threats. How we categorize these threats also matters. Acts of cyber-enabled sabotage to critical infrastructure need to be defined as irregular warfare. By inadequately defining the threat, we compound the problem. Acknowledging this digital-threat bias is foundational to improving the ability to protect critical infrastructure. Using construal-level theory and psychological-distance concepts provides an intriguing starting point to address these issues, to reframe the challenges faced, and pursue more effective critical infrastructure security and defense policy.

29 - ENERGY PLANNING, POLICY AND ECONOMY↗
DOE OSTI2019

Portable Sample Preparation For Chemical and Biological Analysis

Preparing samples for chemical or biological analysis is often time consuming and a critical step function to assure an accurate analysis. This invention provides an automated, hands-free, highly accurate device to prepare industrial, chemical, or biological samples for instrumental analysis methods.

37 INORGANIC, ORGANIC, PHYSICAL, AND ANALYTICAL CH↗
DOE OSTI2026

Moving from Information Assurance to Functional Assurance with Engineered Controls

Cyber threats to operational technology demand more than traditional IT defenses—they require full-spectrum mission assurance. Cyber-Informed Engineering (CIE) is an approach that embeds engineered controls into system design to ensure critical functions remain safe and reliable, even under attack. Unlike conventional cybersecurity tools, engineered controls act directly on physical processes to prevent unacceptable outcomes such as equipment damage or mission failure. This session will outline the CIE framework and share examples of consequence-based design that deliver true resilience, not just fail-safe behaviors. Attendees will learn how to integrate these principles into the engineering lifecycle to support resilient-by-design architectures and inform emerging standards. This talk sets the stage for the panel discussion on advancing CIE across sectors as digital and physical systems converge.

24 - POWER TRANSMISSION AND DISTRIBUTION↗
DOE OSTI2022

Feasibility of critical infrastructure protection using network functions for programmable and decoupled ICS policy enforcement over WAN

Industrial control systems (ICS) represent a major component of our critical infrastructure. With the increasing need for more control and monitoring of such systems, ICS have seen an increase in connectivity to wide area networks (WAN) exposing aging equipment to rapidly evolving cybersecurity threats. Furthermore, the ICS data requires a reliability measure from the networks for critical functions for infrastructure monitoring and control. Especially when remote plant sites are involved such as pipelines, energy distribution networks, and transportation, WAN transport impairments most often provide a best effort delivery with no strict reliability guarantees. Network functions can provide a vendor agnostic, programmable critical infrastructure protection with a single maintenance, policy determination, and reliability assurance surface. A network function (NF) can be utilized for policy enforcement over the communication between remote entities and the main control office. This paper presents the research on transparent integration with existing ICS without disrupting communications, resulting in minimal downtime while decoupling the fast paced evolution of defensive security measures from the upgrade cycle of expensive long term hardware. We report our measurements on the resource requirements and overhead in the network for successful NF insertion under a wide variety of network impairments (network packet delay, reordering, and loss). Our paired NF implementation provides a policy enforcement platform extensible to cover myriad cybersecurity-related communication goals, including packet signing for verification, encryption for data privacy, packet filtering and data diode operation (i.e. protecting against eavesdropping, packet injection, and denial-of-service). Furthermore, bundling communication specifications into packet flows allows for tunability in applying policies as coarse- or fine-grained as the needs of the operator. We report on network function resource requirements in the form of required queue depth and network utilization overhead to inform the decision making against hardware cost constraints.

42 ENGINEERING↗
DOE OSTI2015

SU-E-T-617: Plan Quality Estimation of Intensity-Modulated Radiotherapy Cases for Lung Cancer

Purpose: To estimate the planning quality of intensity-modulated radiotherapy in lung cancer cases and to provide preliminary data for the development of a planning quality assurance algorithm. Methods: 42 IMRT plans previously used in cases of solitary lung cancers were collected. Organs in or near the thoracic cavity, such as lung (ipsilateral, contralateral), heart, liver, esophagus, cord and bronchus were considered as organs at risk (OARs) in this study. The coverage index (CVI), conformity index (CI), homogeneity index (HI), volume, irregularity (standard deviation of center-surface distance) were used to compare PTV dose characteristics. The effective uniform dose (EUD), V10Gy, and V20Gy of the OARs were used to compare OAR dose characteristics. Results: Average CVI, CI, HI values were 0.9, 0.8, 0.1, respectively. CVI and CI had narrow Gaussian distribution curves without a singular value, but one case had a relatively high (0.25) HI because of location and irregular shape (Irregularity of 18.5 when average was 12.5) of PTV. EUDs tended to decrease as OAR-PTV distance increased and OAR-PTV overlap volume decreased. Conclusion: This work indicates the potential for significant plan quality deviation of similar lung cancer cases. Considering that this study were from a single department, differences in the treatment results for a given patient would be much more pronounced if multiple departments (and therefore more planners) were involved. Therefore, further examination of QA protocols is needed to reduce deviations in radiation treatment planning.

61 RADIATION PROTECTION AND DOSIMETRY↗
DOE OSTI2024

Developing stable, simplified, functional consortia from Brachypodium rhizosphere for microbial application in sustainable agriculture

The rhizosphere microbiome plays a crucial role in supporting plant productivity and ecosystem functioning by regulating nutrient cycling, soil integrity, and carbon storage. However, deciphering the intricate interplay between microbial relationships within the rhizosphere is challenging due to the overwhelming taxonomic and functional diversity. Here we present our systematic design framework built on microbial colocalization and microbial interaction, toward successful assembly of multiple rhizosphere-derived Reduced Complexity Consortia (RCC). We enriched co-localized microbes from Brachypodium roots grown in field soil with carbon substrates mimicking Brachypodium root exudates, generating 768 enrichments. By transferring the enrichments every 3 or 7 days for 10 generations, we developed both fast and slow-growing reduced complexity microbial communities. Most carbon substrates led to highly stable RCC just after a few transfers. 16S rRNA gene amplicon analysis revealed distinct community compositions based on inoculum and carbon source, with complex carbon enriching slow growing yet functionally important soil taxa like Acidobacteria and Verrucomicrobia. Network analysis showed that microbial consortia, whether differentiated by growth rate (fast vs. slow) or by succession (across generations), had significantly different network centralities. Besides, the keystone taxa identified within these networks belong to genera with plant growth-promoting traits, underscoring their critical function in shaping rhizospheric microbiome networks. Furthermore, tested consortia demonstrated high stability and reproducibility, assuring successful revival from glycerol stocks for long-term viability and use. Our study represents a significant step toward developing a framework for assembling rhizosphere consortia based on microbial colocalization and interaction, with future implications for sustainable agriculture and environmental management.

59 BASIC BIOLOGICAL SCIENCES↗
DOE OSTI2016

Infrared spectroscopy of water clusters isolated in methane matrices: Effects of isotope substitution and annealing

Using infrared-active solvents of CH{sub 4} and CD{sub 4} for matrix isolation, we measured infrared spectra of H{sub 2}O and D{sub 2}O clusters at 7 K. The solute-concentration dependence of the spectrum of H{sub 2}O clusters in a CH{sub 4} matrix was investigated and was used for the peak assignment. Annealing procedures were found to promote the size growth of water clusters in methane matrices for all the combinations of (H{sub 2}O, CH{sub 4}), (H{sub 2}O, CD{sub 4}), (D{sub 2}O, CH{sub 4}), and (D{sub 2}O, CD{sub 4}). We also monitored the ν{sub 3} absorption due to methane to find the annealing-induced structural change only of solid CH{sub 4}. The matrix effects on the vibrations of the clusters are discussed on the basis of “T{sub c} plots”, where their frequencies are plotted as a function of the square root of the matrix critical temperature, T{sub c}. The obtained plots assure the validity of the assignment of the cluster peaks.

75 CONDENSED MATTER PHYSICS, SUPERCONDUCTIVITY AND↗
DOE OSTI2021

A functional modeling approach for quality assurance in metal additive manufacturing

Purpose: Due to the complexity of and variations in additive manufacturing (AM) processes, there is a level of uncertainty that creates critical issues in quality assurance (QA), which must be addressed by time-consuming and cost-intensive tasks. This deteriorates the process repeatability, reliability and part reproducibility. So far, many AM efforts have been performed in an isolated and scattered way over several decades. Here, a systematically integrated holistic view is proposed to achieve QA for AM. Design/methodology/approach: A systematically integrated view is presented to ensure the predefined part properties before/during/after the AM process. It consists of four stages, namely, QA plan, prospective validation, concurrent validation and retrospective validation. As a foundation for QA planning, a functional workflow and the required information flows are proposed by using functional design models: Icam DEFinition for Function Modeling. Findings: The functional design model of the QA plan provides the systematically integrated view that can be the basis for inspection of AM processes for the repeatability and qualification of AM parts for reproducibility. Research limitations/implications: A powder bed fusion process was used to validate the feasibility of this QA plan. Feasibility was demonstrated under many assumptions; real validation is not included in this study. Social implications: This study provides an innovative and transformative methodology that can lead to greater productivity and improved quality of AM parts across industries. Furthermore, the QA guidelines and functional design models provide the foundation for the development of a QA architecture and management system. Originality/value: This systematically integrated view and the corresponding QA plan can pose fundamental questions to the AM community and initiate new research efforts in the in-situ digital inspection of AM processes and parts.

36 MATERIALS SCIENCE↗
DOE OSTI2017

Optically-based Sensor System for Critical Nuclear Facilities Post-Event Seismic Structural Assessment

The U.S. Department of Energy (DOE) has ownership and operational responsibility for a large enterprise of nuclear facilities that provide essential functions to DOE missions ranging from national security to discovery science and energy research. These facilities support a number of DOE programs and offices including the National Nuclear Security Administration, Office of Science, and Office of Environmental Management. With many unique and “one of a kind” functions, these facilities represent a tremendous national investment, and assuring their safety and integrity is fundamental to the success of a breadth of DOE programs. Many DOE critical facilities are located in regions with significant natural phenomenon hazards including major earthquakes and DOE has been a leader in developing standards for the seismic analysis of nuclear facilities. Attaining and sustaining excellence in nuclear facility design and management must be a core competency of the DOE. An important part of nuclear facility management is the ability to monitor facilities and rapidly assess the response and integrity of the facilities after any major upset event. Experience in the western U.S. has shown that understanding facility integrity after a major earthquake is a significant challenge which, lacking key data, can require extensive effort and significant time. In the work described in the attached report, a transformational approach to earthquake monitoring of facilities is described and demonstrated. An entirely new type of optically-based sensor that can directly and accurately measure the earthquake-induced deformations of a critical facility has been developed and tested. This report summarizes large-scale shake table testing of the sensor concept on a representative steel frame building structure, and provides quantitative data on the accuracy of the sensor measurements.

46 INSTRUMENTATION RELATED TO NUCLEAR SCIENCE AND ↗
DOE OSTI2017

Development of functional requirements specification for digital instrumentation and control systems upgrades used at nuclear power plants (NPPs) - 396

Recent market conditions have driven the nuclear industry to become more innovative at reducing cost in order to remain competitive. Instrumentation and Control (I and C) systems used by many NPPs are based on outdated 1960's and 70's technology. Many of the components used in these digital systems are no longer supported by Original Equipment Manufacturers (OEMs) and are rapidly becoming obsolete. Coping with the high cost of replacing I and C equipment due to obsolescence adds to this economic challenge. While other industries have migrated from analog to modern digital I and C technology, implementation of digital I and C controls within the nuclear industry has been very slow. This is primarily due to the high capital cost related to implementation of digital I and C upgrades, which is compounded by regulatory uncertainties that present significant licensing risks. The Nuclear Regulatory Commission (NRC), Nuclear Energy Institute (NEI) and the industry's Digital I and C Working Group are working to address many of the regulatory barriers that adversely impacts implementation of digital upgrades at NPPs. The NRC has developed an 'Integrated Action Plan to Modernize Digital Instrumentation and Controls Regulatory Infrastructure' (ML16097A182), Reference 1. Once fully implemented, this plan is expected to help reduce regulatory uncertainties that affects project cost. Excluding regulatory uncertainty, most OEM's will concur that one of the most important factors in reducing project cost is assuring that all requirements are well defined and complete prior to starting the project. A detailed and high quality Functional Requirements Specification (FRS) is critical in documenting these requirements. (authors)

22 GENERAL STUDIES OF NUCLEAR REACTORS↗
DOE OSTI2015

R&D100: IC ID

Supply chain security to detect, deter, and prevent the counterfeiting of networked and stand-alone integrated circuits (ICs) is critical to cyber security. Sandia National Laboratory researchers have developed IC ID to leverage Physically Unclonable Functions (PUFs) and strong cryptographic authentication to create a unique fingerprint for each integrated circuit. IC ID assures the authenticity of ICs to prevent tampering or malicious substitution.

46 INSTRUMENTATION RELATED TO NUCLEAR SCIENCE AND ↗
DOE OSTI2012

FY 2012 used fuel disposition campaign transportation task report on INL efforts supporting the moderator exclusion concept and standardized transportation

Following the defunding of the Yucca Mountain Project, it is reasonable to assume that commercial used fuel will remain in storage for a longer time period than initially assumed. Previous transportation task work in FY 2011, under the Department of Energy’s Office of Nuclear Energy, Used Fuel Disposition Campaign, proposed an alternative for safely transporting used fuel regardless of the structural integrity of the used fuel, baskets, poisons, or storage canisters after an extended period of storage. This alternative assures criticality safety during transportation by implementing a concept that achieves moderator exclusion (no in-leakage of moderator into the used fuel cavity). By relying upon a component inside of the transportation cask that provides a watertight function, a strong argument can be made that moderator intrusion is not credible and should not be a required assumption for criticality evaluations during normal or hypothetical accident conditions of transportation. This Transportation Task report addresses the assigned FY 2012 work that supports the proposed moderator exclusion concept as well as a standardized transportation system. The two tasks assigned were to (1) promote the proposed moderator exclusion concept to both regulatory and nuclear industry audiences and (2) advance specific technical issues in order to improve American Society of Mechanical Engineers Boiler and Pressure Vessel Code, Section III, Division 3 rules for storage and transportation containments. The common point behind both of the assigned tasks is to provide more options that can be used to resolve current issues being debated regarding the future transportation of used fuel after extended storage.

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗
DOE OSTI2020

DOE Hanford Tank Side Cesium Removal System (TSCR) Update: Fabrication and Factory Acceptance Testing - 20300

The Tank Side Cesium Removal (TSCR) System is a modular, quickly-deployable, and passively safe system for efficiently removing solids and cesium from alkaline liquid waste raffinate created by fuel processing on the Hanford site. This paper provides an overview of the project with particular emphasis on completion of fabrication and factory acceptance testing (FAT). All TSCR System components are inside three enclosures known as the Process Enclosure, Ancillary Enclosure, and Control Enclosure. The Process Enclosure is seismic design category II (SDC-II) and built to withstand the rigors of transportation and lifting, high winds, volcanic ash fall, and heavy precipitation (snow) over a temperature range of -25 to 115 deg. F. The Process Enclosure and Control Enclosure were fabricated in AVANTech's Columbia, SC facility, while the Ancillary Enclosure was fabricated in AVANTech's Richland, WA facility. The design and preliminary documented safety analysis were completed in December 2019, with all work being performed in accordance with ASME NQA-1 quality assurance requirements. The Process Enclosure, Ion Exchange Columns (IXCs), and several other TSCR components have a nuclear safety function and are designated as safety significant structures, systems, and components (SS-SSCs). The NQA-1 Commercial Grade Dedication (CGD) process was used to identify critical characteristics in order to accept materials and items used for fabrication of several safety significant TSCR components. This paper also addresses unique aspects and challenges of implementing CGD in DOE facilities and systems. After fabrication and preliminary testing, the Process and Control Enclosures were shipped to AVANTech's Richland facility where the complete TSCR System was setup and connected in a represented layout and configuration that will be used on the Hanford site. Test tanks and pumps were put in place and connected to the TSCR Process Enclosure in a manner that mimicked interfacing Double Shell Tanks in the 241-AP Tank Farm. The TSCR System was then tested/operated under conditions equivalent to those planned for onsite operation. Testing was separated into five separate phases as defined below: - Phase 1: Confirmation of TSCR System readiness for the FAT; - Phase 2: Verification of TSCR System operation under standard conditions; - Phase 3: Demonstration of TSCR System operation under non-standard conditions; - Phase 4: Demonstration of ion exchange media removal from an IXC; and - Phase 5: Completion of TSCR System lift plans and site mobilization. The Hanford Tank Operations Contractor, Washington River Protection Solutions (WRPS), participated in all phases of testing. Testing at AVANTech's Richland Facility allowed WRPS personnel to familiarize themselves with TSCR operations in a radiologically clean facility prior to onsite mobilization. Engineering and operations personnel gained valuable experience that allowed them to better refine onsite operational protocols and procedures - including handling and movement of IXCs with a forklift. This paper describes the technologies used by the TSCR System as well as how these technologies are deployed and operated to advance the Hanford mission of safely, efficiently, and effectively treating tank waste. It also provides detailed information on fabrication and FAT, including operational data from simulated tank waste runs. A project schedule for WRPS' planned construction acceptance testing, operational acceptance testing, and actual tank waste treatment is provided. This presentation should be of great interest to parties responsible for the design, testing, and mobilization of modular NQA-1 technologies for the treatment of raffinate and similar liquid wastes containing high concentrations of radioactive cesium. (authors)

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗
DOE OSTI2011

IDAHO NATIONAL LABORATORY TRANSPORTATION TASK REPORT ON ACHIEVING MODERATOR EXCLUSION AND SUPPORTING STANDARDIZED TRANSPORTATION

Following the defunding of the Yucca Mountain Project, it is reasonable to assume that commercial used fuel will remain in storage for the foreseeable future. This report proposes supplementing the ongoing research and development work related to potential degradation of used fuel, baskets, poisons, and storage canisters during an extended period of storage with a parallel path. This parallel path can assure criticality safety during transportation by implementing a concept that achieves moderator exclusion (no in-leakage of moderator into the used fuel cavity). Using updated risk assessment insights for additional technical justification and relying upon a component inside of the transportation cask that provides a watertight function, a strong argument can be made that moderator intrusion is not credible and should not be a required assumption for criticality evaluations during normal conditions of transportation. A demonstrating testing program supporting a detailed analytical effort as well as updated risk assessment insights can provide the basis for moderator exclusion during hypothetical accident conditions. This report also discusses how this engineered concept can support the goal of standardized transportation.

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗
DOE OSTI2011

Secure Cryptographic Key Management System (CKMS) Considerations for Smart Grid Devices

In this paper, we examine some unique challenges associated with key management in the Smart Grid and concomitant research initiatives: 1) effectively model security requirements and their implementations, and 2) manage keys and key distribution for very large scale deployments such as Smart Meters over a long period of performance. This will set the stage to: 3) develop innovative, low cost methods to protect keying material, and 4) provide high assurance authentication services. We will present our perspective on key management and will discuss some key issues within the life cycle of a cryptographic key designed to achieve the following: 1) control systems designed, installed, operated, and maintained to survive an intentional cyber assault with no loss of critical function, and 2) widespread implementation of methods for secure communication between remote access devices and control centers that are scalable and cost-effective to deploy.

99 GENERAL AND MISCELLANEOUS↗