Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “software security”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 19 records

Secure Software Defined Radio Project: Secure Wireless Systems for the Energy Sector (Briefing 6)

Strong industry interest in the SEL-FLT/FLR products has led to a large number of customers conducting various lab and field trial evaluations of the system. These trials are on-going but have allowed SEL to collect enough information about operation and deployment and security capabilities of the system to conclude the field demo phase of the project. The field-testing topical report has been completed and submitted. SEL has also prepared a SEL-FLT/FLR best practices guide based on learnings from the field demo phase of the project. This best practice guide has also been submitted. The final deliverable from this phase of the project is an economic and operational benefits white paper, which has also been written and submitted. The overall objective of the project, extending the cyber security capabilities of utility wired networks into last mile wireless networks has been successfully achieved. SEL chose to target a sensor network for implementation of this capability because it was one area of last mile networking where there was substantial need and opportunity. Based on customer interest in the product these efforts have been a success. Interest in, and support for many of the security features of the product has been expressed by customers trialing the product system. Key security features customers value are strong data encryption, sensor white listing, and use of secure account based log on for access to the system. These and other features of the product have gained strong acceptance from customers interested in purchasing these products. All project deliverables and tasks are now complete, and the project can be closed out.

24 POWER TRANSMISSION AND DISTRIBUTION↗

Secure Software Central-The VOLTTRON Case

The SSC work arose from VOLTTRON’s PNNL campus deployment and resulted in a Threat Profile containing critical assets, prioritized threats, and controls for mitigating those threats. The Threat Profile outlines controls already in place, controls not yet in place, and recommendations for implementing controls. As a companion to the software, the Threat Profile shows due diligence in cybersecurity risk management in terms of security requirements, security recommendations, security budgeting, justification, and prioritization. This report describes the SSC offerings in general and the specific offerings applied to VOLTTRON.

97 MATHEMATICS AND COMPUTING↗

Invensys Foxboro Control Software Security Assessment

Idaho National Laboratory, in collaboration with Invensys, performed a laboratory assessment on Invensys Foxboro Control Software. During this assessment, vulnerabilities were discovered, evaluated, and mitigation strategies developed.

97 MATHEMATICS AND COMPUTING↗

Towards improving software security by using simulation to inform requirements and conceptual design

We illustrate the use of modeling and simulation early in the system life-cycle to improve security and reduce costs. The models that we develop for this illustration are inspired by problems in reliability analysis and supervisory control, for which similar models are used to quantify failure probabilities and rates. In the context of security, we propose that models of this general type can be used to understand trades between risk and cost while writing system requirements and during conceptual design, and thereby significantly reduce the need for expensive security corrections after a system enters operation

97 MATHEMATICS AND COMPUTING↗

Formal Methods for Provably Secure Software and Firmware

This project addresses a gap observed in verifying the programming in embedded devices used in international arms control: namely verifying that embedded programming in an arms control device does exactly what it is supposed to do, no more and no less, every time without fail, and without disclosing unauthorized information accidentally or intentionally. In critical military, aerospace, and industrial safety systems this problem is sometimes addressed using formal methods (FM). This multi-year project seeks to identify formal methods toolsets useable in arms control regimes, with emphasis on applicability, ease of use, long term availability, and support.

formal methods, Arms Control Verification↗

Named Data Networking for DER Cybersecurity

We present our research findings on the novel NDN protocol. In this work, we defined key attack scenarios for possible exploitation and detail software security testing procedures to evaluate the security of the NDN software. This work was done in the context of distributed energy resources (DER). The software security testing included an execution of unit tests and static code analyses to better understand the software rigor and the security that has been implemented. The results from the penetration testing are presented. Recommendations are discussed to provide additional defense for secure end-to-end NDN communications.

97 MATHEMATICS AND COMPUTING↗

FIC Vulnerability Profile

The FIC team is engaged with Pacific Northwest National Laboratory’s (PNNL’s) Shamrock Cyber Team to provide cybersecurity analyses of the FIC software. Shamrock offers both Threat-Based Analysis services and Secure Software Development services. These services are ultimately used to understand and mitigate threats against software and to reduce vulnerabilities in software, thus improving overall cybersecurity and informing decision makers. Shamrock’s Secure Software Development services, specifically Static Analysis Security Testing (SAST) and Open-Source Analysis (OSA), produced this Vulnerability Profile.

97 MATHEMATICS AND COMPUTING↗

Orange County Government Solar Demonstration and Research Facility

Orange County Florida completed the construction of a 20 kilowatt Solar Demonstration and Research Facility in March 2015. The system was constructed at the Orange County/University of Florida Cooperative Extension Center whose electric service address is 6021 South Conway Road, Orlando, Florida 32802. The Solar Demonstration and Research Facility is comprised of 72 polycrystalline photovoltaic modules and 3 inverters which convert direct current from the solar panels to alternating current electricity. Each module produces 270 watts of direct current power, for a total canopy production of just under 20,000 watts. The solar modules were installed with a fixed tilt of 5 degrees and face south, toward the equator to maximize the amount of sunlight captures. Each year, the electricity generated by the solar array will help eliminate 20 metric tons of carbon dioxide emissions as well as provide covered parking for staff and visitors vehicles. The solar array is expected to generate 27,000 kilowatt hours of electricity annually equating to an estimated $\$$266 savings in the monthly electric bill, or $\$$3,180 annually for the Orange County/University of Florida Cooperative Extension Center. In addition to reducing the electric bill for the Extension Center, Orange County’s solar array also takes advantage of a rebate incentive offered by the local utility, Orlando Utility Commission, which provided a meter that measures the amount of power produced by the solar array. The local utility company’s Solar Photovoltaic Production Incentive will pay Orange County $\$$0.05 per kilowatt hour for the power that is produced by the solar array. This incentive is provided in addition to Net Metering benefits, which is an effort to promote the use of clean, renewable energy on the electric grid. The Photovoltaic Solar Demonstration and Research Facility also serves an educational tool to the public; the solar array is tied directly into a data logger that provides real time power generation accessible for public viewing on an interactive kiosk located in the Orange County/University of Florida Cooperative Extension Center’s lobby where visitors can review “real time” power generation, cost savings and environmental benefits of the system. Site commissioning with the software program was delayed due to Internal Security Software issues within Orange County that needed to be resolved, therefore the “real time” capture of the production data for the solar array using the software program commenced on May 1, 2015. In addition an educational flyer was developed and is available in the Orange County Education Center’s main lobby. The project completed under this grant award assisted Orange County in demonstrating leadership by installing the application of a renewable energy technology combined with energy efficiency measures; resulting in reduced energy costs for the Orange County University of Florida Cooperative Extension Center, and helping Orange County citizens and visitors move towards the goals of greater energy independence and climate protection. The addition of the new Solar Demonstration and Research Facility has advanced the Orange County/University of Florida Cooperative Extension Center’s mission of extending, educating and providing research-based information to residents and visitors of Orange County by demonstrating the application of renewable energy technology combined with energy efficiency measures; resulting in reduced energy costs, and helping Orange County move towards the goal of greater energy independence and climate protection. In 2014, the Orange County Cooperative Extension Center hosted nearly 10,800 visitors to their on-site Exploration Gardens plus 12,686 walk-in visitors to their office plant clinic and other services. The Education Center held 2,217 educational events that were attended by 46,434 adults and youth, but about half of those events occurred off-site. Based on the visitation numbers in 2014 the Orange County Cooperative Extension Center Education is a vital partner to Orange County’s continued outreach and education efforts concerning renewable energy technologies and greenhouse gas emission reduction well in the current 2015 year and future years of operation of the solar array to the future visitors of the Center which help stimulate market demand that will continue to advance the commercialization and the widespread application and use of renewable energy technologies in Orange County and the state of Florida. The project period performance date for this grant was November 1, 2009 through March 1, 2015. The Final Project costs to complete the project as reported in the FINAL SF 425 were $\$$195,512.50 (50% recipient cost share was satisfied as required by grant terms and conditions).

14 SOLAR ENERGY↗