Search NASA⌕ Search

SEARCH · Search NASA

Results for “Critical Infrastructure Protection”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 199 records · Page 11

Introduction to the Minitrack on Monitoring, Control, and Protection.

This minitrack is on topics related to the monitoring, control, and protection of electric power systems for real-time operations and short-term operations planning. This year the emphasis has been on recent developments in the area of large-scale dynamic research for power systems and on hybrid and distributed control concepts for decentralized command and control of existing critical energy infrastructures.

Eto, Joseph H↗

Data-driven cyber attack detection and mitigation for decentralized wide-area protection and control in smart grids

Modern power systems have already evolved into complicated cyber physical systems (CPS), often referred to as smart grids, due to the continuous expansion of the electrical infrastructure, the augmentation of the number of heterogeneous system components and players, and the consequential application of a diversity of information and telecommunication technologies to facilitate the Wide Area Monitoring, Protection and Control (WAMPAC) of the day-to-day power system operation. Because of the reliance on cyber technologies, WAMPAC, among other critical functions, is prone to various malicious cyber attacks. Successful cyber attacks, especially those sabotage the operation of Bulk Electric System (BES), can cause great financial losses and social panics. Application of conventional IT security solutions is indispensable, but it often turns out to be insufficient to mitigate sophisticated attacks that deploy zero-day vulnerabilities or social engineering tactics. To further improve the resilience of the operation of smart grids when facing cyber attacks, it is desirable to make the WAMPAC functions per se capable of detecting various anomalies automatically, carrying out adaptive activity adjustments in time and thus staying unimpaired even under attack. Most of the existing research efforts attempt to achieve this by adding novel functional modules, such as model-based anomaly detectors, to the legacy centralized WAMPAC functions. In contrast, this dissertation investigates the application of data-driven algorithms in cyber attack detection and mitigation within a decentralized architecture aiming at improving the situational awareness and self-adaptiveness of WAMPAC. First part of the research focuses on the decentralization of System Integrity Protection Scheme (SIPS) with Multi-Agent System (MAS), within which the data-driven anomaly detection and optimal adaptive load shedding are further explored. An algorithm named as Support Vector Machine embedded Layered Decision Tree (SVMLDT) is proposed for the anomaly detection, which provides satisfactory detection accuracy as well as decision-making interpretability. The adaptive load shedding is carried out by every agent individually with dynamic programming. The load shedding relies on the load profile propagation among peer agents and the attack adaptiveness is accomplished by maintaining the historical mean of load shedding proportion. Load shedding only takes place after the consensus pertaining to the anomaly detection is achieved among all interconnected agents and it serves the purpose of mitigating certain cyber attacks. The attack resilience of the decentralized SIPS is evaluated using IEEE 39 bus model. It is shown that, unlike the traditional centralized SIPS, the proposed solution is able to carry out the remedial actions under most Denial of Service (DoS) attacks. The second part investigates the clustering based anomalous behavior detection and peer-assisted mitigation for power system generation control. To reduce the dimensionality of the data, three metrics are designed to interpret the behavior conformity of generator within the same balancing area. Semi-supervised K-means clustering and a density sensitive clustering algorithm based on Hierarchical DBSCAN (HDBSCAN) are both applied in clustering in the 3D feature space. Aiming to mitigate the cyber attacks targeting the generation control commands, a peer-assisted strategy is proposed. When the control commands from control center is detected as anomalous, i.e. either missing or the payload of which have been manipulated, the generating unit utilizes the peer data to infer and estimate a new generation adjustment value as replacement. Linear regression is utilized to obtain the relation of control values received by different generating units, Moving Target Defense (MTD) is adopted during the peer selection and 1-dimensional clustering is performed with the inferred control values, which are followed by the final control value estimation. The mitigation strategy proposed requires that generating units can communicate with each other in a peer-to-peer manner. Evaluation results suggest the efficacy of the proposed solution in counteracting data availability and data integrity attacks targeting the generation controls. However, the strategy stays effective only if less than half of the generating units are compromised and it is not able to mitigate cyber attacks targeting the measurements involved in the generation control.

24 POWER TRANSMISSION AND DISTRIBUTION↗

The SURE House (Solar Decathlon 2015)

Coastal towns and cities across the Northeastern US, with their high population density, aged utility infrastructure, and unique geography, are increasingly vulnerable to climate change related storm events. In October 2012 superstorm Sandy highlighted the fragility of our current coastal building types and made clear the need for a new model of design and construction which works to understand and mitigate these weaknesses. Dramatic changes in public policy, championed by both The Federal Emergency Management Agency (FEMA) and the National Flood Insurance Program (NFIP) are driving the rebuilding of these shore communities, often resulting in costly renovations, un-sustainable neighborhood configurations and in direct conflict with concurrent government policies such as The American with Disabilities Act (ADA). The SURE HOUSE demonstrates a series of new design solutions to these conflicting public policies and environmental imperatives. At Stevens Institute of Technology, the 2015 Solar Decathlon started with the challenge: Can we design a home for coastal New Jersey that dramatically reduces its energy use while protecting itself from the realities of a changing, more extreme climate? The SURE HOUSE merges the iconic 20th century shore home with 21st century building science. Utilizing innovative renewable energy technologies, a ‘Passive House’ level building envelope, and rugged glass-fiber-composite materials to flood-proof the home, the SURE HOUSE is a high-performance, net-zero-energy home, armored against extreme weather, designed for the contemporary lifestyle of the Jersey Shore and other vulnerable coastal communities. SUSTAINABLE At Stevens, we recognize that energy use in the home and workplace is directly connected to the growing problem of climate change. Reducing our energy consumption by designing higher performing, compact homes that are both functional, comfortable and desirable is the first critical step towards a modern, sustainable architecture for New Jersey and beyond. This is what informed the architectural design of the house. Configured about a compact form, thickly insulated and air-sealed walls eliminate thermal bridging and minimize energy losses while advanced glazing brings in free solar heat during the winter months. As a result of these passive design strategies, the SURE HOUSE has a greatly reduced carbon footprint requiring 91% less energy than a typical New Jersey home. Photovoltaic (PV) arrays on both the rooftop and operable shutters easily provide energy in excess of the home’s modest demands. The Stevens team considers a truly sustainable home in the era of climate change, one that prioritizes low energy use, and integrates right-sized renewable generation to supply the home’s needs. Low consumption, low production. RESILIENT In October of 2012, Hurricane Sandy wreaked havoc along the east coast of the US. In New Jersey alone there was an estimated 29.4 billion dollars in damages, 346,000 homes affected, and almost two and a half million people left without power, in some cases for over 10 days. Recovery from this storm and associated flooding is ongoing to this day, as many New Jersey homeowners grapple with the large costs of rebuilding and struggle to adapt to complicated new home building regulations. Damage from this storm to Hoboken, the home of the Stevens Institute of Technology’s campus, and to the New Jersey shore was extensive and many students on the SURE HOUSE team were directly affected by this historic event. The Stevens design team recognizes that in a world of more frequent and stronger storms, the ability to absorb and adapt to change is more important than ever. Successfully weathering the next storm and its aftermath is one of the primary goals in the design of the SURE HOUSE prototype. The SURE HOUSE introduces unique ‘dry flood-proofing’ methods to residential construction. Innovative wall and floor flood-proofing, utilizing durable composite sheathing materials adapted from the boating industry, were developed by the student team to render the SURE House’s building envelope flood proof up to the FEMA AE 6/7 Zone (+ 6/7 feet of water above sea-level). Designed and fabricated utilizing glass-fiber composite materials, the custom storm shutter system serves to protect the large glazed openings of the home from both air-borne debris impact and water infiltration during a storm event while also providing deterrence from the vandalism that often occurs in the aftermath of a calamitous event. During extended power outages, a ‘resilient’ solar array is capable of supplying critical amounts of energy and hot water to the home, without the use of battery storage or grid infrastructure. PV Description AC GRID-TIED PV SYSTEM The SURE HOUSE solar system consists of two distinct arrays, the grid-tied rooftop array which produces AC Powerand the shutter-mounted array which converts DC power generated by the modules directly into usable heat for the domestic hot water (DHW). The roof-mounted AC grid-tied array is comprised of three strings, two 11 module strings connected to an SMA SB 5000TL-US-223 inverter and a single 10 module string equipped and an SMA SB 3000TL-US-22 central inverter. All modules for the rooftop AC array are LG MonoX 2804 watt solar panels, chosen for their durability and efficiency. Inverter sizing and string size are optimized to the electrical characteristics of the chosen PV modules and the desired energy production, see Appendix 5B. The SURE HOUSE is projected to produce 12,353 kWh per year to meet 6,157 kWh per year of estimated consumption. Solar modules for the two AC grid-tied sub arrays are mounted on the main roof surface of the SURE HOUSE with a 10 degree tilt angle using a partially-ballasted polyethylene roof mounting system made by Renusol, which is particularly suited to the corrosive salt air of a coastal environment. This method was chosen for its installation simplicity and to limit detrimental roof penetrations. The 10 degree tilt optimizes the energy generated per roof area at a lower price, see Appendix 5A, and ensures that there is minimal wind uplift. DC SOLAR ELECTRIC DOMESTIC HOT WATER The SURE HOUSE’s approach to sustainable and resilient domestic hot water (DHW) consists of a unique, custom engineered DC solar electric hot water system. Employing the use of Advanced Energy’s DC electric PV heater (DCPVH)5 to heat domestic water well beyond the draw temperature, the SURE HOUSE is able to obtain a remarkably high solar fraction of 75% or more. The custom modified 80 gallon Vaughn DHW tank acts as a large solar ‘battery’ that stores heat energy in the form of hot water at almost 150 degrees, harvesting energy when the sun is out for use later in the day or overnight. The system, which uses electricity rather than heated fluid, is distinct from traditional ‘solar thermal’ systems by eliminating the dangers and associated maintenance issues of fluid based systems. By forgoing the use of external fluid loops, overheated solar collectors and pipes are not an issue for the SURE HOUSE system which never needs any yearly or seasonal flushing. In weather conditions where the integrated DCPVH unit cannot produce enough hot water via solar energy alone, the Vaughn hot water tank comes factory made with an AC powered 2.6 COP heat pump and a AC heating coil that serve as back-up heating elements. The DCPVH is powered by a DC array consisting of 10 custom-made Solbian by PVilion 180 watt, monocrystalline, flexible solar modules6. The Solbian modules are directly mounted to the top half of the operable storm shutters on the south façade of the SURE HOUSE. The SURE HOUSE team worked closely with PVillion, a PV system designer specializing in flexible architectural photovoltaics, to design an adhesive system that works with the glass-fiber storm shutter surface in a reliable manner over an extended period. Because this system operates in DC-only mode and never connects to the municipal power grid, the system can continue to create hot water safely and effectively even during grid disruption events. This hot water, and the energy stored within it, could be used for a range of activities including washing and cooking to more elaborate hydronic heating systems as desired. See Appendix 6 for system engineering, sizing and modeling.

14 SOLAR ENERGY↗

Guideline for Characterizing and Evaluating a Candidate Project Site for Solar Thermal Applications

This document presents a structured procedure for characterizing and evaluating candidate project sites for concentrating solar power (CSP) and solar heat for industrial processes (SHIP) applications. The objective is to provide project developers, researchers, and other stakeholders with a consistent, technology-agnostic framework for early-stage site assessment, enabling informed decision-making prior to significant investment in project development. Site selection is a critical factor in project success or failure for both CSP and SHIP projects. Key factors such as solar resource availability, land characteristics, environmental and regulatory constraints, infrastructure availability, and community context are determined by the choice of project site and can materially impact project performance, cost, schedule, and overall viability. This procedure is designed to systematically evaluate these factors, identify potential fatal flaws, and prioritize the most favorable candidate sites for further development. The process begins with rapid screening-level evaluation, using publicly available data to assess solar resource, land availability and suitability, zoning and land-use compatibility, and exclusion zones such as protected lands or sensitive habitats. Sites that meet the minimum screening criteria advance to a more detailed characterization. Subsequent sections of this report provide guidance for a next-level assessment of the most important technical and environmental parameters, including: 1) Solar resource quality, variability, and uncertainty using multiyear datasets and, where appropriate, on-site measurement campaigns; 2) Meteorological conditions such as wind, temperature, extreme weather events, and soiling impacts; 3) Land characteristics including slope, shading, and geotechnical conditions; and 4) Environmental and regulatory considerations, including permitting processes, endangered species, cultural resources, and visual impacts. The procedure also addresses infrastructure and integration considerations, including: 1) Grid interconnection requirements for CSP power generation projects; 2) Electrical and operational integration for SHIP facilities; 3) Water availability, quality, and permitting constraints, which are particularly critical for CSP in arid regions; and 4) Site access, construction logistics, and availability of workforce and supporting services. Recognizing the importance of social and economic context, the procedure includes evaluation of community engagement factors, such as stakeholder sentiment, proximity to sensitive visual receptors, workforce development opportunities, and local economic incentives. The outputs of these assessments are synthesized in a cost and risk evaluation, translating site characteristics into expected impacts on capital cost, operating cost, schedule, and technical risk. This is complemented by screening-level performance modeling, including 8760 simulations and long-term projections, to quantify expected energy or thermal output, assess variability thereof, and support comparison between candidate sites. Finally, the procedure provides high-level guidance on a structured go/no-go decision framework, categorizing sites based on identified risks and constraints, and outlining a clear path forward to feasibility studies and front-end engineering design for viable projects. By standardizing the site characterization process across both CSP and SHIP applications, this guideline aims to: 1) Improve consistency and transparency in early-stage project evaluation; 2) Reduce development risk and avoid investment in nonviable project sites; 3) Support collaboration between developers, researchers, and public agencies; and 4) Accelerate successful deployment of concentrating solar technologies for both power generation and industrial process heat.

14 SOLAR ENERGY↗

Development of in-situ polymerized intrinsically conductive resin and low-cost carbon pigments offering high conductivity for sensing, EMI shielding and lighting protection

Electrically conductive composites are emerging across diverse industries such as electronic, automotive, aerospace, advanced air mobility, biomedical, infrastructure, defense and security offering static charge dissipation, electromagnetic interference shielding, lighting protection, sensing, dicing, corrosion monitoring, etc. Conductivity enhanced composites provide several advantages compared to conventional metals including weight reduction, corrosion resistance, energy efficient processability, tunable properties and multifunctionality. Polymers are typically insulating in nature and require conducting filler for electron transport. However, dispersion and polymer-filler interphases are critical and often disrupt conducting pathways. Besides, conductive fillers such as graphene, carbon nanotube, MXene, silver nanowire, etc. are expensive, limiting their wide adoption in composite industry. On the other hand, a limited number of intrinsically conductive polymers are available among which polyaniline (PANI) has been widely studied due to its high conductivity, thermal and chemical stability. However, PANI is difficult to process and exhibits weak mechanical properties. In brief, there is a significant demand for electrically conductive polymer formulation with cost-effective conducting fillers that offer processability in scale to expand the market of conductivity enhanced materials.

Kumar, Vipin [Oak Ridge National Laboratory (ORNL)↗

EVALUATING NUCLEAR SECURITY IMPLICATIONS OF THE SPLINTERNET

The internet, which for years has been viewed as a global online commons with standardized protocols but few regulations is, according to some experts, starting to mirror the contentious political and commercial contours of the physical world. Contributing to this is the rise in data breaches, cyber-enabled attacks on critical infrastructure, government surveillance operations, theft of intellectual property, manipulation of electoral processes, and perceived erosion of privacy, all of which are resulting in a growing skepticism that an open internet will naturally serve the best interests of users, communities, countries, and the global economy. In addition, the rapidly emerging and increasingly lucrative power of data has global superpowers scrambling to protect their informational sovereignty as an urgent matter of national security. Underscoring this urgency is the fact that, despite its global reach and cosmopolitan contributor base, internet infrastructure and governance of the World Wide Web remain largely under U.S. corporate auspices, which reinforces the perception of U.S. control. Whether fragmentation is politically, economically, or socially motivated, there appears to be a growing appetite for an internet that is partitioned and controlled at the national level. From “the Great Firewall of China” to the “Halal” internet of Iran, the trend towards a “Splinternet” has courts and governments embarking on what some call a "legal arms race" to impose a maze of national or regional rules, often conflicting, in the digital realm. The paper explores the emerging Splinternet phenomenon, analyses the implications of this trend on nuclear security, and identifies questions that present opportunities for future research.

Internet, Data Security, Cyber Security, Nuclear S↗

Network Randomization and Dynamic Defense for Critical Infrastructure Systems

Critical Infrastructure control systems continue to foster predictable communication paths, static configurations, and unpatched systems that allow easy access to our nation's most critical assets. This makes them attractive targets for cyber intrusion. We seek to address these attack vectors by automatically randomizing network settings, randomizing applications on the end devices themselves, and dynamically defending these systems against active attacks. Applying these protective measures will convert control systems into moving targets that proactively defend themselves against attack. Sandia National Laboratories has led this effort by gathering operational and technical requirements from Tennessee Valley Authority (TVA) and performing research and development to create a proof-of-concept solution. Our proof-of-concept has been tested in a laboratory environment with over 300 nodes. The vision of this project is to enhance control system security by converting existing control systems into moving targets and building these security measures into future systems while meeting the unique constraints that control systems face.

98 NUCLEAR DISARMAMENT, SAFEGUARDS, AND PHYSICAL P↗

CIE Curriculum Guide (V.2.0)

The Cyber-Informed Engineering (CIE) Curriculum Guide offers a comprehensive framework, guidance, and resources for integrating CIE into university-level engineering programs and related educational activities. The primary goal is to help educators adopt CIE principles into their teaching to produce future engineers and technicians who understand digital risks in modern engineered systems, thereby addressing the nation’s infrastructure resilience needs. This guide outlines practical integration examples, links to resources to accelerate CIE adoption, and shares insights from partner academic institutions on various implementation strategies. CIE is a framework for embedding engineered controls that mitigate the impact of cyber-attacks in any cyber-physical system used in critical energy infrastructure and other sectors. Developed by the U.S. Department of Energy’s Office of Cybersecurity, Energy Security, and Emergency Response (CESER), the National Cyber-Informed Engineering Strategy emphasizes embedding CIE into formal education, training, and credentialing. This guide supports this strategic objective by providing examples of integrating CIE concepts into engineering curricula, from class activities to new courses and certificate programs. The importance of educating cyber-informed engineers is underscored by the evolving cybersecurity threats facing engineered systems. As industrial control systems (ICS) increasingly incorporate digital technologies, the responsibility for security extends to both cyber professionals and engineers. CIE addresses critical gaps in designing and protecting physical systems with digital components against cyber risks, ensuring engineers consider digital risk throughout the engineering design lifecycle. Currently, engineering education does not routinely include cyber-informed principles, highlighting a gap in addressing modern engineering system risks. This guide advocates for updating engineering curricula to include digital risk management as a fundamental element. By doing so, future engineers will be equipped to design resilient systems that mitigate digital risks from the outset. Through this guide, engineering faculty can integrate CIE into their curricula, bridging the gap between digital risk and engineering. This approach prepares a cyber-informed workforce capable of safeguarding the cyber-physical systems crucial to national security and public welfare. By embedding CIE into education and training, institutions can produce engineers and technicians who can effectively mitigate cyber impacts throughout the engineering design lifecycle, resulting in more secure critical infrastructures.

42 - ENGINEERING↗

Attack-resilient algorithms and testbed federation for wide-area protection and control in smart grid

Today’s energy infrastructure is undergoing a massive transformation across all generation, transmission, and distribution systems to provide reliability, efficiency, and sustainability to the power system network. During the past 10 years, there has been a remarkable enhancement in developing close-loop wide-area protection and control (WAPAC) applications, such as automatic generation control (AGC), wide-area protection scheme (WAPS), synchrophasor-based wide-area voltage control system (WAVCS), etc., in the energy management system (EMS) to provide an adequate situational awareness to control center operators during physical disturbances and natural events. The rapid digitalization, unencrypted communication, and numerous data-sharing devices have increased digital access points that have exposed the grid network to countless cyberattacks pertinent to the WAPAC cybersecurity. Given the amount of complex grid network coupled with legacy infrastructures, it is untrustworthy to completely rely on information technology (IT)-based conventional security measures to defend against evolving cyberattacks. Hence, there is a compelling need to go beyond the traditional paradigm of ‘security by obscurity’ and ‘bolt-on’ security measures, and develop a suite of innovative security solutions at multiple layers to transform the current “fault-resilient” grid into “fault and attack-resilient” grid of the future. This dissertation specifically focuses on developing application-specific attack-resilient solutions for critical WAPAC applications in the smart grid. The first part of the study, Attack-Resilient Wide-Area Protection Scheme, presents a cyber-physical attack-resilient system (CPARS) for WAPS, where two anomaly detection methods are proposed to detect multi-level cyberattacks followed by the rules-based intrusion mitigation system (RIMS) to initiate effective mitigation strategies, tailored to these attacks, to restore the normal grid operation after disturbances. The first anomaly detection component, Machine learning-based Anomaly Detection for Centralized WAPS, discusses a novel architecture and methodology for developing a machine-learning-based anomaly detection system (ADS) for the centralized wide-area protection system (CWAPS) by applying the variational mode decomposition (VMD) technique and decision tree (DT) algorithms using cyber logs and synchrophasor measurements. The second component, Multi-Agent-based Anomaly Detection for Decentralized WAPS, presents a two-level hierarchical multi-agent-based decentralized WAPS against the system-aware stealthy cyber-attacks. Finally, for the RIMS, the state transition diagram-based mitigation measures are defined based on the grid operation states and experimental testing and evaluation are presented in a cyber-physical testbed environment. The second part of the study, Attack-Resilient Wide-Area Voltage Control System, addresses the existing vulnerabilities in the wide-area voltage control system (WAVCS), presents the methodology for performing an impact analysis during data integrity attacks, and proposes a data-driven attackresilient system (DARS) by incorporating machine learning-based ADS and rules-based anomaly mitigation system (RAMS) to detect these attacks and provide necessary mitigation actions to maintain the transient voltage stability after disturbances. Finally, the third part, Networked Federation Testbed (NEFTSec) for Smart Grid Cybersecurity, focuses on developing an interconnected federated testbed through a common network like the internet, describes its conceptual architectures, and also presents its design components for experimental testing, validation, and evaluation. Further, it presents the co-simulation interface algorithm (CIA) to facilitate the geographically-dispersed real-time distributed simulation (GD-RTDS) during the cyber-physical federation. In general, this dissertation presents innovative attack-resilient solutions for WAPAC applications that are experimentally tested and evaluated using the PowerCyber testbed and NEFTSec platform to accelerate the transition of state-of-the-art research works to the real-field deployments.

24 POWER TRANSMISSION AND DISTRIBUTION↗

TA 55 Reinvestment Project II Phase C Update Project Status May 23, 2017

The TA-55 Reinvestment Project (TRP) II Phase C is a critical infrastructure project focused on improving safety and reliability of the Los Alamos National Laboratory (LANL) TA-55 Complex. The Project recapitalizes and revitalizes aging and obsolete facility and safety systems providing a sustainable nuclear facility for National Security Missions.

98 NUCLEAR DISARMAMENT, SAFEGUARDS, AND PHYSICAL P↗

Best Practices for Resilience Hub Development and Management

The Carbon League and its community partners in East St. Louis, Illinois, have identified five facilities to serve as resilience hubs. These hubs are intended to support the local community through a range of services and resources during blue-sky (everyday), gray-sky (pre-event), and black-sky (emergency) conditions. Transforming these facilities into fully functional resilience hubs requires a broad operational improvement and programmatic planning roadmap. This memo outlines best practices to guide the development of these resilience hubs in East St. Louis, including recommendations for infrastructure services; safety and physical protection; community services; operational protocols; and a phased implementation strategy aligned with realistic funding and capacity constraints. Infrastructure recommendations include strengthening electric power, communications, water, sanitation, and transportation/logistics capabilities, all of which are essential for hubs that may serve as cooling and warming centers, distribution points, and information hubs during emergencies. Safety recommendations focus on accessibility, emergency action planning, indoor air quality, and secure storage of critical equipment. A phased roadmap provides guidance from immediate, low-cost readiness actions to long-term optimization and community integration. Performance metrics and maintenance protocols ensure continuous improvement and operational readiness. This guidance draws on best practices that can be used to support the development of resilient, community-centered hubs capable of enhancing public safety, health, and well-being during everyday operations and emergencies alike.

99 GENERAL AND MISCELLANEOUS↗

ARAM-W Automated Risk Assessment Methodology for Water and Wastewater

The Automated Risk Assessment Methodology for Water and Wastewater Utilities, ARAM-W, is a systematic, risk-based approach used to evaluate water and wastewater utilities from a range of threats that could cause an undesired event. It leverages the automated RAM-CI (critical infrastructure) prototype tool completed in September 2008, the manual RC RAM-W (RAMCAP compliant) approach completed in September 2007, the manual RAM-W, version 2, approach completed in 2002, and the requirements and needs of the Water Sector, EPA and DHS. The ARAM-W tool is a user-friendly tool which provides a sound scientific and technical framework to look at the total protection system. The ARAM-W tool provides the user the ability to determine a relative risk based on the threat, consequences and protection system effectiveness/vulnerability. It is a stand-alone PC-based tool which is compatible with the NIPP risk assessment methodology criteria as well as RAMPCAP. The ARAM-W process provides through a series of steps the ability to plan for the risk assessment; characterize the utility, facilities and assets; define the threat; identify undesired events and consequences; evaluate protection system effectiveness; determine risk; propose and evaluate upgrades if the risk is not acceptable and report on the assessment results.

Dang, Tam↗

Cybersecurity and Optimization in Smart “Autonomous” Buildings

Significant resources have been invested in making buildings “smart” by digitizing, networking and automating key systems and operations. Smart autonomous buildings create new energy efficiency, economic and environmental opportunities. But as buildings become increasingly networked to the Internet, they can also become more vulnerable to various cyber threats. Automated and Internet-connected buildings systems, equipment, controls, and sensors can significantly increase cyber and physical vulnerabilities that threaten the confidentiality, integrity, and availability of critical systems in organizations. Securing smart autonomous buildings presents a national security and economic challenge to the nation. Ignoring this challenge threatens business continuity and the availability of critical infrastructures that are enabled by smart buildings. In this chapter, the authors address challenges and explore new opportunities in securing smart buildings that are enhanced by machine learning, cognitive sensing, artificial intelligence (AI) and smart-energy technologies. The chapter begins by identifying cyber-threats and challenges to smart autonomous buildings. Then it provides recommendations on how AI enabled solutions can help smart buildings and facilities better protect, detect and respond to cyber-physical threats and vulnerabilities. Next, the chapter will provide case studies that examine how combining AI with innovative smart-energy technologies can increase both cybersecurity and energy efficiency savings in buildings. The chapter will conclude by proposing recommendations for future cybersecurity and energy optimization research for examining AI enabled smart-energy technology.

Mylrea, Michael E.↗

FALCON: Framework for Anomaly Detection in Industrial Control Systems

Industrial Control Systems (ICS) are used to control physical processes in critical infrastructure. These systems are used in a wide variety of operations such as water treatment, power generation and distribution, and manufacturing. While the safety and security of these systems are of serious concern, recent reports have shown an increase in targeted attacks aimed at manipulating physical processes to cause catastrophic consequences. This trend emphasizes the need for algorithms and tools that provide resilient and smart attack detection mechanisms to protect ICS. In this paper, we propose an anomaly detection framework for ICS based on a deep neural network. The proposed methodology uses dilated convolution and long short-term memory (LSTM) layers to learn temporal as well as long term dependencies within sensor and actuator data in an ICS. The sensor/actuator data are passed through a unique feature engineering pipeline where wavelet transformation is applied to the sensor signals to extract features that are fed into the model. Additionally, this paper explores four variations of supervised deep learning models, as well as an unsupervised support vector machine (SVM) model for this problem. The proposed framework is validated on Secure Water Treatment testbed results. This framework detects more attacks in a shorter period of time than previously published methods.

97 - MATHEMATICS AND COMPUTING↗

Cyber–Physical System Security of Distribution Systems

The Information and Communications Technology (ICT) for control and monitoring of power systems is a layer on top of the physical power system infrastructure. The cyber system and physical power system components form a tightly coupled Cyber–Physical System (CPS). Sources of vulnerabilities arise from the computing and communication systems of the cyber–power grid. Cyber intrusions targeting the power grid are serious threats to the reliability of electricity supply that is critical to society and the economy. In a typical Information Technology environment, numerous attack scenarios have shown how unauthorized users can access and manipulate protected information from a network domain. The need for cyber security has led to industry standards that power grids must meet to ensure that the monitoring, operation, and control functions are not disrupted by cyber intrusions. Cyber security technologies such as encryption and authentication have been deployed on the CPS. Intrusion or anomaly detection and mitigation tools developed for power grids are emerging. Furthermore, this survey paper provides the basic concepts of cyber vulnerabilities of distribution systems and CPS security. The important ICT subjects for distribution systems covered in this paper include Supervisory Control And Data Acquisition, Distributed Energy Resources, including renewable energy and smart meters.

97 MATHEMATICS AND COMPUTING↗

EVs@Scale Lab Consortium Bi-Annual Stakeholder Meeting, 17 August 2022, Golden, Colorado [Slides]

The U.S. Department of Energy (DOE) Electric Vehicles at Scale Lab Consortium (EVs@Scale Lab Consortium) is accelerating research to support the establishment of a secure and scalable national network of charging infrastructure. This network will be critical to support tens of millions of light-, medium-, and heavy-duty EVs on American roads by 2030. The EVs@Scale Lab Consortium brings together national laboratories and key stakeholders to conduct infrastructure research and development (R&D) that advances innovations in, and sets unified standards for, high-power and wireless charging. The effort will also develop technologies to integrate vehicle charging with the power grid, and develop cybersecurity measures to protect drivers, vehicles, equipment, and the grid. The first hybrid EVs@Scale Lab Consortium Biannual Stakeholder Meeting was held at NREL on August 17, 2022, to identify research, development, and deployment needs to accelerate technology development for electric vehicles at scale and explore opportunities for collaboration across government, academia, and industry.

33 ADVANCED PROPULSION SYSTEMS↗

Electric Vehicles at Scale (EVs@Scale) Laboratory Consortium

The U.S. Department of Energy (DOE) Electric Vehicles at Scale Lab Consortium (EVs@Scale Lab Consortium) is accelerating research to support the establishment of a secure and scalable national network of charging infrastructure. This network will be critical to support tens of millions of light-, medium-, and heavy-duty EVs on American roads by 2030. The EVs@Scale Lab Consortium brings together national laboratories and key stakeholders to conduct infrastructure research and development (R&D) that advances innovations in, and sets unified standards for, high-power and wireless charging. The effort will also develop technologies to integrate vehicle charging with the power grid, and develop cybersecurity measures to protect drivers, vehicles, equipment, and the grid.

ADVANCED PROPULSION SYSTEMS,POWER TRANSMISSION AND↗

EVs@Scale Lab Consortium Semi-Annual Stakeholder Meeting

The U.S. Department of Energy (DOE) Electric Vehicles at Scale Lab Consortium (EVs@Scale Lab Consortium) is accelerating research to support the establishment of a secure and scalable national network of charging infrastructure. This network will be critical to support tens of millions of light-, medium-, and heavy-duty EVs on American roads by 2030. The EVs@Scale Lab Consortium brings together national laboratories and key stakeholders to conduct infrastructure research and development (R&D) that advances innovations in, and sets unified standards for, high-power and wireless charging. The effort will also develop technologies to integrate vehicle charging with the power grid, and develop cybersecurity measures to protect drivers, vehicles, equipment, and the grid. The first hybrid EVs@Scale Lab Consortium Semiannual Stakeholder Meeting was held at ANL on September 27-28, 2023, to identify research, development, and deployment needs to accelerate technology development for electric vehicles at scale and explore opportunities for collaboration across government, academia, and industry.

advanced charging and grid interface technologies↗