Cyber-Informed Engineering Water Booster Pump Station Case Study Slides [Slides]
This document presents an introduction to the twelve CIE principles applied through an engineering case study focused on a water booster pump station.
42 ENGINEERING↗
SEARCH · Search NASA
Results for “industrial control system”
Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.
Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.
Cyber-Informed Engineering Workbook: Substations
This workbook contains a case study based on a hypothetical substation project, intended to aid in the conversation and utilization of principles related to Cyber-Informed Engineering.
42 ENGINEERING↗
Cyber-Informed Engineering Workbook: ADMS
This workbook presents a hypothetical project designed to facilitate discussion and the practical application of cyber-informed engineering principles.
42 ENGINEERING↗
Cyber Labeling for Energy Industrial IoT
The U.S. Department of Energy’s (DOE) Office of Cybersecurity, Energy Security and Emergency Response (CESER), at the request of the Deputy National Security Advisor for Cyber and Emerging Technologies, Anne Neuberger, initiated research in 2023 to develop a cybersecurity labeling proof-of-concept for energy products to expand on the Federal Communications Commission’s (FCC) proposed U.S. Cyber Trust Mark program. DOE mobilized researchers from six National Laboratories to develop and gather feedback on a proof-of concept label for solar inverters and smart meters, which serve as representative products for market-facing energy sector Industrial Internet of Things (IIoT). This report details the research team’s process across two phases and the resulting findings, which include challenges facing cyber labeling programs and recommendations to implement an expanded IIoT cyber labeling program in the U.S.
32 - ENERGY CONSERVATION, CONSUMPTION, AND UTILIZA↗
Physical layer Authentication of Wired Networks (PAWN) Final Technical Report
Explore the source record for details and available documents.
97 MATHEMATICS AND COMPUTING↗
CRITICAL FUNCTION ASSURANCE: Understanding Critical Function and Critical Function Delivery is Foundational for Meaningful ICS Security Improvement and Policy Efforts
Modern life is enabled by a complex and interdependent web of critical functions, including energy, communications, transportation, food, and water. Automation has significantly reduced or replaced human interactions in the delivery of these functions, resulting in a web of goods and services that are made available 24/7 only through unique and intentional deployments of microprocessors, software, and firmware technologies. The prospect of cyber-enabled sabotage of these processes disrupts traditional risk determination models. Critical Function Assurance (CFA) is a foundational approach to identifying, prioritizing, and mitigating the risk that is inherent in the delivery of critical functions that depend on digital technology. It provides rapid focus to what matters most and illuminates elements and areas of risk that otherwise are often overlooked. This focus enables effective application of available security resources and optimizes security strategy and policy efforts. This paper introduces CFA to decision makers and risk executives (including CEOs, COOs, CFOs, and CISOs) whose organizations support and deliver the critical functions that underpin national defense, societal health and safety, and a vibrant economy.
29 ENERGY PLANNING, POLICY, AND ECONOMY↗
Cyber Informed Engineering (CIE) Curriculum Guide
The Cyber-Informed Engineering (CIE) Curriculum Guide provides a framework, guidance, and resources for incorporating CIE into university-level engineering programs and related educational activities. A key goal of this guide is to help institutions deliver CIE focused education to produce future engineers and technicians who meet the nation’s infrastructure needs. To accommodate a broad range of educational goals and approaches, this guide outlines several practical integration strategies, links to resources that can accelerate CIE adoption, and offers perspectives from partner academic institutions on the various implementation strategies.
42 ENGINEERING↗
A Survey of Multizone Airflow Simulation Software
H-Canyon simulates the building and process ventilation to ensure positive contamination control for any modifications as well as evaluating off-normal conditions. Simulations can also be used to identify air quality of personnel occupied areas. The models can be classified into two groups, single and multi-zone models. As the name states, a single zone model assumes that the building can be described by a single, well-mixed zone. Whereas large buildings have structures that must be described as multizone. Multizone airflow models deal with the difficulty of flows in a building by distinguishing the effects of internal flow restrictions. Several models have been developed that take internal partitions into account. CONTAM (currently used) is a multizone airflow program created by NIST to determine airflows including infiltration, exfiltration, wind pressures acting outside the building, buoyancy effects caused by the indoor and outdoor air temperature difference. COMIS is a multizone air infiltration, ventilation, and contaminant transport model that was developed at Lawrence Berkeley National Laboratory. COMIS deals with applied pressure distribution, airflow components, HVAC systems, schedules, and contaminant transport. EnergyPlus is designed by DOE. It supports flexible component level configuration of HVAC models and simulates sub-hourly time steps to control fast dynamic systems. The program features include providing accurate environmental performance data including energy consumption and carbon emissions, and reporting solar gains on surfaces. Heavent is used to model industrial ventilation systems to control airborne contaminants. It's designed based on the American Conference of Governmental Industrial Hygienists (ACGIH) Ventilation manual. DesignBuilder is the most recognized and advanced user interface to EnergyPlus. It gives access to all of the most frequently required simulation capabilities covering building fabric, thermal mass, glazing, shading renewables, and HVAC analysis. The objective of this study is to identify all relevant software available including commercially licensed, freely licensed, and open source, that can be used to simulate large, complex process facility ventilation systems. All discovered software tools are evaluated for salient features and compared to the software tool currently used to simulate the H-Canyon ventilation system. The design criteria of a ventilation system has two basic requirements: Supplying fresh air for the occupants and changing the air in the room sufficiently; therefore, the smells, fumes, and contaminants will be removed. In this study, first, whether the software simulates airflow (infiltration, natural ventilation, and interzonal) or considers them to be inputs is discussed. Second, if indoor contaminant levels are considered; and finally suggestions on how airflow analysis can be more appropriately accounted for when performing airflow simulation of a building. All of the airflow software reviewed for this study can account for constant infiltration and natural ventilation rates that are not affected by changes in indoor and outdoor conditions. Modelling infiltration in EnergyPlus or DesignBuilder are applicable for small buildings and not appropriate for larger buildings like the H-Canyon. The effect of wind on external pressures, infiltration, and natural and mechanical ventilation, can also be calculated using all of these software. These programs have control options to switch between natural to mechanical ventilation modes or both (hybrid). Interzonal airflow can be applied which means one zone can be specified to receive a fixed amount of air from another zone. The following ventilation modeling software is recommended for further testing: CONTAM, COMIS, Heavent. The next step in evaluating the software will consist of creating test facility simulations using evaluation copies of the software.
42 ENGINEERING↗
Facility Cybersecurity Framework Best Practices
Federal facilities are increasingly adopting automation and connecting to the Internet creating an energy-internet-of-things environment that converges operational technology (OT) and information technology (IT). Today's buildings increasingly weave together networked sensors and cyber and physical systems that enable data to be collected, aggregated, exchanged, stored and monetized in new ways. Building technological advances have created new energy technology, services, markets and value creation opportunities (e.g. transactive energy, two-way grid communications, machine learning, and increased use of renewable and distributed energy resources). But as larger data sets are being exchanged at faster speeds between an increasing number of OT systems, it becomes more difficult to protect the security of the data lifecycle and the physical equipment it interacts with. These challenges are especially difficult to overcome because the economic and environmental gain (interoperability, big data, social networks and ubiquitous information sharing) are driving these prominent trends in the digital age. Often cybersecurity is an afterthought. The U.S. Department of Energy’s (DOE) Federal Energy Management Program (FEMP) funded the Pacific Northwest National Laboratory (PNNL) to develop various cybersecurity tools, trainings, and reports to aid federal facility managers – and other building owners and operators – in better applying frameworks and lessons learned from the National Institute of Standards and Technology (NIST) Cybersecurity Framework (CSF), risk management framework (RMF), DOE’s cybersecurity capability maturity model (C2M2), and a wide variety of industry best practices and guidance documents (i.e., NIST 800 series, Department of Defense United Facilities Criteria). This set of tools, collectively known as the FEMP Facility-Related Control System Cyber Toolkit (FRCS Cyber Toolkit)2, is focused on cybersecurity concerns from facility-related control systems and other operational technology (OT), such as industrial control systems (ICS). The FRCS Cyber Toolkit can be applied across six of the sixteen critical infrastructure sectors designated by the Department of Homeland Security, including government facilities, healthcare and public health, commercial facilities (e.g., public assembly, offices, lodging), financial services (e.g., banking and insurance), emergency services (e.g., fire and police stations), and information technology. With increasingly converged IT and OT systems, it is crucial to address OT cybersecurity considerations and assess how the seam of these two systems could impact the overall cybersecurity posture of a facility. The objective of this report is to provide an overview of the best possible method to use FRCS Cyber Toolkit (section 2.0) and distilled cybersecurity best practices for the federal facilities to address growing non-linear cyber threats (section 3.0). Recommendations in this document are aggregated from several NIST and other documents (see Appendix A for additional details).
97 MATHEMATICS AND COMPUTING↗
Advancements in Development and Testing of Thermal Power Dispatch Simulators
Flexible plant operations and generation (FPOG) offer nuclear power plants (NPPs) the chance to leverage alternative, non-electric revenue streams while ensuring their continued role as reliable, clean, and constant sources of baseload electrical power. The excess thermal energy generated from NPPs during periods of low electricity demand can be channeled as raw materials to numerous industrial processes via a thermal power dispatch (TPD) system. Hydrogen production via high-temperature steam electrolysis (HTSE) is an optimal use case based on technical and economic feasibility. Researchers at Idaho National Laboratory (INL) have conducted previous works that developed and implemented TPD system models within the GSE Solutions Generic Pressurized Water Reactor (GPWR) simulator to support human-in-the-loop (HITL) scenario-based evaluations. The first part of this report documents modifications made to the GPWR TPD model and HMI from the previous iteration in line with a new Sargent and Lundy (S&L) TPD design with an automatic control system. The was done in collaboration with Westinghouse using their three-loop pressurizer water reactor (W3LPWR) simulator which contains an industrial grade automatic control system for the TPD. This was installed in the Human Systems Simulation Laboratory (HSSL) at INL. The second part of the report documents findings from an all-hands-on-deck integration and verification workshop that was conducted in the HSSL over several days. The research team comprised INL human factors and TPD experts, a nuclear engineer from GSE Solutions who implemented the revised TPD model for GPWR, the human-machine interface (HMI) prototyping and human factors team from the University of Idaho, and personnel with operations experience with pressurized water reactors. The workshop provided time and expertise to conduct the final activities to bring the operations, HMI, and simulator into a functional state. The goals of the integration and verification workshop were: 1. to install the revised GPWR TPD model into the HSSL 2. verify the TPD HMI prototype was functional 3. integrate the HTSE Simulink model to GPWR. 3. Issues were identified for resolution, but overall the workshop accomplished its goal to integrated and verify the majority of the intended functional. Future work will resolve the identified issues and use the integrated simulation to support an evaluation and demonstration in the next fiscal year.
22 GENERAL STUDIES OF NUCLEAR REACTORS↗
Production of Cf-252 and other transplutonium isotopes at Oak Ridge National Laboratory
In 1957 Glenn T. Seaborg conceived and advocated for the construction of the High Flux Isotope Reactor (HFIR) and the Transuranium Processing Plant (since then renamed the Radiochemical Engineering Development Center, or REDC) at Oak Ridge National Laboratory. There, heavily shielded hot cells, glove boxes, and laboratories allow recovery of transuranium elements produced in substantial quantities. Seaborg’s vision of HFIR and REDC producing milligram quantities of berkelium, californium, and einsteinium has been fulfilled beginning in 1966 through May 2019 with 78 production campaigns yielding a cumulative totals of 1.2 g of 249 Bk, 10.2 g of 252 Cf, 39 mg of 253 Es, and 15 pg of 257 Fm. Notably, 252 Cf is a neutron source used in many industrial applications including oil exploration; process control systems for the cement industry, coal analysis, and power production; sources to start nuclear reactors and perform nondestructive materials analyses; homeland security and national defense detection devices; and medical research. Isotopes made available through transplutonium production at HFIR/REDC have enabled scientists to study the nuclear properties and reactions, chemical properties, optical properties, and solid-state properties of transplutonium elements. Long-lived isotopes have served as targets in heavy ion accelerators to produce heavier elements leading to the discovery of 104 Rf, 105 Db, 106 Sg, 113 Nh, 114 Fl, 115 Mc, 116 Lv, 117 Ts, and 118 Og. This paper reviews the evolution of the processing flowsheets to produce, separate, and purify transplutonium isotopes, which have evolved over 50 years of operation at HFIR and REDC, and summarizes directions of future work to improve the efficiency of the production operations.
38 RADIATION CHEMISTRY, RADIOCHEMISTRY, AND NUCLEA↗
Evaluation of color in digital nuclear power plant control room displays
Human system interface design in industrial process control is guided by industry standards, human factors best practices, and domain-specific conventions, and often there is a conflict between one or more of the sources of design input for specific design elements. In the nuclear domain, one design element for which conflict arises is the use of color to represent equipment state. Here, this study evaluates the tradeoffs associated with using color in a process control display versus using white and shades of gray. The performance metrics were response time, accuracy, and eye movement metrics using a simplified experimental task and professional operators. Results revealed that adhering to color conventions in nuclear power yielded small advantages in simple tasks, but did not exist for more complex tasks. The results did not provide strong evidence for or against using a particular color scheme and revealed the need for further research on the use of color for commercial nuclear power plants and other process control industries.
99 GENERAL AND MISCELLANEOUS↗
System benefits of industrial battery storage: A comparison of grid and facility control and dispatch
Customer-owned, distributed battery installations are being incentivized by utilities to increase installed battery capacity. In many of these incentive agreements, the battery owner relinquishes battery control to the utility in exchange for incentive money. The industrial sector has lagged in storage installation when compared to the residential and commercial sectors. This study compares the economic advantages to utilities and industrial facilities in different dispatch control situations. The study presents a novel framework for the optimization of multiple systems using load profiles from the industrial, residential, and commercial sectors. Case studies are presented to illustrate different dispatch scenarios. Further, the simulations showed more fiscal benefit for the industrial facilities to dispatch the battery for electrical demand reduction than utility dispatch. In the case studies, facility dispatch control resulted in an increase of facility savings by a factor of about 8.7 when compared to utility dispatch. Battery size plays a significant factor on the impact of the grid’s generating costs, showing that larger batteries can provide significant benefit even if dispatched by the facility. Future policies concerning industrial battery installations should consider overall economic benefits to utility and facility in the form of rate structures and incentive participation based on battery size.
25 ENERGY STORAGE↗
National Ignition Facility. Facility and Infrastructure Systems Maintenance Plan
Ensuring the reliability of the NIF, including its support systems, laser systems, target diagnostic systems, and utilities, is essential to the availability of the NIF in its support of NNSA missions. NIF is a key capability in the DOE Stockpile Stewardship Program and supports high energy physics experiments for nuclear weapons, energy, and astrophysics applications. High system reliability provides opportunities for shots and scientific discoveries with opportunities to enhance and upgrade capabilities. This Maintenance Plan (MP) identifies the policies and procedures used to perform and support asset management of the NIF Facility and Infrastructure Systems (FInS), NIF Lasers & Alignment (LASE), NIF Target Experimental Operations (TOPS), NIF Target Area Science and Engineering (TASE), and NIF&PS Control Systems (NCS). The FInS systems include the facility, HVAC, contamination control, beampath, and Line Replaceable Units (LRUs) as well as utilities which create the beampath environments, such as vacuum, argon, or clean dry air. The LASE systems are Programmatic systems which include laser diagnostics, alignment, power conditioning, pulsed power, and input laser systems. The TOPS and TASE systems are also Programmatic systems which include target and diagnostic delivery systems and positioners, many different insertable and fixed target diagnostics, and cryogenic and target gas fill systems. Finally, the NCS systems include both software and hardware for industrial and shot operation control systems. Policies governing administrative and operational practices related to maintenance of FInS, LASE, TOPS, TASE, and NCS systems are described in this plan. In addition, the plan provides processes and procedures for managing, tracking, and documenting the work. This document, the NIF Operations Management Plan, NIF-5020544 (Ref. 1), and NIF Shot Operations Plan, NIF-5018506 (Ref. 2), together satisfy the requirements of the Conduct of Operations. Duties, responsibilities, and reporting requirements of the various positions associated with FInS, LASE, and TOPS maintenance are detailed in this plan. The FInS systems include both Real Property systems with asset management requirements specified in DOE Order 430.1C (Ref. 3) and Programmatic systems. In addition, for FInS, there is a list of the System Level Maintenance Plans (SLMPs) in NIF-1007419198 (Ref. 4) which provide the system descriptions and maintenance plan and schedule. In addition, the list includes the Reliability Centered Maintenance (RCM) and Experience Centered Maintenance (ECM) evaluations that have been performed for applicable FInS systems as well as reliability criticality per Section 3.5. The -AM version of the NIF Maintenance Plan focuses on the reliability program for FInS, LASE, TOPS, TASE, and NCS within the context of the overall NIF Reliability, Availability, and Maintainability (RAM) program and incorporates changes since the -AL version from August 2011 and has been updated to be fully consistent with the updates to Ref. 1. It also includes asset management considerations, updates to the Work Order (WO) process within the NIF Computerized Maintenance Management System (CMMS) which is EAM infor® System Maintenance and Reliability Tracking (SMaRT) (Ref. 5), and updates to metrics and key performance indicators (KPIs).
29 ENERGY PLANNING, POLICY, AND ECONOMY↗
Feature Classification for Control System Devices
Control systems are used to automate industrial processes, smart grids, and smart cities. Unfortunately, cyber attacks on control systems are on the rise. Additionally, control systems lack the plethora of tools available for commodity systems for forensic investigation. An important step towards the proper forensic investigation is to analyze device memory. To assist in identifying features of device memory, we present a machine learning-based technique that integrates ontology information for feature classification in a control system device’s memory.
ahmed mithu, M Rayhan↗
Evaluation of IEC 62443 Standard Gaps for Electric Grid Substation Model Use Case
This report presents an evaluation of the IEC 62443 standards in the context of electric grid substations, as part of a collaborative effort among Sandia National Laboratories (SNL), Idaho National Laboratory (INL), and the National Renewable Energy Laboratory (NREL). The primary objective is to assess the applicability of these standards to enhance cybersecurity measures for industrial automation and control systems (IACS) within the energy sector. The evaluation identifies strengths, such as the scalability of security levels and the structured lifecycle guidance provided by IEC 62443. However, it also highlights significant gaps, including limited integration of physical security, insufficient guidance for legacy systems, and challenges in addressing emerging threats like supply chain vulnerabilities. Recommendations for refining the standards are proposed, including the need for tailored guidance for securing legacy systems, integrating physical security with cybersecurity frameworks, and enhancing interoperability across multi-vendor environments. By addressing these gaps, the IEC 62443 standards can be strengthened to ensure comprehensive cybersecurity for electric grid substations, thereby supporting the resilience and reliability of critical energy infrastructure.
24 POWER TRANSMISSION AND DISTRIBUTION↗
Roadmap for Wind Cybersecurity
The Roadmap for Wind Cybersecurity outlines the increasing challenges of cyber threats to the wind industry, its technologies, and control systems and presents a framework of activities and best practices that the wind industry can use to improve its cybersecurity.
17 WIND ENERGY↗
Mitigation of External Exposure of Energy Delivery System (MEEDS).
MEEDS is a cybersecurity solution that empowers under resourced owners and operators of critical energy infrastructure to rapidly identify and detect the publicly exposed and vulnerable operational technology (OT) and other critical Industrial Control and Energy Delivery Systems.
Mylrea, Michael↗