Search NASA⌕ Search

SEARCH · Search NASA

Results for “intrusion”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 199 records · Page 11
All sourcesNASA NTRSDOE OSTI
DOE OSTI2024

Network visualization, intrusion detection, and network healing

The present disclosure is related to a cyber-security system that includes a Supervisory Control and Data Acquisition (SCADA) network monitor configured to receive a data set from a power system network, an event manager, and a mitigation system, where the SCADA network monitor includes an anomaly detector.

Rivera, Joshua Eli↗
DOE OSTI2022

DER Cybersecurity Detection and Response Suite

SAND2024-08475O The Distributed Energy Resource (DER) Cybersecurity Detection and Response Suite is a solution for distributed energy resource (DER) systems. The DER Security Orchestration, Automation, and Response (SOAR) solution that uses alerts from signature- and behavior-based Intrusion Detection Systems are intended to be deployed as bump-in-the-wire (BITW) devices in front of DER equipment. The fielded application would use multiple intrusion detection systems that report data to SOAR to respond to cyberattacks. The suite consists of two software components: • The proactive intrusion detection and mitigation system (PIDMS) secures grid-edge photovoltaic smart inverters and other equipment in distributed energy resource systems. It is a distributed BITW solution; cyber and physical data are automatically processed using network inspection tools and custom machine learning algorithms to detect abnormal events and correlate cyber-physical events. • The Security Orchestration, Automation, and Response for Distributed Energy Resources (SOAR4DER) application ingests data from several intrusion detection systems to quickly block attacks and revert DER systems to good states. Using a collection of intrusion detection system technologies on a BITW device, it incorporates physical and cyber data to detect abnormal and potential malicious behaviors. Multiple SOAR playbooks then use the intrusion detection system data streams to automatically defend the system. SOAR4DER system testing showed detection and response times under 30 seconds for all adversary reconnaissance, denial-of-service attacks, malicious Modbus commands, brute-force logins, and machine-in-the-middle attacks. Sandia National Laboratories is a multimission laboratory managed and operated by National Technology & Engineering Solutions of Sandia, LLC, a wholly owned subsidiary of Honeywell International Inc., for the U.S. Department of Energy’s National Nuclear Security Administration under contract DE-NA0003525.

Johnson, Jay↗
DOE OSTI2024

Credible Criticality Safety Margin in the 30B Package with LEU+ UF 6 and Hypothetical Water Ingress

The commercial nuclear industry is pursuing advancements in fuel and reactor design that increase the uranium enrichment above 5 wt. % 235 U. These advancements will necessitate the ability to transport bulk quantities of UF 6 at increased enrichments. Currently, the 30B cylinder is the primary container used by the industry for UF 6 storage and transportation and has a long history of successful shipments. This container can support up to 2,277 kg of UF 6 at a maximum enrichment of 5 wt. % 235 U. Previous evaluations have assessed the potential impact of criticality safety for 30B transport at higher enrichments but assumed moderator intrusion would not require evaluation. Although current regulations allow for the exception of moderator intrusion for UF 6 packages through the design and quality control of the package content, this exception is limited to enrichments up to 5 wt. % 235 U. Thus, an investigation of moderator intrusion into a 30B cylinder should be performed. Moderator intrusion into a 30B cylinder is a unique condition for criticality safety evaluation in transportation because of the violent chemical reactions that occur between UF 6 and H 2 O. The resulting intrusion is strongly dependent on the breach size, breach location, breach interface solid/ullage of the UF 6 content, the UF 6 distribution (which is temperature dependent), and temperature/pressure conditions which are dynamic in accident conditions. Additionally, the complexity of the HF-UO 2 F 2 -H 2 O interface that occurs during the event can influence the potential solubility of uranium in the system, as well as influence the amount of UF 6 reaction with H 2 O. With the operating experience from Orano Federal Services LLC, the UF 6 chemical expertise from Oak Ridge National Laboratory (ORNL), and the criticality safety expertise from ORNL, this paper evaluates the neutronic conditions (i.e., k eff ) that apply the understood chemistry and experimental conditions that occur during moderator intrusion of a breached 30B cylinder under postulated accidents. This report examines the historical evaluations of UF 6 transport and expands these evaluations for the enrichments expected for nuclear industry advancement. These simulations primarily feature a homogeneous mixture of UF 6 and H 2 O as an infinite media system and as a sphere with water reflection given an impurity limit of 0.5 wt. % UF 6 . This report demonstrates that this H/U limit is valid up to 8 wt. % enrichment for both H 2 O and HF as the moderating mixture. The water-reflected homogeneous mixed spheres evaluated demonstrate the amount of safety margin applied by restricting the 30B cylinder impurity limit to 0.5 wt. %. Additionally, this report evaluates moderator ingress scenarios of a 30B cylinder. The 30B cylinder simulations vary the cylinder orientation, the mass of UF 6 in the system, the mass of H 2 O in the system, and how much H 2 O has reacted with UF 6 . The moderator ingress of a 30B cylinder was evaluated for the water-reflected homogeneous mixed spheres to demonstrate the amount of safety margin applied by restricting the 30B cylinder impurity limit to 0.5 wt. %. These simulations are standard practice and are independent of the UF 6 -H 2 O reaction. This work also explored more complex simulations that layer the H 2 O over the UF 6 , which incorporates the amount of reacted UF 6 as a separate layer and considers solubility limits of UO 2 F 2 in H 2 O as it is produced. This approach is intended to simulate the postulated event of a large hairline crack occurring on a submerged cylinder. Finally, this work considers the potential of H 2 O mixing into the UF 6 solid heterogeneously using a sponge-like model. The water ingress into the UF 6 is treated as random size spheres, and the reaction products form into a layer over the spheres.

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗
DOE OSTI2023

Advanced Grid Operational Technology Edge-Level Threat Detection

This report presents a deployable solution to improve the cybersecurity situational awareness of the legacy SCADA system infrastructure in power grids. The main goal of this project is to provide system owners and operators a highly trusted, intelligent alarm system and comprehensive situational awareness of ongoing or potential cybersecurity threats on the grid network. The key contributions of this project include: (1) the development of software, the Intrusion Detection Visualizer for the Operational Technology Network (IViz-OT), to visualize and locate intrusions on the grid network; (2) testing the signature-based Hybrid Intrusion Detection for Energy Systems (HIDES) for different types of intrusions; (3) the integration of HIDES and IViz-OT into the visualization dashboard; and (4) real-time testing using a hardware-in-the-loop test bed.

24 POWER TRANSMISSION AND DISTRIBUTION↗
DOE OSTI2023

Integrating 5G Technology for Improved Process Monitoring and Network Slicing in ICS

Industrial Control Systems (ICS) are crucial for monitoring physical processes that support essential cyber-enabled services like power generation. The use of proprietary communication and lack of effective intrusion detection mechanisms pose constraints for efficient operation. Therefore, there is a need to modernize these systems with decentralized technologies like Edge Computing and 5G. However, integrating 5G and Edge Computing into large-scale ICS networks presents implementation and performance challenges. To address these challenges, this paper proposes an integrated ICS architecture that combines 5G and Edge Computing technologies with traditional ICS protocols. The objective is to minimize implementation and operational difficulties while improving the monitoring of physical processes and enabling robust intrusion detection. The proposed architecture outlines the necessary components, services, and communication protocols required for the integration of 5G and Edge Computing.

Aguayo, Jared M.↗
DOE OSTI2025

Tracking the spatial and temporal links between late Cenozoic extension and magmatism in the Death Valley region (California, USA)

The relationship between late Cenozoic magmatism and extension in the central Basin and Range province (western United States) is complex, necessitating high-precision geochronology to understand its spatiotemporal connections. In the Death Valley region (California), the lack of high-precision U-Pb zircon ages has limited our understanding of the timing of pluton formation and its links to regional extension. We present new high-precision chemical abrasion-isotope dilution-thermal ionization mass spectrometry 206 Pb/ 238 U zircon ages and trace element analyses for eight Death Valley plutons. Our findings reveal three distinct phases of intrusive magmatism: (1) emplacement of shallow rapakivi granites at 13.2 Ma, (2) construction of the mid-crustal Black Mountains intrusive complex at 11.3 Ma, and (3) late emplacement of shallow, compositionally diverse intrusions at 8.2 Ma. A gap in zircon crystallization between 10 Ma and 8.2 Ma coincides with exhumation of the Black Mountains and a transition from sill to dike emplacement. The dominance of rapakivi granites in the Death Valley region, which is rare among Cenozoic granitoids, is likely a result of rapid crustal extension that induces adiabatic decompression. A comparison of the timing of volcanism, plutonism, and tectonic events in Death Valley reveals that intrusive magmatism closely tracks the locus of extension, underscoring the plutonic record as a vital link for understanding regional tectonics and changes in plate boundary dynamics during this period.

58 GEOSCIENCES↗
DOE OSTI2020

Contributions to the Surface Downwelling Longwave Irradiance during Arctic Winter at Utqiaġvik (Barrow), Alaska

Intrusions of warm, moist air into the Arctic during winter have emerged as important contributors to Arctic surface warming. Previous studies indicate that temperature, moisture, and hydrometeor enhancements during intrusions all make contributions to surface warming via emission of radiation down to the surface. Here, datasets from instrumentation at the Atmospheric Radiation Measurement User Facility in Utqiaġvik (formerly Barrow) for the six months from November through April for the six winter seasons of 2013/14–2018/19 were used to quantify the atmospheric state. These datasets subsequently served as inputs to compute surface downwelling longwave irradiances via radiative transfer computations at 1-min intervals with different combinations of constituents over the six winter seasons. The computed six winter average irradiance with all constituents included was 205.0 W m −2 , close to the average measured irradiance of 206.7 W m −2 , a difference of −0.8%. During this period, water vapor was the most important contributor to the irradiance. The computed average irradiance with dry gas was 71.9 W m −2 . Separately adding water vapor, liquid, or ice to the dry atmosphere led to average increases of 2.4, 1.8, and 1.6 times the dry atmosphere irradiance, respectively. During the analysis period, 15 episodes of warm, moist air intrusions were identified. During the intrusions, individual contributions from elevated temperature, water vapor, liquid water, and ice water were found to be comparable to each other. These findings indicate that all properties of the atmospheric state must be known in order to quantify the radiation coming down to the Arctic surface during winter.

54 ENVIRONMENTAL SCIENCES↗
DOE OSTI2020

Preliminary Study of Potential Utilization of Triassic Rift Basins for Long-Term Carbon Sequestration

Triassic rift basins of the eastern United States present a potential option for long–term carbon dioxide (CO 2 ) sequestration. Exposed and buried basins are located near large point CO 2 sources. Because of their similar origins, comparable fill successions indicate a level of reproducibility that can be conveyed between basins. The thick rock successions of the exposed Culpeper and Gettysburg basins served as proxies for understanding of the basin sequences. Their study allowed recognition of five mappable assemblages of rock types, herein termed lithofacies associations. These lithofacies associations were formed by alluvial fan, braided and meandering streams and marginal and distal lake depositional processes.Stratigraphic architecture of the lithofacies associations within exposed basins suggests a vertical succession that consists of an initial coarse-grained fluvial succession that is progressively replaced upward and basinward by finer grained lacustrine deposits. Along the faulted margins of the basins alluvial fans transitioning to fluvial delta deposits reflect lateral progradation and contemporaneous lateral components of the basin filling.To test the model devised in exposed basins, facies associations were developed for the buried Taylorsville Basin. This basin preserves over 8,000 feet of Triassic rocks that are concealed beneath more than 2,000 feet of Cretaceous and Tertiary Coastal Plain sediments. Composition and stratigraphic architecture of these rocks are similar to those observed in exposed basins. Infilling of the basin was the result of vertical aggradation and lateral progradation of coarse-grained to fine-grained facies. Based upon study of outcrops in the Culpeper and Gettysburg basins, groups of recurring lithologic facies were identified as the fundamental constructs of the basin’s sediment infilling. These groups of facies, termed lithofacies associations, represent an amalgamation of lithologic components from broadly similar depositional systems. These lithologic associations were then extrapolated into the exposed and buried portions of the Taylorsville basins. This effort determined that Triassic rift basins provide several avenues for potential study of geologic sequestration of carbon. The characteristic rift basin succession in the basins presents possible reservoir targets within the marginal fluvial deposits. Furthermore, intrusive and extrusive mafic bodies present a potential source of fracture porosity that could serve as CO 2 reservoirs. Porosity values from thin section analysis of exposed basin samples are higher in alluvial fan and braided fluvial lithofacies. Porosity is highest in samples that show less compaction, due to a lack of ductile lithic fragments and/or higher stratigraphic position. Log data from the Taylorsville Basin indicates that porosity and permeability values in basin marginal fluvial strata are elevated. Near the center of the basin, porosity and permeability values are greatly reduced, primarily owing to the fine-grained character of the lacustrine deposits. Some Triassic basins also contain thick intervals of concordant extrusive and intrusive mafic igneous rocks. These igneous bodies are potential CO 2 reservoirs for several reasons. Firstly, extrusive lava flows provide potential storage in the layers of primary porosity that occur in the vesicules formed at the top of lava flows. Secondly, both lava flows and subsurface igneous sills exhibit extensive fracture porosity produced by the rapid cooling of the flows and intrusions. Thirdly, these igneous rocks are mafic in composition, and studies have shown that iron- and magnesium-rich mafic rocks provide sequestration opportunities through carbonate remineralization. Lastly, extrusive and intrusive igneous rocks are invariably preserved within fine-grained lake deposits. These lacustrine sediments can serve as a fine-grained confining layer that encases the igneous rocks both above and below.

01 COAL, LIGNITE, AND PEAT↗
DOE OSTI2021

Malware analysis and recovery

A system and method detects malware by processing notifications from an intrusion detection system and baseline snapshots from an image capture utility. The image capture utility constructs an image of the suspected malware intrusion and links the suspected malware intrusion to the baseline snapshots. The system and method propagates the image of the suspected malware intrusion across multiple networks before it distinguishes malicious code, device state, and files from benign code, device state, and files. Some systems and methods include a malware recovery system that executes machine learning instructions and heuristics to revert a client and/or a remote server to one or more baseline snapshots.

Smith, Jared M.↗