SEARCH · Search NASA

Results for “Department of Defense”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

SourceResearch connectionFrom yearThrough year

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 253 records · Page 14

All sources NASA NTRS DOE OSTI

DOE OSTI2020

Energy Intensity Baselining and Tracking Guidance

Each company joining the U.S. Department of Energy’s (DOE’s) Better Buildings, Better Plants Program (Better Plants) commits to establishing an energy consumption and energy intensity (EI) baseline and to tracking its energy performance over a 10-year period against that baseline. The baseline must reflect a company’s energy consumption over a 12-month period, covering all its U.S.-based operations. Energy consumption is calculated by fuel type in terms of primary energy (also known as source energy). EI is broadly defined as the amount of energy consumed per unit of output produced. For this guidance document and for the program, the term energy performance represents an evaluation of a facility’s capacity to use energy efficiently. Metrics used to assess a facility’s energy performance can include EI, energy consumption, improvements in EI, etc. Establishing an energy baseline and tracking system is a critical first step in effectively managing energy use. Developing a baseline can help a company understand energy use within the corporation and give it a point of comparison to evaluate future efforts to improve energy performance. It can also support efforts to validate a company’s energy management activities, improve comparative analyses when using benchmarks, and help in predicting future energy needs. In addition, a company that normalizes its performance data can determine highly defensible measures of energy savings generated through implemented energy efficiency projects. Establishing a baseline and tracking energy performance is also a requirement for ISO 50001 certification. Although basic energy data can be collected through utility bills, most manufacturers will have to perform additional analyses to develop accurate and robust energy baselines and tracking systems. Energy is consumed in many ways within the manufacturing sector and can come from multiple sources. Energy is sometimes generated and sold to other parties or captured and reused on-site. External events can exert a significant impact on a facility or company’s energy use independent of any purposeful efforts to improve energy efficiency. Operational changes, such as production shifts—which may be inevitable for some companies over the 10-year period covered by the program—can also make a big difference in energy use. Since Better Plants asks companies to account for all their U.S.-based operations, mergers, acquisitions, and divestitures can also have significant implications for a company’s energy metrics. This document aims to demystify the sometimes complex baselining process. It devotes special attention to the task of normalizing and adjusting energy consumption to account for external factors, such as weather and production changes. A key recommendation is that companies use regression analysis to normalize their energy consumption data whenever possible. Regression analysis is a statistical technique that estimates the dependence of a variable (i.e., energy use in the context of Better Plants) on one or more independent variables such as ambient temperature, while controlling for the influence of other variables at the same time. A properly developed regression analysis can provide a reliable estimate of energy savings resulting from energy improvement strategies and projects by accounting for the effects of variables such as annual production levels and weather. DOE has developed a companion Energy Performance Indicator software tool (EnPI) to simplify the baselining process. This tool can run regression models, calculate changes in EI at the facility level, and automatically compile facility-level data into a corporate-wide metric. Note that although the relevant equations used to calculate EI are provided in this document, the EnPI tool will automatically perform most calculations for the user. Additionally, Better Plants Partners (Partners) can call on their Technical Account Manager (TAM) to help them establish a baseline and assist with the necessary calculations to track progress.

32 ENERGY CONSERVATION, CONSUMPTION, AND UTILIZATI↗

DOE OSTI2023

Acoustic Research under the Source Physics Experiment

The Source Physics Experiment series is a long-term research and development (R&D) effort under the U.S. Department of Energy’s National Nuclear Security Administration focused on improving the physical understanding of how chemical explosions generate seismoacoustic signals. Beginning in 2011, a series of subsurface chemical explosions in two different and highly contrasting geologies were conducted at the Nevada National Security Site in Nevada, USA with the objective of improving simulation and modeling approaches to explosion identification, yield estimation and other monitoring applications. The two executed phases of the series provide new explosion signature source data from a wide range of geophysical diagnostic equipment; recorded data from the test series is now openly available to the broader seismoacoustic community. This manuscript details the executed test series, deployed seismoacoustic networks, and summarizes major scientific achievements utilizing recorded signatures from the explosive tests.

45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗

DOE OSTI2026

Cyber Halo Innovation Research Program (CHIRP) Handbook: CHIRP Program Document 2026

The Cyber Halo Innovation Research Program (CHIRP) handbook outlines a comprehensive framework designed to advance space cybersecurity education, workforce development, recruitment efforts for United States Space Force (USSF) Space Systems Command (SSC) and the Department of the Airforce, and foster students’ professional growth. It provides an overview of CHIRP's objectives and strategic focus, establishing the foundation for participant engagement through a network of collaborations with academic institutions, contracted industry partners, training and certification organizations, federal agencies, and community organizations. It states a clear participation strategy for SSC and Pacific Northwest National Laboratory (PNNL) for program execution and successful support for student transition to a career in space cybersecurity.

45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗

DOE OSTI2021

Domestic Extremism (Executive Summary)

Domestic extremism (DE) has been a growing concern in the U.S. in recent months, as illustrated in multiple bulletins from the Department of Homeland Security (DHS) warning law enforcement partners of the heightened threat. As concerns about these actors grows, it is important that facilities in the U.S. and internationally that protect critical assets, such as sensitive information, hazardous materials, or critical infrastructure, have effective methods in place to secure those assets. DE has challenged security systems through the danger of insider attack and violence, creating a new threat to be countered. In this effort, therefore, we used a literature review and focus group discussions with experts in critical asset security and extremism to understand the nature of the domestic extremist threat, to identify best practices in securing assets, recognize potential gaps in security measures to be corrected, and recommend actions for the Office of Radiological Security (ORS) to address DE with its partners.

45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗

DOE OSTI2022

Detection of Damage Inducing Impact Events in Vibration Test Fixtures Using Holder Exponents

The Shock and Vibration team within the Test Engineering group at Los Alamos National Laboratory (LANL) aids in the development and qualification of weapon systems for the United States Department of Energy (DOE). Performing tests that replicate shock and vibration environments representative of a weapon’s lifetime is critical in ensuring safety, survivability, and reliability. A key factor in shock and vibration testing is accurate representation of the weapon’s boundary conditions in its end use configuration. The boundary conditions representative of a reentry body in flight are particularly difficult to replicate on an electrodynamic shaker. When executing shock and vibration tests on a reentry body, two system axes are tested with the system in a cantilevered configuration. This cantilevered testing configuration results in a moment load being applied to the system while undergoing vibration environments. A special fixture, known as the Flex-Web, was developed to decouple this moment load from the reentry body in order to more accurately represent real world boundary conditions while replicating flight environments.

42 ENGINEERING↗

DOE OSTI2024

Capability Building Progression of an Insider Threat Mitigation Program at International Nuclear Power Plant

With threats to nuclear facilities continuously evolving, the development and implementation of insider threat mitigation programs is increasingly important. The Office of International Nuclear Security within the U.S. Department of Energy’s National Nuclear Security Administration (DOE/NNSA’s) developed the “Insider Threat Mitigation Program: Facility Implementation Handbook” to assist organizations to be better positioned to minimize the risks posed by malicious insiders. The handbook identified eight elements that contribute to the development and implementation of insider threat mitigation programs. This report outlines the development of a capability building progression of an insider threat mitigation program at international nuclear power plants. This information can be stand-alone or be accompanied by a technical exchange with subject matter experts to support development and implementation of programs with interested international partners.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

DOE OSTI2024

Technical Basis for Proposed Changes to DOE-STD-1194-2019, Nuclear Material Attractiveness Determination and Categorization

The Department of Energy (DOE)’s Technical Standard DOE-STD-1194-2019 (dated September 2019), Nuclear Materials Control and Accountability, provides key guidance for the determination of Special Nuclear Material (SNM) attractiveness levels. Attractiveness levels are a key component in the security categorization of SNM processed, used, and stored at DOE facilities. Upon review, the writing team identified specific components relating to the determination of attractiveness levels that could be modified to improve clarity, reduce burden on sites, and/or better align with the graded safeguards principle that is central to the DOE’s nuclear security program. The report outlines the original verbiage, issues with implementation of that verbiage, proposed new verbiage, and the expected benefits thus serving as the technical basis for the proposed changes.

45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗

DOE OSTI2020

Expedited Walkdowns and Preparation of Cost Estimates for Decontamination and Demolition of Excess Facilities - 20335

Lawrence Livermore National Security, LLC (LLNS) is the prime contractor responsible for managing and operating Lawrence Livermore National Laboratory (LLNL). The mission of the LLNL is to strengthen security of the United States through development and application of world-class science and technology to enhance the nation's defense, reduce the global threat from terrorism and weapons of mass destruction, and respond with vision, quality, integrity, and technical excellence to scientific issues of national importance. To accomplish its mission, LLNL must plan and manage its campus space and facilities to optimize use of its relatively small one-square-mile footprint. LLNL currently has numerous excess facilities that require decontamination and demolition (D and D). The LLNL Legacy Facility Program is responsible for stewardship and risk reduction programs to effectively manage these excess assets at LLNL. The Legacy Facility Program identified 10 excess facilities at LLNL that were candidates for demolition based on risks from further degradation of the facilities, potential exposure to hazardous materials, or need for removal to make way for new program facilities. The buildings range from a structure built in 1943 to serve as a US Navy drill hall during World War II, to a facility that provided neutrons to study material properties for the fusion energy program. The National Nuclear Security Administration (NNSA) appropriated FY19 funding for the development of Class 3 estimates for these 10 excess facilities that would be used to develop a Program Management Plan for funding consideration. Class 3 estimates are not conceptual, nor overly detailed, but adequate to be used for budget and appropriation purposes. Using existing strategic sourcing agreements, LLNL was able to organize a team of senior subject matter experts (SMEs) with diverse technical backgrounds across the Department of Energy (DOE) Complex to complete extensive process knowledge (PK) reviews and walk-downs of each excess facility and to deliver accurate and complete estimates under an expedited schedule (i.e., within eight weeks). To facilitate the expedited schedule, LLNL was fully prepared for the arrival of the JGMS team, which consisted of the following companies: J.G. Management Systems, Inc. (JGMS); Strata-G, LLC; and Michael Baker International. LLNL provided background and PK information on the excess facilities, pictures, supporting historical documentation, and radiological survey history as well as escorted access to the facilities. The JGMS team has previous experience supporting Program Management Plans for excess facilities at the Y-12 National Security Complex. The team mobilized to LLNL and performed the facility walk-downs from January 22-25, 2019. Using a methodical evaluation process, expertise, and experience, the team was able to deliver walk-down draft reports and estimates to LLNL before their February 8, 2019 deadline. LLNL then in turn reviewed, completed the estimates by adding waste management costs and other LLNL costs, and delivered the estimates to NNSA by February 15, 2019. The completed final reports, including draft D and D estimates, were delivered to LLNL before their March 6, 2019 deadline. The work was successfully completed ahead of the expedited schedule required by LLNL, resulting in a commendation from the client. This paper describes how the partnership and collaboration as a fully integrated team comprised of the prime contractor, LLNS, and the JGMS team successfully met the needs of the US government, resulting in the performance of expedited site walk-downs, the development of summary evaluation reports, and the preparation of draft Class 3 estimates and preliminary schedules for the D and D of 10 excess facilities at LLNL. The efforts of the team will enable the D and D of the first excess facility in the 2020-2021 time frame. (authors)

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗

DOE OSTI2025

Preliminary Plan to Inform Testing of a Heat Exchanger Test Article

This report presents a preliminary plan to guide the qualification testing of advanced heat exchanger (HX) components for nuclear-to-industrial heat transfer applications. The objective is to establish a defensible, physics-based methodology that integrates computational modeling, targeted experimentation, and in-service inspection considerations to demonstrate component performance and reliability under representative reactor conditions. The analysis identifies Sodium-cooled Fast Reactor (SFR) and High-Temperature Gas-cooled Reactor (HTGR) systems as reference configurations in terms of temperature, pressure, and chemical environment. Within these operating envelopes, dominant degradation mechanisms— including creep–fatigue interaction, flow-induced vibration, corrosion, and diffusion-bond deterioration—were evaluated to define test requirements. A comprehensive computationalexperimental framework is proposed to support life prediction and qualification activities. The framework couples high-fidelity structural-mechanics, thermal-hydraulic, and fluid-structure interaction models with accelerated degradation testing to produce a traceable linkage between microstructural evolution, mechanical performance, and remaining useful life (RUL). The approach adheres to established Verification, Validation, and Uncertainty Quantification (VVUQ) standards (ASME V&V 10/20; NUREG-2152) and incorporates a digital-twin architecture for continuous model refinement through data assimilation. The plan further outlines testing methodologies, including pre-test analyses, test-loop design parameters, and sensor placement strategies that maximize information yield while maintaining mechanistic fidelity. Complementary sections describe in-service inspection (ISI), on-line monitoring (OLM), and structural-health-monitoring (SHM) techniques applicable to compact HX geometries typical of advanced reactors. Collectively, these activities establish the technical foundation for demonstrating 40-60-year equivalent service life of advanced heat exchangers in support of the U.S. Department of Energy’s Advanced Reactor and Integrated Energy Systems programs. The forthcoming phase will execute the defined pre-test analyses, initiate hardware fabrication, and implement the integrated testing campaign to validate the proposed qualification methodology.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

DOE OSTI2025

2023 Annual Explosives Inventory Completion

The 2023 Lawrence Livermore National Laboratory (LLNL) annual explosives inventory was executed from May 18, 2023 to September 27, 2023 and was verified for accuracy effective September 28, 2023 following the LLNL Explosive Materials Inventory Plan. This year’s annual inventory includes changes incorporated based on the Department of Energy (DOE) Office of Inspector General (OIG) Audit Report DOE-OIG-20-50, The Department of Energy’s Storage and Disposition of Explosives Material at Selected Sites, dated July of 2020. Based on the associated recommendations, explosives at DOE and National Nuclear Safety Administration (NNSA) sites are considered "sensitive personal property" and applicable inventories must comply with 41 CFR 109, Personal Property Management. This regulation adds additional stipulations which require the annual inventory to include accountability of the total site inventory. In addition, the inventory must be performed by personnel other than the property owner, or alternatively must include independent verification. The development of the inventory plan was agreed to by the LLNL Explosives Safety Committee in conjunction with the LLNL Property and Business Division Leader. The LLNL Explosive Materials Inventory Plan was reviewed and approved by the DOE Explosives Safety Committee Chair on May 17, 2023 and by the NNSA Property Management Office on May 25, 2023.

37 INORGANIC, ORGANIC, PHYSICAL, AND ANALYTICAL CH↗

DOE OSTI2023

Advanced Research Directions on AI for Science, Energy, and Security: Report on Summer 2022 Workshops

Over the past decade, fundamental changes in artificial intelligence (AI)—from foundational to applied—have delivered dramatic insights across a wide breadth of U.S. Department of Energy (DOE) mission space. AI is helping to augment and improve scientific and engineering workflows (e.g., for control, design, and dramatic performance gains through surrogate models) in national security, the Office of Science, and DOE’s applied energy programs. The progress and potential for AI in DOE science was captured in the 2020 “AI for Science” report from the DOE laboratory community in collaboration with academia and industry. Specific scientific areas ready to further leverage the power of AI ranged from the scale and performance of computational models to data analysis to creating new classes of observations using computer vision. Since that report, the scale and scope of scientific AI have accelerated, revealing new, emergent properties that yield insights that go beyond enabling opportunities to being potentially transformative in the way that scientific problems are posed and solved. Thus, under the guidance of both the Office of Science (SC) and the National Nuclear Security Administration (NNSA), the DOE national laboratories organized a series of workshops in 2022 to gather input on new and rapidly emerging opportunities and challenges of scientific AI. This 2023 report is a synthesis of those workshops. The scientific community believes AI can have a foundational impact on a broad range of DOE missions, including science, energy, and national security. Further, DOE has unique capabilities that enable the community to drive progress in scientific use of AI, building on long-standing DOE strengths and investments in computation, data, and communications infrastructure, spanning the Energy Sciences Network (ESnet), the Exascale Computing Project (ECP), and integrative programs such as the NNSA Office of Defense Programs Advanced Simulation and Computing (ASC) and the SC Scientific Discovery through Advanced Computing (SciDAC) programs.

97 MATHEMATICS AND COMPUTING↗

DOE OSTI2025

Army Reactor Program Regulatory Bases: Supporting Army Regulation 50–7

This report describes the regulatory bases for the 2025 revision of Army Regulation (AR) 50–7 - Nuclear and Chemical Weapons and Materiel: Army Reactor Program and the new associated Department of the Army pamphlet (DA PAM) Army Reactor Program Procedures.

21 SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLANTS↗

DOE OSTI2022

The dynamic nature of risk in DOE facilities in the surveillance and maintenance program–with observations for risk communications

Here, we explore three case studies of facilities at two US Department of Energy (DOE) former nuclear weapons research and production sites—the Oak Ridge National Laboratory and the Hanford site—whose risk profiles have changed during their long-term management under the DOE's surveillance and maintenance (S&M) program. These case studies provide examples of the challenges faced in communicating to external stakeholders, such as federal and state regulators, local communities surrounding the site, as well as the general public, the circumstances surrounding unexpected events or the emergence/discovery of new risk-important information at historically high-risk sites. We identify common topics of importance from these case studies and suggest a taxonomy for risk communicators to use in informing the dialogues with individuals and organizations that may not be technically oriented or fully informed on the subject matter. The taxonomy is based on technical insights from the quintessential definition of risk known as the Kaplan–Garrick “risk triplet” as well as insights from regulatory guidance documents on risk communication with external stakeholders originally developed for the commercial nuclear power industry.

45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗

DOE OSTI2020

Regulatory Decision-Making Process Using 'Weight of Evidence: An Evidence Integration Approach' by the State of Washington at the Hanford Site - 20163

Performance Assessment and Environmental Impact Statement Modeling, Human and Ecological Risk Assessments are the tools used by the Washington State Department of Ecology (Ecology) to make regulatory decisions for permitting and cleanup. These efforts all inherently have large amounts of uncertainty no matter how many alternative approaches are attempted. Professional feedback from tribal governments, stakeholders, federal and state regulators, the public and independent peer review groups are taken into account in this process of informed decision making. The process also includes full evaluation of the comments and the associated reviews made by the various peer review groups such as the Low -Level Waste Disposal Facility Federal Review Group (DOE order 435.1) and the Nuclear Regulatory Commission (NRC). The evolution of technology has produced quicker and more efficient fate and transport modeling tools with related quantification of uncertainties and their significance. Groundwater and vadose zone models have been expanded across the entire Hanford site. Many of the technical approaches identified in the Washington State Regulations are updated using current knowledge to better understand the complexities of the Hanford Site using the latest state of the art tools for risk assessment and modeling. More emphasis and time are directed on defining uncertainty and then managing the uncertainty. One added tool is to run sensitivity cases based on informed decision making. The weight of evidence approach considers all relevant information in an integrative assessment that takes into account the kinds of evidence available, the quality and quantity, the uncertainty and error associated with each type, and how they fit together. Evidence of integration involves looking at systematic reviews and evaluating their strengths and weaknesses. In conclusion, Ecology, Washington State's lead regulatory agency at the Hanford site, has had to modify its site closure approach compared to the rest of the state. A more holistic approach dealing with the Hanford site as an integrated system has evolved leading to a defensible informed approach for regulatory closure decisions. (authors)

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗

DOE OSTI2020

Issue Resolution During the Development of the Performance Assessment for the Savannah River Site Saltstone Disposal Facility - 20125

In 2019, Savannah River Remediation developed a revision to the performance assessment (PA) on behalf of the U.S. Department of Energy (DOE) Savannah River Operations Office (SR) for the near-surface disposal of low-level waste at the Savannah River Site (SRS) Saltstone Disposal Facility (SDF). Soluble waste from SRS Tank Farms undergoes salt processing to remove cesium and other high-activity constituents. The low-activity decontaminated salt solution (DSS) is then immobilized by mixing it into a cementitious waste form known as saltstone. After mixing, the saltstone is poured into leak-tight concrete vaults, known as saltstone disposal units (SDUs), where the waste form cures. By the time of facility closure, the SDF is expected to consist of 15 SDUs with a combined capacity of 1.06 E+09 L (280 Mgal) of cured saltstone. The facility operates under a Disposal Authorization Statement from DOE and a permit from the South Carolina Department of Health and Environmental Control (SCDHEC). Since the start of operations in 1990, the SDF has received almost 6.7 E+07 L (18 Mgal) of DSS, resulting in the safe disposal of 2.7 E+16 Bq (7.3 E+05 Ci) of activity. Due to the radioactive decay of short-lived contaminants, the total remaining activity in the disposed waste is estimated to be approximately 1.4 E+16 Bq (3.9 E+05 Ci), as of September 2018. The Disposal Authorization Statement requires a demonstration that the system of engineered and natural features of the disposal facility will limit releases from the facility and be protective of human health and the environment for at least the next 1,000 years. The long-term performance of the facility was evaluated under the requirements of the DoE's Radioactive Waste Management Manual (US DOE Manual 435.1-1). Simulations were performed to demonstrate that the disposal facility would meet performance objectives specified in the manual. The evaluation was based on numerical models that simulate the releases of contaminants from the saltstone waste form. Contaminants were transported through groundwater and air pathways to points of assessment to evaluate compliance (i.e., 100 m from the SDUs). In addition, the potential consequences of an inadvertent human intrusion (IHI) were also evaluated. A number of issues were overcome during the development of these simulations. These issues were identified as part of internal technical reviews. Simulations are developed by people and people make mistakes, so the internal technical review process is a vital step in PA development. Specific examples of resolved issues include a unit-conversion error, an inappropriate definition for a model boundary condition, a model time-stepping issue, and an error in the calculation for the buildup of contaminants in soil. Actions taken to address these issues resulted in an improved product with a better supported technical basis and more defensible results. The identification and correction of these issues are discussed. By understanding these issues, model developers and technical reviewers working on PAs in the future may avoid repeating these types of mistakes. Transparency with respect to these mistakes builds trust between waste management sites, regulators, and stakeholders. (authors)

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗

DOE OSTI2020

Alternative Treatment of Defense Waste Processing Facility Recycle via Reuse of Existing Liquid Waste Facilities - 20097

The Defense Waste Processing Facility (DWPF) at Savannah River Site (SRS) has been immobilizing high level waste since 1996. The chemical process within DWPF generates a large volume of condensate, which is recycled to the SRS H-Area Tank Farm. The recycle stream includes a small quantity of sludge solids, as well as soluble cesium that is volatilized during melter operation. The recycle waste is currently received into a large, underground waste tank that separates insoluble solids via decanting. The supernate is treated by an evaporator with a concentrate stream that is stored for future processing. The evaporator overheads are collected and sent to the Effluent Treatment Project (ETP) for final polishing and testing prior to discharge to local surface water. Recycle storage and treatment as described above complicates the overall mission within the tank farms, which are primarily engaged in waste retrieval and preparation activities that support sludge and salt disposition, as well as tank characterization and closure. The need to devote a portion of available storage space to recycle treatment limits operational flexibility, and ultimately the DWPF recycle stream must be diverted to fully close all the SRS waste tanks. An alternative treatment process is being explored to decouple the recycle stream from the tank farm. The proposed treatment process will accomplish solids separation via crossflow filtration and will utilize a wiped film evaporator to volume-reduce the filtrate stream. Evaporator overheads will continue to be further processed in ETP while the solids stream and evaporator concentrate stream will be returned for reprocessing with the DWPF and Salt Waste Processing Facility (SWPF). This process will utilize existing facilities within DWPF and the tank farm that were previously dedicated to Interim Salt Disposition (ISD), but no longer have an identified mission with the startup of SWPF. The reuse of these facilities will remove several constraints from the current Liquid Waste (LW) System Plan without expanding the current footprint of Department of Energy Environmental Management (EM) infrastructure within LW. (authors)

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗

DOE OSTI2021

Energy Sector Position, Navigation, and Time Cybersecurity Profile

The Pacific Northwest National Laboratory has developed this positioning, navigation, and timing (PNT) profile for the Energy Sector at the request of the U.S. Department of Energy. The Department of Energy is the sector-specific agency for the Energy Sector and is responsible for providing guidance in the form of this PNT Profile, per Executive Order 13905, Strengthening National Resilience Through Responsible Use of Positioning, Navigation, and Timing Services (Executive Office of the President 2020) issued February 18, 2020. Executive Order 13905 directed the National Institute of Standards & Technology to develop a PNT Profile that is broadly applicable to all sectors and to serve as a foundation for sector-neutral guidance, NISTIR 8323 Foundational PNT Profile: Applying the Cybersecurity Framework for the Responsible Use of Positioning, Navigation, and Timing (PNT) Services. This document builds on NISTIR 8323 to identify and serve as the required Energy Sector specific guidance. For purposes of this PNT Profile, Energy Sector precise time is 0.5 µs (microseconds) to 1 µs accuracy. Currently, the electricity subsector has systems that use this level of precision time, but the oil and natural gas subsector currently does not. While the electricity subsector uses precision timing, it does not use positioning and/or navigation at this level of accuracy. For this reason, this PNT Profile will focus on only precise time for the electricity subsector.

24 POWER TRANSMISSION AND DISTRIBUTION↗

DOE OSTI2022

A Cybersecurity Threat Profile for a Connected Lighting System

In anticipation of improved energy performance and cost savings, cities and building owners are increasingly considering “smart lighting initiatives” that aim to convert their collection of simple luminaires (i.e., lighting fixtures) into an intelligent connected lighting system (CLS) capable of remotely monitoring energy consumption and fault conditions, and possibly implementing adaptive lighting schemes. The U.S. Department of Energy (DOE) has set an national goal of tripling the energy efficiency and demand flexibility of the buildings sector by 2030, relative to 2020 levels 1. It is forecast that connected lighting systems can contribute to that goal by delivering 125 TWh of annual energy savings by 2035 2, equivalent to the annual output of 50 typical (500 MW) power plants. However, these energy savings and the DOE goal are put at significant risk if connected technologies are not adopted due to real or perceived cybersecurity concerns. Connected IoT devices such as these have historically been rife with vulnerabilities which sometimes put security considerations secondary to functionality and operability. What are the cybersecurity threats that will impact these systems, as formerly banal luminaires transition into intelligent connected devices that collect information about themselves, their surrounding environment, and possibly us? In this paper we analyze a threat profile performed on a fault-detection use case for streetlights. A threat profile establishes security requirements, justifies security measures, yields actionable controls, and effectively communicates risk to stakeholders. This effort provides critical information for making threat-based decisions to increase security at a reasonable cost, and can effectively be used by development teams, software architects, and managers to make cybersecurity a part of their ongoing culture of awareness, training, and prevention. This leads to more secure systems and better-understood security. On-premise, cloud, and hybrid architectures with different authentication mechanisms were modeled and later categorized using the Microsoft STRIDE framework. An analysis of the recommended controls for each threat was performed to determine which controls could and should be put in place by manufacturers or third-party suppliers, and which controls need to be left up the end-user to implement. Fifty-seven threats were identified. Among our key findings: (1) 65% (37/57) of the threats did not involve the luminaires, but rather the other components needed to communicate with and manage them; (2) 63% (36/57) of the threats could have been mitigated through manufacturer-implemented defensive techniques or “controls”; and (3) 23% (13/57) of the threats were dependent on the network configuration. Recommendations based on the results of this work are made to key stakeholder groups. Notably, lighting technology developers are advised to address all threats that can be reasonably controlled with baked-in technology solutions (e.g., encryption or authentication controls), and employ some form of secure supply chain management and tracking where other parts (e.g., sensors, microprocessors) of a luminaire must also be built and manufactured with the proper security controls in place. Developers should also review threats involving assets not developed in-house to understand how connectivity with other devices will affect their product during system operation and determine if a compensating control for a defense-in-depth strategy will be needed. Finally, those interested in deploying CLS should compare the differences between cloud and on-premise models to determine which is more suitable for their needs and the abilities of their security team.

32 ENERGY CONSERVATION, CONSUMPTION, AND UTILIZATI↗