Search NASA⌕ Search

SEARCH · Search NASA

Results for “Critical Infrastructure Protection”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 271 records · Page 15

AGGREGATE: dAta-driven modelinG preservinG contRollable dEr for outaGe mAnagemenT and rEsiliency (Final Report)

The AGGREGATE project team successfully developed and validated various modules for outage management. Brief summaries of each module are provided to showcase their strength for outage management and restoration for a distribution system with a high penetration of connected distribution energy resources (DERs). In recent years, inverter-based DERs have been widely deployed in distribution system. A most of behind-the-meter (BTM) solar power generation is not visible to the utility. The data-driven DER and load estimation modules are using machine learning (ML) and artificial intelligence (AI) to manage this issue, which provides an opportunity for distribution system operators (DSOs) to operate systems and make decisions in real-time for a distribution system with a high penetration of DERs deployed. Also, the estimated DER and true load can be further leveraged in network aggregation and cold-load pick up estimation for reducing the computing complexity and providing for fast restoration. After load demand and DER power generations have been estimated, the information will support topology and state estimation (SE). The topology estimation module demonstrated the viability of mixed integer linear programming (MILP) formulation to estimate the most likely operational radial topology and outage sections using power flow measurements, historical/estimated load and DERs data and smart meter ping measurements. Formulation includes continuous (power flow, load and DERs data) and binary measurements (smart meter ping measurements) in a single formulation. Errors in continuous data and binary data are modeled as normal distribution and Bernoulli distribution, respectively. In the future distribution grid, the power injection from controllable DERs will be essential for efficient and resilient grid operation. However, determining the optimal DER injections and restoration actions is dependent on knowledge of the system states. State estimation (SE), already the cornerstone of transmission energy management systems, will become commonplace in distribution management systems as more measurements become available from deployment of automated metering infrastructure (AMI). Observability analysis is the first step in SE, as it determines the sufficiency of the available measurements for accurately estimating the current system states. A new type of pseudo-measurement called a Correlational Measurement (CM) is introduced in this module, to enhance the observability of the system to enable more accurate SE. CMs encapsulate knowledge of correlation between demand patterns for similar classes of loads as well as injection patterns for same-technology renewable DERs. During grid contingency scenarios, DERs have been traditionally disconnected, without any fault ride-through capabilities. However, with new regulations and better technology, it is feasible for these resources to contribute to the grid’s restoration after an adverse event and hence enhance resilience. The controllability module proposes a two-step restoration scheme for the power system restoration process by leveraging additional degrees of freedom in power electronics interfaced DERs for mitigating voltage problems. In a resilience mode without the utility system, the distribution grid relies on DERs to serve critical load. In such a severe event with multiple faults on the distribution feeders, actuation of various protective devices (PDs) divides the distribution system into electrical islands. The undetected actuated PDs due to fault current contributions from DERs can delay the restoration process, thereby reducing the system resilience. The Advanced Outage Management (AOM) and the Advanced Feeder Restoration (AFR) modules developed in this project provide improved system resilience with multiple DERs. AOM identifies the faulted sections and actuated PDs in a distribution system with DERs by incorporating smart meter data. The most credible outage scenario including fault locations, PD actuations, and fault indicator (FI) failures is identified by a set of binary integer linear programming incorporating hypotheses. The AFR module serves to restore a distribution system with available energy resources taking into consideration the availability of utility sources and DERs. By partitioning the system into islands, critical load will be served with the available generation resources within islands based on the solution of a MILP. When the utility systems become available, the optimal path will be determined by a spanning tree search algorithm that reconnects these islands back to substations and restores the remaining load. The transmission and distribution (T&D) co-simulation module was used to validate the effect of a control action performed on the distribution side assets as it propagates to the transmission side. This ensures that the control action performed results in a feasible operating point on both the transmission and the distribution system. In addition to validation, the team used the T&D co-simulation module to demonstrate how distribution system assets can be used to mitigate issues on the transmission system. Specifically, the team demonstrated that appropriate switching operations on the distribution side can alleviate the line overload condition on the transmission side without causing new operational constraint violations.

24 POWER TRANSMISSION AND DISTRIBUTION↗

NRC technical basis for evaluation of its position on protection against common cause failure in digital systems used in nuclear power plants - 378

Digital technology has advantages over analog systems, including automated monitoring and alerts for standby safety functions, and predictive algorithms to maintain critical safety systems. Additionally, digital technology generally has higher reliability and can be designed to reduce single point vulnerabilities. For these reasons many nuclear plants have applied digital technology to safety and non-safety related applications, including reactor protection system, feedwater and turbine controls, etc. with a corresponding significant improvement in trip reduction. Nonetheless, digital instrumentation and control (I and C) systems also present potential new vulnerabilities that need to be assessed, including potential failures due to increased complexity of digital systems, the introduction of unique failure modes due to software (including software common cause failure (CCF)), and limited operating history of digital systems in nuclear safety related applications compared to analog systems. The fact that software is intangible means that common methods, such as analysis or testing, used for detecting CCF may not be effective when applied to software. Consequently, digital technology is perceived to pose a potential risk from the introduction of undetected systematic faults that could result in CCF. Despite the I and C system upgrades and modifications performed to date, the U.S. Nuclear Regulatory Commission (NRC) and industry stakeholders have identified the need to modernize the regulatory infrastructure to efficiently address risks associated with the use of digital technology for nuclear safety applications and address regulatory uncertainties. The NRC's current position on CCF is guided by the staff requirements memorandum (SRM) on SECY 93-087. The SRM provides specific acceptance criteria for the evaluation of CCF, which the staff implemented in the Branch Technical Position (BTP) 7-19. However, industry stakeholders have proposed using methods to characterize the likelihood of software CCF and eliminate it from further consideration in a defense-in-depth and diversity analysis. The NRC's current position does not consider these alternatives, and thus corresponding acceptance criteria is not currently available. The work discussed in this paper assesses the underlying technical basis associated with CCF, provides technical support for updating the NRC position and considers proposed methods for addressing potential CCF in digital systems while enhancing efficiency, clarity, and confidence. (authors)

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

Hands-On, Heads-Up: Blending Cyber T&E with Data Science-Driven Training in Jupyter Notebooks

In an era of increasingly sophisticated threats to critical infrastructure, cybersecurity professionals must be more than just aware; they must be immersed, agile, and equipped to operate in environments where failure is not an option. Nowhere is this truer than in the nuclear sector, where cyber-physical systems, regulatory scrutiny, and insider threat potential demand a new generation of hands-on, technically fluent defenders. This paper presents a unified training approach that integrates Cybersecurity Test and Evaluation (T&E) with data science techniques using Jupyter Notebooks as the interactive lab environment. The program centers on a modular, scenario-driven curriculum designed to build not just knowledge but practical capability in the assessment and defense of radiation detection systems, firmware interfaces, and operational security postures.

98 - NUCLEAR DISARMAMENT, SAFEGUARDS, AND PHYSICAL↗

Securing Vehicle Charging Infrastructure APR

Cybersecurity is essential for interoperable power systems and transportation infrastructure in the US. As the US transitions to transportation electrification, cyber attacks on vehicle charging could impact nearly all US critical infrastructure. This is a growing area of concern as more charging stations communicate to a range of entities (grid operators, vehicles, OEM vendors, etc.), as shown in Figure I.1.1.1. The research challenges are extensive and complicated because there are many end users, stakeholders, and software and equipment vendors. Poorly implemented electric vehicle supply equipment (EVSE) cybersecurity is a major risk to electric vehicle (EV) adoption because the political, social, and financial impact of cyberattacks—or public perception of such—ripples across the industry and has lasting and devastating effects. Unfortunately, there is no comprehensive EVSE cybersecurity approach and limited best practices have been adopted by the EV/EVSE industry. For this reason, there is an incomplete industry understanding of the attack surface, interconnected assets, and unsecured interfaces. Thus, comprehensive cybersecurity recommendations founded on sound research are necessary to secure EV charging infrastructure. This project is providing the automotive industry with a strong technical basis for securing this infrastructure by developing threat models, prioritizing technology gaps, and developing effective countermeasures. Specifically, the team is creating a cybersecurity threat model and performing a technical risk assessment of EVSE assets, so that automotive, charging, and utility stakeholders can better protect customers, vehicles, and power systems in the face of new cyber threats.

33 ADVANCED PROPULSION SYSTEMS↗

Examination of Nutrient Sources and Transport in a Catchment with an Audubon Certified Golf Course

Water bodies in the East Bay Regional Park District (EBRPD), California, United States, provide aesthetic value and critical ecosystem services, but are often adversely affected by the activities and infrastructure of the intensely urban environment that surrounds the parks. EBRPD leases a golf course (Tilden Golf Course (TGC)) in Tilden Regional Park, one of its most popular parks located in the Berkeley Hills, which was certified as an Audubon Cooperative Sanctuary in 2013. Nonetheless, application of nutrients and pesticides (fungicides, plant growth regulators and herbicides) are commonly used to maintain turf systems and may be transported via surface runoff or through subsurface drainage to surface waters, leading to the concern that golf courses are a major contributor to water pollution. We studied the possible contribution of nutrients (NO3-N and PO4-P) and pesticides transported via storm-generated surface runoff and via groundwater from TGC to the primary drainage in the watershed, Wildcat Creek. Lake Anza, a popular open water swimming lake, is located downstream from TGC and experiences occasional nutrient-driven algal blooms that have caused swim beach closures. Measured NO 3 -N and PO 4 -P in the stream, at times, exceeded concentration limits of 1 mg/L (as N) and 0.05 mg/L (as P), respectively, considered protective of aquatic ecosystems by the United States Environmental Protection Agency (1986). We found that phosphorous likely has a dominant natural source, but nitrogen is primarily derived from a golf course fertilizer source and its concentration increases in the stream during runoff events, while other soluble species decrease. Analyses of pesticides in water reveal the presence of Azoxystrobin in stream water at the golf course, but with concentrations well below the regulatory limit. These results indicate that all other pesticides applied on TGC are not likely transported to the stream, suggesting future reactive transport research must treat contaminant species independently based on their specific transport behaviors.

54 ENVIRONMENTAL SCIENCES↗

Municipal and Commercial Equipment for Radiological Response and Recovery in an Urban Environment: State of Science, Research Needs, and Evaluation of Implementation Towards Critical Infrastructure Resilience

This report provides a thorough evaluation of technologies and equipment assets that may be effective at mitigating the effects of a wide-area radioactive contamination event and to restore critical functions to the urban environment. Moreover, equipment that could facilitate decontamination efforts during a recovery phase are evaluated. The summary of methods has been critically evaluated in terms of equipment availability, potential advantages and limitations, and research needs in order to justify and predict its efficacy. By ranking the host of techniques, a concise list of those technologies is provided that might be most impactful to a response and recovery effort and how to direct future effort. The totality of this effort and future work anticipates providing early responders and stakeholders with practical guidance information to expedite an effective response and recovery effort and mitigate the potentially devastating effects of a wide-area radioactive contamination event.

63 RADIATION, THERMAL, AND OTHER ENVIRON. POLLUTAN↗

Demolition of the K-27 Building at the East Tennessee Technology Park (ETTP) - 17423

On February 8, 2016, URS - CH2M Oak Ridge LLC (UCOR) initiated the demolition of the East Tennessee Technology Park's (ETTP's) final gaseous diffusion building in DOE's Oak Ridge Environmental Management program. Building K-27 was a 35,582 m{sup 2} (383,000 ft{sup 2}) gaseous diffusion building that contained approximately 92,903 m{sup 2} (1 million ft{sup 2}) of floor space. It was one of five gaseous diffusion buildings at the site, formerly known as the Oak Ridge Gaseous Diffusion Plant. The actual demolition of this facility took approximately seven months to complete; however, planning and preparation took more than three years. The deactivation process was a critical element in preparing the building for demolition. UCOR's K-27 deactivation activities began in April 2012 with the installation of safe walking paths and fall protection systems to allow safe work access. Next, all mechanical and electrical systems associated with the facility were shut down and isolated, a process known as 'cold and dark.' More than 19.3 km (12 mi) of process piping and components were marked and measured. Additionally, workers performed nondestructive assay (NDA) and vent-purge-and-drain activities and applied foam to piping and components as needed [1]. Based on characterization results, approximately 4.8 km (3 mi) of process piping, and 372 converters and compressors were removed and shipped offsite prior to demolition. Lower-hazard materials and equipment were demolished with the building structure and transported to onsite disposal facilities. Upfront waste characterization and ongoing monitoring were key to the successful disposal of demolition debris at onsite facilities. Due to process improvements in waste loading recommended by work crews, the project achieved a 50 percent improvement in the daily hauling rate during the 9,000-truckload shipping campaign. Crews worked in high-risk, high-hazard conditions and were exposed to radiological and chemical contaminants, extreme temperatures, and deteriorating infrastructure. However, the hazard controls that were put in place, based on the Integrated Safety Management System (ISMS) walk-downs and hazard determination, made the effort manageable. The overall safety performance during demolition of the facility was excellent, with no significant injuries, and exceeded industry standards and DOE target levels. Outstanding safety performance was a testament to the dedication of the workforce, given the significant hazards presented by the demolition of the Hazard Category 2 nuclear facility. Another key element to the success of the K-27 demolition was the support and approval of all stakeholders involved in this effort, including DOE, the surrounding communities, the State of Tennessee, the UCOR management team, and, most importantly, the workforce that performed this highly hazardous work. This $52 million demolition project was completed ahead of schedule with no significant injuries and in compliance with all DOE orders, site procedures, and environmental controls. (authors)

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗

Cybersecurity for Electric Vehicle Charging Infrastructure

As the U.S. electrifies the transportation sector, cyberattacks targeting vehicle charging could impact several critical infrastructure sectors including power systems, manufacturing, medical services, and agriculture. This is a growing area of concern as charging stations increase power delivery capabilities and must communicate to authorize charging, sequence the charging process, and manage load (grid operators, vehicles, OEM vendors, charging network operators, etc.). The research challenges are numerous and complicated because there are many end users, stakeholders, and software and equipment vendors interests involved. Poorly implemented electric vehicle supply equipment (EVSE), electric vehicle (EV), or grid operator communication systems could be a significant risk to EV adoption because the political, social, and financial impact of cyberattacks — or public perception of such — would ripple across the industry and produce lasting effects. Unfortunately, there is currently no comprehensive EVSE cybersecurity approach and limited best practices have been adopted by the EV/EVSE industry. There is an incomplete industry understanding of the attack surface, interconnected assets, and unsecured inter faces. Comprehensive cybersecurity recommendations founded on sound research are necessary to secure EV charging infrastructure. This project provided the power, security, and automotive industry with a strong technical basis for securing this infrastructure by developing threat models, determining technology gaps, and identifying or developing effective countermeasures. Specifically, the team created a cybersecurity threat model and performed a technical risk assessment of EVSE assets across multiple manufacturers and vendors, so that automotive, charging, and utility stakeholders could better protect customers, vehicles, and power systems in the face of new cyber threats.

24 POWER TRANSMISSION AND DISTRIBUTION↗

E1 Illumination of a Substation Protection System

Sandia’s CRADA partnership with EPRI for calendar year 2017 helped further the technical basis of understanding on the effects to the electric power distribution system infrastructure (i.e., the grid), from a high altitude electromagnetic pulse (HEMP) event. This joint effort yielded evaluation of multiple SCADA relays to very high transient electric fields that were comparable in frequency content to a HEMP event, in multiple equipment configurations that are representative to how the units are fielded and utilized. Both Sandia and EPRI benefit from the data collected. Sandia directly benefits the LDRD effort to address EMP on electrical system infrastructures. EPRI direct benefits the stakeholders they are representing in the power industry. Stakeholders are power generation and distribution companies and equipment manufactures. The results would be used for product improvement and EMP hardening as well as informing the customer base of potential shortfalls of the product to a HEMP event.To better understand the impacts of HEMP on supervisory control and data acquisition (SCADA) systems in typical use at bulk power facilities, Sandia and EPRI has brought together their unique skills and equipment/facilities. EPRI, representing the stakeholders of the power industry, brings technical experience of how supervisory control and data acquisition (SCADA) systems are typically fielded and utilized in real-world applications. With this, EPRI will provides field hardware relating to the SCADA systems. Sandia National Laboratories (Sandia) provides unique test facilities (Sandia’s Electromagnetic Environment Simulator (EMES) and Large Gigahertz Transverse Electromagnetic (GTEM)) and test equipment capabilities to evaluate the SCADA systems to a simulated HEMP event. Sandia brings hands on experience of conducting susceptibility and vulnerability assessments for critical components and systems to high power incident HEMP illumination.

Molina, Luis↗

A call to standardize metrics for monitoring baleen whales near marine construction activities

Effective monitoring is necessary to protect marine mammal species during the construction of offshore infrastructure. The tools for detecting or monitoring marine mammals span traditional (e.g., visual observers, optical cameras), to newer (e.g., passive acoustic monitoring, infrared cameras, tags), and emerging (e.g., satellite imagery, environmental DNA, dimethyl sulfide concentration) technologies. Some are better suited for use during offshore development; however, peer-reviewed literature does not typically evaluate and report on the performance of these various technologies. We define a minimum set of metrics related to efficacy (i.e., confusion matrix, precision and recall, probability of missed mitigation), detection range (i.e., maximum and reliable detection range, spatial resolution), and data delivery (i.e., detection latency, system reliability, temporal resolution) that we recommend are needed to assess the utility of monitoring technologies for this purpose. Following a literature review of relevant studies, we highlight which publications reported these metrics and used multiple technologies to compare relative performance. We also emphasize the benefits of multi-modal approaches and recommend performance assessments through modeling or large-scale collaborative field testing. These metrics will standardize data collection, reporting, and analysis; promote consistent and comparable results; and foster collaboration among developers, regulatory agencies, and scientists. This may lead to the co-development of technology that achieves multiple goals, has greater application, and can answer research questions while collecting data to fulfill permitting requirements. These metrics may also inform decisions on what systems regulatory agencies might consider using and reduce monitoring costs, which is critical to support the marine sector's rapid growth alongside marine mammal conservation.

32 ENERGY CONSERVATION, CONSUMPTION, AND UTILIZATI↗

Cyber-physical cascading failure and resilience of power grid: A comprehensive review

Smart grid technologies are based on the integration of the cyber network and the power grid into a cyber-physical power system (CPPS). The increasing cyber-physical interdependencies bring about tremendous opportunities for the modeling, monitoring, control, and protection of power grids, but also create new types of vulnerabilities and failure mechanisms threatening the reliability and resiliency of system operation. A major concern regarding the interdependent networks is the cascading failure (CF), where a small initial disturbance/failure in the network results in a seemingly unexpected large-scale failure. Although there has been a significant volume of recent work in the CF research of CPPS, a comprehensive review remains unavailable. This article aims to fill the gap by providing a systematic literature survey regarding the modeling, analysis, and mitigation of CF in CPPS. The open research questions for further research are also discussed. This article allows researchers to easily understand the state of the art of CF research in CPPS and fosters future work required towards full resolutions to the remaining questions and challenges.

24 POWER TRANSMISSION AND DISTRIBUTION↗

Large-scale Hydrogen Storage – Risk Assessment Seattle City Light and Port of Seattle [Abstract]

This CRADA presents the strategy that Pacific Northwest National Laboratory (PNNL) and Sandia National Laboratories (SNL) will take to support Seattle City Light (SCL), and the Port of Seattle (Port) in performing a risk assessment of large-scale hydrogen storage. Risk assessment is often used to ensure that adequate measures are taken to protect workers and the public, the environment, infrastructure, and assets. A detailed risk assessment can also be used to direct funding and upgrades, to specific components and sub-systems in order to mitigate risks to the larger system. In this way risk assessments are often employed as a part of a larger risk management strategy, with the goal of minimizing the occurrence of hazards and to identify means to limit their consequences. Risk assessment is often used to engage and inform regulators, and to communicate how specific regulations are being met. However, it is important to note that the proposed work is not intended for SCL and the Port to use in order to gain regulatory acceptance for their proposed activities. The work performed as a part of this effort will be a preliminary risk assessment for early-stage component and system designs and should be considered research and development (R&D). As such, the proposed work will be performed to a quality level and design maturity consistent with R&D and is not considered appropriate for final safety analysis and regulatory compliance purposes. Previous and on-going work at SCL and the Port demonstrated the utility of deploying hydrogen systems at the Port. The deployment of hydrogen at the Port is a part of a larger vision of using hydrogen to address a range of issues for SCL and the Port. These include large-scale fueling of MD/HD vehicles, cargo-handling equipment (CHE), and harbor vessels to reduce emissions; support of adjacent LD vehicles; support of critical port operations during extreme events (i.e., resiliency); deferral of more capital- and time-intensive electrical distribution system upgrades while still supporting evolving port operations and decarbonization efforts; facilitating electrification by establishing energy storage as a grid resource, starting at strategic port locations; creation of a flexible market resource that can be used by SCL to generate revenue via arbitrage; support of planned future maritime operations that involve heavy use of hydrogen for ocean-going vessels; and future end-use applications involving natural gas pipeline hydrogen injection. Ultimately, the success of these activities is underpinned by the deployed storage capacity. Large-scale deployment of hydrogen systems will require hydrogen storage at a scale that has not been demonstrated. In addition, the ideal location for such multi-use systems is near the end user which will often necessitate deploying into urban and/or industrial areas. A detailed risk assessment using the Port as a test case is necessary to ensure the deployment of large-scale hydrogen is successful. Many technologies have been proposed for hydrogen storage; however, these technologies need to be analyzed as they apply to an actual site. The physical infrastructure and hydrogen use cases for the Port will be analyzed, and a risk assessment for compressed hydrogen, liquified hydrogen, and Liquid Organic Hydrogen Carrier (LOHC) storage will be performed. These risk assessments will be useful for understanding how each of these technologies would perform in terms of facility and public safety. The operating states of the proposed hydrogen systems at the Port will be analyzed and incorporated into the storage risk assessment. Scalability will also be analyzed to understand how future port uses would affect the overall risk assessment. Finally, using the risk assessment as a tool to inform engagement and to gain stakeholder acceptance will be explored.

08 HYDROGEN↗

Combining landscape suitability and habitat connectivity to conserve the last surviving population of cheetah in Asia

Abstract Aim The Asiatic cheetah, Acinonyx jubatus venaticus , a critically endangered large felid, has disappeared from vast tracks of its historical range across south‐western Asia. It is currently confined to the arid ecosystems of central Iran for which little is known about its distribution and habitat linkages. We proposed the first evaluation of Asiatic cheetah's distribution and developed models of landscape suitability and connectivity to inform future conservation planning. Location Central Iran. Methods We analysed presence data of a 14‐year‐long cheetah monitoring programme according to environmental and anthropogenic factors, and generated an ensemble model of habitat suitability based on seven species distribution models ( SDM s). We then used the concept of circuit theory and landscape connectivity prioritization ( LCP ) on resultant core habitats and landscape suitability to evaluate potential linkages between core areas. Results Core habitats, that is, the areas hosting the largest continuous suitable habitats for Asiatic cheetahs, covered approximately 49,144 km 2 ( c . 6.3% of the study area). Availability of prey species, avoidance of human‐dominated areas and their infrastructures, and rough landscapes covered with sparse vegetation were the most predictive factors of the core habitats for the last cheetah population in Asia. Although relatively vast, the area of potential core habitats available to cheetahs appeared to be fragmented with limited connectivity between the northern and southern parts of this distribution. Main conclusions Our approach highlights the importance of distribution models to recognize, at a coarse‐scale level, a spatial population structure and habitat suitability characteristics for a large carnivore surviving at very low density. We have identified specific areas of suitable habitat where developing new landscape protection and adaptive conservation management; and improving the safety of important linkages between core habitats are likely to promote the conservation of the last surviving population of cheetah in Asia.

Ahmadi, Mohsen↗

Additive Manufacturing and Nuclear Security: Calibrating Rewards and Risks

In a security environment marked by a high degree of technological dynamism, additive manufacturing (AM) stands out for its special significance. The AM field has emerged from infancy, with many new and potential applications in the commercial and military sectors. Its potential impact on nuclear security is a matter of rising debate, with some emphasizing the disruptive consequences of AM competition for international stability and others emphasizing the disruptive benefits for the United States. This essay addresses both aspects and draws on a technical analysis to inform the further development of U.S. policy. From a nuclear-security perspective, additive manufacturing offers both rewards and risks for the United States and its allies. The rewards are primarily (1) reduced scale of effort and cost in maintaining weapons-production infrastructure and (2) greatly increased responsiveness and agility in production infrastructure. Both these benefits are long-standing U.S. policy goals. The risks derive from the potential impact of AM on foreign nuclear weapons programs and are of three kinds. Those impacts will likely be a function of the degree of technical sophistication of the foreign actor. Non-state actors and entry-level proliferants pose modest AM risks relative to more advanced states, including both existing nuclear-weapon- states and those developed countries with a high degree of nuclear latency. A critical factor in predicting the impact of AM is current uncertainty as to the utility of AM techniques in the fabrication of special nuclear materials. To meet the emerging challenges of AM, U.S. policy makers face a number of decisions regarding which benefits to seek, how much risk to accept, and how to reduce that risk. The basic strategic approach of the United States to the AM problem is sound, but some fine-tuning is necessary and appropriate at this time. The good news is that we have time to act; the bad news is that the time to act decisively may be shorter than we would wish.

42 ENGINEERING↗

A Scalable Quantum Cryptography Network for Protected Automation Communication (Final Report)

This is the final report for a CEDS-funded project aimed at developing a new quantum technology for securing utility communication networks used to control and monitor electrical grid equipment. Securing these control networks represents a unique challenge as the performance of the security solution has a direct impact on the stability and reliability of the electrical grid. Traditional, software-based solutions - developed for information networks - are not suitable for utility control networks because they introduce latency, require burdensome maintenance and upgrades, are often incompatible with legacy equipment, and introduce operational complexity that reduces grid reliability. Consequently, many U.S. utilities do not use existing solutions and, instead, protect their critical control networks through the careful isolation and obscuration of their networked equipment. With more utilities embracing grid automation, the attack surface that utilities must defend from hackers has grown to an unmanageable size. To address this situation, Qubitekk and its partners proposed and developed a hardware-based solution that can secure critical control networks without negatively impacting grid performance. This new solution is based on quantum key distribution (QKD) techniques that guarantee secure key generation and distribution across a utility control network. Through deployment and field testing of a prototype QKD system, we have shown that this solution delivers long-term network security, is technically feasible to implement and maintain on a utility’s distribution substation network and does not negatively impact grid operations. In addition, the project has identified and solved key challenges associated with generating, transmitting, and measuring coherent photonic quantum states on a real-world fiber optic network. These additional findings are playing a critical role in advancing quantum networks for quantum computing applications. An overview of the QKD prototype development effort, field testing activities and results, and additional findings relevant to emerging quantum networks are presented in this report.

71 CLASSICAL AND QUANTUM MECHANICS, GENERAL PHYSIC↗

A Practical Approach of Mining Operational Risks in Cigeo - A field-test - 19349

Andra is currently completing the detailed engineering phase of the stepwise design development of Cigeo (the French HLW and IL-LLW Deep Geological Repository, aka DGR). Various technical issues are at stake, including the risk management requirements linked to the safety of 'Mining Operations' (i.e. occupational safety issues related to underground excavation/dismantling works at some 500 m of depth), at different stages of the DGR life cycle (i.e. from its construction start-up to its final closure and future monitoring/or conversely a decision of waste retrieval). These occupational safety requirements have a significant impact on Cigeo's design, its progressive construction and later closure. On a shorter term, one must demonstrate that the design bases are technically sound and that the solutions selected (to build, operate, close the DGR infrastructures or conversely retrieve the waste) are both feasible and safe. In that sense (and following an identification of operational risks during construction), Andra focused on two sensitive cases: - The construction of large diameter drift crossings, in particular those related to the connection between a transfer drift (main) and a IL-LLW disposal vault (i.e. during construction operations), - The partial dismantling of a drift concrete lining (made of concrete segment rings, erected and placed by a TBM) at time of construction of a horizontal seal (i.e. during closure operations). The discussion starts with a description of the geotechnical conditions prevailing at the (French) Bure site, in the Callovo-Oxfordian (COx) claystone formation. Then the paper presents the Cigeo underground architecture (at large) and the specific structural choices made (at the end of the detailed engineering phase) for drifts, disposal vaults and seals. The discussion on construction - deconstruction challenges for each of the critical issues cited above provides an opportunity to explain the operational sequences (and how the methodology selected enables to reduce the risks). The following part of the paper focuses the technological demonstration (an in-situ test to be planned in detail) of a partial dismantling of the concrete segments rings forming the support lining of two tunnels previously built in the Meuse/Haute-Marne URL (Underground Research Laboratory) infrastructures, combined with the construction of a specific drift crossing. In this dismantling and construction test, the technical demonstration objective is three-fold: - The capacity to lay down compressible arch segments and support (by bolts and mesh) the rock after the lining removal, - The capacity to excavate and line the drift crossing, - The structural / geomechanical behavior (evolution with time) of the rock and lining compared with that of 'neighboring' zones. This paper provides a timeline of the tests. Should the results obtained deliver some positive perspectives of technical feasibility (and convincing operational safety) Andra will incorporate this dismantling/construction solution in the 'design freeze' of the DGR underground infrastructures. The positive outcomes of this technical test campaign will also provide 'elements of proof' for the instruction of the Cigeo licensing (a process likely to take place between 2020 and 2024) by the French Nuclear Safety Authority (ASN). (authors)

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗

Challenges and Solutions in Operation and Lay-Up of the Modular Caustic- Side Solvent Extraction Unit - 20078

The Modular Caustic-Side Solvent Extraction (CSSX) Unit (MCU) was designed and constructed to provide interim salt waste processing so that the Liquid Waste Disposition Program (LWDP) could continue waste removal and tank closure until start-up of the Salt Waste Processing Facility (SWPF). MCU processes Clarified Salt Solution (CSS), or salt solution (SS) that has undergone actinide removal/filtration, to produce two waste streams: the cesium laden Strip Effluent (SE), which is incorporated into glass at the Defense Waste Processing Facility (DWPF), and the cesium depleted Decontaminated SS (DSS), which is incorporated into grout at the Saltstone Production Facility (SPF). MCU completed start-up in 2008 with an initial operating life of 3 years and design life of 5 years. Prior to reaching the end of the design life, multiple critical components were upgraded and/or replaced to mitigate risks associated with any delays in SWPF start-up. During the remainder of operation (until June 2019), MCU was challenged to maximize processing with minimal additional modifications to repair/improve aging infrastructure, while maintaining low levels of risk to workers and the environment. Notable challenges during the extended operating life of the facility involved both mechanical and operational issues. Two of the most significant issues were the increased frequency of Process Vessel Ventilation (PVV) High Efficiency Particulate Air (HEPA) filter change-outs and the biofouling of the SE coalescer (SEC). The major impacts of both issues were that replacement of these components 1) resulted in high exposure to workers, and 2) required substantial downtime, thus hindering achievement of processing goals. PVV HEPA filter replacements are required based on dose rate and differential pressure (dP) limits. After introducing a higher-curie feed to MCU, the operating time between change outs was reduced by approximately half. SEC replacements are required based on dP limits. After restarting from an extended outage, the operating life of the SEC was significantly reduced by more than half due to biofouling. As a result of extensive troubleshooting and process improvements, the facility was able to recover performance and extend the operating life of the PVV HEPA filters and the SEC media. Through troubleshooting both of these issues, the facility was also able to learn from prior experience and adapt in order to minimize down time and maintain throughput. Although the facility took advantage of short periods of downtime to perform nonintrusive troubleshooting and minor corrective/preventative maintenance activities, longer outages were periodically required for corrective maintenance involving process cell entry. During these outages, remote tools and specialized shield plates were employed to minimize dose to workers. Mock-ups of non-routine maintenance activities were critical to early identification of potential issues and improvements, which shortened outage duration. Consistent with the facility's operational strategy, evolutions needed for MCU layup were identified and sequenced to ensure safe conditions within the facility, meet pre-defined criteria for lay-up configuration, and protect workers, while minimizing the impact to SWPF integration. De-inventory and flushing of process areas was prioritized so that the total residual inventory was reduced as efficiently as possible. This paper discusses lessons learned and best practices from troubleshooting unique issues, performing complex maintenance activities, and implementing a layup strategy that best supports the overall system mission. (authors)

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗

MO-FG-BRB-00: The Global Cancer Challenge: What Can We Do?

The global burden of cancer is growing rapidly with an estimated 15 million new cases per year worldwide in 2015, growing to 19 million by 2025 and 24 million by 2035. The largest component of this growth will occur in low-to-middle income countries (LMICs). About half of these cases will require radiation treatment. The gap for available cancer treatment, including radiation therapy, between high-income countries (HICs) and LMICs is enormous. Accurate data and quantitative models to project the needs and the benefits of cancer treatment are a critical first step in closing the large cancer divide between LMICs and HICs. In this context, the Union for International Cancer Control (UICC) has developed a Global Task Force on Radiotherapy for Cancer Control (GTFRCC) with a charge to answer the question as to what it will take to close the gap between what exists today and reasonable access to radiation therapy globally by 2035 and what the potential clinical and economic benefits are for doing this. The Task Force has determined the projections of cancer incidence and the infrastructure required to provide access to radiation therapy globally. Furthermore it has shown that appropriate investment not only yields improved clinical outcomes for millions of patients but that it also provides an overall economic gain throughout all the income settings where this investment is made. This symposium will summarize the facets associated with this global cancer challenge by reviewing the cancer burden, looking at the requirements for radiation therapy, reviewing the benefits of providing such therapy both from a clinical and economic perspective and finally by looking at what approaches can be used to aid in the alleviation of this global cancer challenge. The speakers are world renowned experts in global public health issues (R. Atun), medical physics (D. Jaffray) and radiation oncology (N. Coleman). Learning Objectives: To describe the global cancer challenge and the corresponding potential benefits of addressing this challenge. To describe what radiation therapy infrastructure, in terms of facilities, equipment and personnel, will be required to address this challenge. To describe models of addressing personnel and infrastructure mobilization and capacity building within regions where significant cancer treatment disparities exist.

60 APPLIED LIFE SCIENCES↗