Search NASA⌕ Search

SEARCH · Search NASA

Results for “risk requirements architectures”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 289 records · Page 16
All sourcesNASA NTRSDOE OSTI
NASA NTRSDate not supplied

Design Considerations for Aerocapture Delivery of Uranus Orbiter and Probe

This paper presents an aerocapture system design for delivering the Uranus Orbiter and Probe (UOP) subsystems to their science orbit using the Mars Science Laboratory architecture. A packaging and integration scheme are presented for UOP subsystems, with careful consideration of large components required for outer planet science missions (RTG power generation, RF communications). The implication of packaging multiple RTG’s inside an aeroshell during a multiple year cruise phase will be explained, with possible thermal design solutions to mitigate RTG waste heat analyzed. Mass properties and margins for the system are discussed and an overall mass risk assessment is presented for the entry system and total flight system at launch. Alternative vehicle configurations are explored to include multiple probes and enable science objectives during transit to Uranus. Aerocapture mass savings when compared to the baseline UOP design are presented.

Aerocapture↗
DOE OSTI2024

Improving and Automating Building Model Data Exchange

There are many instances throughout a project’s lifecycle where there arises a need for quick and accurate risk assessment of building designs. For example, an unexpected design change during construction may necessitate structural engineers to perform a seismic risk assessment on analytical models of the updated building design using high fidelity structural analysis software, such as ANSYS or Abaqus. However, the efficiency of such workflows often depends upon the interoperability of architectural design software and structural analysis software. When the quality of this interoperability is lacking or even non-existent, the efficiency of virtual engineering workflows is hampered, which increases project costs. A McGraw Hill industry survey of professional users of Building Information Modeling (BIM) technologies found that there is high demand for BIM interoperability for structural analysis, but that the value/difficulty ratio is currently too low for practical use. There have been efforts by the academic community to facilitate model data exchange between the architectural design and structural analysis domains, but such solutions have not been widely adopted by industry, face technical challenges, and oftentimes are limited in applicability for users of various BIM software. Therefore, INL is developing capabilities to improve, automate, and generalize model data exchange between architectural BIM software (e.g., Revit) and structural analysis software (e.g., SAP2000, ANSYS). The goal is to help expedite and automate as much of the pre-processing step for creating analytical models in finite element analysis software as reasonably as possible. Such a "BIM-to-FEA" conversion tool should provide direct benefit to end-users through accuracy, automation, quick turn-around, and wide applicability. To generalize the application of this BIM-to-FEA conversion tool and increase its useability among the many different commercial BIM software currently used by industry, the program is being developed with the concept of openBIM. OpenBIM is the application of non-proprietary, open data standards that allow for BIM model data exchange in a format that is accessible, retainable, and useable for all users. The most widely used open, non-proprietary data exchange format for BIM is the Industry Foundation Classes (IFC) schema. IFC is developed by buildingSMART international and is ISO certified (ISO 16739-1:2018). The BIM-to-FEA conversion tool is being developed for compatibility with typical commercial building designs of steel framed structures. The tool is currently capable of importing architectural BIM data of framed building structures, recognizing and extracting the aspects of the model that are required for structural analysis, adjusting the connectivity of frame members, and finally exporting to an analytical model stored in the IFC format. The exported IFC analytical model can then be imported into various openBIM compliant software, such as SAP2000. Such capabilities have already been tested on commercial software, as shown above, and continue to be improved. Work is underway to test the conversion on various commercial BIM software, develop a user-friendly interface, incorporate the program into the broader DeepLynx data warehouse project being developed by INL, and to eventually open-source the tool for the benefit of the community. Future development of the tool envisions the ability for efficient iterative risk assessment of generative building designs, all within a workflow utilizing open-source tools. One such open-source tool will be MOOSE, an advanced finite element analysis tool developed at INL. The conversion tool will also branch out from typical commercial building designs and will aim to incorporate nuclear construction. The aim will be to convert both structural and non-structural components of nuclear facilities, such as curved concrete containment structures and piping systems, respectively.

97 MATHEMATICS AND COMPUTING↗
NASA NTRS1994

Design of a walking robot

Carnegie Mellon University's Autonomous Planetary Exploration Program (APEX) is currently building the Daedalus robot; a system capable of performing extended autonomous planetary exploration missions. Extended autonomy is an important capability because the continued exploration of the Moon, Mars and other solid bodies within the solar system will probably be carried out by autonomous robotic systems. There are a number of reasons for this - the most important of which are the high cost of placing a man in space, the high risk associated with human exploration and communication delays that make teleoperation infeasible. The Daedalus robot represents an evolutionary approach to robot mechanism design and software system architecture. Daedalus incorporates key features from a number of predecessor systems. Using previously proven technologies, the Apex project endeavors to encompass all of the capabilities necessary for robust planetary exploration. The Ambler, a six-legged walking machine was developed by CMU for demonstration of technologies required for planetary exploration. In its five years of life, the Ambler project brought major breakthroughs in various areas of robotic technology. Significant progress was made in: mechanism and control, by introducing a novel gait pattern (circulating gait) and use of orthogonal legs; perception, by developing sophisticated algorithms for map building; and planning, by developing and implementing the Task Control Architecture to coordinate tasks and control complex system functions. The APEX project is the successor of the Ambler project.

Whittaker, William↗
NASA NTRS2010

Risk Identification and Visualization in a Concurrent Engineering Team Environment

Incorporating risk assessment into the dynamic environment of a concurrent engineering team requires rapid response and adaptation. Generating consistent risk lists with inputs from all the relevant subsystems and presenting the results clearly to the stakeholders in a concurrent engineering environment is difficult because of the speed with which decisions are made. In this paper we describe the various approaches and techniques that have been explored for the point designs of JPL's Team X and the Trade Space Studies of the Rapid Mission Architecture Team. The paper will also focus on the issues of the misuse of categorical and ordinal data that keep arising within current engineering risk approaches and also in the applied risk literature.

Risk Scoring↗
DOE OSTI2019

Multi-layered Resilient Microgrid Networks

Distribution grid resilience, especially when the grid is under high penetration of Distributed Energy Resources (DER), e.g. PV and energy storage, is essential to ensure the quality of electric power services. The resiliency aspect is particularly important for critical loads that typically include hospitals, police/fire stations, and national security facilities. Networks of multiple interconnected reconfigurable microgrids help to increase renewable energy penetration and may be used as basic building blocks for implementing future resilient power grids. However, this integration requires additional layers of communications, both horizontal and vertical, which may substantially increase the potential cyber attack surfaces as well as escalate risks for wide-spread malfunctions of automation systems. The Mulit-layered Resilient Microgrid Networks project is an industry-academic collaboration between ABB, Duke Energy and the University of Illinois at Urbana-Champaign (UIUC) that has developed and demonstrated a cyber-physical resilient control and communication architecture for deployment of multiple microgrid networks, as well as retrofitting the existing distribution grids by increasing DER penetration levels.

24 POWER TRANSMISSION AND DISTRIBUTION↗
NASA NTRSDate not supplied

Exploration Medical Capability - Advancing Medical System Design and Risk-Informed Decision Making for Deep Space Exploration

BACKGROUND: Within NASA’s Human Research Program, the Exploration Medical Capability (ExMC) Element has three primary focus areas: clinical and scientific research, systems engineering and trade space analysis, and technology development and demonstrations. These focus areas feed into the overarching goal of enabling progressively Earth-Independent Medical Operations (EIMO), a new paradigm that will be necessary for future Artemis and Mars medical and vehicle systems. This EIMO end state aligns with NASA’s Moon to Mars Objectives, which clearly outline the need for NASA deep space exploration missions to reduce their reliance upon Earth and become increasingly autonomous, in preparation for the first human Mars mission. OVERVIEW: To advance exploration medical systems and ultimately, integrated crew health and performance systems, ExMC’s portfolio includes: funding ground development & testing of novel medical capabilities; creation of new approaches for the development of medical protocols and procedures; deployment of innovative technologies into analog environments; technology demonstrations in spaceflight; and eventual transition to operations of new capabilities for deep space exploration missions. The portfolio also includes: pharmaceutical research targeting stability, pharmacokinetics, and pharmacodynamics; integrated data architectures and clinical decision support tools; and systems engineering and trade space analysis tools to assist NASA in the development of future medical system models as well as the medical system requirements that can serve as a foundation for deep space exploration missions. All of these investments are done in a collaborative and coordinated fashion with other NASA stakeholders, such as the Environmental Control and Life Support Systems – Crew Health and Performance System Capability Leadership Team and the Health and Medical Technical Authority. DISCUSSION: In this presentation, ExMC will provide an overview of our work from across our portfolio, all of which will inform future EIMO efforts at NASA. ExMC’s research and development investments are targeted to reduce the human system risks associated with deep space exploration to the Moon and Mars.

Kris Lehnhardt↗
DOE OSTI2022

Thermal-Mechanical Analysis of an Additive Manufacturing Ceramic Heat Exchanger for High-Temperature Recuperator in a sCO2 Power System

Supercritical CO2 (sCO2) Brayton power cycle can be configured in a closed-loop power system and has a potentially high cycle efficiency. Compactness and high efficiency of a sCO2 power block make the sCO2 Brayton cycle a versatile power cycle in broad applications. While many heat sources are of sufficient intensity to produce high temperature working fluids to achieve high cycle efficiency, the thermal-mechanical stability of traditional materials (e.g., steels and nickel-based superalloys) used in construction of heat exchangers and turbine components limits the operating conditions and thus thermodynamic efficiency of the system. This effort seeks to establish the viability of ceramic heat exchanger technologies for the most extreme operating conditions envisioned for power generation and other high temperature processes. Heat exchangers constructed from ultra-high temperature ceramics, a class of extreme environment materials featuring melting points (Tmp.) above 3000 degrees C, is particularly appealing for sCO2 Brayton cycles given their ultra-low creep rates and very high retained strength at low homologous temperatures (i.e., T < 0.5 Tmp., or at least 1500 degrees C). To translate these materials properties to ultra-high temperature heat exchangers, innovations are required in ceramic manufacturing techniques to realize the complex architectures featured in compact heat exchangers with high power density. With appropriate processing, ZrB2-SiC based compositions can be sintered to near full density and shaped into complex topologies via ceramic additive manufacturing methods. This paper analyzes heat exchanger designs and explores thermal-mechanical implications of the operating environment. Thermal flow, heat transfer, and conjugate mechanical analyses provide insights into benefits and risks associated with the design approach.

additive manufacturing↗
NASA NTRS1992

Requirements and opportunities for satellite autonomy

The requirements for autonomous control of spacecraft functions have been well articulated by a wide selection of US Air Force mission analyses and architecture studies. The opportunities however, to implement these autonomy functions have been limited. An overview of documented requirements is presented to demonstrate the scope of autonomous functions needed, and potential time frames for implementation is derived. The missed opportunities are analyzed to provide lessons learned, and near term opportunities will be reviewed. The current initiatives at the Phillips Laboratory are described in terms of the requirements addressed and the proposed approaches will show program risk reduction for satellite autonomy technology insertion into space operations.

Campbell, W. Spencer↗
NASA NTRS1993

Human Transportation System (HTS) study, volume 2

This report summarizes work completed under the Human Transportation System Study. This study was conducted by the New Initiatives Office at JSC with the technical support of Boeing, General Dynamics, Lockheed, McDonnell-Douglas, Martin Marietta, and Rockwell. The study was designed to generate information on determining the appropriate path to follow for new system development to meet the Nation's space transportation needs. The study evaluates 18 transportation architecture options using a parametric set of mission requirements. These options include use of current systems (e.g., Shuttle, Titan, etc. ) as well as proposed systems (e.g., PLS, Single-Stage-to-Orbit, etc.) to assess the impact of various considerations, such as the cost of alternate access, or the benefit of separating people and cargo. The architecture options are compared to each other with six measurable evaluation criteria or attributes. They are: funding profile, human safety, probability of mission success, architecture cost risk, launch schedule confidence, and environmental impact. Values for these attributes are presented for the architecture options, with pertinent conclusions and recommendations.

Unmanned spacecraft↗
NASA NTRS1993

Human Transportation System (HTS) study: Executive summary

This report summarizes work completed under the Human Transportation System Study. This study was conducted by the New Initiatives Office at JSC with the technical support of Boeing, General Dynamics, Lockheed, McDonnell-Douglas, Martin Marietta, and Rockwell. The study was designed to generate information on determining the appropriate path to follow for new system development to meet the Nation's space transportation needs. The study evaluates 18 transportation architecture options using a parametric set of mission requirements. These options include use of current systems (e.g., Shuttle, Titan, etc.) as well as proposed systems (e.g., PLS, Single-Stage-to-Orbit, etc.) to assess the impact of various considerations, such as the cost of alternate access, or the benefit of separating people and cargo. The architecture options are compared to each other with six measurable evaluation criteria or attributes. They are: funding profile, human safety, probability of mission success, architecture cost risk, launch schedule confidence, and environmental impact. Values for these attributes are presented for the architecture options, with pertinent conclusions and recommendations.

Unmanned spacecraft↗
NASA NTRS1993

Human Transportation System (HTS) study, volume 1

This report summarizes work completed under the Human Transportation System Study. This study was conducted by the New Initiatives Office at JSC with the technical support of Boeing, General Dynamics, Lockheed, McDonnell-Douglas, Martin Marietta, and Rockwell. The study was designed to generate information on determining the appropriate path to follow for new system development to meet the Nation's space transportation needs. The study evaluates 18 transportation architecture options using a parametric set of mission requirements. These options include use of current systems (e.g., Shuttle, Titan, etc.) as well as proposed systems (e.g., PLS, Single-Stage-to-Orbit, etc.) to assess the impact of various considerations, such as the cost of alternate access, or the benefit of separating people and cargo. The architecture options are compared to each other with six measurable evaluation criteria or attributes. They are: funding profile, human safety, probability of mission success, architecture cost risk, launch schedule confidence, and environmental impact. Values for these attributes are presented for the architecture options, with pertinent conclusions and recommendations.

Unmanned spacecraft↗
NASA NTRS2010

The Habitat Demonstration Unit System Integration

The Lunar Surface System Habitat Demonstration Unit (HDU) will require a project team to integrate a variety of contributions from National Aeronautics and Space Administration (NASA) centers and potential outside collaborators and poses a challenge in integrating these disparate efforts into a cohesive architecture. To accomplish the development of the first version of the HDU, the Pressurized Excursion Module (PEM), from conception in June 2009 to rollout for operations in July 2010, the HDU project team is using several strategies to mitigate risks and bring the separate efforts together. First, a set of design standards is being developed to define the interfaces between the various systems of PEM and to the payloads, such as the Geology Laboratory, that those systems will support. Scheduled activities such as early fit-checks and the utilization of a habitat avionics test bed prior to equipment installation into HDU PEM are planned to facilitate the integration process. A coordinated effort to establish simplified Computer Aided Design (CAD) standards and the utilization of a modeling and simulation systems will aid in design and integration concept development. Finally, decision processes on the shell development including the assembly sequence and the transportation have been fleshed out early on HDU design to maximize the efficiency of both integration and field operations.

Gill, Tracy R.↗
NASA NTRS2014

The ISS 2B PVTCS Ammonia Leak: An Operational History

In 2006, the Photovoltaic Thermal Control System (PVTCS) for the International Space Station's 2B power channel began leaking ammonia at a rate of approximately 1.5lbm/year (out of a starting approximately 53lbm system ammonia mass). Initially, the operations strategy was "feed the leak," a strategy successfully put into action via Extra Vehicular Activity during the STS‐134 mission. During this mission the system was topped off with ammonia piped over from a separate thermal control system. This recharge was to have allowed for continued power channel operation into 2014 or 2015, at which point another EVA would have been required. Without these periodic EVAs to refill the 2B coolant system, the channel would eventually leak enough fluid as to risk pump cavitation and system failure, resulting in the loss of the 2B power channel - the most critical of the Space Station's 8 power channels. In mid‐2012, the leak rate increased to approximately 5lbm/year. Once discovered, an EVA was planned and executed within a 5 week timeframe to drastically alter the architecture of the PVTCS via connection to a dormant thermal control system not intended to be utilized as anything other than spare components. The purpose of this rerouting of the TCS was to increase system volume and to isolate the photovoltaic radiator, thought to be the likely leak source. This EVA was successfully executed on November 1st, 2012 and left the 2B PVTCS in a configuration where the system was now being adequately cooled via a totally different radiator than what the system was designed to utilize. Unfortunately, data monitoring over the next several months showed that the isolated radiator was not leaking, and the system itself continued to leak steadily until May 9th, 2013. It was on this day that the ISS crew noticed the visible presence of ammonia crystals escaping from the 2B channel's truss segment, signifying a rapid acceleration of the leak from 5lbm/year to 5lbm/day. Within 48 hours of the crew noticing the leak, an EVA was in progress to replace the coolant pump - the only other replaceable leak source. This paper will explore the management of the 2B PVTCS leak from the operations perspective. It will discuss the methodology of performing the STS‐134 refill, the considerations and contingency plans which went into the architectural overhaul of the system in 2012, and the unprecedented effort which went into the EVA response to the visible leak of May 2013. In particular the paper will focus on the techniques utilized by flight controllers to monitor the system health and to respond to such instances as the rapid May 2013 leak by putting the electrical system in a safe configuration for loss of cooling, and will use recorded telemetry of these events to describe system response to EVA crew and ground actions. It will discuss the innovative design for redundancy of the integrated truss structure's cooling systems which allowed for this leak to be managed with minimal impact to other ISS operations and electrical services, contrasted against the real unintended operations consequences of utilizing the flexibility of the spacecraft's design in this manner. The paper will discuss how the training of the crew and flight controller personnel has adapted to the changing architecture of the power system and the unpredictable nature of the 2B leak.

Vareha, Anthony↗
NASA NTRS2020

Preparing for Human Missions to Mars: The role of ISS and Artemis as Analogs for Research and Technology Testing

The hazards of spaceflight to the human system are present in in varying degrees on different spaceflight platforms: altered gravity, isolation and confinement, distance from Earth, radiation, and hostile closed environments. A strategic view of the fidelity of hazards experienced on different platforms can shape the testing plans for human research and technology demonstration related to crew health and performance. Working across the international partnership, the International Space Station (ISS) is planning periods of modified operations to improve the fidelity of Mars simulations. To understand transit durations as an independent variable, a series of 1-year, 6-month and 30-45 day missions are being planned on ISS. Standard measurements across ISS missions of different durations, lunar missions and ground analogs offers the opportunity to distinguish different hazards and their effects in the context of the relevance to future mission concepts. The ISS partnership is planning for additional test cases that are aligned with Mars mission plans. (1) Evaluating crew performance capabilities when transitioning to gravity after long durations in microgravity representative of a Mars transit. (2) Simulating crew medical care under Mars-like autonomous operations. (3) Identification and testing of operations under communications delay and autonomy expected for Mars missions and the linked effects on behavioral health and performance of the crew. Artemis missions serve as a valuable analogs for Mars surface operations, with partial gravity and deep space radiation hazards, but with crewmembers that are probably more physically capable than their counterparts would be after a Mars transit. Getting unobtrusive data from early Artemis missions, and knowledge gained from operational experience as Artemis operations develop can improve engineering design, medical requirements and countermeasures, and ultimately ensure mission success on Mars. Linking Mars architectures with the plans and capabilities for ISS and Artemis allows us to plan to most operationally relevant tests of crew health and performance on current spaceflight missions to inform planning for future missions to Mars. By using human spaceflight platforms as well as ground simulation in an integrated way, the international community can improve exploration readiness, develop countermeasures and reduce risks of future human space missions.

International Space Station↗
NASA NTRS2014

Magnet Architectures and Active Radiation Shielding Study - SR2S Workshop

Analyze new coil configurations with maturing superconductor technology -Develop vehicle-level concept solutions and identify engineering challenges and risks -Shielding performance analysis Recent advances in superconducting magnet technology and manufacturing have opened the door for re-evaluating active shielding solutions as an alternative to mass prohibitive passive shielding.Publications on static magnetic field environments and its bio-effects were reviewed. Short-term exposure information is available suggesting long term exposure may be okay. Further research likely needed. center dotMagnetic field safety requirements exist for controlled work environments. The following effects have been noted with little noted adverse effects -Magnetohydrodynamic (MHD) effects on ionized fluids (e.g. blood) creating an aortic voltage change -MHD interaction elevates blood pressure (BP) center dot5 Tesla equates to 5% BP elevation -Prosthetic devises and pacemakers are an issue (access limit of 5 gauss).

Westover, Shane↗
DOE OSTI2022

A Cybersecurity Threat Profile for a Connected Lighting System

In this paper we analyze a threat profile performed on a fault-detection use case for streetlights. A threat profile establishes security requirements, justifies security measures, yields actionable controls, and effectively communicates risk to stakeholders. This effort provides critical information for making threat-based decisions to increase security at a reasonable cost, and can effectively be used by development teams, software architects, and managers to make cybersecurity a part of their ongoing culture of awareness, training, and prevention. This leads to more secure systems and better-understood security. On-premise, cloud, and hybrid architectures with different authentication mechanisms were modeled and later categorized using the Microsoft STRIDE framework. An analysis of the recommended controls for each threat was performed to determine which controls could and should be put in place by manufacturers or third-party suppliers, and which controls need to be left up the end-user to implement.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2021

Waste Compliance and Tracking System (WCATS) Version 3 Requirements Document

This document describes the end-user requirements for the Waste Compliance and Tracking System (WCATS) project in accordance with the WCATS Software Quality Management Plan, EPC-WMP-WCATSPLAN-001. The WCATS application shall support the generation, characterization, processing, and shipment of LANL radioactive, hazardous, and industrial waste. Regulatory drivers include RCRA hazardous waste, DOT shipping, NNSA nuclear material control and accountability, DOE nuclear safety, TSDF permit, and transuranic waste certification requirements. The system will utilize a task-based architecture that supports the spectrum of treatment, storage, disposal, administrative, and characterization based unit operations necessary to manage waste from cradle to grave. The application design shall readily accommodate new facilities, processes, workflow, signature requirements, and so forth, via end-user established metadata. WCATS will provide support for representing waste storage and disposal facilities, buildings, rooms, and grid layouts (x, y, z) to support waste and radioactive material inventory management. Nuclear material at risk (MAR), DOE hazard rating (e.g., Category II facility) compliance per DOE-STD-1027, and permit inventory requirements will be configurable for any storage or disposal facility, or waste operation, and the system will automatically evaluate and enforce those requirements. In addition, the application will support the characterization and management of the entire range of hazardous and radioactive wastes (TRU, MTRU, LLW, MLLW, hazardous waste, etc.) that might be colocated or processed at a permitted facility. Some capabilities not found in traditional systems include user-defined tank systems for liquid waste, user-defined work paths (i.e., sequence of operations), and an equipment subsystem for tracking the calibration, maintenance, and inspection of tools used to process waste, such as torque wrenches, scales, pH probes, etc. The application incorporates a desktop and mobile user interface as shown in Figure 1. The mobile interface supports field operations, such as waste item characterization, intra-facility transfers, internal and external audits, and shipment preparation and receipt.

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗
DOE OSTI2022

A Cybersecurity Threat Profile for a Connected Lighting System

In anticipation of improved energy performance and cost savings, cities and building owners are increasingly considering “smart lighting initiatives” that aim to convert their collection of simple luminaires (i.e., lighting fixtures) into an intelligent connected lighting system (CLS) capable of remotely monitoring energy consumption and fault conditions, and possibly implementing adaptive lighting schemes. The U.S. Department of Energy (DOE) has set an national goal of tripling the energy efficiency and demand flexibility of the buildings sector by 2030, relative to 2020 levels 1. It is forecast that connected lighting systems can contribute to that goal by delivering 125 TWh of annual energy savings by 2035 2, equivalent to the annual output of 50 typical (500 MW) power plants. However, these energy savings and the DOE goal are put at significant risk if connected technologies are not adopted due to real or perceived cybersecurity concerns. Connected IoT devices such as these have historically been rife with vulnerabilities which sometimes put security considerations secondary to functionality and operability. What are the cybersecurity threats that will impact these systems, as formerly banal luminaires transition into intelligent connected devices that collect information about themselves, their surrounding environment, and possibly us? In this paper we analyze a threat profile performed on a fault-detection use case for streetlights. A threat profile establishes security requirements, justifies security measures, yields actionable controls, and effectively communicates risk to stakeholders. This effort provides critical information for making threat-based decisions to increase security at a reasonable cost, and can effectively be used by development teams, software architects, and managers to make cybersecurity a part of their ongoing culture of awareness, training, and prevention. This leads to more secure systems and better-understood security. On-premise, cloud, and hybrid architectures with different authentication mechanisms were modeled and later categorized using the Microsoft STRIDE framework. An analysis of the recommended controls for each threat was performed to determine which controls could and should be put in place by manufacturers or third-party suppliers, and which controls need to be left up the end-user to implement. Fifty-seven threats were identified. Among our key findings: (1) 65% (37/57) of the threats did not involve the luminaires, but rather the other components needed to communicate with and manage them; (2) 63% (36/57) of the threats could have been mitigated through manufacturer-implemented defensive techniques or “controls”; and (3) 23% (13/57) of the threats were dependent on the network configuration. Recommendations based on the results of this work are made to key stakeholder groups. Notably, lighting technology developers are advised to address all threats that can be reasonably controlled with baked-in technology solutions (e.g., encryption or authentication controls), and employ some form of secure supply chain management and tracking where other parts (e.g., sensors, microprocessors) of a luminaire must also be built and manufactured with the proper security controls in place. Developers should also review threats involving assets not developed in-house to understand how connectivity with other devices will affect their product during system operation and determine if a compensating control for a defense-in-depth strategy will be needed. Finally, those interested in deploying CLS should compare the differences between cloud and on-premise models to determine which is more suitable for their needs and the abilities of their security team.

32 ENERGY CONSERVATION, CONSUMPTION, AND UTILIZATI↗