Considerations for Secure Data Exchange to Achieve Cyber-Physical Situational Awareness in the Electric Grid
Explore the source record for details and available documents.
Chavez, Adrian R.↗
SEARCH · Search NASA
Results for “Security Considerations”
Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.
Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.
Considerations for Secure Data Exchange to Achieve Cyber-Physical Situational Awareness in the Electric Grid
Explore the source record for details and available documents.
Hossain-McKenzie, Shamina Shahrin↗
INS–Support for Formal Cyber Security Education in Brazil–After Action Report
The adoption of digital technology into Instrumentation and Control (I&C) systems in nuclear facilities fundamentally changes the nature of these systems. Greater interconnectivity of reprogrammable, and functionally interdependent control systems has given rise to the need for computer security consideration in digital I&C Systems. The cyber security of I&C systems presents a growing risk to nuclear facilities and requires the development of educational and research tools to ensure the safety of these facilities. Currently there is a major gap in formal educational offerings on cyber security for these Operational Technology (OT) systems. To provide formal cyber security education resources, DOE’s office of International Nuclear Security (INS) partnered with the University of São Paulo (USP) to develop a training course on the cyber security of nuclear facility I&C systems using the hypothetical Nuclear Power Plant, Asherah.
46 INSTRUMENTATION RELATED TO NUCLEAR SCIENCE AND ↗
North American Electric Reliability Corporation Critical Infrastructure Protection-Related Content from EnerNex
Whitepaper that covers transmission line ratings (SLRs, AARs, DLRs), FERC Order 881, and NERC CIP considerations for DLRs, covering Dynamic Line Rating (DLR) Systems & Associated Cyber Security Considerations.
24 POWER TRANSMISSION AND DISTRIBUTION↗
High-Level Considerations for Access and Access Controls by Design
The design and construction of a nuclear power plant must include robust structures and a security boundary that is difficult to penetrate. For security considerations, the reactors would ideally be sited underground, beneath a massive solid block, which would be too thick to be penetrated by tools or explosives. Additionally, all communications and power transfer lines would also be located underground and would be fortified against any possible design basis threats. Limiting access with difficult-to-penetrate physical barriers is a key aspect for determining response and staffing requirements. Considerations considered in a graded approach to physical protection are described.
22 GENERAL STUDIES OF NUCLEAR REACTORS↗
Development of A Hardware-In-the-Loop (HIL) Testbed for Cyber-Physical Security in Smart Buildings
As smart buildings move towards open communication technologies, providing access to the Building Automation System (BAS) through the building's intranet, or even remotely through the Internet, has become a common practice. However, BAS was historically developed as a closed environment and designed with limited cyber-security considerations. Thus, smart buildings are vulnerable to cyber-attacks with the increased accessibility. This study introduces the development and capability of a Hardware-in-the-Loop (HIT) testbed for testing and evaluating the cyber-physical security of typical BASs in smart buildings. The testbed consists of three subsystems: (1) a real-time HIL emulator simulating the behavior of a virtual building as well as the Heating, Ventilation, and Air Conditioning (HVAC) equipment via a dynamic simulation in Modelica; (2) a set of real HVAC controllers monitoring the virtual building operation and providing local control signals to control HVAC equipment in the HIL emulator; and (3) a BAS server along with a web-based service for users to fully access the schedule, setpoints, trends, alarms, and other control functions of the HVAC controllers remotely through the BACnet network. The server generates rule-based setpoints to local HVAC controllers. Based on these three subsystems, the HIL testbed supports attack/fault-free and attack/fault-injection experiments at various levels of the building system. The resulting test data can be used to inform the building community and support the cyber-physical security technology transfer to the building industry.
Li, Guowen↗
A critical review of cyber-physical security for building automation systems
Modern Building Automation Systems (BASs), as the brain that enable the smartness of a smart building, often require increased connectivity both among system components as well as with outside entities, such as the cloud, to enable low-cost remote management, optimized automation via outsourced cloud analytics, and increased building-grid integrations. As smart buildings move towards open communication technologies, providing access to BASs through the building's intranet, or even remotely through the Internet, has become a common practice. However, increased connectivity and accessibility come with increased cyber security threats. BASs were historically developed as closed environments with limited cyber-security considerations. As a result, BASs in many buildings are vulnerable to cyber-attacks that may cause adverse consequences, such as occupant discomfort, excessive energy usage, and unexpected equipment downtime. Therefore, there is a strong need to advance the state-of-the-art in cyber-physical security for BASs and provide practical solutions for attack mitigation in buildings. However, an inclusive and systematic review of BAS vulnerabilities, potential cyber-attacks with impact assessment, detection & defense approaches, and cyber resilient control strategies is currently lacking in the literature. This review paper fills the gap by providing a comprehensive up-to-date review of cyber-physical security for BASs at three levels in commercial buildings: management level, automation level, and field level. The general BASs vulnerabilities and protocol-specific vulnerabilities for the four dominant BAS protocols (i.e., BACnet, KNX, LonWorks, and Modbus) are reviewed, followed by a discussion on four attack targets and seven potential attack scenarios. Furthermore, the impact of cyber-attacks on BASs is summarized as signal corruption, signal delaying, and signal blocking. The typical cyber-attack detection and defense approaches are identified at the three levels. Cyber resilient control strategies for BASs under attack are categorized into passive and active resilient control schemes. Open challenges and future opportunities are finally discussed.
97 MATHEMATICS AND COMPUTING↗
Common Operating Picture: UAV Security Study
This initial communication security study is a top-level assessment of basic security issues related to the operation of Unmanned Aerial Vehicles (UAVs) in the National Airspace System (NAS). Security considerations will include information relating to the use of International Civil Aviation Organization (ICAO) Aeronautical Telecommunications Network (ATN) protocols and applications identifying their maturity, as well as the use of IPV4 and a version of mobile IPV6. The purpose of this assessment is to provide an initial analysis of the security implications of introducing UAVs into the NAS.
Source record↗
A Cybersecurity Threat Profile for a Connected Lighting System
In anticipation of improved energy performance and cost savings, cities and building owners are increasingly considering “smart lighting initiatives” that aim to convert their collection of simple luminaires (i.e., lighting fixtures) into an intelligent connected lighting system (CLS) capable of remotely monitoring energy consumption and fault conditions, and possibly implementing adaptive lighting schemes. The U.S. Department of Energy (DOE) has set an national goal of tripling the energy efficiency and demand flexibility of the buildings sector by 2030, relative to 2020 levels 1. It is forecast that connected lighting systems can contribute to that goal by delivering 125 TWh of annual energy savings by 2035 2, equivalent to the annual output of 50 typical (500 MW) power plants. However, these energy savings and the DOE goal are put at significant risk if connected technologies are not adopted due to real or perceived cybersecurity concerns. Connected IoT devices such as these have historically been rife with vulnerabilities which sometimes put security considerations secondary to functionality and operability. What are the cybersecurity threats that will impact these systems, as formerly banal luminaires transition into intelligent connected devices that collect information about themselves, their surrounding environment, and possibly us? In this paper we analyze a threat profile performed on a fault-detection use case for streetlights. A threat profile establishes security requirements, justifies security measures, yields actionable controls, and effectively communicates risk to stakeholders. This effort provides critical information for making threat-based decisions to increase security at a reasonable cost, and can effectively be used by development teams, software architects, and managers to make cybersecurity a part of their ongoing culture of awareness, training, and prevention. This leads to more secure systems and better-understood security. On-premise, cloud, and hybrid architectures with different authentication mechanisms were modeled and later categorized using the Microsoft STRIDE framework. An analysis of the recommended controls for each threat was performed to determine which controls could and should be put in place by manufacturers or third-party suppliers, and which controls need to be left up the end-user to implement. Fifty-seven threats were identified. Among our key findings: (1) 65% (37/57) of the threats did not involve the luminaires, but rather the other components needed to communicate with and manage them; (2) 63% (36/57) of the threats could have been mitigated through manufacturer-implemented defensive techniques or “controls”; and (3) 23% (13/57) of the threats were dependent on the network configuration. Recommendations based on the results of this work are made to key stakeholder groups. Notably, lighting technology developers are advised to address all threats that can be reasonably controlled with baked-in technology solutions (e.g., encryption or authentication controls), and employ some form of secure supply chain management and tracking where other parts (e.g., sensors, microprocessors) of a luminaire must also be built and manufactured with the proper security controls in place. Developers should also review threats involving assets not developed in-house to understand how connectivity with other devices will affect their product during system operation and determine if a compensating control for a defense-in-depth strategy will be needed. Finally, those interested in deploying CLS should compare the differences between cloud and on-premise models to determine which is more suitable for their needs and the abilities of their security team.
32 ENERGY CONSERVATION, CONSUMPTION, AND UTILIZATI↗
Universal Utility Data Exchange (UUDEX) Functional Design Requirements: Cybersecurity of Energy Delivery Systems Research and Development
This document provides a set of high-level functional design requirements for Universal Utility Data Exchange (UUDEX). These requirements include a set of use cases, data exchanges supported by UUDEX, both for grid operations and for cyber security data, functional requirements for data exchange, data models used by UUDEX, data exchange architectures, and security considerations. These functional design requirements are intended to be used in more detailed design documents.
97 MATHEMATICS AND COMPUTING↗
Universal Utility Data Exchange (UUDEX) Functional Design Requirements - Rev 1
This document provides a set of high-level functional design requirements for Universal Utility Data Exchange (UUDEX). These requirements include a set of use cases, data exchanges supported by UUDEX, both for grid operations and for cyber security data, functional requirements for data exchange, data models used by UUDEX, data exchange architectures, and security considerations. These functional design requirements are intended to be used in more detailed design documents.
97 MATHEMATICS AND COMPUTING↗
A flexible framework for secure and efficient program obfuscation.
In this paper, we present a modular framework for constructing a secure and efficient program obfuscation scheme. Our approach, inspired by the obfuscation with respect to oracle machines model of [4], retains an interactive online protocol with an oracle, but relaxes the original computational and storage restrictions. We argue this is reasonable given the computational resources of modern personal devices. Furthermore, we relax the information-theoretic security requirement for computational security to utilize established cryptographic primitives. With this additional flexibility we are free to explore different cryptographic buildingblocks. Our approach combines authenticated encryption with private information retrieval to construct a secure program obfuscation framework. We give a formal specification of our framework, based on desired functionality and security properties, and provide an example instantiation. In particular, we implement AES in Galois/Counter Mode for authenticated encryption and the Gentry-Ramzan [13]constant communication-rate private information retrieval scheme. We present our implementation results and show that non-trivial sized programs can be realized, but scalability is quickly limited by computational overhead. Finally, we include a discussion on security considerations when instantiating specific modules.
Solis, John Hector↗
SOLAr Critical Infrastructure Energization (SOLACE): Leveraging Distributed Energy Resources to Provide Local Power
This document is a technical report based on a large-scale DOE-funded project conducted between 2019 and 2022. The project, called SOLAr Critical infrastructure Energization (SOLACE), is aimed at leveraging distributed energy resources (DERs) to provide local power to communities, feeders, or other regions. The project included a particular focus on high-value critical loads such as municipal water supply, telecommunication hubs, and disaster shelters. The key developments of the project were: (1) A comprehensive pre-event power system analysis methodology that identifies and characterizes the viable local power options. (2) A DMS-based example control system for activating and operating the local power solution during a time of crisis. (3) Grid-forming inverter technology to enable isolated local power operation and black-starting. (4) Cyber-security considerations for isolated systems when wider-area communication may be offline. This report describes the overall process that identifies and assesses the viable DER-based local power solutions for a given facility, region, or community. The report documents the process, including the key analysis steps, tools required, data requirements, and recommended pass/fail criteria for each step. It also provides a sample implementation of this process through a test case. Finally, it provides details of how a viable pre-event plan can be selected and activated at go-time when an event has occurred.
14 SOLAR ENERGY↗
Los Alamos National Laboratory Director's Strategic Resilience Initiative
The Director’s Strategic Resilience Initiative was created late in 2019 in recognition of the changing geo-political climate. The renewed strategic competition between Russia, China, and the United States, noted in the 2018 National Defense Strategy and the 2018 Nuclear Posture Review, put great power rivalry and competition at the forefront of national security considerations. At the same time, Russian President Vladimir Putin’s March 1, 2018, speech and China’s October 1, 2019, National Day Military Parade, underscored the nuclear dimensions of this new strategic competition. Accompanying this changed strategic environment are rapid advances in an expansive array of relevant technological sectors including affordable and comprehensive global communication and reconnaissance assets, autonomous vehicles, quantum computing, advanced manufacturing, and artificial intelligence.
99 GENERAL AND MISCELLANEOUS↗
Enhancing Site Screening for Underground Hydrogen Storage: Qualitative Site Quality Assessment - SHASTA: Subsurface Hydrogen Assessment, Storage, and Technology Acceleration Project
The global shift towards renewable energy sources to mitigate fossil fuel dependency and meet carbon emission targets by 2050 has underscored the importance of innovative solutions to address energy supply-demand imbalances. Underground Hydrogen Storage (UHS) has emerged as a promising strategy to store excess renewable energy in subsurface formations for future retrieval and utilization. This report focuses on enhancing the site screening process for UHS facilities. By drawing on insights from prior research to identify key criteria influencing site suitability, our objective is to present a comprehensive set of sixteen specific criteria essential for refining the selection of UHS sites. These criteria cover various aspects such as reservoir performance, legal access, regulatory compliance, economic viability, public acceptance, and safety and security considerations. Our proposed methodology allows users to evaluate potential sites using binary responses, transitioning from isolated factors to broader considerations that facilitate a qualitative assessment of site suitability. This method enables comparative analysis and informed decision-making, supporting stakeholders in the site selection process. Our approach is designed as a guiding framework rather than a rigid template for site screening, emphasizing the importance of customizing approaches to individual circumstances. As UHS site development project evolves, adopting a comprehensive selection methodology that integrates holistic evaluations will be essential for ensuring efficient and effective site screening processes tailored to specific project needs.
08 HYDROGEN↗
Enhancing Site Screening for Underground Hydrogen Storage: Qualitative Site Quality Assessment - SHASTA: Subsurface Hydrogen Assessment, Storage, and Technology Acceleration Project
The global shift towards renewable energy sources to mitigate fossil fuel dependency and meet carbon emission targets by 2050 has underscored the importance of innovative solutions to address energy supply-demand imbalances. Underground Hydrogen Storage (UHS) has emerged as a promising strategy to store excess renewable energy in subsurface formations for future retrieval and utilization. This report focuses on enhancing the site screening process for UHS facilities. By drawing on insights from prior research to identify key criteria influencing site suitability, our objective is to present a comprehensive set of sixteen specific criteria essential for refining the selection of UHS sites. These criteria cover various aspects such as reservoir performance, legal access, regulatory compliance, economic viability, public acceptance, and safety and security considerations. Our proposed methodology allows users to evaluate potential sites using binary responses, transitioning from isolated factors to broader considerations that facilitate a qualitative assessment of site suitability. This method enables comparative analysis and informed decision-making, supporting stakeholders in the site selection process. Our approach is designed as a guiding framework rather than a rigid template for site screening, emphasizing the importance of customizing approaches to individual circumstances. As UHS site development project evolves, adopting a comprehensive selection methodology that integrates holistic evaluations will be essential for ensuring efficient and effective site screening processes tailored to specific project needs.
08 HYDROGEN↗
Feasibility study of an Integrated Program for Aerospace vehicle Design (IPAD). Volume 4: IPAD system design
The computing system design of IPAD is described and the requirements which form the basis for the system design are discussed. The system is presented in terms of a functional design description and technical design specifications. The functional design specifications give the detailed description of the system design using top-down structured programming methodology. Human behavioral characteristics, which specify the system design at the user interface, security considerations, and standards for system design, implementation, and maintenance are also part of the technical design specifications. Detailed specifications of the two most common computing system types in use by the major aerospace companies which could support the IPAD system design are presented. The report of a study to investigate migration of IPAD software between the two candidate 3rd generation host computing systems and from these systems to a 4th generation system is included.
Goldfarb, W.↗
Operation of a single-channel, sequential Navstar GPS receiver in a helicopter mission environment
It is pointed out that the future utilization of the Navstar Global Positioning System (GPS) by civil helicopters will provide an enhanced performance not obtainable with current navigations systems. GPS will supply properly equipped users with extremely accurate three-dimensional position and velocity information anywhere in the world. Preliminary studies have been conducted to investigate differential GPS concept mechanizations and cost, and to theoretically predict navigation performance and the impact of degradation of the GPS C/A code for national security considerations. The obtained results are encouraging, but certain improvements are needed. As a second step in the program, a single-channel sequential GPS navigator was installed and operated in the NASA SH-3G helicopter. A series of flight tests were conducted. It is found that performance of the Navstar GPS Z-set is quite acceptable to support area navigation and nonprecision approach operations.
Edwards, F. G.↗