Search NASA⌕ Search

SEARCH · Search NASA

Results for “operating systems security”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 397 records · Page 22
All sourcesNASA NTRSDOE OSTI
DOE OSTI2017

An Artificially Intelligent Physical Model-Checking Approach to Detect Switching-Related Attacks on Power Systems

Decentralized and hierarchical microgrid control strategies have lain the groundwork for shaping the future smart grid. Such control approaches require the cooperation between microgrid operators in control centers, intelligent microcontrollers, and remote terminal units via secure and reliable communication networks. In order to enhance the security and complement the work of network intrusion detection systems, this paper presents an artificially intelligent physical model-checking that detects tampered-with circuit breaker switching control commands whether, due to a cyber-attack or human error. In this technique, distributed agents, which are monitoring sectionalized areas of a given microgrid, will be trained and continuously adapted to verify that incoming control commands do not violate the physical system operational standards and do not put the microgrid in an insecure state. The potential of this approach has been tested by deploying agents that monitor circuit breakers status commands on a 14-bus IEEE benchmark system. The results showed the accuracy of the proposed framework in characterizing the power system and successfully detecting malicious and/or erroneous control commands.

32 ENERGY CONSERVATION, CONSUMPTION, AND UTILIZATI↗
DOE OSTI2025

Tactical Analysis for Calculating Contextual Risk at Boundaries: Summary of Laboratory Directed Research & Development Effort

The Tactical Analysis for Calculating Contextual Risk at Boundaries (TACCRAB) tool is an innovative digital twin (DT) platform and automated risk algorithm designed to transform operational decision-making in structured screening environments, with an initial focus on Southern Border Land Ports of Entry (POEs). The invention provides integration points for advanced artificial intelligence, predictive modeling, and real-time data analysis to produce a comprehensive risk management tool that enables proactive, data-informed security strategies. The core inventive features of TACCRAB center on its unique risk algorithm, which dynamically calculates contextual risk by synthesizing historical data, near real-time streaming data from the checkpoints themselves, and AI-generated predictions. Unlike traditional risk assessment methods, TACCRAB utilizes a DT to provide comprehensive operational insights, allowing stakeholders to visualize, simulate, and optimize checkpoint configurations with unprecedented speed and contextual awareness. TACCRAB's key innovation lies in its ability to combine multiple complex inputs - including technology detection probabilities, resource availability, screening pathway characteristics, and threat actor behavioral patterns - into a unified risk calculation and update these inputs based on changing operational and environmental conditions. By leveraging a DT that continuously updates and learns from linked data, TACCRAB can suggest adaptive mitigation strategies that minimize risk while maintaining operational efficiency. Particularly novel is the platform's approach to decision support, which goes beyond static risk assessment. The DT provides dynamic metrics such as wait times, resource allocation effectiveness, and potential emerging threat scenarios, enabling users to view sophisticated, relevant what-if simulations and optimize checkpoint operations in near real-time. The system's architecture allows for generalized application across different screening environments, such as secure facilities, ports of entry, and soft targets, making it a versatile tool for security and operational management. The invention distinguishes itself through its comprehensive integration of predictive modeling, AI-driven pattern discovery, and user-friendly interface design. By combining these elements, TACCRAB transforms complex risk data into actionable insights, supporting decision-makers at various organizational levels - from booth agents making split-second screening decisions to checkpoint managers optimizing the day's resource allocation to strategic planners managing long-term investments.

45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗
DOE OSTI2020

Applied Risk Analysis for Guiding Homeland Security Policy

Risk analysis methods may be qualitative, semi-quantitative, or quantitative; adopt probabilistic and statistical theories; and implement concepts from core disciplines including operations research, reliability engineering, systems engineering, and applied mathematics. These methods continue to develop and evolve and have successfully been applied to address various homeland security mission challenges in recent years. The objective of this book is to: 1) highlight the role of risk analysis for informing homeland security policy decisions, and 2) describe case studies from academia, government, and industry that apply risk analysis methods for addressing challenges within each of the DHS missions.

national security, risk assessment, risk managemen↗
DOE OSTI2023

Handheld Raman Spectrometers: Assessment Report

In April 2022 the National Urban Security Technology Laboratory’s System Assessment and Validation for Emergency Responders program conducted an operational assessment of ten commercially available handheld Raman spectrometers. Additionally, prior to the operational assessment, the Pacific Northwest National Laboratory conducted laboratory testing of the devices, including scanning a number of samples in various containers. This report summarizes the results of the assessment.

46 INSTRUMENTATION RELATED TO NUCLEAR SCIENCE AND ↗
DOE OSTI2012

Design and Analysis of a Region-Wide Remotely Controllable Electrical Lock-Out System

Electric utilities have a main responsibility to protect the lives and safety of their workers when they are working on low-, medium-, and high-voltage power lines and distribution circuits. With the anticipated widespread deployment of smart grids, a secure and highly reliable means of maintaining isolation of customer-owned distributed generation (DG) from the affected distribution circuits during maintenance is necessary to provide a fully de-energized work area, ensure utility personnel safety, and prevent hazards that can lead to accidents such as accidental electrocution from unanticipated power sources. Some circuits are serviced while energized (live line work) while others are de-energized for maintenance. For servicing de-energized circuits and equipment, lock-out tag-out (LOTO) programs provide a verifiable procedure for ensuring that circuit breakers are locked in the off state and tagged to indicate that status to operational personnel so that the lines will be checked for voltage to verify they are de-energized. The de-energized area is isolated from any energized sources, which traditionally are the substations. This procedure works well when all power sources and their interconnections are known armed with this knowledge, utility personnel can determine the appropriate circuits to de-energize for isolating the target line or equipment. However, with customer-owned DG tied into the grid, the risk of inadvertently reenergizing a circuit increases because circuit connections may not be adequately documented and are not under the direct control of the local utility. Thus, the active device may not be properly de-energized or isolated from the work area. Further, a remote means of de-energizing and locking out energized devices provides an opportunity for greatly reduced safety risk to utility personnel compared to manual operations. In this paper, we present a remotely controllable LOTO system that allows individual workers to determine the configuration and status of electrical system circuits and permit them to lock out customer-owned DG devices for safety purposes using a highly secure and ultra-reliable radio signal. The system consists of: (1) individual personal lockout devices, (2) lockout communications and logic module at circuit breakers, which are located at all DG devices, and (3) a database and configuration control process located at the utility operations center. The lockout system is a close permissive, i.e., loss of control power or communications will cause the circuit breaker to open. Once the DG device is tripped open, a visual means will provide confirmation of a loss of voltage and current that verifies the disconnected status of the DG. Further the utility personnel will be able to place their own lock electronically on the system to ensure a lockout functionally. The proposed LOTO system provides enhanced worker safety and protection against unintended energized lines when DG is present. The main approaches and challenges encountered through designing the proposed region-wide LOTO system are discussed in this paper. These approaches include: (1) evaluating the reliability of the proposed approach under N-modular redundancy with voter/spares configurations and (2) conducting a system level risk assessment study using the failure modes and effects analysis (FMEA) technique to identify and rank failure modes by probability of occurrence, probability of detection, and severity of consequences. This ranking allows a cost benefits analysis to be conducted such that dollars and efforts will be applied to the failures that provide greatest incremental gains in system capability (resilience, survivability, security, reliability, availability, etc.) per dollar spent whether capital, operations, or investment. Several simulation scenarios and their results are presented to demonstrate the viability of these approaches.

29 ENERGY PLANNING, POLICY, AND ECONOMY↗
DOE OSTI2012

WINS. Market Simulation Tool for Facilitating Wind Energy Integration

Integrating 20% or more wind energy into the system and transmitting large sums of wind energy over long distances will require a decision making capability that can handle very large scale power systems with tens of thousands of buses and lines. There is a need to explore innovative analytical and implementation solutions for continuing reliable operations with the most economical integration of additional wind energy in power systems. A number of wind integration solution paths involve the adoption of new operating policies, dynamic scheduling of wind power across interties, pooling integration services, and adopting new transmission scheduling practices. Such practices can be examined by the decision tool developed by this project. This project developed a very efficient decision tool called Wind INtegration Simulator (WINS) and applied WINS to facilitate wind energy integration studies. WINS focused on augmenting the existing power utility capabilities to support collaborative planning, analysis, and wind integration project implementations. WINS also had the capability of simulating energy storage facilities so that feasibility studies of integrated wind energy system applications can be performed for systems with high wind energy penetrations. The development of WINS represents a major expansion of a very efficient decision tool called POwer Market Simulator (POMS), which was developed by IIT and has been used extensively for power system studies for decades. Specifically, WINS provides the following superiorities; (1) An integrated framework is included in WINS for the comprehensive modeling of DC transmission configurations, including mono-pole, bi-pole, tri-pole, back-to-back, and multi-terminal connection, as well as AC/DC converter models including current source converters (CSC) and voltage source converters (VSC); (2) An existing shortcoming of traditional decision tools for wind integration is the limited availability of user interface, i.e., decision results are often text-based demonstrations. WINS includes a powerful visualization tool and user interface capability for transmission analyses, planning, and assessment, which will be of great interest to power market participants, power system planners and operators, and state and federal regulatory entities; and (3) WINS can handle extended transmission models for wind integration studies. WINS models include limitations on transmission flow as well as bus voltage for analyzing power system states. The existing decision tools often consider transmission flow constraints (dc power flow) alone which could result in the over-utilization of existing resources when analyzing wind integration. WINS can be used to assist power market participants including transmission companies, independent system operators, power system operators in vertically integrated utilities, wind energy developers, and regulatory agencies to analyze economics, security, and reliability of various options for wind integration including transmission upgrades and the planning of new transmission facilities. WINS can also be used by industry for the offline training of reliability and operation personnel when analyzing wind integration uncertainties, identifying critical spots in power system operation, analyzing power system vulnerabilities, and providing credible decisions for examining operation and planning options for wind integration. Researches in this project on wind integration included (1) Development of WINS; (2) Transmission Congestion Analysis in the Eastern Interconnection; (3) Analysis of 2030 Large-Scale Wind Energy Integration in the Eastern Interconnection; (4) Large-scale Analysis of 2018 Wind Energy Integration in the Eastern U.S. Interconnection. The research resulted in 33 papers, 9 presentations, 9 PhD degrees, 4 MS degrees, and 7 awards. The education activities in this project on wind energy included (1) Wind Energy Training Facility Development; (2) Wind Energy Course Development.

17 WIND ENERGY↗
DOE OSTI2013

Reversible Bending Fatigue Test System for Investigating Vibration Integrity of Spent Nuclear Fuel during Transportation

Transportation packages for spent nuclear fuel (SNF) must meet safety requirements under normal and accident conditions as specified by federal regulations. During transportation, SNF experiences unique conditions and challenges to cladding integrity due to the vibrational and impact loading during road or rail shipment. Oak Ridge National Laboratory (ORNL) has been developing testing capabilities that can be used to improve the understanding of the impacts on SNF integrity due to vibration loading, especially for high burn-up SNF in normal transportation operation conditions. This information can be used to meet the nuclear industry and U.S. Nuclear Regulatory Commission needs in the area of safety and security of spent nuclear fuel storage and transport operations. The ORNL developed test system can perform reversible-bending fatigue testing to evaluate both the static and dynamic mechanical response of SNF rods under simulated loads. The testing apparatus is also designed to meet the challenges of hot-cell operation, including remote installation and detachment of the SNF test specimen, in-situ test specimen deformation measurement, and implementation of a driving system suitable for use in a hot cell. The system contains a U-frame set-up equipped with uniquely designed grip rigs, to protect SNF rod and to ensure valid test results, and use of 3 specially designed LVDTs to obtain the in-situ curvature measurement. A variety of surrogate test rods have been used to develop and calibrate the test system as well as in performing a series of systematic cyclic fatigue tests. The surrogate rods include stainless steel (SS) cladding, SS cladding with cast epoxy, and SS cladding with alumina pellets inserts simulating fuel pellets. Testing to date has shown that the interface bonding between the SS cladding and the alumina pellets has a significant impact on the bending response of the test rods as well as their fatigue strength. The failure behaviors observed from tested surrogate rods provides a fundamental understanding of the underlying failure mechanisms of the SNF surrogate rod under vibration which has not been achieved previously. The newly developed device is scheduled to be installed in the hot-cell in summer 2013 to test high burnup SNF.

high burn-up spent fuel↗
NASA NTRS2005

Flight Test Comparison Between Enhanced Vision (FLIR) and Synthetic Vision Systems

Limited visibility and reduced situational awareness have been cited as predominant causal factors for both Controlled Flight Into Terrain (CFIT) and runway incursion accidents. NASA s Synthetic Vision Systems (SVS) project is developing practical application technologies with the goal of eliminating low visibility conditions as a causal factor to civil aircraft accidents while replicating the operational benefits of clear day flight operations, regardless of the actual outside visibility condition. A major thrust of the SVS project involves the development/demonstration of affordable, certifiable display configurations that provide intuitive out-the-window terrain and obstacle information with advanced pathway guidance. A flight test evaluation was conducted in the summer of 2004 by NASA Langley Research Center under NASA s Aviation Safety and Security, Synthetic Vision System - Commercial and Business program. A Gulfstream G-V aircraft, modified and operated under NASA contract by the Gulfstream Aerospace Corporation, was flown over a 3-week period at the Reno/Tahoe International Airport and an additional 3-week period at the NASA Wallops Flight Facility to evaluate integrated Synthetic Vision System concepts. Flight testing was conducted to evaluate the performance, usability, and acceptance of an integrated synthetic vision concept which included advanced Synthetic Vision display concepts for a transport aircraft flight deck, a Runway Incursion Prevention System, an Enhanced Vision Systems (EVS), and real-time Database Integrity Monitoring Equipment. This paper focuses on comparing qualitative and subjective results between EVS and SVS display concepts.

Arthur, Jarvis J., III↗
DOE OSTI2025

Best Practices for Grid Communications

As the grid evolves, the communications architecture will need to evolve with it. That architecture affords a structured means by which the evolving complexities of the modern electric grid can be managed. This document provides best practices that can be implemented in the grid of today and evolve towards the grid and grid architecture of the future. The evolving grid and its control communications increasingly rely on commercial communications providers and a variety of technologies, from wireless (e.g., 5G, microwave, Wi-Fi) to wireline (fiber, copper) to radio communications (P25, other repeater-based systems), and all these communications systems rely on electric power. A reliable and resilient grid must account for this complex set of interdependencies in its planning activities, especially those involving restoration and recovery. The participation of all relevant parties in both planning and exercising of plans can prevent unexpected conditions that impede the reliable operation and recovery of the grid. Best practices for grid communications include using a Network Management System to document the operational state, define and monitor baselines, detect changes, and accelerate response to abnormalities. If transitioning from SONET to IP/packet-based systems, translating grid requirements into communications requirements for latency, bandwidth and throughput, IP packet delay variation, packet loss, and availability should inform and drive technology planning and selection as well as that communication system’s Quality of Service (QoS) policies and Service Level Agreements (SLAs). Secure and reliable timing is another key component of a reliable and resilient grid that can operate through adverse events. A trusted internal NTP configuration, an integrated and diverse timing delivery system, optimizing the timing architecture based on the transport technologies of the communications system, and using established standards can deliver the level of timing accuracy required by a range of time-sensitive power system applications.

24 POWER TRANSMISSION AND DISTRIBUTION↗
DOE OSTI2024

Utility-Scale Shared Energy Storage Deployment: Challenges, Research Gaps, and Opportunities

Although community energy storage (CES) and behind-the-meter (BTM) energy storage systems have been widely used to offer homeowners and communities a variety of localized benefits, their scalability and grid support functionalities are limited. On the other hand, utility-scale shared energy storage (USES) systems may offer a number of benefits for grid integration, scalability, and economic viability. When compared to BTM and CES alternatives, these large-scale systems provide more storage capacity, more efficient operations, and more economically viable options. The deployment of USES presents opportunities for optimizing grid performance, integrating renewable energy resources, and improving energy security at the community level. However, significant research gaps exist in optimizing the integration and operation of these systems, especially to allocate energy for consumer use, grid services, and enhancing energy resilience. This paper reviews the literature in this regard, focusing on the opportunities, research gaps, and challenges associated with USES deployment. Firstly, the paper provides an overview of USES systems and emphasizes their benefits. Secondly, the key challenges are identified, and research gaps associated with the operation and integration of these systems are highlighted. Lastly, some potential solutions and opportunities that can be adopted to facilitate the rapid deployment and management of USES are presented. Technological, economic, regulatory, and environmental aspects are also discussed in this paper, providing an overview of the current state and future prospects of this technology.

Gautam, Mukesh [BATTELLE (PACIFIC NW LAB)] (ORCID:↗
DOE OSTI2017

Roadmap for photovoltaic cyber security

Cyber-secure, resilient energy is paramount to the prosperity of the United States. As the experience and sophistication of cyber adversaries grow, so too must the US power system’s defenses, situational awareness, and response and recovery strategies. Traditionally, power systems were operated with dedicated communication channels to large generators and utility-owned assets but now there is greater reliance on photovoltaic (PV) systems to provide power generation. PV systems often communicate to utilities, aggregators, and other grid operators over the public internet so the power system attack surface has significantly expanded. At the same time, solar energy systems are equipped with a range of grid-support functions, that—if controlled or programmed improperly—present a risk of power system disturbances. This document is a five-year roadmap intended to chart a path for improving cyber security for communication-enabled PV systems with clear roles and responsibilities for government, standards development organizations, PV vendors, and grid operators.

24 POWER TRANSMISSION AND DISTRIBUTION↗
DOE OSTI2011

Assessment of Critical Events Corridors through Multivariate Cascading Outages Analysis

Massive blackouts of electrical power systems in North America over the past decade has focused increasing attention upon ways to identify and simulate network events that may potentially lead to widespread network collapse. This paper summarizes a method to simulate power-system vulnerability to cascading failures to a supplied set of initiating events synonymously termed as Extreme Events. The implemented simulation method is currently confined to simulating steady state power-system response to a set of extreme events. The outlined method of simulation is meant to augment and provide a new insight into bulk power transmission network planning that at present remains mainly confined to maintaining power system security for single and double component outages under a number of projected future network operating conditions. Although one of the aims of this paper is to demonstrate the feasibility of simulating network vulnerability to cascading outages, a more important goal has been to determine vulnerable parts of the network that may potentially be strengthened in practice so as to mitigate system susceptibility to cascading failures. This paper proposes to demonstrate a systematic approach to analyze extreme events and identify vulnerable system elements that may be contributing to cascading outages. The hypothesis of critical events corridors is proposed to represent repeating sequential outages that can occur in the system for multiple initiating events. The new concept helps to identify system reinforcements that planners could engineer in order to 'break' the critical events sequences and therefore lessen the likelihood of cascading outages. This hypothesis has been successfully validated with a California power system model.

24 POWER TRANSMISSION AND DISTRIBUTION↗
DOE OSTI2022

Cyber Attack Sequences Generation for Electric Power Grid

Security assessment of cyber-physical energy systems (CPESs) such as the electric power grid is a critical operation to maintain availability, reliability, and quality of service in the presence of persistent threats from malicious cyber actors. Existing security assessment approaches such as penetration testing and red teaming rely on subject matter expert experience and forensic cyber analysis of historical events to perform realistic, threat-informed assessments of CPES defense. CPESs have a large attack surface because of the heterogeneity and complexity of underlying topology, devices, measurements, and vulnerabilities. The aforementioned approaches lead to partial coverage of the attack surface with a large set of unknown but possible exploits. There is a need to automate the CPES attack surface discovery and contextualize it for relevant, highly probable, real-world attack scenarios. We propose a methodology and framework to facilitate the discovery of the CPES attack surface. We present a multilayer attack graph with ranked attack sequences to describe CPES failure scenarios. We present a work-in-progress framework that lists key components to automate the attack modeling and sequence generation. We demonstrate the published National Electric Sector Cybersecurity Organization Resource CPES failure scenario to highlight the trustworthiness of generated attack sequences.

Dutta, Ashutosh↗
NASA NTRS1983

Applications of fiber optics technology to the Space Station

Attention is given to the EM interference, data bandwidth requirement, zero gravity operation, data security, crew safety, and modular expansion considerations affecting the future design of fiber-optical systems for large manned orbiting stations. Emphasis is given to replacing current, solar cell array electric systems technology for onboard furnace operation, leading to the formulation of a concentrated solar energy (thermal IR) transport system that yields higher efficiency than photovoltaics, despite its lower weight, in conjunction with Brayton, Rankine or Stirling cycle engines. The optical characteristics of the optical fibers employed by this system are discussed.

Erwin, H. O.↗
DOE OSTI2025

IEEE PES GM Poster - Cyber-Informed Engineering Approach to Mitigating BESS Supply Chain Concerns

Battery energy storage systems (BESS) are increasingly important to meet the needs of grid resilience and reliability. BESS provide critical grid services, maintaining stability of the grid with increased variable conditions. However, there are significant geopolitical and security concerns regarding their operation in critical infrastructure, due to lack of a domestic supply chain and prevalence of foreign entity of concern (FEOC) components in BESS and associated inverter-based resources. The supply chain challenge is dually exacerbated by a lack of alternative suppliers who can meet the economic targets for energy delivery and a potentially adversarial supply chain. Solutions are needed to secure components, addressing mixed layers of risk and engineering controls. This paper presents a specific application of Cyber-Informed Engineering (CIE) principles for BESS and recommends an alternative strategy to blocking the supply chain, ensuring that grid modernization targets can be met despite lack of a validated or secure supply chain. This study focuses on the United State (U.S.) use case, but the process can be applied globally to address supply chain security challenges. CIE practices represent the next step in functional assurance and risk mitigation, ensuring optimal resource allocation and enhancing security measures to safeguard the future of energy in the U.S. and beyond.

25 - ENERGY STORAGE↗
DOE OSTI2011

Neutron Time Projection Chamber for Nuclear Security and Verification Applications

Detection of fast neutrons produced by fission is a powerful method for discovering, verifying the presence, or monitoring significant quantities of special nuclear material (SNM) at up to moderate distances. Fast neutrons are relatively rare in the natural background and can be very penetrating, even in situations when the energetic gamma-rays are well shielded. Fast neutrons point in the direction of their source and can thus be considered for use in imaging, a feature desirable for rapid, high-signal-to-noise detection of concealed SNM and for nuclear verification. We describe the development and performance of a prototype neutron time projection chamber (nTPC) and its use for directional neutron detection and high-resolution neutron imaging. The nTPC is based on {approx}0.025 m{sup 3} of a hydrogen-methane mixture and utilizes a readout system with low channel count and is optimized for low event rates. We experimentally demonstrate robust operation, reliable particle identification, event-by-event directional reconstruction over the entire 4{pi} solid angle, and insensitivity to gamma-rays. High-efficiency and high-resolution modes of operation based on single and double neutron scatters, respectively, have also been demonstrated.

46 INSTRUMENTATION RELATED TO NUCLEAR SCIENCE AND ↗
DOE OSTI2013

A Mathematical Framework for the Analysis of Cyber-Resilient Control Systems

The increasingly recognized vulnerability of industrial control systems to cyber-attacks has inspired a considerable amount of research into techniques for cyber-resilient control systems. The majority of this effort involves the application of well known information security (IT) techniques to control system networks. While these efforts are important to protect the control systems that operate critical infrastructure, they are never perfectly effective. Little research has focused on the design of closed-loop dynamics that are resilient to cyber-attack. The majority of control system protection measures are concerned with how to prevent unauthorized access and protect data integrity. We believe that the ability to analyze how an attacker can effect the closed loop dynamics of a control system configuration once they have access is just as important to the overall security of a control system. To begin to analyze this problem, consistent mathematical definitions of concepts within resilient control need to be established so that a mathematical analysis of the vulnerabilities and resiliencies of a particular control system design methodology and configuration can be made. In this paper, we propose rigorous definitions for state awareness, operational normalcy, and resiliency as they relate to control systems. We will also discuss some mathematical consequences that arise from the proposed definitions. The goal is to begin to develop a mathematical framework and testable conditions for resiliency that can be used to build a sound theoretical foundation for resilient control research.

Control Theory↗