SEARCH · Search NASA

Results for “Command and Control”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

SourceResearch connectionFrom yearThrough year

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 415 records · Page 23

All sources NASA NTRS DOE OSTI

DOE OSTI2023

Large Angle Deviation in Grid-Following IBRs Upon Grid Voltage Dip

In the 2021 Texas Odessa large-scale solar PV tripping events, phase-locked-loop (PLL) loss of synchronism is identified as a major cause of solar PV tripping. When solar PVs detected a large phase angle deviation (e.g., 10 degrees), tripping commands were initiated. Here, the large phase angle deviation was triggered by a transmission line fault 200 miles away, which in turn led to approximately 30% voltage drop in the 345-kV system. This paper offers a plausible reason why grid-following inverter-based resources (IBRs) may experience a large angle deviation upon grid voltage dip. Critical operating conditions contributing to such phenomena are identified via analysis and their effects are demonstrated using electromagnetic transient (EMT) simulation. Furthermore, the effect of converter control, e.g., grid-following control vs. grid-forming control, is examined. It is found from EMT simulation results that frequency and voltage control are helpful in mitigating angle deviation. Furthermore, linear block diagrams are derived to examine why frequency control can effectively suppress large angle deviation.

14 SOLAR ENERGY↗

DOE OSTI2019

Frequency Support Enhancement of a Permanent Magnet-Based Adjustable-Speed Pumped Hydropower Plant

When a permanent magnet (PM) -based adjustable-speed pumped storage hydropower (AS-PSH) plant delivers frequency response via the full-scaled power converter, there is power imbalance at the PM generator during the initial stage of the frequency response. This is because the AS-PSH has the different time constants between the power converter and wicket gate in the governor valve. Thus, this imbalance causes a sudden reduction of the rotational speed of the machine during the frequency response. As a result, a voltage deficit arises at the generator terminal in proportion to the decrement in the rotational speed, and thereby it is promising that the current flow at the converter will reach its limit when attempting to inject the commanded active power at a reduced voltage level. Thus, this causes the degradation of the frequency response of the AS-PSH due to the self-demagnetization at a reduced rotational speed. This paper proposes a frequency support scheme of a PM-based AS-PSH to enhance the frequency response by bridging the gap between the different time constants. To achieve this, the frequency support scheme includes a gate opening adjustment in the governor and a dynamic ramp-down in converter controller of the AS-PSH.

13 HYDRO ENERGY↗

DOE OSTI2016

acdc – Automated Contamination Detection and Confidence estimation for single-cell genome data

Abstract Background A major obstacle in single-cell sequencing is sample contamination with foreign DNA. To guarantee clean genome assemblies and to prevent the introduction of contamination into public databases, considerable quality control efforts are put into post-sequencing analysis. Contamination screening generally relies on reference-based methods such as database alignment or marker gene search, which limits the set of detectable contaminants to organisms with closely related reference species. As genomic coverage in the tree of life is highly fragmented, there is an urgent need for a reference-free methodology for contaminant identification in sequence data. Results We present acdc, a tool specifically developed to aid the quality control process of genomic sequence data. By combining supervised and unsupervised methods, it reliably detects both known and de novo contaminants. First, 16S rRNA gene prediction and the inclusion of ultrafast exact alignment techniques allow sequence classification using existing knowledge from databases. Second, reference-free inspection is enabled by the use of state-of-the-art machine learning techniques that include fast, non-linear dimensionality reduction of oligonucleotide signatures and subsequent clustering algorithms that automatically estimate the number of clusters. The latter also enables the removal of any contaminant, yielding a clean sample. Furthermore, given the data complexity and the ill-posedness of clustering, acdc employs bootstrapping techniques to provide statistically profound confidence values. Tested on a large number of samples from diverse sequencing projects, our software is able to quickly and accurately identify contamination. Results are displayed in an interactive user interface. Acdc can be run from the web as well as a dedicated command line application, which allows easy integration into large sequencing project analysis workflows. Conclusions Acdc can reliably detect contamination in single-cell genome data. In addition to database-driven detection, it complements existing tools by its unsupervised techniques, which allow for the detection of de novo contaminants. Our contribution has the potential to drastically reduce the amount of resources put into these processes, particularly in the context of limited availability of reference species. As single-cell genome data continues to grow rapidly, acdc adds to the toolkit of crucial quality assurance tools.

59 BASIC BIOLOGICAL SCIENCES↗

DOE OSTI2013

Method for controlling powertrain pumps

A method of controlling a pump supplying a fluid to a transmission includes sensing a requested power and an excess power for a powertrain. The requested power substantially meets the needs of the powertrain, while the excess power is not part of the requested power. The method includes sensing a triggering condition in response to the ability to convert the excess power into heat in the transmission, and determining that an operating temperature of the transmission is below a maximum. The method also includes determining a calibrated baseline and a dissipation command for the pump. The calibrated baseline command is configured to supply the fluid based upon the requested power, and the dissipation command is configured to supply additional fluid and consume the excess power with the pump. The method operates the pump at a combined command, which is equal to the calibrated baseline command plus the dissipation command.

42 ENGINEERING↗

DOE OSTI2020

Coordinated net-load management

A management device includes at least one processor communicatively coupled to at least one energy resource controller controlling at least one energy resource and to at least one deferrable load controller controlling power to at least one deferrable load. The is configured to receive an indication, determined based on a frequency value of an electrical network and a nominal frequency value, that a frequency anomaly event has occurred. Responsive to receiving the indication that the frequency anomaly event has occurred, the processor is also configured to determine, for at least one of the energy resource and the deferrable load, based on the frequency value, the nominal frequency value, and a power value of the electrical network, a respective power command, and cause at least one of the at least one energy resource and the at least one deferrable load to modify operation based on the respective power command.

42 ENGINEERING↗

DOE OSTI2022

Coordinated net-load management

Lundstrom, Blake Richard↗

DOE OSTI2025

Optimized V1G and V2G Electric Vehicle Fleet Management and Grid Transaction at Marine Corps Air Station Miramar in San Diego, CA

The overall technical goal of the project was to demonstrate an all-electric bi-directional non-tactical fleet at Marine Corps Air Station (MCAS) Miramar that was integrated and controlled with other distributed energy resources (DERs) (i.e., PV, stationary battery, and building loads) to provide resilience to critical electric loads in the event of grid outages, to minimize charging costs, and to provide economic energy resources to electricity markets. In this project, the specific, technical objectives were: 1. Demonstrate that bi-directional electric vehicles can provide critical complementary services to fixed storage batteries in microgrid applications while performing function as non-tactical vehicles. 2. Demonstrate participation of bi-directional (V2G) and unidirectional (V1G) PEVs for demand management and minimization of charging costs. 3. Demonstrate integration of multiple DERs for grid service participation. US Marine Corps Air Station (MCAS) Miramar in San Diego was the site of this electric vehicle-to-microgrid-utility grid test and demonstration project. Existing microgrid assets in this study included (1) a public works building; (2) a 30-kW rooftop photovoltaic (PV) system and (3) a separate 250 kW carport PV system. In this project, six bi-directional V2G vans were located at the MCAS Miramar’s showcase building-scale microgrid to develop and test technical capabilities that V2G can provide in microgrid applications (e.g., cost reduction and resiliency). These resources provided aggregated demand management and simulated participation in current retail DR programs. The vehicles used in this demonstration were selected because they provided functionality that MCAS Miramar needed, 15 passenger transport and facilities work cargo carrying capacity, and bi-directional charging capability that the research project required. All vehicles in this study were manufactured and distributed by VIA Motors, Inc. There were six vehicles total and each was VIA’s VTRUX eREV V2G model, a modified General Motors Chevrolet 2500 2WD van. Three of the vans were configured as passenger vans and the other three were configured as cargo vans. Each van had an on-board bi-direcrtional inverter/charger, Bel Power Solutions model 350INVCHGT150-120-240-8G nominally rated at +/-15 kW. The VIA van’s charging connector follows the J1772 charging protocol. The bi-directional EVSEs demonstrated in this study were manufactured by Coritech, Inc. Each VGI-80-AC charging station enabled enhanced V2G charging capability to a Clipper Creek CS-100 charging module. The enhanced capabilities included ethernet communication following the SEP2.0 protocol with a distributed energy resource function set and an operator screen displaying real-time SOC, voltage, and current. The VGI-80-AC charging stations are classified as level 2 with a maximum current output of 80 A or effectively 19 kW. The VIA van’s onboard charger limited the charging and discharging power to 15 kW in each direction. A control computer was installed in the EWOC and connected to an existing monitor. The V2G control communication network was a completely stand-alone closed system that did not have any connection to any other networks on the base. A cybersecure remote communication connection was created with a cellular modem, firewall hardware, and a virtual private network configuration.

24 POWER TRANSMISSION AND DISTRIBUTION↗

DOE OSTI2015

Effect of Premixed Fuel Preparation for Partially Premixed Combustion with a Low Octane Gasoline on a Light-Duty Multi-Cylinder Compression Ignition Engine

Gasoline compression ignition concepts with the majority of the fuel being introduced early in the cycle are known as partially premixed combustion (PPC). Previous research on single- and multi-cylinder engines has shown that PPC has the potential for high thermal efficiency with low NOx and soot emissions. A variety of fuel injection strategies has been proposed in the literature. These injection strategies aim to create a partially stratified charge to simultaneously reduce NOx and soot emissions while maintaining some level of control over the combustion process through the fuel delivery system. The impact of the direct injection strategy to create a premixed charge of fuel and air has not previously been explored, and its impact on engine efficiency and emissions is not well understood. This paper explores the effect of sweeping the direct injected pilot timing from -91° to -324° ATDC, which is just after the exhaust valve closes for the engine used in this study. During the sweep, the pilot injection consistently contained 65% of the total fuel (based on command duration ratio), and the main injection timing was adjusted slightly to maintain combustion phasing near top dead center. A modern four cylinder, 1.9 L diesel engine with a variable geometry turbocharger, high pressure common rail injection system, wide included angle injectors, and variable swirl actuation was used in this study. The pistons were modified to an open bowl configuration suitable for highly premixed combustion modes. The stock diesel injection system was unmodified, and the gasoline fuel was doped with a lubricity additive to protect the high pressure fuel pump and the injectors. The study was conducted at a fixed speed/load condition of 2000 rpm and 4.0 bar brake mean effective pressure (BMEP). The pilot injection timing sweep was conducted at different intake manifold pressures, swirl levels, and fuel injection GTP-15-1067, Dempsey 2 pressures. The gasoline used in this study has relatively high fuel reactivity with a research octane number of 68. The results of this experimental campaign indicate that the highest brake thermal efficiency and lowest emissions are achieved simultaneously with the earliest pilot injection timings (i.e., during the intake stroke).

33 ADVANCED PROPULSION SYSTEMS↗

DOE OSTI2020

Approximating Trajectory Constraints With Machine Learning – Microgrid Islanding With Frequency Constraints

Here, we introduce deep earning aided constraint encoding to tackle the frequency-constraint microgrid scheduling problem. The nonlinear function between system operating condition and frequency nadir is approximated by using a neural network, which admits an exact mixed-integer formulation (MIP). This formulation is then integrated with the scheduling problem to encode the frequency constraint. With the stronger representation power of the neural network, the resulting commands can ensure adequate frequency response in a realistic setting in addition to islanding success. The proposed method is validated on a modified 33-node system. Successful islanding with a secure response is simulated under the scheduled commands using a detailed three-phase model in Simulink. The advantages of our model are particularly remarkable when the inertia emulation functions from wind turbine generators are considered.

24 POWER TRANSMISSION AND DISTRIBUTION↗

DOE OSTI2023

Development of a High-Pressure Fuel Injection System for Use with Propane-DME

Paper details the design approach and performance of a high-pressure common rail fuel injection system used with Propane-DME mixtures targeting high injection pressures on a light duty 2.2L inline-4 compression ignition engine. The study estimates the bulk modulus of elasticity based on the hardware geometry and operating pressures to assess the compressibility of Propane and DME across a range of pressures typical of the LD engine application. The compressibility factor ranges from 500 to 3000 bar, significantly lower than the theoretical values for the conditions tested. The high-pressure pump performance is optimized via the implementation of an inlet metering valve operated on a crank-angle open/close sequence to control pressure at the common rail. The application of a model-based controller and the use of high-speed sampling of rail pressure indicate that pressure at the rail can be attained with the pump metering valve, and without use of the pressure relieve valve present in the rail. Results show a significant reduction on pumping work parasitics and of fuel heating, on the order of 40°C, at typical working conditions with the proposed approach. Injector rates of injection with Propane-DME are very similar to those of Diesel. Paper compares bench data of rates of injection versus simulation predictions across operating pressures of 200 to 1000bar and from injection commands spanning 0.20 to 2.0ms. Furthermore, the accuracy of the model predictions are attributed in part by to the updated fuel compressibility modulus descriptions attained during the testing.

42 ENGINEERING↗

DOE OSTI2024

Emulation and detection of physical faults and cyber-attacks on building energy systems through real-time hardware-in-the-loop experiments

The increasing use of remote or mobile access, integrated wearable technologies, data exchange, and cloud-based data analytics in modern smart buildings is steering the building industry towards open communication technologies. The increased connectivity and accessibility could lead to more cyber-attacks in smart buildings. On the other hand, physical faults (e.g., HVAC -heating, ventilation, and air-conditioning faults) may have similar adverse impacts as those from the cyber-attacks on building energy systems, such as occupant discomfort, energy wastage, and equipment downtime. However, current physical behavior-based anomaly detection methods fail to differentiate between cyber-attacks and physical faults in building energy systems. Moreover, the challenge in collecting real-world threat data with ground truth has led researchers to rely on numerical models with user-defined assumptions, which may not accurately reflect real-world conditions due to the lack of in-situ experimental datasets. To address these challenges and gaps, this paper presents a flexible hardware-in-the-loop (HIL) testbed for generating cyber-attack and physical fault datasets and demonstrating threat detection algorithms in a real building automation system (BAS) environment. This testbed combines hardware (i.e., real BAS with local HVAC controllers and a physical network) with software (i.e., high-fidelity models to represent behaviors of building envelope and HVAC energy systems), enabling emulations of realistic threats. Five HIL experiments, including one baseline without any threats, two with physical faults, and two with cyber-attacks, were conducted to generate datasets containing detailed network traffic and system states. A joint classification framework, incorporating a network analyzer and a physical HVAC fault detector, was proposed to automatically detect cyber-physical abnormalities on BAS at both the network and the physical HVAC levels. The network analyzer comprises a conditional random fields (CRF) based command validator and a statistics-based detection strategy. The fault detector employs a weather and schedule-based pattern matching and feature-based principal component analysis (WPM-FPCA) method. Evaluation of the classification using four metrics from the multi-class confusion matrix revealed an average accuracy of 90.2%, recall of 89.7%, precision of 88.5% and F1-score of 89.2%. Finally, these results demonstrate that the proposed joint classification framework can effectively differentiate between specific types of cyber-attacks (e.g., device reinitialization attack, network Denial-of-Service attack) and physical faults (e.g., air handling unit operational fault, cooling coil valve stuck) in real time for improved building energy management.

32 ENERGY CONSERVATION, CONSUMPTION, AND UTILIZATI↗

DOE OSTI2023

EyeON

EyeON: Eye on Operational technology Software Supply Chain attacks have risen drastically over the past few years, none more well-known and impactful than the SolarWinds compromise. Criminal organizations inserted an attack vector into a specific version of the source code, giving themselves an air of credibility. Once news broke on SolarWinds, identifying compromised sites was very difficult, even knowing the culprit update. Software Bills of Materials (SBOM) have been touted as the solution to reclaiming control of your software supply chain. Deployment of SBOMs has been slow, however, due to conflicting standards, opaque storage requirements, and vendor adoption. Additionally, the path from obtaining an SBOM and securing your supply chain is unclear; how can an SBOM library be leveraged to provide insight to your attack surface? The EyeON tool, sponsored by Department of Energy Cybersecurity, Energy Security, and Emergency Response (DoE CESER), aims to address these gaps by providing an encapsulated solution to tracking which updates have been installed in an enterprise, and alerting system administrators to vulnerabilities as they become known. Similar to a virus scanner, EyeON is a command line tool to parse either a single file, nested directory structure, or filesystem. It collects data such as signature (hashes), version information, VirusTotal tags, compiler, compilation date, and code signing information. Users will anonymously submit scan data periodically to DoE CESER, who will then compile a database of known software products employed by Critical Infrastructure and broadcast alerts based on discovered flaws as they arise.

Tenzing, Wangmo↗

DOE OSTI2026

Automated tape-target centering based on template matching for construction measurement tasks using robotic total station

Robotic total stations have transformed surveying and construction mapping through precise, efficient, and automated measurements. These instruments integrate a theodolite, which measures horizontal and vertical angles, with an electronic distance measurement (EDM) unit to determine distances, allowing accurate 3D measurement of observable points. Traditionally, users manually aimed the total station at a target. Recent advancements in robotic motor control and integration of cameras now enable automatic rotation and aiming, typically requiring only a single operator to position the target. Automated aiming is commonly performed using retroreflector prisms, which reflect light back to the source with minimal scattering, enabling high-precision measurements over long distances. However, retroreflectors, especially those designed for 360 degree, can be expensive and impractical for certain applications. This paper presents an algorithm for automating the center detection of low-cost disposable tape targets using the total station's onboard camera and a template matching algorithm. The algorithm identifies the target's center pixel in the image, and the instrument is commanded to aim at that location. We evaluated the performance of this template-matching-based centering method under various distances, angles, lighting conditions, and field environments, comparing its results to both manual aiming and conventional automated aiming of tape targets. Manual aiming was used as the baseline operational reference in the absence of an independent ground-truth measurement. The proposed approach achieves target centering results comparable to the manual baseline. This method provides a cost-effective alternative for high-precision applications where retroreflector targets are constrained by budget or logistics.

Harrington, Joshua [ORNL]↗

DOE OSTI2014

New Software Architecture Options for the TCL Data Acquisition System

The Turbulent Combustion Laboratory (TCL) conducts research on combustion in turbulent flow environments. To conduct this research, the TCL utilizes several pulse lasers, a traversable wind tunnel, flow controllers, scientific grade CCD cameras, and numerous other components. Responsible for managing these different data-acquiring instruments and data processing components is the Data Acquisition (DAQ) software. However, the current system is constrained to running through VXI hardware—an instrument-computer interface—that is several years old, requiring the use of an outdated version of the visual programming language, LabVIEW. A new Acquisition System is being programmed which will borrow heavily from either a programming model known as the Current Value Table (CVT) System or another model known as the Server-Client System. The CVT System model is in essence, a giant spread sheet from which data or commands may be retrieved or written to, and the Server-Client System is based on network connections between a server and a client, very much like the Server-Client model of the Internet. Currently, the bare elements of a CVT DAQ Software have been implemented, consisting of client programs in addition to a server program that the CVT will run on. This system is being rigorously tested to evaluate the merits of pursuing the CVT System model and to uncover any potential flaws which may result in further implementation. If the CVT System is chosen, which is likely, then future work will consist of build up the system until enough client programs have been created to run the individual components of the lab. The advantages of such a System will be flexibility, portability, and polymorphism. Additionally, the new DAQ software will allow the Lab to replace the VXI with a newer instrument interface—the PXI—and take advantage of the capabilities of current and future versions of LabVIEW.

97 MATHEMATICS AND COMPUTING↗

DOE OSTI2018

VeraRun

VeraRun provides users a command-line utility that determines the sequence of VERA codes and utilities to be executed, calculates and determines PBS directives and job parameters, creates a job script, and submits the script on behalf of the user. While hiding all the details, the script allows the user to set PBS parameters explicitly. VeraRun is implemented as a Python package with host-specific configurations and job script templates. Host configurations are stored in JavaScript Object Notation (JSON) files and specify machine characteristics (e.g., number of nodes, number of processors per node, memory available per node, location of VERA installations). Job templates are Bash scripts with parameters substituting for host-specific PBS directives and controls. These files are named by the hostname, thus making VeraRun extensible to other systems and environments. VeraRun reads the VERA input file to determine code and execution environment requirements, creating and optionally submitting a job script.

Lee, Ronaldw↗

DOE OSTI2017

Coupling LaGrit unstructured mesh generation and model setup with TOUGH2 flow and transport: A case study

Furthermore, there are many applications in science and engineering modeling where an accurate representation of a complex model geometry in the form of a mesh is important. In applications of flow and transport in subsurface porous media, this is manifest in models that must capture complex geologic stratigraphy, structure (faults, folds, erosion, deposition) and infrastructure (tunnels, boreholes, excavations). Model setup, defined as the activities of geometry definition, mesh generation (creation, optimization, modification, refine, de-refine, smooth), assigning material properties, initial conditions and boundary conditions requires specialized software tools to automate and streamline the process. In addition, some model setup tools will provide more utility if they are designed to interface with and meet the needs of a particular flow and transport software suite. A control volume discretization that uses a two point flux approximation is for example most accurate when the underlying control volumes are 2D or 3D Voronoi tessellations. In this paper we will present the coupling of LaGriT, a mesh generation and model setup software suite and TOUGH2 to model subsurface flow problems and we show an example of how LaGriT can be used as a model setup tool for the generation of a Voronoi mesh for the simulation program TOUGH2. To generate the MESH file for TOUGH2 from the LaGriT output a standalone module Lagrit2Tough2 was developed, which is presented here and will be included in a future release of LaGriT. Here in this paper an alternative method to generate a Voronoi mesh for TOUGH2 with LaGriT is presented and thanks to the modular and command based structure of LaGriT this method is well suited to generating a mesh for complex models.

58 GEOSCIENCES↗

DOE OSTI2025

Microreactor Optimization Using Simulation And Economics (mouse)

Microreactor Optimization Using Simulation and Economics (MOUSE) is a tool that integrates both nuclear microreactor design and reactor economics to provide comprehensive evaluations and optimizations. This tool enables stakeholders to explore the interplay between technical and economic variables, guiding them towards effective and competitive microreactor solutions. For the reactor core simulations, MOUSE leverages the OpenMC Monte Carlo Particle Transport Code to perform detailed core simulations for various microreactor designs. The included OpenMC models are 2D core designs of a Liquid Metal Thermal Microreactor (LMTR), a Gas-Cooled TRISO-Fueled Microreactor (GCMR), and a Heat Pipe Microreactor. Beyond core design, MOUSE includes simplified calculations for: - Calculating the masses of heat exchangers within the system. - Mechanical power of pumps. - Estimating the area occupied by various buildings within the nuclear plant. For the economic analysis, MOUSE provides detailed bottom-up cost estimates, encompassing a wide range of costs including preconstruction costs, direct costs, indirect costs, training costs, financial costs, operation & maintenance (O&M) costs, and fuel costs. These cost estimations are developed using data from the MARVEL project and additional literature sources, enabling the calculation of total capital costs and levelized cost of energy for both first-of-a-kind and nth-of-a-kind microreactors. MOUSE also enables analysis of the cost drivers and competitiveness in the electricity market. MOUSE allows users to modify a wide array of technical and economic parameters to evaluate different scenarios and their impacts. Examples of these parameters include: Fuels, coolants, or reflector materials Enrichment levels Control drum materials and geometry Fuel pin geometry and materials Moderator pin geometry and materials Reactor core and reflector dimensions Packing factor for the TRISO particles Nuclear reactor power and reactor burnup Number of sensors Shielding thickness Reactor vessel and guard vessel dimensions Operational staff requirements Number of emergency shutdowns Levelization period Interest rate Construction duration Since MOUSE is powered by the WATTS toolkit, it supports optimization studies, parametric analyses, and uncertainty calculations/propagation. The optimization techniques enable users to identify optimal design and economic configurations. The parametric analysis tools allow users to explore the sensitivity of various parameters, while uncertainty propagation helps quantify the impact of uncertainties on overall performance and cost. User Interface and Workflow: Currently, MOUSE is a command-line-based tool. Users can input various reactor design or economic parameters, modify the designs, run simulations, and visualize results through comprehensive data visualization and reporting capabilities. The typical workflow involves setting up the reactor model, defining economic parameters, running simulations, and analyzing the results to make informed decisions. By combining advanced design calculations with detailed economic modeling, MOUSE provides a robust framework for optimizing nuclear microreactor technologies, enhancing their competitiveness, and guiding stakeholders towards innovative and cost-effective solutions.

Hanna, Botros [Idaho National Laboratory (INL), Id↗

DOE OSTI2020

Evaluating software defined networking solutions to reduce the digital attack surface of nuclear security systems

Most nuclear security systems used today were not designed for today’s threat environment. Systems that were intended to be stand alone are now interconnected. Devices that have a single purpose are built on multi-purpose platforms and communication protocols that, while effective, have no ability to authenticate authorized versus unauthorized commands. These attributes provide an attacker significant ability to affect the system, pivot throughout the interconnected networks, and remain undetected if he/she is able to compromise a single node. Software defined networking (SDN) has been used for years by information technology (IT) cloud service providers to quickly provision or remove servers or other systems to meet changing demand. The same concept has recently been applied to operational technology (OT) systems to enable very fast failover on critical systems that have stringent and deterministic (<5ms) transmit/receive times. By carefully engineering the communication flows through a network using preplanned routes and specific pathways it is possible to achieve deterministic and extremely reliable message delivery even when components fail. This engineering approach to network design has added security benefits including securing the networking control plane, eliminating network scanning and mapping, inhibiting ARP spoofing and host masquerading, eliminating unauthorized network pivoting and enabling greater situational awareness on the network. SDN in OT environments is new but early testing in electrical power and other critical infrastructure has shown it to be a very powerful tool for building reliable networks and reducing the digital attack surface of the network. The authors tested a software defined network switch on a simple physical protection system with components commonly found in nuclear security systems and found improved mitigations to denial of service attacks, lateral movement and network reconnaissance. The paper details the tests and their results.

Cyber security, Nuclear security, software defined↗