Search NASA⌕ Search

SEARCH · Search NASA

Results for “Operations Security”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 451 records · Page 25

Need for research and training reactors for advanced reactor designs

Full text of publication follows. Research and training reactors have served a valuable role in helping train workforce for currently operating fleet of light water reactors. These research and training reactors have been used in reactor laboratory classes to familiarize the students with such vital concepts as approach to criticality, reactor period, neutron moderation, reactivity, flux distribution and leakage, etc. As the industry moves toward advanced non-light-water reactor designs, it is critical that research and training reactors be developed and deployed at university campuses to help train the new generation of nuclear and non-nuclear engineers who are likely to design, build, and operate these advanced reactors. Among the designs currently being pursued for nuclear power generation include molten salt, sodium cooled, and gas cooled designs, with options for various fuel forms. Thus, industry and DOE in collaboration with academic institutions should devise plans on how to familiarize the next generation of nuclear workforce with hands-on experience necessary for such designs. These research and training reactors will play a vital role in familiarizing the future workforce with hands-on experience with concepts associated with fast spectrum reactors, gas cooled reactors, and other features not associated with light water reactors. In addition to classical nuclear engineering concepts, these advanced research and training reactors can also be used for hands-on training as well as for research on features being considered in the design of GEN-IV reactors: cyber security for digital control room operations, hybrid energy system, hydrogen generation, district heating, autonomous control... (author)

21 SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLANTS↗

Building Nuclear-Specific Cybersecurity Expertise in Higher Education

The rapid digitalization of nuclear power plants (NPPs) and the deployment of advanced and small modular reactors (A/SMRs) have expanded the cybersecurity attack surface within the nuclear sector. This evolution introduces unique challenges beyond those faced in general information technology (IT), operational technology (OT) and industrial control system (ICS) security, due to nuclear power’s regulatory rigor, safety-critical nature, and operational needs. A pressing workforce gap persists; cybersecurity graduates typically lack nuclear-specific context and retraining them for industry readiness requires 12–18 months, creating a significant burden. This paper addresses this gap by defining the domains of knowledge that nuclear cybersecurity specialists must master, spanning cybersecurity, nuclear engineering, OT/ICS security, and regulatory governance. We propose a curricular framework integrating technical, regulatory, and applied learning components to accelerate workforce readiness. Our approach builds on existing findings that current curricula inadequately integrate nuclear engineering and cybersecurity, shifting the discourse from why specialization is needed to what knowledge must be taught. The recommendations have implications for workforce development and long-term resilience of the nuclear energy sector.

99 - GENERAL AND MISCELLANEOUS↗

Cyber Threat Assessment of Uplink and Commanding System for Mission Operation

Most of today's Mission Operations Systems (MOS) rely on Ground Data System (GDS) segment to mitigate cyber security risks. Unfortunately, IT security design is done separately from the design of GDS' mission operational capabilities. This incoherent practice leaves many security vulnerabilities in the system without any notice. This paper describes a new way to system engineering MOS, to include cyber threat risk assessments throughout the MOS development cycle, without this, it is impossible to design a dependable and reliable MOS to meet today's rapid changing cyber threat environment.

ground data↗

Formally Verified ZTA Requirements for OT/ICS Environments with Isabelle/HOL

The clean energy transformation includes the integration of distributed energy resources with the power grid, which has led to a substantial increase in the complexity of power grids infrastructure and the underlying operational technology environment. Power grids infrastructure represents an operational technology environment that has become a system of systems, integrating heterogeneous devices which are both software-and hardware-intensive; as a result, there are increasing demands to exploit advances in the commodity of software-hardware infrastructures to improve energy systems requirements such as cybersecurity and resilience. In such a setting, system requirements at different levels mix, which leads to vulnerabilities and undesirable outcomes. The use of formal methods to characterize and prove system requirements removes ambiguity, increases automation, and provides high levels of assurance and reliability. In this paper, we contribute a methodology and a framework for the system-level verification of zero trust architecture requirements in operational technology environments. We define a formal specification for the core functionalities of operational technology environments, the corresponding invariants, and security proofs. Of particular note is our modular approach for the formal verification of asynchronous interactions in operational technology environments. The formal specification and the proofs have been mechanized using the interactive theorem proving environment Isabelle/HOL.

formal methods↗

Formally Verified ZTA Requirements for OT/ICS Environments with Isabelle/HOL: Preprint

The clean energy transformation led to the integration of distributed energy resources on a top of the grid, and so a substantial increase in the complexity of power grids infrastructure and the underlying operational technology environment. Operational technology environments are becoming a system of systems, integrating heterogeneous devices which are software/hardware intensive, have ever increasing demands to exploit advances in commodity of software/hardware infrastructures, and this for good reasons - improving energy systems requirements such as cybersecurity and resilience. In such a setting, system requirements at different levels mix, thus undesirable outcomes will surely happen. The use of formal methods will remove ambiguity, increase automation and provide high levels of assurance and reliability. In this paper, we contribute a methodology and a framework for the system level verification of zero trust architecture requirements in operational technology environments. We define a formal specification for the core functionalities of operational technology environments, the corresponding invariants, and security proofs. Of particular note is our modular approach for the formal verification of asynchronous interactions in operational technology environments. The formal specification and the proofs have been mechanized using the interactive theorem proving environment Isabelle/HOL.

formal methods↗

Two-Arm-Manipulator Controller

Shoulder harness allows wearer to control simultaneously and independently two remote manipulator arms and end effectors. Each manipulator arm would have 7 degrees of freedom. Two arm mechanisms of controller moved by operator's arms and hands. Remote manipulator, located elsewhere, responds to operator's arm and hand movements. Adjustable shoulder straps, waist belt, and leg straps hold harness securely on wearer. Mechanisms and harness allow operator to reach almost normally at control station.

Coryell, S.↗

Post-Shuttle EVA Operations on ISS

The EVA hardware used to assemble and maintain the ISS was designed with the assumption that it would be returned to Earth on the Space Shuttle for ground processing, refurbishment, or failure investigation (if necessary). With the retirement of the Space Shuttle, a new concept of operations was developed to enable EVA hardware (EMU, Airlock Systems, EVA tools, and associated support equipment and consumables) to perform ISS EVAs until 2016 and possibly beyond to 2020. Shortly after the decision to retire the Space Shuttle was announced, NASA and the One EVA contractor team jointly initiated the EVA 2010 Project. Challenges were addressed to extend the operating life and certification of EVA hardware, secure the capability to launch EVA hardware safely on alternate launch vehicles, and protect EMU hardware operability on orbit for long durations.

West, Bill↗

Securing Small Modular Reactors in Urban Environments

Current small modular reactor (SMR) deployment use cases consider both rural and urban deployments, depending on the operational in-country needs for clean and reliable sources of energy. Many studies have been conducted analyzing security in rural and remote deployment locations, but this study looks at the physical security implications of an SMR placed in an urban environment and its uses for electricity production, district heating, and process heating. SMRs used for electricity production, district heating, and process heating may be key sources of both energy infrastructure and commercial infrastructure within a city and a State. As a result, long-term shutdowns could have a serious impact on a State’s overall energy or commercial production. Therefore, operators may consider further security applications to protect an SMR plant from physical attacks against both radiological sabotage and sabotage acts that could result in the SMR facility being offline for a significant amount of time. In this study, the team designed and analyzed a physical protection system (PPS) for securing an urban SMR facility against acts of radiological sabotage and sabotage acts that could disrupt the facility’s long-term operation. Additionally, this work analyzed the nuanced security issues related to siting an SMR near an urban environment (versus in a rural environment). The result of these analyses includes recommendations for PPSs for urban SMR facilities used for energy production, district heating, and process heating.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

A High-Fidelity Cyber-Physical Testbed-Based Benchmarking Dataset For Testing Operational Technology Specific Intrusion Detection Systems

Quality datasets serve a critical purpose in cyber security research. Data is needed to understand system behavior and develop security controls to protect critical systems. However, for critical infrastructure operational environments there is a lack of available datasets to study because of the high cost and specialized capabilities necessary to generate them. This paper documents the development of a dataset of high fidelity hardware in the loop laboratory simulated models of electric and natural gas distribution systems with real cyber attack test cases. A deep dive discussion for the experimental setup and controls for generating the data is provided along with observations from using the data in evaluating intrusion detection approaches.

Ashok, Aditya↗

OSIRIS-REx Proximity Operations and Navigation Performanceat (101955) Bennu

The NASA Origins, Spectral Interpretation, Resource Identification, and Security–Regolith Explorer (OSIRIS-REx) spacecraft began close proximity operations at the small (500-m diameter) B-type asteroid (101955) Bennu in December 2018 and concluded in May 2021. Hundreds of grams of pristine surface regolith were collected on October 20, 2020, when the OSIRIS-REx spacecraft successfully executed the Touch and Go (TAG) sample collection sequence. The spacecraft touched down within 1 meter of the targeted site on the surface of Bennu. TAG was the culmination of over 2 years of navigation performance refinement as a result of extraordinary interagency teamwork between the Flight Dynamics System (FDS), science and spacecraft teams while in close proximity to Bennu. This paper will discuss the navigation processes, planning and performance during the proximity operations at Bennu.

Peter G. Antreasian↗

Smart Inverters, Dumb Risk: Taking Control of IBR Security in the Digital Age

This presentation addresses the security challenges posed by Inverter-Based Resources (IBRs) in the modern energy landscape. The presentation highlights the vulnerabilities and risks associated with IBRs, including the potential for cyber-attacks, the impact of insecure defaults, and the systemic risks posed by supply chain dependencies. Key topics covered include: 1) The increasing digital transformation in energy systems and the associated security risks. 2) Specific vulnerabilities in IBRs, including weak passwords, hardcoded credentials, and insecure web application interfaces. 3) The implications of persistent connectivity and the strategic risks posed by foreign-manufactured components. 4) The role of regulatory frameworks, such as NERC CIP, in addressing these challenges and the limitations of current oversight. 5) Practical solutions for mitigating risks, including secure design practices, vendor risk assessments, and the importance of strong passwords and role-based access control. The presentation underscores the necessity of a comprehensive, system-of-systems approach to securing IBRs, emphasizing the need for collaboration across various stakeholders, including operators, developers, and regulators, to ensure the resilience and security of the energy grid.

24 - POWER TRANSMISSION AND DISTRIBUTION↗

Corrective Action Management Unit Report of Post-Closure Care Activities Calendar Year 2019

The Corrective Action Management Unit (CAMU) at Sandia National Laboratories, New Mexico (SNL/NM) consists of a containment cell and ancillary systems that underwent closure in 2003 in accordance with the Closure Plan in Appendix D of the Class 3 Permit Modification (SNL/NM September 1997). The containment cell was closed with wastes in place. On January 27, 2015, the New Mexico Environment Department (NMED) issued the Hazardous Waste Facility Operating Permit (Permit) for Sandia National Laboratories (NMED January 2015) to the U.S. Department of Energy/National Nuclear Security Administration (DOE/NNSA) and its Management and Operating (M&O) contractor. The current M&O contractor is National Technology & Engineering Solutions of Sandia, LLC (NTESS). The Permit became effective February 26, 2015. The CAMU is undergoing post-closure care in accordance with the Permit, as revised and updated. This CAMU Report of Post-Closure Care Activities documents all activities and results for calendar year (CY) 2019, as required by the Permit.

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗

Corrective Action Management Unit Report of Post-Closure Care Activities. Calendar Year 2020

he Corrective Action Management Unit (CAMU) at Sandia National Laboratories, New Mexico (SNL/NM) consists of a containment cell and ancillary systems that underwent closure in 2003 in accordance with the Closure Plan in Appendix D of the Class 3 Permit Modification (SNL/NM September 1997). The containment cell was closed with wastes in place. On January 27, 2015, the New Mexico Environment Department issued the Hazardous Waste Facility Operating Permit (Permit) for Sandia National Laboratories (NMED January 2015) to the U.S. Department of Energy/National Nuclear Security Administration (DOE/NNSA) and its Management and Operating (M&O) contractor. The current M&O contractor is National Technology & Engineering Solutions of Sandia, LLC (NTESS). The Permit became effective February 26, 2015. The CAMU is undergoing post-closure care in accordance with the Permit, as revised and updated. This CAMU Report of Post-Closure Care Activities documents all activities and results for calendar year (CY) 2020, as required by the Permit.

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗

The In-time Aviation Safety Management System Concept for Part 135 Operators

Transformations of the National Airspace System, such as envisioned with Advanced Air Mobility, will enable improvements for managing and assuring safety for Part 135 transportation of passengers and cargo. The purpose of this paper is to describe the In-time Aviation Safety Management System (IASMS) Concept of Operations (ConOps) and how its innovations such as using predictive analytics could benefit operators for risk management and safety assurance. The National Academies recommended development of an IASMS ConOps to secure a safe future NAS. Part 135 operators are currently not required to have a formal safety management system.

Kyle K. Ellis↗

Innovation in Radiological Security, Part 2 of 2 – Insights into Developing a Cloud-hosted Security Technology

A Sentry Remote Monitoring System (Sentry-RMS) is a stand-alone security system that provides detection, assessment, and communication of priority alarms as an additional means of thwarting internal and external threats to sites that maintain radiological material. The SEntry-RMS CommUnications and REsponse (Sentry-SECURE) platform is an optional feature of the Sentry-RMS that relays priority alarm information to the identified response stakeholders. Sentry-SECURE is hosted in a cloud environment that abstracts the data owner’s and data consumer’s platforms to allow for greater information sharing. This promotes situational awareness amongst authorized users and enables future innovation among modern response platforms. When securely architecting a cloud solution such as this, the use of design paradigms can be an effective tool to increase the accuracy and reliability of cyber- and information-security-related decisions made throughout the development process. This approach also supports the categorization of design considerations into three levels: industry concepts, project approaches, and data protections for digital processes. Industry concepts consist of the notional underpinnings that guide or motivate a security process, system, or design but often lack any tangible attributes. Project approaches represent decisions made during the design and development process to prioritize a solution, method, or practice above another that may provide a comparable functional output but lacks a desired security benefit. Data protections for digital processes represent the selection, integration, and implementation of specific controls for a given asset. This paper will explore specific examples of how Sentry-SECURE has been designed to account for considerations at each of these three levels, while balancing the operational intent of the platform with the security enhancements necessary to maintain data integrity, availability, and confidentiality.

assessment, RMS, security, physical, cloud, Cyber ↗

Temporal complementarity of marine renewables with wind and solar generation: Implications for GB system benefits

Wave and tidal energy have the potential to provide benefits to power systems with high proportions of stochastic renewable generation. This is particularly applicable with wind and solar photovoltaics, as the offsetting of these renewable resources results in more reliable renewable generation. This study utilises ten metrics to quantify the temporal complementarity and supply-demand balancing requirements of the energy mix in Great Britain, to investigate the potential magnitude of these system benefits. Wave and tidal generation profiles are created using historical resource data and hydrodynamic models. The results show that the inclusion of wave and tidal generation creates a renewable energy mix which is more available under multiple conditions: throughout a year of operation; at times of peak demand; for multiple consecutive hourly time periods; and at times when wind and solar generation are not available. Three regional case studies also show that the inclusion of marine energy allows for improved regional supply-demand matching, reducing instances of energy shortage and excess and potentially relieving transmission congestion at particularly constrained locations within GB. Finally, the implications of these findings are discussed in terms of GB wholesale market operation, system balancing and system security.

16 TIDAL AND WAVE POWER↗

Extreme Temperature Cryptography Based On Nitrogen-Incorporated Ultrananocrystalline Diamond

Physical entropy sources that remain stable under extreme temperatures are essential for cryptography in emerging technological frontiers in deep space exploration, geothermal energy harvesting, and nuclear energy. However, conventional semiconductor platforms fail to generate stable and reliable cryptographic keys above 200 degrees C due to performance degradation. Here, we report a diamond-based cryptographic primitive that exploits the defect-rich sp 2 -bonded grain boundary network in nitrogen-incorporated ultrananocrystalline diamond (n-UNCD) film as a robust entropy source to generate cryptographic keys that remain operationally stable even after enduring extreme temperatures of 700 degrees C for 54 h while also surviving thermal cycling between room temperature and 700 degrees C for 48 h. The strength of the generated keys is assessed through several cryptographic metrics such as bit uniformity, entropy, hamming distances, and correlation coefficients, all of which are found to be near their respective ideal values. Moreover, the generated keys pass the NIST SP 800 and SP 800-90B tests and are also resilient to supply bias variations and a regression-based machine learning attack model based on the Fourier series. The robustness of the keys is attributed to the better thermal stability and chemical inertness of the n-UNCD film. This is supported by high-resolution energy-dispersive X-ray spectroscopy (EDS), which shows no significant lateral diffusion of metal atoms into the n-UNCD layer, and by Raman spectroscopy, which reveals no significant changes in the bonding configuration of the n-UNCD structure. Our findings highlight the remarkable potential of n-UNCD film for extreme environment cryptography by expanding the operational limits of conventional hardware security platforms.

37 INORGANIC, ORGANIC, PHYSICAL, AND ANALYTICAL CH↗