Search NASA⌕ Search

SEARCH · Search NASA

Results for “Operations Security”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 469 records · Page 26
All sourcesNASA NTRSDOE OSTI
DOE OSTI2026

Quantifying Operational Drivers of Multimodal Biometric Verification in Aerial Surveillance

Multimodal biometric verification is increasingly applied across operational contexts ranging from close-range security cameras and building-mounted surveillance to long-range ground sensors and unmanned aerial system (UAS) imagery. Variations in acquisition conditions—such as image resolution, viewing geometry, and motion artifacts—pose significant challenges for cross-domain algorithmic generalization. This study evaluates two independent multimodal biometric verification systems developed under the Intelligence Advanced Research Projects Activity (IARPA) Biometric Recognition and Identification at Altitude and Range (BRIAR) program, comparing performance on close-range and aerial datasets. Close-range video served as a baseline to quantify the decline in verification performance on aerial footage. The dataset included six UAS platforms, spanning small quadcopters at 10m altitude to medium-sized fixed-wing aircraft at 360m. Mixed-effects logistic regression identified image resolution (head and body pixel counts), head height, sensor characteristics, and algorithm selection as primary determinants of verification success, whereas demographic attributes and mission gait were not significant predictors. Activity type and collection site influenced performance in close-range data but had negligible impact on UAS imagery. These results clarify modality-specific strengths and limitations and highlight opportunities to enhance cross-domain biometric verification.

Peluso, Alina [ORNL] (ORCID:0000000328950406)↗
DOE OSTI2023

Cyber threat assessment of machine learning driven autonomous control systems of nuclear power plants

We report advanced cyber-attacks against critical infrastructure and the energy sector are becoming more common. With the invention of autonomous control systems (ACS) within advanced nuclear reactor designs, system designers, reactor operators, and regulators must consider cybersecurity during the design and operational phases. This article provides a cyber threat assessment of machine learning (ML)-based digital twinning (DT) technologies in the context of advanced reactor ACS. A cyber–physical testbed was created to emulate nuclear reactor digital instrumentation and controls (I&C) and act as a basis for the ACS. The ACS was designed as two plant-level DTs predicting reactor malfunctions and determining control actions and two component-level DTs responsible for classifying component states and forecasting component inputs and outputs (I/O). Two duplicate ACS designs– one using a traditional ML framework and one using an automated ML (AutoML) framework– were created and tested against cyber-attacks on training data, real-time process data, and ML model architectures to determine their respective qualitative cyber-risk in terms of likelihood and impact. Both frameworks showed similar cyber-resilience against training, real-time, and ML architecture attacks, proving that neither is inherently more secure. Recommended safeguard and security measures are posed to system designers, reactor operators, and regulators to maintain the cybersecurity of ML-based DT technologies such as ACS, prompting a holistic view of shared responsibility for maintaining cyber-secure ML-based systems.

99 GENERAL AND MISCELLANEOUS↗
DOE OSTI2026

Enabling Dynamic Probabilistic Risk Assessment of Physical Security Using EMRALD and MAAP

The optimization of physical security in nuclear power plants requires sophisticated methodologies that integrate operator actions and plant behavior through advanced simulation tools. To address this, Idaho National Laboratory [JL2.1]has developed the Modeling and Analysis for Safety and Security using the Dynamic EMRALD Framework (MASS-DEF) methodology, an approach that integrates force-on-force simulations, dynamic probabilistic risk assessment, and thermal-hydraulics modeling [JL3.1]to enhance security planning while reducing costs. We developed a tool that produces reduced order models using thermal hydraulic simulations from the Modular Accident Analysis Program (MAAP) [1]. These models can quickly evaluate reactor core behavior during attack simulations, and in so doing, address two barriers of traditional methods: (1) MAAP simulations are computationally intensive, and (2) attack scenarios must be run in a secure environment, which complicates analysis and validation. By precomputing scenario outcomes for a small number of modified parameters, the reduced order model significantly decreases the computational cost and enables offsite review of the results.

22 - GENERAL STUDIES OF NUCLEAR REACTORS↗
DOE OSTI2026

Operational Evolution of FTS3: A DevOps Driven Approach to Elastic Operations

The File Transfer Service (FTS3) is a distributed data movement service developed at CERN and widely used to transfer data across the Worldwide LHC Computing Grid (WLCG). At Fermilab, FTS3 supports data transfers for multiple experiments, including Intensity Frontier experiments such as DUNE, enabling reliable data movement between WebDAV endpoints in Europe and the Americas.​ At CHEP 2021, we reported on the initial containerized deployment of FTS3 on OKD, the community Kubernetes distribution of Red Hat OpenShift. In this work, we present the subsequent evolution of this deployment, focusing on new operational capabilities introduced to improve scalability, robustness, and long-term maintainability.​ We describe the adoption of more secure and reproducible container build workflows, the integration of DevOps-driven operational practices, and enhancements in monitoring and automation. A key new result is the introduction of horizontal scaling and elastic resource management, allowing FTS3 components to dynamically adapt to workload variations while maintaining service reliability. We also discuss improvements in fault tolerance and operational procedures derived from production experience.​ Finally, we summarize lessons learned from operating FTS3 as a Kubernetes-native service and outline how these developments have improved the resilience and efficiency of data movement operations at Fermilab.

Munoz Flores, Victor Leopoldo [Fermilab]↗
DOE OSTI2020

FY19 Status Report on the Computing Systems for the Yucca Mountain Project TSPA-LA Models and Preliminary Testing of a Selected Process Model

Sandia National Laboratories continued evaluation of total system performance assessment (TSPA) computing systems for the previously considered Yucca Mountain Project. This was done to maintain the operational readiness of the computing infrastructure (computer hardware and software) and knowledge capability for total system performance assessment) type analysis, as directed by the National Nuclear Security Administration (NNSA), DOE 2010. The FY19 task included continued operation of the cluster; maintenance of the TSPA-LA models (with Gold Sim 9.60.300); preliminary assessment of the status of the Infiltration Model (a process model that feeds the TSPA-LA). In addition, precautionary actions were needed to extend the life of the cluster hardware. To do that, three new nodes were added to the cluster. In the event any of the original nodes fail they will be replaced with the new nodes, thereby maintaining the core capability. The 2014 cluster and supporting software systems are currently fully operational to support TSPA-LA type analysis.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2021

FY2021 Status Report on the Computing Systems for the Yucca Mountain Project TSPA-LA Models and Testing of Selected Process Models

Sandia National Laboratories continued evaluation of the total system performance assessment (TSPA) for License Application (LA) computing systems for the previously considered Yucca Mountain Project (YMP). This was done to maintain the operational readiness of the computing infrastructure (computer hardware and software) and knowledge capability for total system performance assessment) type analysis, as directed by the National Nuclear Security Administration (NNSA), DOE 2010. The FY21 task included continued operation of the cluster; maintenance of the TSPA-LA models (with GoldSim 9.60.300); continued assessment of the status of the Infiltration Model; (a process model that feeds the TSP -LA) and preliminary assessments of the Unsaturated Zone Flow Model and the Saturated Zone Flow and Transport Model Abstraction (process models that feed the TSPA-LA). The 2014 cluster and supporting software systems are currently fully operational to support TSPA-LA type analyses.

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗
DOE OSTI2025

Bayesian Attack Model (BAM) User Story

This document presents a user story for the Bayesian Attack Model (BAM) tool designed to aggregate and analyze cyber-attack observables for operational technology (OT) systems. BAM aims to empower cybersecurity analysts by providing a streamlined interface for collecting observable data from various sources, enabling real-time analysis of potential adversary activity. By enhancing the response capabilities of security teams, BAM facilitates risk-informed decision-making and improves organizational security posture. This user story outlines the key functionalities, user interactions, and requirements necessary to successfully integrate BAM with other security information and event management (SIEM) technology and cybersecurity operations centers (CSOCs).

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2024

A Computational Review of Privacy-Preserving Mechanisms for the Smart Grid

Smart grid technologies have rapidly become one of the largest and most comprehensive sources of data for the modern utility. For the most part, data streams are seen as an essential tool that enable utilities to carry their day-to-day business operations, but they also create the need for efficient and secure data management strategies. In the context of the smart grid, ensuring data privacy is becoming an increasing concern due to a combination of factors that range from shifts in operational paradigms and rapid technology evolution to changes in legislation. Furthermore, researchers have highlighted the risks associated with improperly protected energy records. For example, energy consumption data from homes could be used to infer the behaviors and habits of home occupants through activity recognition or user profiling (Fan, 2017), which may lead to unfair service pricing, targeted advertising, or other personal security violations. Similarly, Electric Vehicles’ (EVs) charging metadata could be used to reveal private information about the owner such as their payment methods, preferred charging stations, and other locational and timing information that could be used to reconstruct the vehicle owner’s behaviors. The privacy of user data, even when used for statistical analysis or machine learning training processes, also needs to be carefully considered, as an individual’s private traits may still be vulnerable if their inclusion/exclusion greatly impacts the result or could be linked to a public dataset through cross-reference. The breach of user privacy also has severe impacts for organizations that store, transmit, or work on the data in the form of diminishing the public’s trust in them while potentially incurring legal consequences (e.g., fines and suspensions under the European Union General Data Protection Regulation, Health Insurance Portability and Accountability Act, etc.). Because of these risks, several privacy-preserving mechanisms are available to help organizations comply with privacy legislations and prevent the unauthorized and malicious use of user data. In light of these concerns, this report focuses on performing a computational review of privacy-preserving mechanisms that have received a significant amount of interest in literature. It specifically focuses on 1) homomorphic encryption, 2) zero-knowledge proofs, 3) differential privacy, and 4) federated learning. It is worth noting that although many of the methods presented in this document rely on cryptographic primitives, their intent is not to provide perfect secrecy, but rather to enable users to maintain privacy, and thus they shall not be compared or equated to other constructs that are aimed to address cybersecurity constructs.

24 POWER TRANSMISSION AND DISTRIBUTION↗
DOE OSTI2022

Annual Stormwater Report for the Y-12 National Security Complex Oak Ridge, Tennessee

This is the ninth annual stormwater report prepared in accordance with the modified National Pollutant Discharge Elimination System permit issued to the Y-12 National Security Complex (Y-12) on April 1, 2014. This modified permit removed the authorization to augment flow in East Fork Poplar Creek (EFPC) and thus removed the requirement to sample this effluent in conjunction with other major outfalls on EFPC. There are several construction and demolition activities currently in progress at Y-12. These include the construction of the Uranium Processing Facility (UPF), the Mercury Treatment Facility (MTF) on EFPC, the site-wide power grid upgrade, construction of an Emergency Operations Center, construction of a new Fire Station, Security Improvement Revitalization Program (SIRP), West End Protection Area Reduction (WEPAR) Project, and the demolition of the Biology Complex. Current stormwater protections have proven effective in 2021. However, moving forward, challenges to protect stormwater will continue from these projects. Therefore, oversight of these activities, and all other construction and demolition projects, will continue to be a priority in 2022. Y-12 will continue to implement appropriate Best Management Practices and reduce outside material storage areas where possible.

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗
DOE OSTI2021

Blockchain-Enabled Cyber-Secure Microgrid Control Using Consensus Algorithm: Preprint

This paper proposes a distributed control method based on a consensus algorithm for distributed energy resources (DERs) using blockchain as a secure communication medium for cyber resilience. Each DER communicates with a local blockchain server that is maintained by the distributed ledger technology to allow for securely sharing local measurements among neighboring assets to achieve the global control objectives, i.e., voltage and frequency regulation as well as accurate power sharing among the DERs, including collective grid-forming capability. To prove that the distributed control can retain system stability under a blockchain-induced variable communication delay, Lyapunov function-based stability analysis is carried out. This paper demonstrates the concept on an 11-bus test case developed in MATLAB Simulink, which has been modified from the IEEE 9-bus test case, to study dynamic operations of the five inverter-based DERs working with a blockchain-induced variable delay. The results validate the superior performance of the proposed control method, compared to heavily compromised operations of the other test cases without the security measure, affected by heavy communication delays and communication interruptions.

blockchain↗
DOE OSTI2020

Nuclear Security Governance in India: Institutions, Instruments, and Culture (2019)

There is an emerging consciousness in India of the importance of nuclear security and safety. Motivated by a combination of rapid growth in its civil nuclear sector, heightened scrutiny of recent nuclear accidents around the world, and the deteriorating regional security environment, India has pushed to adopt measures to strengthen and enhance its nuclear security and safety governance structures. India recognizes that the various recent global nuclear security initiatives are in its own best interest and has been an enthusiastic participant in the Nuclear Security Summit process. Today, India demonstrates a greater willingness to showcase its nuclear security arrangements before the public and has undertaken many institutional, legal, and operational reforms to maintain international regime compliance. This study takes a comprehensive look at India's approach to nuclear security and critically examines the physical security measures the country has put in place. Particular focus is placed on the evolution and strengths, as well as weaknesses, of the country's nuclear security institutions, instruments, practices, and culture. Given that the strengthening of India's nuclear security governance is an ongoing endeavor, the paper also puts forward a number of policy recommendations.

21 SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLANTS↗
DOE OSTI2022

Systems and Implementation: Integrating Unmanned Aircraft Systems into Physical Protection Systems at Fixed Sites and During Transportation

Physical protection systems, and response forces in particular, are designed to prevent an adversary from successfully completing a malevolent act against a facility or transport operations. Timely detection and assessment of any potential adversary action against a target is an essential element of materials security. The timely detection and assessment must then be followed-up by a capable and timely response that might be enhanced with the additional situational awareness provided by unmanned aircraft systems (UAS). The United States Department of Energy’s National Nuclear Security Administration Office of International Nuclear Security has been exploring capabilities provided by UAS to support response force operations within the physical protection system. UAS have the potential to provide response force commanders and operators with situational awareness in assessing adversary locations and actions as well as the locations of responders. UAS may be utilized for area searches ahead of responder pathways to identify potential threats and to provide situational awareness of areas not normally covered by cameras (such as areas outside the fence line outside at fixed facilities). In addition, UAS can provide real-time information to transportation convoy teams that pass through constantly changing public access environments. This paper will provide operational recommendations to be addressed when integrating UAS into existing physical protection systems at fixed sites and during transport. Recommendations will include aspects of the following: needs analysis; tactics and techniques to support detection and assessment as well as response force deployment; remote pilot selection, qualifications, training, and currency; UAS selection criteria; UAS laws and regulations; possible cost sharing with other facility operations; and on-scene emergency management.

Stockwell, Brandon↗
DOE OSTI2023

Godiva IV Central Cavity Neutron Environment Characterization with Threshold Neutron Detectors

Godiva IV is a cylindrical fast burst reactor comprised of approximately 65 kg of highly enriched uranium that is operated by Los Alamos National Laboratory and sited at the National Criticality Experiments Research Center at the Nevada National Security Site in Nevada in the United States. Godiva IV is typically operated at delayed critical and in the regime spanning from sub-prompt to super-prompt bursts. Godiva IV is used for sample irradiations, criticality safety demonstrations, dosimetry studies, and for studying super-prompt behavior. In preparation for both an upcoming experiment to reduce uncertainties in the prompt fission spectrum for 235 U using threshold neutron detectors, and for future research using Godiva IV, it was desired to exercise the process of the selection of threshold neutron detectors/activation foils, radiation metrology, and the subsequent adjustment of the neutron spectrum. For this exercise, nine high purity threshold neutron detectors/activation foils were irradiated in a Godiva IV burst. The foils were then analyzed using a high purity germanium detector in the NCERC counting laboratory to determine end of irradiation specific activities for available IRDFF-II reactions. This work summarizes the Godiva IV foil irradiation, radiation metrology results, and adjusted neutron spectrum. The results of this exercise ultimately characterized the neutron environment inside the sample irradiation cavity inside Godiva IV to a higher degree than previously performed, informed decisions for the upcoming larger scale experiment, and will inform future neutron spectrum characterizations at NCERC.

21 SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLANTS↗
DOE OSTI2022

The Dynamic Co-Evolution of Space Policy and Technology: Historical Overview and Lessons for Assessing Future Trends [Slides]

The course goal is to provide participants with better understanding of the dynamic evolution between space policy, technology and world events in order to (1) anticipate the potential impacts of evolving space security policy on technical research and development needs for current and future space operations; (2) anticipate how technical research and development advancements might shape future directions and implementation of space security policy; and (3) develop more impactful research and development proposals and effective policy initiatives.

45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗
DOE OSTI2024

Cybersecurity Certification Requirements for Distributed Energy Resources: A Survey of SunSpec Alliance Standards

This survey paper explores the cybersecurity certification requirements defined by the SunSpec Alliance for Distributed Energy Resource (DER) devices, focusing on aspects such as software updates, device communications, authentication mechanisms, device security, logging, and test procedures. The SunSpec cybersecurity standards mandate support for remote and automated software updates, secure communication protocols, stringent authentication practices, and robust logging mechanisms to ensure operational integrity. Furthermore, the paper discusses the implementation of the SAE J3072 standard using the IEEE 2030.5 protocol, emphasizing the secure interactions between electric vehicle supply equipment (EVSE) and plug-in electric vehicles (PEVs) for functionalities like vehicle-to-grid (V2G) capabilities. This research also examines the SunSpec Modbus standard, which enhances the interoperability among DER system components, facilitating compliance with grid interconnection standards. This paper also analyzes the existing SunSpec Device Information Models, which standardize data exchange formats for DER systems across communication interfaces. Finally, this paper concludes with a detailed discussion of the energy storage cybersecurity specification and the blockchain cybersecurity requirements as proposed by SunSpec Alliance.

Tsikteris, Sean (ORCID:0009000524202250)↗
DOE OSTI2022

2021 Annual Site Environmental Report for Sandia National Laboratories, New Mexico

Sandia National Laboratories is a multimission laboratory managed and operated by National Technology & Engineering Solutions of Sandia, LLC, a wholly owned subsidiary of Honeywell International Inc., for the U.S. Department of Energy’s National Nuclear Security Administration. The National Nuclear Security Administration’s Sandia Field Office administers the contract and oversees contractor operations at Sandia National Laboratories, New Mexico. Activities at the site support research and development programs with a wide variety of national security missions, resulting in technologies for nonproliferation, homeland security, energy and infrastructure, and defense systems and assessments.

54 ENVIRONMENTAL SCIENCES↗
DOE OSTI2026

Validating a Dynamic PWR Safety and Security Model?

Nuclear power plants (NPPs) are assessed for safety and security using separate models that cannot capture how an attacker's decisions and a plant's response unfold together in real time, leaving regulators and operators without a complete picture of true plant vulnerability. Traditional probabilistic risk assessment (PRA) methods treat adversarial events as fixed initiators with predetermined outcomes, and are structurally incapable of representing the time-dependent interplay between physical security events, safety system response, and operator mitigative actions. At Idaho National Laboratory (INL), I contributed to the development and validation of Modeling and Analysis for Safety and Security using the Dynamic EMRALD Framework (MASS-DEF). Where static PRA relies on event-tree logic that cannot evolve mid-scenario, MASS-DEF couples a time-dependent dynamic PRA tool EMRALD (Event Modeling Risk Assessment using Linked Diagrams) with attack simulation software, allowing attacker behavior, plant system states, and operator actions to interact across time. My work focused on validating a general Pressurized Water Reactor (PWR) model. I traced model logic against PWR plant to identified errors in logic and confirm accuracy. I then built and tested attack scenarios against a general PWR model to verify that the model produced expected outcomes across all logical pathways. I also contributed a section to a related technical paper applying the same EMRALD platform to radiation dose modeling. Results show that MASS-DEF can quantitatively demonstrate that many plants exceed their regulatory security thresholds. This demonstrated margin provides a technically defensible basis for reducing the number of guards without compromising regulatory compliance. Physical security costs represent roughly 10% of annual operating budgets, making such reductions directly meaningful to INL's mission of sustaining existing commercial NPPs. This internship strengthened my understanding of nuclear systems, probabilistic modeling, and technical writing, and has solidified my pursuit of a career at a national laboratory.

98 - NUCLEAR DISARMAMENT, SAFEGUARDS, AND PHYSICAL↗
DOE OSTI2022

The Dual-Axis Radiographic Hydrodynamic Test Facility Capability Expansion (DCX) Strategy

The Dual-Axis Radiographic Hydrodynamic Test (DARHT) facility is a vital and important part of the Nation’s nuclear security enterprise. With more than two decades of operations, DARHT has a storied history. Conceived in the 1970s, constructed in the 1990s, and operational since 2000, DARHT has advanced from open-air hydrodynamic experiments (hydros) to foam-confined hydros, to vessel-confined hydros, and in 2022, the 75th hydro was successfully completed. Radiography has advanced from a single-axis, single-pulse system to a dual-axis, multi-pulse capability to variable fields of view (VFV) on both accelerators. The culmination of these experiences, accomplishments, and advancements has brought us to a very important question: What do the next two decades at DARHT look like? The world is not the same place it was in the 1990s when construction at DARHT was in progress. Evolving threats, an expanding mission, and technology changes necessitate adaptation. To adapt, the aging facility, accelerators, vessels, and detector systems require improvements to ensure DARHT remains the Nation’s hydrodynamic data foundation for stockpile certification, safety, surety, and global security threats.

98 NUCLEAR DISARMAMENT, SAFEGUARDS, AND PHYSICAL P↗