Results for “System Security” — Page 28

DOE OSTI2025

Implementation and Demonstration of the Digital Twin Certification System Remote Operations Framework

Microreactors are one promising advanced-reactor concept being pursued by the nuclear industry. They are distinguished by a relatively low power output of 20 MWth or less. These microreactors are intended for deployment in applications where conventional small-capacity power solutions, such as diesel generators, are either economically unfeasible or logistically challenging. Such applications include providing electric power and/or heat for remote communities, mining sites, defense installations, and humanitarian and disaster-relief missions. An important feature for the successful deployment of microreactors is their capability to be operated remotely. This capability can significantly reduce staffing costs by eliminating the need for licensed operators to be physically present at each reactor site. Instead, operators can be centralized in a single remote operations center placed in an economically advantageous location, thereby optimizing resources by consolidating expertise and enhancing operational efficiency. However, the implementation of a remote operation system for nuclear reactors raises new concerns regarding the security, reliability, and resilience of such a system. One way in which remote operations can be supported in a manner that maintains system security, reliability, and resilience is through the use of digital twins in a novel framework designed to verify and validate sensor data and commands communicated between the remote operations center and reactor. This framework, known as the Digital Twin Certification System (DTCS), has previously been proposed as an operations architecture that can bring security and resiliency levels of remote nuclear-reactor operations to a level acceptable for commercial deployment. This paper moves the proposed DTCS architecture from concept to reality by presenting the implementation and testing of the system. The rationale and implementation of the DTCS using tools such as DeepLynx and Apache Airflow, is covered in-depth. This is followed by a demonstration of the DTCS by applying the implemented system architecture to the Single Primary Heat Extraction and Removal Emulator, a small-scale non-nuclear test bed that emulates thermal behavior of a microreactor. The demonstration includes both normal and abnormal operating scenarios to highlight how the DTCS can increase the security, reliability, and resilience of a remote operations system.

22 - GENERAL STUDIES OF NUCLEAR REACTORS↗

DOE OSTI2026

Evaluation of Real-Time Mitigation Techniques forCyber Security in IEC 61850 / IEC 62351Substations

This paper presents the design logic and implementation aspects of three potential real-time mitigation techniques capable of countering GOOSE-based attacks: (i) IEC 62351-compliant message authentication code (MAC) scheme, (ii) a semantics-enforced rule- based intrusion detection system (IDS), and (iii) a hybrid approach integrating both MAC verification and Intrusion Detection System (IDS). A comparative evaluation of these real-time mitigation approaches is conducted using a cyber-physical system(CPS) security testbed. The results show that the hybrid integration significantly enhances mitigation capability. Furthermore, the processing delays of all three methods remain within the strict delivery requirements of GOOSE communication. The study also identifies limitations that none of the techniques can fully address, highlighting areas for future work.

Liu, Chen-Ching [Virginia Polytechnic Inst. and St↗

DOE OSTI2025

Security Analysis of a Class of Spread Spectrum Systems Presentation

A method of adding physical layer security to a class of spread spectrum systems has been recently proposed. In this paper, we look into the rate at which an eavesdropper may gain information about the system to decipher the data symbols. The Shannon mutual information is used to measure the rate of information that may be gained by an eavesdropper. The k-nearest neighbors (k-NN) method is used to obtain estimates of relevant entropy values, which will then be used to quantify the rate of information recovery as more data is transmitted. It turns out that such information recovery requires the adoption of special methods that avoid any destructive bias in the estimates. Details of these methods are also presented.

97 - MATHEMATICS AND COMPUTING↗

DOE OSTI2020

A Flexible and Secure Evaluation Platform for Overvoltage Protection in Power Electronics Systems

This paper summarizes the fault mechanisms specifically for the overvoltage protection schemes in power electronic converters and the resulted power electronics enabled systems. A flexible and secure evaluation platform for overvoltage protection, has also been presented based on this conceptual mechanism. The proposed platform aims at testing the protection performance of distinctive overvoltage protection schemes. It would be applied to verify the effectiveness, identify potential strengths and weaknesses, and obtain the most critical protection response time to provide sufficient engineering insights for the designer. The operation principle and detailed design guideline have been presented first. The comprehensive component stress has been analyzed. An intensive set of LTSpice simulations have been conducted to show the validity of the proposed assessment approach.

Zheng, Sheng↗

DOE OSTI2018

Detection of counterfeit and compromised devices using system and function call tracing techniques

Frameworks, methods, and systems for securing a smart grid are provided. A framework can include data collection, call tracing techniques, and preparing call lists to detect counterfeit or compromised devices. The call tracing techniques can include call tracing and compiling all system and function calls over a time interval. The framework can further include data processing, in which a genuine device is identified and compared to unknown devices. A first statistical correlation can be used for resource-rich systems, and a second statistical correlation can be used for resource-limited systems. Threats of information leakage, measurement poisoning and store-and-send-later can be considered.

Babun, Leonardo↗

DOE OSTI2018

Renovation of Thermal Vacuum Chambers at Idaho National Laboratory (INL) for Testing of Radioisotope Power Systems (RPS)

The Radioisotope Power Systems (RPS) program at Idaho National Laboratory (INL) fuels and performs environmental testing of RPS in support of National Aeronautics and Space Administration (NASA) missions. Recently the programs’ thermal vacuum chambers, housed within INL’s Space and Security Power Systems Facility (SSPSF), underwent successful renovations to improve functional capabilities and system control in support of customer missions. Thermal vacuum system renovations focused primarily on three core functions. The first focus area was integration of semi-automated Programmable Logic Controllers (PLC) to enhance operational feedback and process control. This included the use of numerically controlled vacuum valves and integration of real time feedback from process pressure transducers. Improvements to the system high vacuum pumping technology was the second priority focus. Legacy diffusion pumps were replaced with turbo-molecular and cryogenic pumps to help mitigate the possibility of back streaming diffusion pump oil onto the surface of the test article or radiative cooling surfaces located within the chambers. The third and final core function involved meeting emergent customer thermal requirements. This led to retro-fitting one of the vacuum chambers with a cryogenically cooled Thermal Conditioning Unit (TCU) and thermal shrouds. The TCU utilizes gaseous nitrogen to heat or cool a cylindrical shroud to maintain a set temperature with a programmable range of -I85 °C to I00 °C. With the successful completion of RPS acceptance testing, the newly renovated thermal vacuum chamber systems are operational and better equipped to support testing of Radioisotope Power Systems for space exploration missions.

42 ENGINEERING↗

DOE OSTI2018

Renovation of Thermal Vacuum Chambers at Idaho National Laboratory for Testing of Radioisotope Power Systems

The Radioisotope Power Systems (RPS) program at Idaho National Laboratory (INL) fuels and performs environmental testing of RPS in support of National Aeronautics and Space Administration (NASA) missions. Recently the programs’ thermal vacuum chambers, housed within INL’s Space and Security Power Systems Facility (SSPSF), underwent successful renovations to improve functional capabilities and system control in support of customer missions. Thermal vacuum system renovations focused primarily on three core functions. The first focus area was integration of semi-automated Programmable Logic Controllers (PLC) to enhance operational feedback and process control. This included the use of numerically controlled vacuum valves and integration of real time feedback from process pressure transducers. Improvements to the system high vacuum pumping technology was the second priority focus. Legacy diffusion pumps were replaced with turbo-molecular and cryogenic pumps to help mitigate the possibility of back streaming diffusion pump oil onto the surface of the test article or radiative cooling surfaces located within the chambers. The third and final core function involved meeting emergent customer thermal requirements. This led to retro-fitting one of the vacuum chambers with a cryogenically cooled Thermal Conditioning Unit (TCU) and thermal shrouds. The TCU utilizes gaseous nitrogen to heat or cool a cylindrical shroud to maintain a set temperature with a programmable range of -I85 °C to I00 °C. With the successful completion of RPS acceptance testing, the newly renovated thermal vacuum chamber systems are operational and better equipped to support testing of Radioisotope Power Systems for space exploration missions.

42 ENGINEERING↗

DOE OSTI2018

Renovation of Thermal Vacuum Chambers at Idaho National Laboratory (INL) for Testing of Radioisotope Power Systems (RPS)

The Radioisotope Power Systems (RPS) program at Idaho National Laboratory (INL) fuels and performs environmental testing of RPS in support of National Aeronautics and Space Administration (NASA) missions. Recently the programs’ thermal vacuum chambers, housed within INL’s Space and Security Power Systems Facility (SSPSF), underwent successful renovations to improve functional capabilities and system control in support of customer missions. Thermal vacuum system renovations focused primarily on three core functions. The first focus area was integration of semi-automated Programmable Logic Controllers (PLC) to enhance operational feedback and process control. This included the use of numerically controlled vacuum valves and integration of real time feedback from process pressure transducers. Improvements to the system high vacuum pumping technology was the second priority focus. Legacy diffusion pumps were replaced with turbo-molecular and cryogenic pumps to help mitigate the possibility of back streaming diffusion pump oil onto the surface of the test article or radiative cooling surfaces located within the chambers. The third and final core function involved meeting emergent customer thermal requirements. This led to retro-fitting one of the vacuum chambers with a cryogenically cooled Thermal Conditioning Unit (TCU) and thermal shrouds. The TCU utilizes gaseous nitrogen to heat or cool a cylindrical shroud to maintain a set temperature with a programmable range of -I85 °C to I00 °C. With the successful completion of RPS acceptance testing, the newly renovated thermal vacuum chamber systems are operational and better equipped to support testing of Radioisotope Power Systems for space exploration missions.

42 ENGINEERING↗

DOE OSTI2022

Two-Stage Optimization Framework for Detecting and Correcting Parameter Cyber-Attacks in Power System State Estimation

One major tool of Energy Management Systems for monitoring the status of the power grid is State Estimation. Since the results of state estimation are used within the energy management system, the security of the state estimation process is most important. The focus research in this area is on detecting False Data Injection attacks on measurements. While this is important, State Estimation also rely on database that are used to describe the relationship between measurements and systems' states. This paper presents a two-stage programming framework to detect and correct attacks in the parameters of the measurement model used by the state estimation process in the Energy Management System. In the first stage, an estimate of the line parameters ratios are obtained. In the second stage, the estimated ratios from stage I are used in a Bi-Level model for obtaining a final estimate of the measurements' model parameters. Hence, the presented framework does not only unify the detection and correction in a single optimization run, but also provide a monitoring scheme for the SE database that is typically considered static. In addition, in the two stages, linear programming framework is preserved. For validation, the IEEE 118 bus system is used for implementation. The results of this paper illustrate the effectiveness of the proposed model for detecting attacks in the database used in the state estimation process.

state estimation, two-stage optimization, cyber-ph↗

NASA NTRS1987

The hack attack - Increasing computer system awareness of vulnerability threats

The paper discusses the issue of electronic vulnerability of computer based systems supporting NASA Goddard Space Flight Center (GSFC) by unauthorized users. To test the security of the system and increase security awareness, NYMA, Inc. employed computer 'hackers' to attempt to infiltrate the system(s) under controlled conditions. Penetration procedures, methods, and descriptions are detailed in the paper. The procedure increased the security consciousness of GSFC management to the electronic vulnerability of the system(s).

Quann, John↗

DOE OSTI2022

Irradiation Experiments and Thermal Analysis for Reactor System Design and Analysis at INL

Idaho National Laboratory (INL) is the nation's lead nuclear laboratory working to enhance reactor systems' safety, security, economics, and efficiency. Research and development (R&D) programs at INL support the current fleet of nuclear reactors for safer operation and newer reactors technology design, development, demonstration, and deployment. A major focus of INL's mission is the reactor system design and analysis supported by the irradiation experiments and thermal analysis of advanced and current-generation nuclear fuels and materials. The irradiation experiments and thermal analysis provide a deeper understanding of basic radiation damage processes that can determine the basis for performance improvements and verification of modeling assumptions. These experiments and analyses include experiment management: design, fabrication, characterization, irradiation, and post-irradiation examination. This research involves thermal, neutronic, and material investigation using the INL's Advanced Test Reactor (ATR) and Transient Reactor Test (TREAT) facilities. The results from these experiments and analysis are required to develop the regulatory basis for deploying new or modified fuels and materials. This seminar talk will also provide a general overview of the INL's research facilities, ongoing research programs, core capabilities, and opportunities for students and faculties.

73 NUCLEAR PHYSICS AND RADIATION PHYSICS↗

DOE OSTI2019

Local Feature Sufficiency Exploration for Predicting Security-constrained Generation Dispatch in Multi-Area Power Systems

Deriving generation dispatch is essential for efficient and secure operation of electric power systems. This is usually achieved by solving a security-constrained optimal power flow(SCOPF) problem, which is by nature non-convex, nonlinear and thus computational intensive. The state-of-the-art optimization approaches are not able to solve this problem for large-scale power systems within power system operation time window (usually 5 minutes). In this work, we developed supervised learning approaches to determine security-constrained generation dispatch within much shorter time window. More importantly, the physical constrain of only accessing to local measurements and other information in most utilities’ real-time operation can not be ignored for the predictive models.The feasibility and accuracy of utilizing only local features(measurements and grid information in one area) to predict optimal local generation dispatch (dispatch of all generators in the corresponding area) in multi-area power systems has been explored. The results showed optimal local generation dispatch can be predicted with local features with high accuracy, which is comparable to the results obtained with global features.

Sun, Yixuan↗

DOE OSTI2025

Open Source Intelligence for Cybersecurity Events via Twitter Data

Open-Source Intelligence (OSINT) is largely regarded as a necessary component for cybersecurity intelligence gathering to secure network systems. With the advancement of artificial intelligence (AI) and increasing usage of social media, like Twitter, we have a unique opportunity to obtain and aggregate information from social media. In this study, we propose an AI-based scheme capable of automatically pulling information from Twitter, filtering out security-irrelevant tweets, performing natural language analysis to correlate the tweets about each cybersecurity event (e.g., a malware campaign), and validating the information. This scheme has many applications, such as providing a means for security operators to gain insight into ongoing events and helping them prioritize vulnerabilities to deal with. To give examples of the possible uses, we present three case studies demonstrating the event discovery and investigation processes. We also examine the potential of OSINT for identifying the network protocols associated with specific events, which can aid in the mitigation procedures by informing operators if the vulnerability is exploitable given their system’s network configurations.

Dale, Dakota↗

DOE OSTI2022

CRADA NO. NFE-22-00001 Between CNS and Northrop Grumman Systems Corporation

Consolidated Nuclear Security, LLC (CNS) and Northrop Grumman Systems Corporation (NGC) have established a partnership through the subject Cooperative Research and Development Agreement (CRADA) in three areas of collaboration: (1) Additive Manufacturing (AM) of manufactured carbon-carbon composite materials, (2) modeling and simulation, and (3) specialized chip and circuit board manufacturing for supply chain assurance.

36 MATERIALS SCIENCE↗

NASA NTRS1995

An Overview of ANN Application in the Power Industry

The paper presents a survey on the development and experience with artificial neural net (ANN) applications for electric power systems, with emphasis on operational systems. The organization and constraints of electric utilities are reviewed, motivations for investigating ANN are identified, and a current assessment is given from the experience of 2400 projects using ANN for load forecasting, alarm processing, fault detection, component fault diagnosis, static and dynamic security analysis, system planning, and operation planning.

artificial neural networks ANN electric power syst↗

DOE OSTI2021

Position Papers for the ASCR Workshop on Cybersecurity and Privacy for Scientific Computing Ecosystems

At the request of the Department of Energy's (DOE) Office of Advanced Scientific Computing Research (ASCR), this program committee has been tasked with organizing a workshop to identify basic research needs in cybersecurity and privacy to better support DOE's science and energy mission. As part of the process, the program committee is soliciting community input in the form of position papers to help identify significant use cases, facility issues, and other barriers to enabling verifiably trustworthy computational science while preserving data confidentiality as appropriate for scientific workflows of interest to DOE. The program committee will review these position papers and based on the fit of their area of expertise and interest, selected contributors will have the opportunity to participate in the workshop currently planned as a virtual event November 3-5th, 2021. The thrust areas that will be explored by this workshop are the following: (1) Algorithms for secure, scalable, privacy-enhancing technologies and frameworks, including: Federated AI/ML, Differential privacy, Randomized algorithms, Adversarial modeling & simulation, Graph algorithms, and Formal methods; (2) Platforms to support the entire scientific-computing ecosystem, including edge computing for large-scale experiments, focusing on heterogeneous systems and distributed systems, including: Heterogeneous computing systems, Distributed computing systems, and Secure data architectures; and (3) Data workflows to allow agile use of data while preserving integrity and privacy, making the important properties verifiable either at runtime or post-computation, including: Integrity and provenance and Data management infrastructure. Topics that are out-of-scope for the workshop include discussing specific proposed solutions or areas that are clearly out of DOE's fundamental and applied-sciences mission scope, e.g., cryptography, enterprise security, and general-operations technology.

97 MATHEMATICS AND COMPUTING↗

DOE OSTI2020

Desalination for a circular water economy

Today's water systems are enabled by ample fresh water sources, low-cost centralized treatment, and facile wastewater disposal. Climatic change, aging infrastructure, and source water contamination have exposed the vulnerabilities of this linear water paradigm. While seawater desalination enables coastal communities to augment their supply, more broadly securing water systems for municipal, industrial, and agricultural water users will require distributed desalination and fit-for-purpose reuse of nontraditional water sources. Our linear water economy must evolve into a resilient circular water economy, where water is continuously reused and “contaminants” become the feedstocks for other economically valuable processes. Additionally, technology innovation is needed to deliver autonomous, precise, resilient, intensified, modular, and electrified desalination systems that reduce the cost, improve the performance, and enhance the resilience of nontraditional water reuse systems. Meanwhile, strong federal leadership and coordination is needed to accelerate desalination research, promote information gathering efforts to direct technology development, and create an expanded role for non-profit organizations in knowledge dissemination.

29 ENERGY PLANNING, POLICY, AND ECONOMY↗

DOE OSTI2017

Identification of the accident-related critical digital assets based on probabilistic safety analysis results - 225

Digital I and C systems have been developed and installed in nuclear power plants, and due to installation of the digital I and C systems, cyber security concerns are increasing in nuclear industry. However, there are too many critical digital assets (CDAs) to be inspected in digitalized NPPs. In order to reduce the inefficiency of regulation in nuclear facilities, the critical digital assets that are directly related to an accident are elicited by using the probabilistic safety assessment results. Target initial events are selected, and their heading are analyzed through event tree analysis. Among the headings, the headings that can be proceeded directly to the core damage by the cyber-attack are finally selected as the target of deriving the minimum cut-sets. Based on success criteria of each heading, we analyze the fault trees and derive the minimum set-cuts. In terms of original PSA, the value of probability for the cut-sets is important but the probability is not important in terms of cyber security of NPPs. The important factors is the number of basic events consisting of the minimal cut-sets that is proportional to vulnerability. Finally, the process for identifying accident-related CDAs is suggested based on PSA results. The results of this study are expected to be used to derive the linkage between cyber-attack and accident, and to develop the final core digital asset identification methodology and effective regulatory method. (authors)

22 GENERAL STUDIES OF NUCLEAR REACTORS↗