Thermal Energy Distribution System (TEDS) Startup and Commissioning
A brief report documenting the startup and shakedown testing of the Thermal Energy Distribution System (TEDS).
32 ENERGY CONSERVATION, CONSUMPTION, AND UTILIZATI↗
SEARCH · Search NASA
Results for “Integrating Cybersecurity”
Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.
Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.
CCE Short Course Presentation for Society of American Military Engineers (SAME)
CCE Short Course Presentation for Society of American Military Engineers (SAME)
99 GENERAL AND MISCELLANEOUS↗
Achieving American Leadership in Cybersecurity and Digital Components Factsheet
The Biden Administration’s efforts to meet 100% clean electricity by 2035 and net-zero greenhouse gas emissions by 2050 has created opportunities to rebuild American supply chains create new jobs, strengthen community engagement, and spur U.S. economic growth. DOE’s strategy for success in the transition to a clean energy economy hinges on building and maintaining technology supply chains that are advanced, secure, and resilient to cyber threats. As the energy sector grows increasingly globalized, complex, and digitized, the supply chain for digital components of energy systems – including software, virtual platforms and services, and data – is facing greater threats. Nearly all digital components of U.S. energy sector systems are vulnerable to cyber supply chain instability, stemming from a variety of causes and shared among a broad set of interdependent stakeholders. Overall, supply chain risks for digital components in energy sector systems will continue to evolve and likely increase as these systems are increasingly interconnected, digitized, and remotely operated.
CCE↗
INL FY 2021 Laboratory Overview
The INL FY 2021 Laboratory Overview is an opportunity for INL to share its achievements and plans for the future with the entire Laboratory, stakeholders, and the public. This document outlines how INL will advance its clean energy and national security objectives in the future and highlights FY 2020 accomplishments across the Laboratory in science and technology, community outreach, and operations.
07 ISOTOPE AND RADIATION SOURCES↗
Consequence-Driven Cyber-Informed Engineering (CCE): Achieving National & International Recognition
Develop and deploy Consequence-driven Cyber-informed Engineering to drive culture change and priorities for investments in risk reduction and solution R&D
45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗
Cybersecurity concerns for the energy sector in the maritime domain
The world has seen a number of high-profile maritime disasters in recent months and years, and has felt the impact of them. At the same time, the world has also seen a number of high-profile cyberattacks. It has felt their impact, as well. And, likely no sector has been more affected by the maritime and cyber incidents than the energy sector, as fuel prices often spike or trough, and access to energy resources can become an instant source of concern, tension, or even conflict. As energy sectors—in all their forms—continue to rely on the maritime domain or even increase that reliance, they must be mindful that traditional maritime threats—like piracy, theft, and weather events—are not the only threats they face today. Maritime cybersecurity concerns are among the most potentially disruptive to energy-sector interests and, yet, are among the least understood and least addressed. This paper identifies nine areas in which the energy sector faces harmful cyber vulnerabilities in the maritime domain, to provide enough insight and examples to allow for action to be taken to reduce the risk of harm from these different vulnerabilities. The paper develops the example of offshore wind energy to model how to assess cyber considerations more fully. Ultimately, it concludes with a series of recommendations that offer policymakers, energy-sector actors, and security and law-enforcement professionals steps to minimize the exposure of the maritime energy sector to harmful cyberattacks.
99 GENERAL AND MISCELLANEOUS↗
Automation, Autonomy & Megacities 2025: A Dark Preview
This paper extrapolates from present trends to describe very plausible – and actually quite likely – future crises playing out in multiple global cities. While predicting the future is fraught with uncertainty, much of what occurs in the scenarios that follow is fully possible today and absent a significant course change, probable in the timeframe discussed. The authors want to caveat that we are not commenting on a specific organization or technology deployment. It is not hard to find tech evangelists touting that ubiquitous and highly interconnected digital technology will bring great advances in productivity and efficiency, as well as new capabilities we cannot foresee. This paper attempts to reveal what is possible when these technologies are applied to critical infrastructure applications en masse without adequate security in densely populated cities that by their nature are less resilient than other environments. Megacities need and will deploy these new technologies to keep up with insatiable demand for energy, communications, transportation and other services, but it is important to recognize that they are also made more vulnerable by following this path .
29 ENERGY PLANNING, POLICY, AND ECONOMY↗
Cyber-Informed Engineering
Briefings provided to Duke Energy during their visit to INL on January 25, 2023. This is following the process to release the slides to Duke Energy.
42 ENGINEERING↗
N&HS & Cybercore Overview Duke Energy 1-25-23
Briefings provided to Duke Energy during their visit to INL on January 25, 2023. This is following the process to release the slides to Duke Energy.
99 GENERAL AND MISCELLANEOUS↗
Applying Cyber-Informed Engineering to Power System Operations
This presentation covers the interaction of the discipline of system operations with the growing body of knowledge around Cyber-Informed Engineering (CIE). First is discussion of a number of fundamental concepts for system operators - organizational division of responsibilities, human and machine cooperation, goals, and priorities. The next section covers the reasons why CIE was developed, what it is, and the key design and operational, and organizational principles of CIE. Finally, some thoughts on how CIE can be applied to power system operations are offered, along with some examples of how an organization can approach applying CIE principles in their particular circumstances.
24 POWER TRANSMISSION AND DISTRIBUTION↗
A National Secure-by-Design Strategy
The US National Cybersecurity Strategy published March 2, 2023 uses plain language to communicate that the US is calling for a major change in how we prioritize the security of software systems used in critical infrastructure. It acknowledges that our current approach, which is essentially, “let the buyer beware,” leaves entities who are least able to assess or defend vulnerable software responsible for the impacts of designed-in weaknesses while the makers of the technology bear no liability. The strategy recommends a security-by-design approach, recommending that software vendors be held liable to uphold a “duty of care” to consumers and for systems to be designed to “fail safely and recover quickly” . For energy infrastructure, the strategy calls out the need to implement the National Cyber-Informed Engineering Strategy to achieve higher confidence security for energy infrastructures. The Idaho National Laboratory, a pioneer in cyber-informed engineering concepts, is at the forefront of organizations educating others in industry, academia, and government on how to apply these concepts to real-world challenges. In this brief, we'll outline some of the basic principles of security-by-design and offer examples of how, in a water sector context, they're being put into successful practice.
42 ENGINEERING↗
Mental Models for Managing Grid Cybersecurity Risk - ARC Industry Forum, Cybersecurity and Energy Transition
A proper mental model of the concepts of cyber risk and its components of threat and exploitability and consequence is necessary to allocate limited resources to different security activities, especially when considered alongside reliability and regulatory and economic risks. Understanding the consequence and frequency different risks are realized also helps align the right mitigations to the right risks. Cyber-informed engineering (CIE) is an emerging method to “engineer out” cyber risk across product and system lifecycles, and INL has a portfolio of programs operationalizing CIE’s principles for the energy sector.
24 POWER TRANSMISSION AND DISTRIBUTION↗
Idaho National Laboratory Energy Cybersecurity Programs Update
This brief presentation provides a status update on three Idaho National Laboratory energy cybersecurity programs of particular interest to NERC Reliability and Security Technical Committee annual in-person Security Groups summit. Public information on the following three programs is included: Cybersecurity for Operational Technology Environments (CyOTE™) program Cyber-Informed Engineering (CIE) Cyber Testing for Resilient Industrial Control Systems (CyTRICS) program, and associated high-level information on the Energy Software Bill of Materials POC, Executive Order 14017, and the Energy Cyber Sense Act
24 POWER TRANSMISSION AND DISTRIBUTION↗
Cybersecurity for Distributed Wind: What Integrators Need to Know
Few resources exist to address a growing need to secure distributed wind systems. Idaho National Laboratory recently published the Cybersecurity Guide for Distributed Wind, a richly detailed resource outlining a distributed wind system's possible architecture, relevant standards, risk management strategies, and key recommendations for stakeholders. This document highlights key actionable insights from the Guide that integrators can use to execute an effective cybersecurity strategy.
17 WIND ENERGY↗
Fossil Power Plant Cyber Security Life-Cycle Risk Reduction, A Practical Framework for Implementation
Market conditions are forcing fossil electricity generation facility owners and operators to implement advanced digital technologies. These technologies enable efficiencies, operational flexibility, operations and maintenance efficiencies, and adapting to a transitioning workforce. These digital technologies, however, can increase the cybersecurity attack surface. The purpose of this research was to develop a holistic cybersecurity risk reduction framework for fossil generation facilities. The framework begins with assessing how cyber risk changes across facility life cycles, including plant, system, vendor, and business life cycles. The next phase performs consequence analysis to prioritize high consequence events. Focusing on high consequence events allows owners to use a graded, risk-informed approach to prioritize cybersecurity efforts. The final phase identifies the digital asset attack surface in sensors and instrumentation and control equipment. After the vulnerabilities are identified, the owner selects mitigating cybersecurity control measures (or countermeasures) based on the risk analysis from the previous phases. This report describes the current industry cybersecurity best practices in fossil generation that are based on the first principles for cybersecurity engineering. The report is divided into five sections that describe the implementation of the risk reduction framework and present identified research, methodological, and technology gaps that were identified through this course of research and development.
01 COAL, LIGNITE, AND PEAT↗
Materials and Fuels Complex Five-Year Mission Strategy (FY21- FY25)
The Idaho National Laboratory (INL), through its designated mission of advancing innovative nuclear energy solutions, is actively engaged in the research, development, demonstration and deployment of advanced nuclear technology, as well as in fostering private-public partnership for technology development. Key to the success of INL’s mission is the Materials and Fuels Complex (MFC), the only complex in the U.S. that hosts a world-class assemblage of facilities, capabilities and instruments for handling, testing, and characterizing radioactive materials. Driven by its mission/vision of “Engineering and Experiments that Drive the World’s Nuclear Energy Future,” MFC is at the center of INL’s – and indeed the Department of Energy’s – advanced nuclear technology development initiatives, providing essential capabilities such as engineering-scale high-assay low-enriched uranium (HALEU) fuel production, reactor demonstration facilities, post-irradiation examination, and transient irradiation testing. Furthermore, MFC provides an ideal environment for test beds that are utilized for research, development and demonstration (RD&D) activities on used fuel treatment, nuclear non-proliferation, forensics, and nuclear power sources used for space exploration missions conducted by the National Aeronautics and Space Administration (NASA).
11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗
Materials and Fuels Complex (FY2021-2025 Five-Year Mission Strategy)
The Idaho National Laboratory (INL), through its designated mission of advancing innovative nuclear energy solutions, is actively engaged in the research, development, demonstration and deployment of advanced nuclear technology, as well as in fostering private-public partnership for technology development. Key to the success of INL’s mission is the Materials and Fuels Complex (MFC), the only complex in the U.S. that hosts a world-class assemblage of facilities, capabilities and instruments for handling, testing, and characterizing radioactive materials. Driven by its mission/vision of “Engineering and Experiments that Drive the World’s Nuclear Energy Future,” MFC is at the center of INL’s – and indeed the Department of Energy’s – advanced nuclear technology development initiatives, providing essential capabilities such as engineering-scale high-assay low-enriched uranium (HALEU) fuel production, reactor demonstration facilities, post-irradiation examination, and transient irradiation testing. Furthermore, MFC provides an ideal environment for test beds that are utilized for research, development and demonstration (RD&D) activities on used fuel treatment, nuclear non-proliferation, forensics, and nuclear power sources used for space exploration missions conducted by the National Aeronautics and Space Administration (NASA).
99 GENERAL AND MISCELLANEOUS↗
Cyber-Informed Engineering: The Need for a New Risk Informed and Design Methodology
Current engineering and risk management methodologies do not contain the foundational assumptions required to address the intelligent adversary’s capabilities in malevolent cyber attacks. Current methodologies focus on equipment failures or human error as initiating events for a hazard, while cyber attacks use the functionality of a trusted system to perform operations outside of the intended design and without the operator’s knowledge. These threats can by-pass or manipulate traditionally engineered safety barriers and present false information, invalidating the fundamental basis of a safety analysis. Cyber threats must be fundamentally analyzed from a completely new perspective where neither equipment nor human operation can be fully trusted. A new risk analysis and design methodology needs to be developed to address this rapidly evolving threatscape.
CCE↗