Search NASA⌕ Search

SEARCH · Search NASA

Results for “Operations Security”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 595 records · Page 33
All sourcesNASA NTRSDOE OSTI
DOE OSTI2021

Cybersecurity Resiliency of Marine Renewable Energy Systems Part 2: Cybersecurity Best Practices and Risk Management

Marine renewable energy (MRE) is an emerging source of power for marine applications, marine devices, and coastal communities. This energy source relies on industrial control systems and IT to support operations and maintenance activities, which create a pathway for an adversary to gain unauthorized access to systems and data and disrupt operations. Incorporating cybersecurity risk prevention measures and mitigation capabilities from inception, development, operation, to decommissioning of the MRE system and components is paramount to the protection of energy generation and the security of network architecture and infrastructure. To improve the resilience of MRE systems as a predictable, affordable, and reliable source of energy, cybersecurity guidance was developed to enable operators to assess cybersecurity risks and implement security measures commensurate with the risk. This publication is the second of a two-part series, with Part 1 addressing a framework to determine cybersecurity risk by assessing the vulnerability of an MRE system to potential cyber threats and the consequences a cyberattack would have on the end user. This Part 2 publication describes an approach to select appropriate cybersecurity best practices commensurate with the MRE system's cybersecurity risk. The guidance includes 86 cybersecurity best practices, which are associated with 36 cybersecurity domains and grouped into nine categories. The best practices follow the core functions of the National Institute of Science and Technology Cybersecurity Framework (e.g., identify, detect, protect, respond, and and recover) and insights from both maritime and energy industry guidance documents to identify security measures effective in protecting information and operational technology assets prevalent in MRE systems.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2026

Work With Us to Advance Cybersecurity for the Current and Future Grid

The energy sector is undergoing rapid change. Advanced technologies and controls, digitally connected devices, and a mix of generation sources offer increased energy reliability and security, reduced energy costs, and enhanced grid operations. But they can also carry physical and cybersecurity risks that are not yet fully understood. With deep expertise in advanced energy technologies, the National Laboratory of the Rockies is examining the cybersecurity implications of evolving systems and developing cutting-edge tools, novel approaches, and innovative research capabilities to address sector-wide challenges. Together with our partners, we are working to achieve a more secure, defensible, and reliable grid.

29 ENERGY PLANNING, POLICY, AND ECONOMY↗
DOE OSTI2024

Advanced manufacturing and digital twin technology for nuclear energy*

Advanced manufacturing techniques and digital twin technology are rapidly transforming the nuclear industry, offering the potential to enhance productivity, safety, and cost-effectiveness. Customized parts are being produced using additive manufacturing, automation, and robotics, while digital twin technology enables the virtual modeling and optimization of complex systems. These advanced technologies can significantly improve operational efficiency, predict system behavior, and optimize maintenance schedules in the nuclear energy sector, leading to heightened safety and reduced downtime. However, the nuclear industry demands the highest levels of safety and security, as well as intricate manufacturing processes and operations. Thus, challenges such as data management and cybersecurity must be addressed to fully realize the potential of advanced manufacturing techniques and digital twin technology in the nuclear industry. This comprehensive review highlights the critical role of digital twin technology with advanced manufacturing toward nuclear energy to improve performance, minimize downtime, and heighten safety, ultimately contributing to the global energy mix by providing dependable and low-carbon electricity.

36 MATERIALS SCIENCE↗
DOE OSTI2025

FRMAC Laboratory Analysis Manual Volume 1, Revision 0

The Federal Radiological Monitoring and Assessment Center (FRMAC) is an operational center, available on request by the Department of Homeland Security (DHS) to respond to nuclear and radiological incidents as described in the National Response Framework (NRF). Under the Federal Interagency Operational Plan for Response and Recovery’s Nuclear/Radiological Annex, the U.S. Department of Energy (DOE) has the responsibility to maintain the operational readiness of the FRMAC during the emergency phase of an event. FRMAC is initially established and managed by the Nuclear Emergency Support Team (NEST) and serves as an interagency operations center with representatives from various federal, state, and local radiological response organizations. The purpose of the FRMAC is to assist state, local, tribal, and territorial governments (SLTT) in their mission to protect the health and well-being of their citizens with: • Verified radiation measurements. • Interpretations of radiation distributions based on Environmental Protection Agency (EPA), Food and Drug Administration (FDA), or local Protective Action Guidelines (PAGs). • Characterization of overall radiological conditions. Once a declaration to respond to a radiological emergency has been made, the National Nuclear Security Administration (NNSA) Headquarters will coordinate the response in consultation with the cognizant NNSA Regional Coordinating Office (RCO). Each of the eight RCOs maintain a 24-hour response capability for radiological emergencies that may occur in states served by its region. When a FRMAC is established, it operates under the parameters of the Incident Command System (ICS), as defined in the National Incident Management Systems (NIMS) construct. The Consequence Management Home Team (CMHT) will be activated immediately during normal business hours (Pacific Time Zone), and within two hours otherwise. The Consequence Management Response Team (CMRT) is prepared for deployment within six hours after activation. Along with the assets, FRMAC provides an operational framework for coordinating of all federal off-site radiological monitoring and assessment activities during a response to a radiological emergency to support the coordinating agency and SLTT governments. Potential radiological emergencies that fall within FRMAC vary widely in terms of the area affected, the nature of the contamination, and the scope of the government’s response. Detonation of a nuclear device, accidental release of radiation from a nuclear power plant, and a terrorist threat are just a few of the many possible scenarios FRMAC must be prepared to address. Through all this, supporting the state, local, and tribal organizations in the protection of the public remains the primary goal of the federal response.

54 ENVIRONMENTAL SCIENCES↗
DOE OSTI2025

Operational Guidelines for Use of Radiation Portal Monitors in Nuclear Facilities

This article provides guidelines (not requirements) for the testing, operation, and maintenance of radiation portal monitors used to scan pedestrian and vehicular traffic entering or exiting nuclear facilities to prevent unauthorized removal of nuclear material. The intended audience is facility managers, supervisors, and operators who are responsible for establishing and maintaining radiation detection systems, who are likely well acquainted with physical security procedures, but may not have a familiarity with the operation of radiation detection.

Enders, Alexander [Oak Ridge National Laboratory (↗
NASA NTRS2023

A Blockchain Case Study for Urban Air Mobility Operational Intent

To realize the potential of Urban Air Mobility (UAM), an assurance of cybersecurity is critical for public acceptance. UAM is a concept that proposes to develop short-range, point-to-point transportation systems in metropolitan areas using vertical takeoff and landing (VTOL) aircraft to overcome increasing surface congestion. The growth in the development of UAM systems, and the associated data exchange and service interactions will be at risk due to numerous types of cybersecurity attacks. The intent of this work is to leverage a permissioned blockchain to simulate secure data exchange and storage for the UAM operational intent use case. In this case study, two vehicle operators are operating in the same airspace. Their intent is to fly vehicles that land at a shared vertiport, securely.

Urban Air Mobility↗
DOE OSTI2025

5G Communications in Nuclear: Potential Use Cases and Security Considerations

As fifth-generation (5G) communications continues to revolutionize the future of wireless technology, there is growing demand to utilize its benefits for critical infrastructures such as nuclear power plants (NPPs). In regard to achieving full automation and control in the operation of existing and future nuclear reactors, the unique capabilities of 5G can bring several potential advantages over other wireless technologies. However, a deep investigation is needed for the availability and security of 5G communications under various NPP operational scenarios. This article examines how 5G security capabilities can be architecturally deployed in nuclear applications so as to replace existing communication infrastructures. We discuss the current use of all wireless technologies in NPPs with their key features. Consequently, we investigated several NPP use cases in which 5G offers potential advantages but entails specific security considerations. The present article covers the characteristics of 5G communications, general challenges to its application in nuclear, and the security gaps that need to be addressed. We also highlight certain 5G security-by-design features that can help addressing current stringent NPP requirements. In addition, we discuss some future research direction that can facilitate the implementation of 5G in a nuclear facility. The findings presented herein can help foster 5G deployment in NPPs, thus enabling secured data transmission, cost savings, and increased operational efficiency with enhanced reliability.

21 SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLANTS↗
DOE OSTI2021

Cyber–Physical System Security of Distribution Systems

The Information and Communications Technology (ICT) for control and monitoring of power systems is a layer on top of the physical power system infrastructure. The cyber system and physical power system components form a tightly coupled Cyber–Physical System (CPS). Sources of vulnerabilities arise from the computing and communication systems of the cyber–power grid. Cyber intrusions targeting the power grid are serious threats to the reliability of electricity supply that is critical to society and the economy. In a typical Information Technology environment, numerous attack scenarios have shown how unauthorized users can access and manipulate protected information from a network domain. The need for cyber security has led to industry standards that power grids must meet to ensure that the monitoring, operation, and control functions are not disrupted by cyber intrusions. Cyber security technologies such as encryption and authentication have been deployed on the CPS. Intrusion or anomaly detection and mitigation tools developed for power grids are emerging. Furthermore, this survey paper provides the basic concepts of cyber vulnerabilities of distribution systems and CPS security. The important ICT subjects for distribution systems covered in this paper include Supervisory Control And Data Acquisition, Distributed Energy Resources, including renewable energy and smart meters.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2024

A Managed Tokens Service for Securely Keeping and Distributing Grid Tokens

Fermilab is transitioning authentication and authorization for grid operations to using bearer tokens based on the WLCG Common JWT (JSON Web Token) Profile. One of the functionalities that Fermilab experimenters rely on is the ability to automate batch job submission, which in turn depends on the ability to securely refresh and distribute the necessary credentials to experiment job submit points. Thus, with the transition to using tokens for grid operations, we needed to create a service that would obtain, refresh, and distribute tokens for experimenters’ use. This service would avoid the need for experimenters to be experts in obtaining their own tokens and would better protect the most sensitive long-lived credentials. Further, the service needed to be widely scalable, as we are currently keeping credentials active for approximately 15 experiments, each with 1-3 different credentials, and distributing those credentials to 2-20 submit points per experiment, with those numbers steadily increasing. To address these issues, we created and deployed a Managed Tokens service. The service is written in Go, taking advantage of that language’s native concurrency primitives to easily be able to scale operations as we onboard experiments. The service uses as its first credentials a set of kerberos keytabs, stored on the same secure machine that the Managed Tokens service runs on. These kerberos credentials allow the service to use htgettoken via condor_vault_storer to store vault tokens in the HTCondor credential managers (credds) that run on the batch system scheduler machines (HTCondor schedds); as well as downloading a local, shorter-lived copy of the vault token. The kerberos credentials are then also used to distribute copies of the locally-stored vault tokens to experiment submit points. When experimenters schedule jobs to be submitted, these distributed vault tokens are used to access a Hashicorp Vault instance (run separately from the Managed Tokens service), and previously-stored refresh tokens there are used to obtain the bearer token that is submitted with the job. We will discuss here the design of the Managed Tokens service, including elaborating on certain choices we made with regards to concurrent operations, configuration, monitoring, and deployment.

Bhat, Shreyas↗
DOE OSTI2021

A Neural Lyapunov Approach to Transient Stability Assessment in Interconnected Microgrids

We propose a neural Lyapunov approach to assessing transient stability in power electronic-interfaced microgrid interconnections. The problem of transient stability assessment is cast as one of learning a neural network-structured Lyapunov function in the state space. Based on the function learned, a security region is estimated for monitoring the security of interconnected microgrids in real-time operation. The efficacy of the approach is tested and validated in a grid-connected microgrid and a three-microgrid interconnection. A comparison study suggests that the proposed method can achieve a less conservative characterization of the security region, as compared with a conventional approach.

Huang, Tong↗
DOE OSTI2023

Design of Nuclear Criticality Safety Framework for Hands-on Construction of Fast Systems Over Ranges of Multiplication

Since 1945, Los Alamos National Laboratory (LANL) has performed critical experiments, primarily at the Los Alamos Critical Experiments Facility (LACEF) at Technical Area 18 (TA-18). Since 2011, these experiments have been conducted by the National Criticality Experiments Research Center (NCERC), operated by LANL, at the Device Assembly Facility (DAF) in the Nevada National Security Site (NNSS). These experiments utilize various types of Special Nuclear Material (SNM). Some of these experiments utilize what is referred to as the Rocky Flat Shells, which are called such as they came from the Rocky Flats Plant. These concentric hemi-shells are made of Highly Enriched Uranium (HEU), which is 93 w/o 235U. Fig. 1. Subset of the Rocky Flat Shells LANL is designing a new subcritical hands-on experiment with the goal of achieving a neutron multiplication in the range of 50 to 200, which correlates to Keff values of 0.98 to 0.995. ANSI/ANS-1 is the standard for Conduct of Critical Experiments which governs critical operations at NCERC. Section 3.9 of ANSI/ANS-1 states that when manipulating a critical assembly by hand, the predicted k eff of a known configuration should not exceed 0.95 (a neutron multiplication of 20). This presents a challenge, as this system would have a higher multiplication than 20 and the assembly would have to remain subcritical in normal and credible accident scenarios. To ensure the safety of such an assembly, the different normal and abnormal conditions that could alter the criticality 1 MCNP® and Monte Carlo N-Particle® are registered trademarks owned by Triad National Security, LLC, manager and operator of Los Alamos National Laboratory. Any third party use of such registered marks should be properly of the system must be considered and analyzed. If such a condition is deemed to be credible, it will be further investigated using the Monte Carlo N-Particle (MCNP) transport code. If the results of these simulations show that a k eff larger than one could be possible, modifications to the assembly will be made until such an event is deemed no longer possible.

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗
DOE OSTI2025

A Managed Tokens Service for Securely Keeping and Distributing Grid Tokens

Fermilab is transitioning authentication and authorization for grid operations to using bearer tokens based on the WLCG Common JWT (JSON Web Token) Profile. One of the functionalities that Fermilab experimenters rely on is the ability to automate batch job submission, which in turn depends on the ability to securely refresh and distribute the necessary credentials to experiment job submit points. Thus, with the transition to using tokens for grid operations, we needed to create a service that would obtain, refresh, and distribute tokens for experimenters' use. This service would avoid the need for experimenters to be experts in obtaining their own tokens and would better protect the most sensitive long-lived credentials. Further, the service needed to be widely scalable, as Fermilab hosts many experiments, each of which would need their own credentials. To address these issues, we created and deployed a Managed Tokens Service. The service is written in Go, taking advantage of that language's native concurrency primitives to easily be able to scale operations as we onboard experiments. The service uses as its first credentials a set of kerberos keytabs, stored on the same secure machine that the Managed Tokens service runs on. These kerberos credentials allow the service to use htgettoken via condor_vault_storer to store vault tokens in the HTCondor credential managers (credds) that run on the batch system scheduler machines (HTCondor schedds); as well as downloading a local, shorter-lived copy of the vault token. The kerberos credentials are then also used to distribute copies of the locally-stored vault tokens to experiment submit points.

46 INSTRUMENTATION RELATED TO NUCLEAR SCIENCE AND ↗
NASA NTRS2023

Concept of Operations for an In-time Aviation Safety Management System (IASMS) for Upper E Airspace

The National Airspace System undergoes continuous change including in the Upper Class E airspace involving increasingly complex operations and a widening diversity of vehicles. To secure a safe future system, the National Academies recommended an In-time Aviation Safety Management System (IASMS) that is extensible to Upper E. Current Air Traffic Management is not cost-effective to scale for future Upper E operations and diversity of vehicles so the Federal Aviation Administration developed an Upper E Traffic Management ConOps to safely integrate the diverse operations and vehicles having different performance characteristics and flight missions without disrupting current operations including space launch and reentry, suborbital flights, supersonic and hypersonic flights, slow moving or stationary unmanned balloons, and long endurance fixed wing vehicles that are slow, stationary, or high speed. IASMS integrates state-of-the-art predictive modeling with reactive and proactive analytics to detect hazards and mitigate risk precursors for Upper E operators. IASMS identifies emergent safety risks exposed by transformation of the NAS with new and increasingly complex operations. Safety intelligence will also expand the data available and offer insight to new approaches for implementing safety improvements to mitigate risk with more seamless “in-time” integration across the policy, risk management, safety assurance, and promotion pillars of SMS.

K Ellis↗
DOE OSTI2020

Sandia National Laboratories Annual Site Environmental Report, 2019: New Mexico

Sandia National Laboratories is a multimission laboratory managed and operated by National Technology & Engineering Solutions of Sandia, LLC, a wholly owned subsidiary of Honeywell International Inc., for the United States Department of Energy (DOE) National Nuclear Security Administration. The National Nuclear Security Administration’s Sandia Field Office administers the contract and oversees contractor operations at Sandia National Laboratories, New Mexico. Activities at the site support research and development programs with a wide variety of national security missions, resulting in technologies for nonproliferation, homeland security, energy and infrastructure, and defense systems and assessments. DOE and its management and operating contractor are committed to safeguarding the environment, assessing sustainability practices, and ensuring the validity and accuracy of the monitoring data presented in this Annual Site Environmental Report. This report summarizes the environmental protection and monitoring programs in place at Sandia National Laboratories, New Mexico, during calendar year 2019. Environmental topics include air quality, ecology, environmental restoration, oil storage, site sustainability, terrestrial surveillance, waste management, water quality, and implementation of the National Environmental Policy Act. This report is prepared in accordance with and as required by DOE O 231.1B, Admin Change 1, Environment, Safety, and Health Reporting, and has been approved for public distribution.

54 ENVIRONMENTAL SCIENCES↗
DOE OSTI2021

Assessment of the High Flux Isotope Reactor Cybersecurity Initiative

Recent cyber-attacks on industrial control systems, and inadvertent exposure of nuclear plant systems to cyber-exploits underscore the need for plant operators to adopt and deploy cyber-security defense solutions made for industrial control systems. Of increasing concern is the fact that international cyber hackers are beginning to target critical infrastructure, and because these more modern controls systems depend on advanced use of digital systems, they are more vulnerable than ever before to cyber-attacks. Traditional cyber defense strategies and products that have been available for decades are tailored for use on IT or corporate networks but can cause interruptions and catastrophic damage when deployed on industrial control system networks. The Department of Energy (DOE) Office of Nuclear Energy established the Gateway for Accelerated Innovation in Nuclear (GAIN) program to provide private companies pursuing innovative nuclear energy technologies with access to the technical support necessary to move toward commercialization. One of these GAIN small business vouchers was awarded to Dragos, Inc. to enable collaboration with Oak Ridge National Laboratory (ORNL) to evaluate the Dragos Platform on a production nuclear reactor test bed, hence laying the path for future commercial adoption. The vision was to provide a guide for industrial operators on implementing an industrial monitoring solution and to show how these solutions can be deployed without causing safety and reliability issues. This report documents the results of the collaboration between ORNL and Dragos, Inc.

21 SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLANTS↗
DOE OSTI2020

Site Environmental Report for Sandia National Laboratories California (2019)

Sandia National Laboratories, California (SNL/CA) is a Department of Energy (DOE) facility. The management and operations of the facility are under a contract with the DOE's National Nuclear Security Administration (NNSA). On May 1, 2017, the name of the management and operating contractor changed from Sandia Corporation to National Technology & Engineering Solutions of Sandia, LLC (NTESS). The DOE, NNSA, Sandia Field Office administers the contract and oversees contractor operations at the site. DOE and its management and operating contractor for Sandia are committed to safeguarding environmental protection, compliance, and sustainability and to ensuring the validity and accuracy of the monitoring data presented in this Annual Site Environmental Report. This Site Environmental Report for 2019 was prepared in accordance with DOE Order 231.1B, Environment, S afro and Health &potting (DOE 2012). The report provides a summary of environmental monitoring information and compliance activities that occurred at SNL/CA during calendar year 2019, unless noted otherwise. General site and environmental program information is also included.

54 ENVIRONMENTAL SCIENCES↗
DOE OSTI2021

Site Environmental Report for 2020, Sandia National Laboratories, California

Sandia National Laboratories, California (SNL/CA) is a Department of Energy (DOE) facility. The management and operations of the facility are under a contract with the DOE's National Nuclear Security Administration (NNSA). On May 1, 2017, the name of the management and operating contractor changed from Sandia Corporation to National Technology & Engineering Solutions of Sandia, LLC (NTESS). The DOE, NNSA, Sandia Field Office administers the contract and oversees contractor operations at the site. DOE and its management and operating contractor for Sandia are committed to safeguarding environmental protection, compliance, and sustainability and to ensuring the validity and accuracy of the monitoring data presented in this Annual Site Environmental Report. This Site Environmental Report for 2020 was prepared in accordance with DOE Order 231.1B, Environment, Safety and Health Reporting (DOE 2012). The report provides a summary of environmental monitoring information and compliance activities that occurred at SNL/CA during calendar year 2020, unless noted otherwise. General site and environmental program information is also included.

54 ENVIRONMENTAL SCIENCES↗