Search NASA⌕ Search

SEARCH · Search NASA

Results for “current attack”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

620 records · Page 35
All sourcesNASA NTRSDOE OSTI
DOE OSTI2021

Cybersecurity for Grid Connected eXtreme Fast Charging (XFC) Station (CyberX) (Final Scientific/Technical Report)

This report summarizes the activities conducted under the DOE VTO funded project DE- EE0008451, where ABB Inc. (ABB), in collaboration with Idaho National Laboratory (INL), APS Global (APS), and XOS Trucks (XOS) pursued the development of a cyber-resilient extreme fast charging (XFC) management system. This project entitled Cybersecurity for Grid Connected eXtreme Fast Charging (XFC) Station (CyberX) focuses on a resilient architecture for smart charging EV Supply Equipment (EVSE) device control and Coordinated Anomaly Detection System (CADS) features that can be added at the charging site depot level to increase cybersecurity. The project was split into two budget periods focused first on developing the threat model and resilient control concepts and second on testing, improving, and validating those developed resilient control algorithms and features with a focus on key vulnerabilities identified during the threat assessment portion of the project. During the first budget period of the CyberX project, the ABB led team focused on activities to identify, model, and quantitatively prioritize high-impact attack scenarios with potential cyber-physical effects while also modeling and developing concepts for a resilient control system that could securely address integration of DERs and other resources with EV charging. Development of the security focused XFC management system (XMS) was accomplished first by offline simulation using a developed XFC station or depot with 480V input level and simulating measurement inputs to monitoring and control systems in concept development. A representative distribution grid model was developed supporting an EV charging site model with BESS and 6 general EV charging models. These EV charging models allowed multiple configurations of charging level, multiple connected protection and measurement devices, and simulation function to show general compromise of EV, BESS, and protection features based on parallel threat analysis. During the second budget period, the EV site and supporting systems model was developed in more detail and converted from offline model to real-time to real-time with EV charging hardware in the loop (HIL). The resilient control architecture developed as concept in the first part of the project was further tested and validated for integration of local energy resources and XFC charging station site equipment while maintaining cybersecure operating principles. The proposed resilient architecture for smart charging and cybersecurity features consists of two main concepts developed and tested within the project. The first concept is an XFC management system (XMS) consisting of a hardware gateway, software platform, and Supervisory Control and Data Acquisition (SCADA) or Distribution Management System integration components. The second concept is a Coordinated Anomaly Detection System (CADS) which forms a primarily software-related subsystem of the total CyberX solution focused on monitoring system measurements, estimation of measurement states, and predicting current at the utility point of interaction based on machine learning for anomaly detection.

33 ADVANCED PROPULSION SYSTEMS↗
NASA NTRS2001

Environmental Barrier Coatings for Silicon-Based Ceramics

Silicon-based ceramics, such as SiC fiber-reinforced SiC (SiC/SiC ceramic matrix composites (CMC) and monolithic silicon nitride (Si3N4), are prime candidates for hot section structural components of next generation gas turbine engines. Silicon-based ceramics, however, suffer from rapid surface recession in combustion environments due to volatilization of the silica scale via reaction with water vapor, a major product of combustion. Therefore, application of silicon-based ceramic components in the hot section of advanced gas turbine engines requires development of a reliable method to protect the ceramic from environmental attack. An external environmental barrier coating (EBC) is considered a logical approach to achieve protection and CP long-term stability. The first generation EBC consisted of two layers, mullite (3Al2O3-2SiO2) bond coat and yttria-stabilized zirconia (YSZ, ZrO2-8 Wt.% Y2O3) top coat. Second generation EBCs, with substantially improved performance compared with the first generation EBC, were developed in the NASA High Speed Research-Enabling Propulsion Materials (HSR-EPM) Program. The first generation EBC consisted of two layers, mullite (3Al2O3-2SiO2) bond coat and yttria-stabilized zirconia (YSZ, ZrO2-8 wt.% Y2O3) top coat. Second generation EBCs, with substantially improved performance compared with the first generation EBC, were developed in the NASA High Speed Research-Enabling Propulsion Materials (HSR-EPM) Program (5). They consist of three layers, a silicon first bond coat, a mullite or a mullite + BSAS (BaO(1-x)-SrO(x)-Al2O3-2SiO2) second bond coat, and a BSAS top coat. The EPM EBCs were applied on SiC/SiC CMC combustor liners in three Solar Turbines (San Diego, CA) Centaur 50s gas turbine engines. The combined operation of the three engines has accumulated over 24,000 hours without failure (approximately 1,250 C maximum combustor liner temperature), with the engine in Texaco, Bakersfield, CA, accumulating about 14,000 hours. As the commercialization of Si-based ceramic components in gas turbines is on the horizon, a major emphasis is placed on EBCs for two reasons. First, they are absolute necessity for the protection of Si-based ceramics from water vapor. Second, they can enable a major enhancement in the performance of gas turbines by creating temperature gradients with the incorporation of a low thermal conductivity layer. Thorough understanding of current state-of-the-art EBCs will provide the foundation upon which development of future EBCs will be based. Phase stability and thermal conductivity of EPM EBCs are published elsewhere. This paper will discuss the chemical/environmental durability and silica volatility of EPM EBCs and their impact on the coating's upper temperature limit.

Lee, Kang N.↗
DOE OSTI2022

Oxidation Behavior and Property Degradation of Nuclear Graphites

During its multidecade operation in the core of nuclear reactors, graphite components are subjected to aggressive and continuous exposure to a high field of ionizing and neutron irradiation, high temperature, and various types of present and postulated chemical attacks. High density, high crystallinity polygranular synthetic graphite is unique among other materials for its extraordinary capacity of resisting and adapting to the aggression inflicted by high temperature, high energy neutron bombardment and ionizing gamma radiation. But, as a carbonaceous material, even though of very high purity, graphite is reactive towards common oxidizing agents: oxygen, carbon dioxide, water. Safe operation of HTGRs relies, among other aspects, on engineered safeguard systems for efficient and continuous protection of graphite components against oxidation. Graphite oxidation behavior was, and continues to be, an important direction of theoretical and experimental research, engineering analyses, models and simulations, and design and safety regulations. The avalanche of publications, reports, experimental data, computer codes, and regulatory documents related to oxidation behavior of nuclear graphite is now accelerating to new levels, prompted by the increased interest for nuclear energy as a clean, carbon-free energy source. Even though public’s perception of nuclear energy advantages may still be influenced by the memories of past accidents of nuclear reactors from generations II and III, the community of informed scientists and engineers, regulators and statemen knows that generation IV of nuclear reactors is designed at very high safety standards, doubled by great advances of scientific knowledge and technological progress. One of routes of these recent advances is directed at better understanding of graphite oxidation behavior, its relationship with graphite manufacturing and microstructural properties, along with the effects of various environmental factors and process variables. Together, the recent progress in manufacturing, properties characterization, and modeling of intricated physical and chemical processes that concur to the oxidation behavior led to development of powerful simulation codes able to analyze various scenarios of normal operation and hypothetical off-normal events, and thus to clearly specify the allowable parameters envelopes for the designers, constructors, and operators of current and future modular HTGRs. This review begins with an introduction on manufacturing methods, structure, and properties of nuclear graphite, including basic requirements that this specialty graphite type must satisfy for nuclear use. It continues with a chapter on environmental effects on nuclear graphite, where emphasis is placed less on irradiation and much more on oxidation phenomena, their safety implications, and the basic traits of chronic and acute oxidation by air (oxygen) and water (humidity, steam). Particular attention is placed on the three graphite grades of interest for this document (IG-110, NBG-18, PCEA). A chapter on properties degradation induced by oxidation follows, with focus on density, dimensional, and mechanical properties changes. The next chapter is intended as a brief review of various approaches used for modeling of graphite oxidation behavior. It summarizes the progress of oxidation models, from the early attempts to complex computational approaches interfaced with specialized computer codes designed for nuclear reactor simulations. Last, a list is presented of knowledge gaps where more research is needed. A short summary concludes the review.

36 MATERIALS SCIENCE↗
DOE OSTI2021

Selective penetration behavior of microgels in superpermeable channels and reservoir matrices

Gel treatment is an effective way to attack excessive water production in many mature oilfields around the world. Selective penetration is desired for successful gel treatments. That is, gel materials should easily penetrate the target zones (i.e., channeling features such as superpermeable channels) without entering/damaging the nontarget zones (i.e., reservoir matrices or oil zones). This study revealed that presence of threshold penetration pressure (ΔP th ) was responsible for selective penetration behavior of tested microgels. The concept of ΔP th was utilized to figure out favorable working conditions for effective gel treatments. Microgel dispersions were injected into superpermeable (super-k) sandpacks (mimicking super-k channels in reservoirs, 60–221 darcies), heterogeneous models with super-k channels (79–230 darcies), and sandstone cores (mimicking reservoir matrices, 50–5000 md). The results demonstrated that a minimum differential driving pressure (i.e., threshold penetration pressure, ΔP th ) was required to push microgel particles to penetrate channels or matrices. The critical penetration behavior was closely related to the particle/pore size ratio. Low ΔP th at smaller particle/pore ratios was beneficial to allow easy penetration of gel materials into the channeling zones. On the contrary, high ΔPth at larger particle/pore ratios was desirable to prevent gel materials from massively invading and damaging the matrices. Instead, the gel particles accumulated at the inlet surface, and a gel cake was gradually formed. The cake further prevented the invasion of the gels. The cake could be removed by chemical breakers to resume the injectivity/productivity of the matrices. Correlations were developed to describe the relationship between ΔP th and particle/pore ratio. A distinct transition was identified at the particle/pore ratio of about 3. This research could help identify the favorable conditions to achieve successful gel treatments. In an effective conformance treatment, the particle/pore ratio in the channel should be sufficiently low to allow easy penetration of gel materials into the channel (e.g., particle/pore ratio<2 in this study). Meanwhile, the particle/pore ratio in the matrix should be large enough to support a high ΔP th and thus prevent massive gel invasion into the matrix. This study advances the current pore scale studies (a single particle passing through a single channel) to Darcy-scale characterization.

02 PETROLEUM↗
NASA NTRS2020

Assessment of Transition Modeling Capability in OVERFLOW with Emphasis on Swept-Wing Configurations

In preparation for comparisons with data obtained from the recently concluded experiments in the National Transonic Facility at the NASA Langley Research Center on the new common research model with natural laminar flow (CRM-NLF), an assessment of the current transition modeling capability in the NASA OVERFLOW 2.2o code has been carried out. A combination of the available experimental data and linear stability analysis is used to evaluate the accuracy and robustness of these models for selected swept-wing type configurations, with significant crossflow. An additional goal for this work involves providing a comparative assessment of the relevant transition models in the context of a single flow solver and identifying model limitations as well as the potential for future improvements that would help strengthen the physical basis of such transition models. Included in this investigation is an assessment of the sensitivities of the underlying transition models to grid resolution (wall-normal, as well as streamwise and spanwise) and the values of extra input parameters such as the level of surface roughness and freestream turbulence variables. The flow configurations targeted in this assessment include the NASA NLF(2)-0415 swept-wing configuration, the sickle-shaped wing introduced by the Technical University of Braunschweig, and the wing-body configuration of the CRM model from the fourth and fifth AIAA CFD Drag Prediction Workshops.

Freestream velocity↗
NASA NTRS2019

Shockwave/Boundary-Layer Interaction Studies Performed in the NASA Langley 20-Inch Mach 6 Air Tunnel

This paper highlights results from a collaborative study performed by The University of Tennessee Space Institute (UTSI) and NASA Langley Research Center on the Shockwave/Boundary-Layer Interaction (SWBLI) generated by a cylindrical protuberance on a flat plate in a Mach 6 flow. The study was performed in the 20-Inch Mach 6 Air Tunnel at NASA Langley Research Center and consisted of two separate entries. In the first entry, simultaneous high-speed schlieren and high-speed pressure-sensitive paint (PSP) imaging – which was performed for the first time in the 20-Inch Mach 6 facility at NASA Langley – were performed as well as simultaneous high-speed schlieren and oil-flow imaging. In the second entry, the model configuration was modified to increase the size of the interaction region. High-speed schlieren and infrared thermography (IR) surface imaging were performed in this second entry. The goal of these tests was to characterize the SBLI in the presence of a laminar, transitional, and turbulent boundary layer using high-speed optical imaging techniques. AoA = sting angle-of-attack (°) dcylinder = cylinder diameter (mm) dtrip = cylindrical tripping element diameter (mm) Δshock = shock stand-off distance (mm) hcylinder = cylinder height (mm) htrip = cylindrical tripping element height (mm) HSS = high-speed schlieren M∞ = freestream Mach number PSP = pressure-sensitive paint Re∞ = freestream unit Reynolds number (m-1) SWBLI = shockwave/boundary-layer interaction θplate = model plate angle (°) Introduction his paper highlights two experimental entries performed in the 20-Inch Mach 6 Air Blowdown Tunnel at NASA Langley Research Center in collaboration with The University of Tennessee Space Institute (UTSI). The purpose of these entries was to characterize the dynamic shockwave/boundary-layer interaction (SWBLI) between a vertical cylinder on a flat plate and laminar, transitional (XSWBLI), and turbulent (SWTBLI) boundary layers with a freestream Mach number of 6 using non-intrusive optical diagnostics. Experiments performed by Murphree et al.1,2 were among the first to specifically characterize XSWBLI induced by a vertical cylinder on a flat plate geometry using several optical measurement techniques. Recent optical studies of XSWBLI phenomenon have been performed by UTSI at Mach 2 in their low-enthalpy blow wind tunnel3-8 and by Texas A&M University and UTSI at Mach numbers of 6 and 7 in their Adjustable Contour Expansion wind tunnel.9 The experiments described in this paper were intended to complement previous studies by expanding the freestream unit Reynolds number range, Re∞, over which the XSWBLI phenomena has been observed. Additionally these experiments, made possible under NASA’s new facility funding model under the Aeronautics Evaluation and Test Capabilities (AETC) project, promoted collaboration between university and NASA researchers. The initial entry in the 20-Inch Mach 6 Air Tunnel at NASA Langley occurred in December of 2016. Originally, testing was to occur in November of 2016 in the 31-Inch Mach 10 Air Tunnel at NASA Langley. This facility was chosen so that the XSWBLI phenomenon could be observed at much higher Mach numbers than had previously been attempted in ground test experiments. The model selected for this experiment, a 10° half-angle wedge with a sharp leading edge (described in detail in section II.B), had previously been used by Danehy et al. [10] for boundary layer transition studies using the nitric oxide planar laser-induced fluorescence (NO PLIF) flow visualization technique. In that work, it was determined that transition could be induced downstream of a single htrip = 1-mm tall, dtrip = 4-mm diameter cylindrical tripping element and that the streamwise location of the transition could be changed for a single Re∞ by changing the model angle-of-attack (AoA) (see Fig. A3 in Ref. [10] for more details). Based on the findings of that work, a decision was made to use the wedge model with the cylindrical tripping element to trip the boundary layer flow ahead of a cylindrical protuberance in order to achieve a XSWBLI. Unfortunately, the 31-Inch Mach 10 facility had been taken offline for repairs in October of 2016 and a decision was made to move the test to the 20-Inch Mach 6 facility. Since the behavior of the boundary layer with the chosen model configuration had not been studied before in that facility and the available test time was limited, the entry was considered to be exploratory and was used to collect spatially-resolved and time-resolved flow and surface visualization data that would be used to inform a second entry. Test techniques included simultaneous high-speed schlieren (HSS) captured at 160 kHz and high-speed pressure sensitive paint captured at 10 kHz as well as oil flow visualization, captured at 750 Hz. The second entry in the 20-Inch Mach 6 facility occurred in June and July of 2017. In this follow-on test, modifications to the wind tunnel model were made based on observations made during the first entry and included removing the cylindrical tripping element, increasing the size of the cylinder used to induce the SWBLI to increase the size of the interaction while simultaneously improving spatial resolution, and using a swept ramp array, similar to that described in Ref. [11], to trip the flow to turbulence. Simultaneous HSS (captured at 140 kHz, 100 kHz, and 40 kHz) and conventional IR thermography (captured at 30 Hz) imaging were performed simultaneously in this follow-on entry. This paper is intended to serve as a summary of the work performed during these two entries, to detail lessons learned from each entry, and to highlight some of the datasets acquired. Details on the experimental setup, model configuration, and techniques used are provided. Papers providing a more rigorous analysis of data acquired during the second entry, including statistical, spectral, and modal decomposition methods, can be found in Refs. [12,13]. An entry examining XSWBLI in the 31-Inch Mach 10 Blowdown Wind Tunnel facility is currently planned for mid-to-late calendar year 2019, pending the success of facility repairs. The work performed and described in this paper and the upcoming entry in the 31-Inch Mach 10 facility at NASA Langley have been made possible by NASA’s new facility funding model under the Aeronautics Evaluation and Test Capabilities (AETC) project. Wind Tunnel Facility All experiments discussed in this paper were performed in the 20-Inch Mach 6 Air Tunnel at NASA Langley Research Center. Specific details pertaining to this facility can be found in Refs. [14,15], with only a brief description of the facility provided here. For both entries, the nominal freestream unit Reynolds number was varied between 1.8×106 m-1 (0.5×106 ft-1) and 26.3×106 m-1 (8×106 ft-1). The nominal stagnation pressure was varied between 0.21 MPa and 3.33 MPa and the nominal stagnation temperature was varied between 480 K and 520 K to achieve the desired Re∞ condition. For all runs, the nominal freestream Mach number was 6. The nearly square test section is 520.7-mm (20.5-inches) wide by 508-mm (20-inches) high. Two 431.8-mm (17-inch) diameter windows made of Corning 7940, Grade 5F schlieren-quality glass serve as the side walls of the tunnel and provide optical access for the high-speed schlieren measurements. A rectangular window made of the same material as the side windows served as the top wall of the test section and provided optical access for the high-speed PSP and oil flow measurements. For the second entry, this top window was replaced with a Zinc Selenide (ZnSe) window with an anti-reflection coating capable of passing IR wavelengths between 8μm and 12μm with greater than 98% transmittance. The model was sting supported by a strut attached to a hydraulic system that allows for the model pitch angle to be adjusted between -5° to +55°. For the first entry, an initial pitch/pause sweep of the model AoA was performed to observe the resulting SWBLI. Ultimately, however, the sting pitch angle for this entry was fixed at +10.0° so that the angle of the top surface of the wedge relative to the streamwise axis of the tunnel (referred to herein as the plate angle, θplate), was θplate = 0°. For the second entry, θplate = 0° and θplate = -13.25° were initially tested with the swept ramp array (discussed in the following section) to determine which orientation produced conditions most favorable for XSWBLI to occur based on the heating signatures observed over the top surface of the model in the IR thermography images. Based on these initial tests, θplate = -13.25° was set for the remainder of the runs in the second entry. For both entries, any model changes were performed in a housing located beneath the closed test section. Prior to performing a run of the tunnel, the housing was sealed and the tunnel started. Once the appropriate freestream conditions were achieved, the model was injected into the test section using a hydraulic injection system. B. Model Geometry For all runs, a 10° half-angle (20° full-angle) wedge model with a sharp leading edge was used. The model is described in detail in Refs. [10,16]. The top surface of the sharp leading edge of the model extended 47.8 mm from its upstream-most edge to a junction with the upstream edge of a stainless steel top plate that then extended an (a) (c) (b) Fig. 1 (a) Schematic of top surface of wedge model with gas seeding insert, (b) perspective view of the model in the 20-Inch Mach 6 tunnel with centerline pressure orifices on sharp leading edge, and (c) a perspective view of the model with stainless steel (top) and SLA middle insert (bottom) during the first entry. Flow occurs from left to right.

Bathel, Brett F.↗
DOE OSTI2019

Innovative Approach to SCC Inspection and Evaluation of Canister in Dry Storage

This final report is summarized four years of work of awarded project number DE-NE0008442\IRP-15-9318, title as: “Innovative Approach to SCC Inspection and Evaluation of Canister in Dry” supported by Nuclear Energy University Program\Integrated Research Program, NEUP\IRP, where last year is an extension of no cost project. This research work is focused on the possible degradation of dry storage canister holding used nuclear fuel (UNF), due to exposure of marine atmospheric environment. The canister usually designed from a welded austenitic stainless-steel of types 304 or 316, encased in a concrete shell known as an overpack. This canister designed and licensed for 20 years with an extension period need to be determined, in addition 20 years or more. These casks are located throughout the country in Independent Spent Fuel Storage Installations (IFSFIs) often on the site close to nuclear power plants, that are often located in coastal or lake-side regions where a marine atmospheric salt air environment exist. As a result of several recent decisions, such as not pursuing Yucca Mountain as a long-term geologic repository storage facility for UNF and the cancellation of the construction of a reprocessing facility in the 1980s due to proliferation risks, interim dry storage facilities for long-term storage are vital option for the immediate future of nuclear energy technology. One of the primary concerns with respect to the long-term performance of the storage casks is the potential for corrosion initiation due to deliquescence of salts deposited on the canister surface as aerosols; in regions of high residual weld stresses, this may lead to localized stress corrosion cracking (SCC). Dust and aerosols in the air being drawn though ventilation openings in the overpacks of passively ventilated dry canister storage systems may be deposited on the stainless-steel canister outer surfaces. Under these conditions, localized corrosion attack can occur. Chlorides ions deliquescence on the canister surface, a process by which the salts essentially pull moisture out of the air, creating a concentrated salt brine on the canister surface. Chloride-induced stress corrosion cracking (CISCC) of welded zones is of special concern, as it a well-documented mode of attack for austenitic stainless steels marine environments, and many independent spent fuel storage installations (ISFSIs) are located in coastal areas. Recent canister inspections have shown that chloride salts are present on the surface of in-service canisters at near-marine settings. However, canister surface inspections of satisfactory resolution to detect SCC have never been carried out in details, because access to the canister surfaces through vents in the overpacks is extremely limited, and high radiation fields make removal of the canisters from the overpacks undesirable. Although no significant corrosion damage has not been detected up to date, there is concern that this may lead to pitting corrosion, which could in turn develop into stress corrosion cracking, causing canister structural failure. The initiation and propagation of pitting corrosion has been widely studied in full immersion conditions, but limited studies have been done on marine atmospheric conditions, which is a focus of this work, these includes laboratory and field experimentally and propagation rate modeling of pitting and transition to crack, and crack propagation rate. It is known, however, that the rate of atmospheric corrosion can be affected by variations in relative humidity (RH), salt density, salt type, droplet area, temperature and stainless-steel microstructure and residual stress particularly in welded zones of canisters. The integrated research program has identified potential deterioration mechanisms for the stainless-steel canisters containing the UNF in dry storage that require detailed research and investigation and will have an impact on the performance of long-term interim storage under the normal and extreme environmental conditions experienced during the duration of this storage. The prediction and monitoring of canister corrosion processes while in storage can provide important data for the assessment of interim storage performance and the safety to the public. This report comprises of mainly the published results in different journals and covering a wide range spectrum from susceptible stainless-steel types 304\316 microstructural analysis through the implant test at atmospheric environment, residual stress analysis of mockup canister and simulation, inspection methodology includes nonlinear ultrasound and vibro-thermography and stochastic modeling and simulation of pits propagation rates and transition to cracks. Description of field specimens installed at ISFSI of Main Yankee is given in the following chapters and will be analyzed in the coming future and serves as an important data for a stochastic analysis as it was drawn from the publications and reports described in this report. The purpose of this report is to bring together the project efforts that includes improving in our understanding of structural aging performance at current dry storage casks fleet at ISFSIs in the context of remedial maintenance and inspection applications technologies.

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗
DOE OSTI2019

Authentication Protocol for ICS without Encryption

Industrial control systems (ICS) describes the different types of control systems and associated instrumentation, which includes the devices, systems, networks, and controls used to operate and/or automate industrial processes. Depending on the industry, each ICS functions differently and are built to electronically manage tasks efficiently. Historically, industrial plants have included networking, and changes have been made over time without consideration for security. Many ICS devices currently have inadequate security features. Adding encryption in ICS is undesirable because many of the new detection method involves deep packet inspection. Therefore, we propose to develop a method of providing authentication between devices without encrypting the data. This testbed design will allow rapid development and experimentation with Cyber Physical Systems. Modbus connects to a supervisory computer with a Remote Terminal Unit (RTU) in Supervisory Control and Data Acquisition (SCADA) systems. Our project seeks to enhance security in the ICS environment by adding device authentication to the lower levels of the plant floor. This approach was selected as it allows verification of the sender of data from level 1/level 0 devices up to supervisory systems. This addition is desirable as it adds enhanced verification to the integrity of system data without obscuring (via encryption) the data being transmitted across the network. This is important because many ICS systems are real time critical (decryption adds to latency) and many other good security options require deep packet inspection (which encryption completely defeats). To accomplish this, a proof of concept of adding an authentication scheme was designed and will be tested with a common ICS protocol. The setup includes a single serial cable connecting the serial ports on two devices, a Master and a Minion. Authentication will occur in the following methods: - Data layer involving Transport Layer Security/Secure Socket Layer (TLS/SSL); - TCP/IP route implementation; - Key exchange algorithm; - Raspberry Pi programming for authentication. A portion of the setup includes adding Raspberry Pi into the system as the device is handling the authentication for the network traffic. Modbus is the chosen ICS protocol. It is used to transmit signals from instrumentation and control devices back to a main controller or data gathering system. Typically, the device identity is assumed but not verified. For verifying device identity, we constructed a digital signature architecture with TLS. A novel adaptation of this is to use only the digital signature that is provided and not the encryption capability. This allows ICS traffic to flow unobscured while still providing verification for the integrity of the data. Verification of this process will involve adding additional I/O level network devices with spoofed IP addresses and detecting the authenticated versus unauthenticated traffic. Our TLS implementation will have encryption disabled but should still allow for digital signing of data. This will enable our system to distinguish between real end devices and spoofed end devices. This experiment is presently building the test setup. It is focusing on a small setting to identify authenticated and unauthenticated devices on the network. This should allow for scaling to a larger network size after the initial proof of concept. One concern with this scheme is a certificate deployment has a large scale key management. Network size will thus increase the key management task for security. In addition, we believe that further research should be done on exploring the use of this method to defeat man-in-the-middle attacks.

42 ENGINEERING↗