Search NASA⌕ Search

SEARCH · Search NASA

Results for “Operations Security”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 721 records · Page 40
All sourcesNASA NTRSDOE OSTI
DOE OSTI2021

The Role of the Digital Thread for Security, Resilience, and Adaptability in Manufacturing

The manufacturing sector is dramatically evolving with recent technical and digital advances. Among these, the digital thread is revolutionizing manufacturing operations well beyond the historic downloading of programs to computer numerically controlled (CNC) machine tools and the uploading of edited programs from CNC controllers. The digital thread is “the communication framework that enables a connected data flow and integrated view of the asset’s data throughout its lifecycle across traditionally siloed functional perspectives” (Leiva 2016). It is pervasive around the world and has changed the way society operates; for example, map apps are used to provide time-optimal directions to destinations using real-time traffic feedback. The digital thread makes it possible to digitally verify products, ensure that the latest technologies are deployed across the entire manufacturing ecosystem, and strengthen the workforce by making each individual more efficient and effective. These three foundational advanced manufacturing concepts will ensure a next-generation secure, resilient, and adaptable manufacturing ecosystem and sustainably support current and future needs of society (Lynn et al. 2020).

99 GENERAL AND MISCELLANEOUS↗
DOE OSTI2022

Wiretap

SAND2023-12116O Wiretap is an offensive security software package meant for penetration testers and red teams. Unlike a traditional VPN, Wiretap transparently proxies networking traffic without requiring administrator privileges. Sandia National Laboratories is a multimission laboratory managed and operated by National Technology & Engineering Solutions of Sandia, LLC, a wholly owned subsidiary of Honeywell International Inc., for the U.S. Department of Energy’s National Nuclear Security Administration under contract DE-NA0003525.

Rindels, Raymond↗
DOE OSTI2026

A Framework for Building Security into the Design Process

This report presents guidance to support the implementation of security objectives during the design process for nuclear facilities using an organization’s quality management system. The guidance in this document is intended for design vendors and operators of nuclear power facilities. Additionally, this guidance document can be beneficial to regulatory bodies, industry partners, customers, and other stakeholders within the nuclear power market. This report aims to ensure security consequences are identified before designs are completed, which may lead to reduced costs and higher security effectiveness and efficiency.

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗
DOE OSTI2026

A Framework for Building Security into the Design Process

This report presents guidance to support the implementation of security objectives during the design process for nuclear facilities using an organization’s quality management system. The guidance in this document is intended for design vendors and operators of nuclear power facilities. Additionally, this guidance document can be beneficial to regulatory bodies, industry partners, customers, and other stakeholders within the nuclear power market. This report aims to ensure security consequences are identified before designs are completed, which may lead to reduced costs and higher security effectiveness and efficiency.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗
DOE OSTI2023

A Review of Visualization Methods for Cyber-Physical Security: Smart Grid Case Study

Cyber-Physical Systems (CPSs) are becoming increasingly complex and interconnected as they attempt to meet the demands of evolving society. As a result, monitoring and maintaining them becomes a more complex and demanding task for control system operators and cyber defenders. While the literature on visualization techniques in the context of cybersecurity is extensive, the same cannot be said for studies on visualization for the security of cyber-physical systems. This paper aims to fill that gap by: 1) defining the main features of a visualizations workflow for security visualizations in cyber-physical systems. The workflow includes the acquisition of cyber and physical data, processing of data, selection, and configuration of both visualization tools and end-user interactions. 2) Providing an overview of cyber-physical security visualization systems, with a focus on smart grids as a case study. Finally, we use the perspectives gained from this analysis to provide insights and directions for future research and design of cyber-physical visualization techniques.

24 POWER TRANSMISSION AND DISTRIBUTION↗
DOE OSTI2021

Securing Distributed Energy Resource Integration

The penetration of distributed energy resources (DER) is growing at much higher rates than predicted 20 years ago. Far from being used only in residential settings, DER are now installed on distribution and transmission circuits. In this position, they do not have the same properties as traditional generators and are more flexible in many cases. The growing penetration and range of uses for DER motivate the need to reliably and safely integrate them into the grid. Operators must be able to rely on them not only for normal operation, but also during abnormal conditions like black starts or adverse cyber scenarios. To that end, we study the communications, device interfaces, and potential consequences of DER operation under abnormal and adversarial conditions. The weaknesses of communications networks are studied based on the industrial protocols used, and the benefits of security features are examined. The device interfaces are found to be vulnerable to attack based on the requirements in the IEEE-1547 standard for DER interconnection and interoperability, which is expected to be adopted in the next ten years. In addition to exploring the requirements of the standard, we show that these vulnerabilities and others do exist and can be used maliciously in a modern storage system DER. Consequences of these vulnerabilities range from exacerbated grid instability, to simultaneous loss of large portions of DER penetration, to physical damage to inverters or DER themselves and other sensitive equipment. We tie these outcomes to specific attacker actions in an effort to give operators a better threat intelligence view that allows them to prioritize mitigations. Finally, we discuss mitigations that could prevent many of the adversarial scenarios described. Some solutions can be added to existing infrastructure, while others may require longer term planning for grid modernization with consideration for security.

25 ENERGY STORAGE↗
DOE OSTI2020

A 15-Mev/nucleon Iso-Cyclotron for Security and Radioisotope Production

Cargo inspection systems exploit the broad bremsstrahlung spectrum from a 6-10 MeV, low-duty cycle electron accelerator which in the presence of significant backgrounds presents challenges in image and material identification. An alternative approach is to use ions which can excite nuclear states either directly, or through generation of secondary high-energy signature gammas produced from nuclear interactions in a target. RadiaBeam is designing a compact sector isocyclotron 1.25 m in radius, with high-gradient cavities to accelerate multi-ion species up to 15-20 MeV/u with large turn-to turn, centimeter-level separation for low-loss extraction without lossy foil stripping. A strong-focusing radial field profile will be optimized in a separated-sector format for control over machine tune simultaneous with isochronous orbist requirements for high-current (~0.5 milliamp) operation. Innovation in injection will be introduced to replace the high-loss central region. Non-security applications of the cyclotron include medical isotope production, ion radiobiology, as well as material science research and ion instrumentation development.

43 PARTICLE ACCELERATORS↗
DOE OSTI2023

An Architectural Survey of the Pluto Test Bunker Facility, Nevada National Security Site, Nye County, Nevada

The U.S. Department of Energy (DOE), in conjunction with the National Nuclear Security Administration Nevada Field Office (NNSA/NFO), proposes to reactivate Building 26-2205 as part of a project to detect foundry-type operations with remote sensing. The project is known as the Signals Exploration Testbed, or SET for short. Building 26-2205 (State Historic Preservation Office [SHPO] Resource No. B11558) is the former Compressor Building for the Pluto Program in Area 26 of the Nevada National Security Site (NNSS). Proposed actions at Building 26-2205 include removal of exterior building and site features, such as fencing, concrete pads, a large steel tank, and visible utilities, as well as interior changes to the building’s floor plan. These activities constitute an undertaking subject to review under Section 106 of the National Historic Preservation Act (NHPA) (54 United States Code [USC] § 306101) and its implementing regulations, 36 Code of Federal Regulations (CFR) Part 800.

54 ENVIRONMENTAL SCIENCES↗
DOE OSTI2027

Hydrotreating pine-derived catalytic fast pyrolysis oil to jet fuel: Process durability and impact of operating conditions

Hydrotreating woody biomass-derived catalytic fast pyrolysis (CFP) oil to jet fuel has the potential to enhance energy security due to the large abundance of forest and woody resources. CFP oil produced from pine over ZSM-5 was hydrotreated over sulfided NiMo/Al 2 O 3 for 410 h to study the impact of hydrotreating conditions (pressure, temperature, and weight hourly space velocity (WHSV)). The degree of deoxygenation remained high across the tested hydrotreating conditions, and the products contained < 0.01 wt% oxygen. Increasing hydrotreating pressure from 84 to 125 bar enhanced hydrogenation of aromatic rings and the formation of cycloalkanes and increasing the temperature from 385 to 400 degrees C enhanced cracking and the formation of jet-range molecules. Decreasing the weight hourly space velocity from 0.2 to 0.1 g/(g cat h) further enhanced cracking and led to higher gasoline- and lower jet fuel-range fractions. The highest jet fuel fraction (49 wt%) was obtained at 400 degrees C, 125 bar, 0.2 g/(g cat h) WHSV. CFP oils produced from pine over phosphorous-modified ZSM-5 were hydrotreated at this condition for 588 h to investigate the process durability. The hydrogenation performance of the catalyst gradually stabilized in approximately 300 h after which the product composition remained constant. Of the final hydrotreated CFP oil, 53 wt% fell in the jet fuel range with most of the tested fuel properties meeting ASTM D4054 and/or ASTM D7566 specifications. The freeze points were < -50 degrees C vs. guideline of < -40 degrees C and the viscosities at -20 degrees C were 3.8-4.1 mm 2 /s vs guideline of 8 mm 2 /s. Increasing the fraction of cycloalkanes could increase the cetane number and heating value, which did not meet the guidelines.

09 BIOMASS FUELS↗
DOE OSTI2020

Fossil Power Plant Cyber Security Life-Cycle Risk Reduction, A Practical Framework for Implementation

Market conditions are forcing fossil electricity generation facility owners and operators to implement advanced digital technologies. These technologies enable efficiencies, operational flexibility, operations and maintenance efficiencies, and adapting to a transitioning workforce. These digital technologies, however, can increase the cybersecurity attack surface. The purpose of this research was to develop a holistic cybersecurity risk reduction framework for fossil generation facilities. The framework begins with assessing how cyber risk changes across facility life cycles, including plant, system, vendor, and business life cycles. The next phase performs consequence analysis to prioritize high consequence events. Focusing on high consequence events allows owners to use a graded, risk-informed approach to prioritize cybersecurity efforts. The final phase identifies the digital asset attack surface in sensors and instrumentation and control equipment. After the vulnerabilities are identified, the owner selects mitigating cybersecurity control measures (or countermeasures) based on the risk analysis from the previous phases. This report describes the current industry cybersecurity best practices in fossil generation that are based on the first principles for cybersecurity engineering. The report is divided into five sections that describe the implementation of the risk reduction framework and present identified research, methodological, and technology gaps that were identified through this course of research and development.

01 COAL, LIGNITE, AND PEAT↗
DOE OSTI2020

Fossil Power Plant Cyber Security Life-Cycle Risk Reduction: A Practical Framework for Implementation

Market conditions are forcing fossil electricity generation facility owners and operators to implement advanced digital technologies. These technologies enable efficiencies, operational flexibility, operations and maintenance efficiencies, and adapting to a transitioning workforce. These digital technologies, however, can increase the cybersecurity attack surface. The purpose of this research was to develop a holistic cybersecurity risk reduction framework for fossil generation facilities. The framework begins with assessing how cyber risk changes across facility life cycles, including plant, system, vendor, and business life cycles. The next phase performs consequence analysis to prioritize high consequence events. Focusing on high consequence events allows owners to use a graded, risk-informed approach to prioritize cybersecurity efforts. The final phase identifies the digital asset attack surface in sensors and instrumentation and control equipment. After the vulnerabilities are identified, the owner selects mitigating cybersecurity control measures (or countermeasures) based on the risk analysis from the previous phases. This report describes the current industry cybersecurity best practices in fossil generation that are based on the first principles for cybersecurity engineering. The report is divided into five sections that describe the implementation of the risk reduction framework and present identified research, methodological, and technology gaps that were identified through this course of research and development.

20 FOSSIL-FUELED POWER PLANTS↗
DOE OSTI2020

Fossil Power Plant Cyber Security Life-Cycle Risk Reduction: A Practical Framework for Implementation

Market conditions are forcing fossil electricity generation facility owners and operators to implement advanced digital technologies. These technologies enable efficiencies, operational flexibility, operations and maintenance efficiencies, and adapting to a transitioning workforce. These digital technologies, however, can increase the cybersecurity attack surface. The purpose of this research was to develop a holistic cybersecurity risk reduction framework for fossil generation facilities. The framework begins with assessing how cyber risk changes across facility life cycles, including plant, system, vendor, and business life cycles. The next phase performs consequence analysis to prioritize high consequence events. Focusing on high consequence events allows owners to use a graded, risk-informed approach to prioritize cybersecurity efforts. The final phase identifies the digital asset attack surface in sensors and instrumentation and control equipment. After the vulnerabilities are identified, the owner selects mitigating cybersecurity control measures (or countermeasures) based on the risk analysis from the previous phases. This report describes the current industry cybersecurity best practices in fossil generation that are based on the first principles for cybersecurity engineering. The report is divided into five sections that describe the implementation of the risk reduction framework and present identified research, methodological, and technology gaps that were identified through this course of research and development.

20 FOSSIL-FUELED POWER PLANTS↗
DOE OSTI2021

UKy-CAER Heat Integrated Transformative CO 2 Capture Process in Pulverized Coal Power Plants

The goal of this Phase II Topical Report is to summarize the work for public domain conducted on project DE-FE0031583. Building upon the Design Basis completed during Phase I and in accordance with the Statement of Project Objectives (SOPO), the University of Kentucky (UK) Center for Applied Energy Research (CAER) (Recipient) along with team members has completed the Front End Engineering Design (FEED) for its advanced, versatile post-combustion CO 2 capture system (CCS) at the 10 MWe large pilot scale to be installed at the Wyoming (WY) Integrated Test Center (ITC), using a heat integrated process with split-rich fed, two-stage stripping and any advanced solvent to enhance the CO 2 absorber performance and lower the cost of CO 2 capture. The proposed project (Phases I-III) involves the design, fabrication, installation, testing and evaluation of a large pilot scale facility that will demonstrate the UK CAER transformative CCS integrated with an operating power plant. The work performed in Phase I, detailed in the Phase I Topical Report that was submitted in March 2019, included formation of a project team, securing the host site, and completing pre-FEED design basis, a cost estimation, a preliminary techno-economic analysis (TEA) and an environmental information volume (EIV). The work performed in Phase II, detailed in this Phase II Topical Report, includes completion of FEEDs, completion of a process risk analysis (PRA), obtaining necessary permits, updating the EIV and TEA, updating the cost and schedule estimate for the Phase III scope of work (SOW) and securing the necessary cost share. Updated information is provided on the current status of the UK CAER CCS technology and the project is ready to begin immediately detailed design, construction and operation of the proposed pilot.

20 FOSSIL-FUELED POWER PLANTS↗
DOE OSTI2020

Los Alamos National Laboratory Hazardous Waste Facility Permit Community Relations Plan

The requirements of the Hazardous Waste Facility Permit are fulfilled through execution of LANL's fourth strategic goal: “Enabling mission delivery through next-generation facility, infrastructure, and operational excellence.” With input from our stakeholders, we will continue to fulfill those requirements and to improve our waste operations. In 2015, the Laboratory purpose statement focused waste management efforts by directing delivery of mission success through operational effectiveness and scientific excellence. This Plan advances that purpose through community involvement. In the process of achieving our national security mission, Los Alamos National Laboratory generates some hazardous and mixed waste. Hazardous waste is solid waste that is dangerous or potentially harmful to human health or the environment. Hazardous wastes can be liquids, solids, gases, or sludges. They can be discarded as commercial products, such as cleaning fluids or pesticides, or as the byproducts of operations. Specific substances are listed in 40 Code of Federal Regulations (CFR), Part 261: 40 CFR Part 261. Hazardous waste management activities are regulated by the U. S. Environmental Protection Agency and the New Mexico Environment Department (NMED) pursuant to New Mexico Hazardous Waste Act (HWA; Chapter 74, Article 4 NMSA 1978) and regulations under the Act. In 1989, NMED issued the Hazardous Waste Facility Permit (EPA ID Number NM0890010515-1) that established standards for the Laboratory to manage, store, and treat hazardous wastes on-site and to undertake the closure, post closure care, and cleanup as necessary, of permitted waste management units. On November 30, 2010, NMED renewed the Hazardous Waste Facility Permit (the Permit). In June 2020 the Permittees submitted a permit renewal application to the NMED for their review and approval. The Hazardous Waste Facility Permit Community Relations Plan (CRP) describes the scope of public involvement in the activities of the Permit. The CRP is specifically designed to facilitate the community outreach, engagement, and relations activities concerning the Laboratory’s Hazardous Waste Facility Permit and coordinates with but does not include public involvement for other Laboratory programs, initiatives, or environmental activities.

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗
DOE OSTI2022

GABLE contract source code

Garbled Autonomous Bots Leveraging Ethereum (GABLE) uses simple but effective algorithms to permit secure private execution of garbled state machines and garbled circuits on public computing resources. This release consists of two Solidity smart contracts illustrating the GABLE approach. Sandia National Laboratories is a multimission laboratory managed and operated by National Technology & Engineering Solutions of Sandia, LLC, a wholly owned subsidiary of Honeywell International Inc., for the U.S. Department of Energy’s National Nuclear Security Administration under contract DE-NA0003525. SAND2022-7215 O

Pattengale, Nicholas↗
DOE OSTI2021

An identity privacy scheme for blockchain‐based on edge computing

Abstract Blockchain has decentralization characteristics and requires more targeted security schemes to protect user privacy. In contrast, existing signature schemes have many high‐complexity operations and impose an enormous computational burden on wireless nodes. This article proposes a light‐weighted identity privacy scheme for blockchain‐based on edge computing. We construct linkable identity privacy and non‐linkable identity privacy, which can resist collusion attacks while virtually guaranteeing blockchain nodes' identity privacy. Since edge computing offloads heavily, the proposed scheme has lower computational complexity than the existing techniques.

Mu, Rui↗
DOE OSTI2023

Cybersecurity Value-at-Risk Framework

As more variable renewable energy sources are added to the grid, the role of hydropower as a reliable baseline and firming resource is growing more critical. However, the U.S hydropower fleet is not fully prepared to face modern issues such as cybersecurity threats. Hydropower accounts for 37% of U.S. utility-scale renewable electricity but is challenged by diverse infrastructure and legacy devices that predate modern security practices. While new cybersecurity solutions cannot simply be added to current hydropower generation and operation technologies, custom cybersecurity assessments can reveal system-specific threats and risk probabilities and identify mitigating enhancements.

cybersecurity valuation methodology↗