Search NASA⌕ Search

SEARCH · Search NASA

Results for “Critical Infrastructure Protection”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 91 records · Page 5
All sourcesNASA NTRSDOE OSTI
DOE OSTI2019

Incentivizing Cyber Security Investment in the Power Sector Using An Extended Cyber Insurance Framework

Collaboration between the DHS Cybersecurity and Infrastructure Security Agency (CISA) and public- sector partners has revealed that a dearth of cyber- incident data combined with the unpredictability of cyber attacks have contributed to a shortfall in first-party cyber insurance protection in the critical infrastructure community. This research explores the foundations of insurance theory and adopts behavioral manipulation methods to incentivize cyber-security investment. We validate the model by applying power industry performance data from 2013-2015 to assess risk facing the industry. Results show that the model can successfully discriminate between individual power companies as well as geographic regions on the basis of risk and can recommend cyber risk- management strategies tailored to individual risk profiles. Here, the adoption of this framework could invite more market participation, which will create a more robust cyber- incident reporting environment, contributing directly to the DHS goal of creating a national cyber- incident data repository.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2019

Hurricane Harvey Highlights: Need to Assess the Adequacy of Probable Maximum Precipitation Estimation Methods

Probable maximum precipitation (PMP) is the primary criterion used to design flood protection measures for critical infrastructures such as dams and nuclear power plants. Based on our analysis using the Stage IV (ST4) quantitative precipitation estimates, precipitation associated with Hurricane Harvey near Houston, Texas, represents a PMP-scale storm and partially exceeds the Hydrometeorological Report No. 51 (HMR51) 72-h PMP estimates at 5,000 mi 2 (ST4=805 mm; HMR51=780 mm) and 10,000 mi 2 (ST4=686 mm; HMR51=673 mm). We also find statistically significant increasing trends since 1949 in the annual maximum total precipitable water and dew point temperature observations along the US Gulf Coast region, suggesting that, if the trend continues, the theoretical upper bound of PMP could be even larger. Our analysis of Hurricane Harvey rainfall data demonstrates that an extremely large PMP-scale storm is physically possible and that PMP estimates should not be considered overly conservative. Furthermore, this case study highlights the need for improved PMP estimation methodologies to account for long-term trends and to ensure the safety of our critical infrastructures.

42 ENGINEERING↗
DOE OSTI2016

Security of Electronic Voting in the United States

In the midst of numerous high-profile cyber-attacks, the US is considering whether to categorize the US electronic voting system as “critical infrastructure”, to be protected and invested in much the same way as the US power grid or waterways.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2023

State Legislative Options to Enhance Solar Cybersecurity

One of the mitigative solutions to solar cybersecurity risks is to proactively develop legislation which can facilitate, guide, or require actionable policy and program development . Legislation can reinforce the criticality of protecting energy infrastructure from cyber threats in several ways that can have long lasting impacts . This tool outlines relevant state cybersecurity legislation examples which can apply to solar cybersecurity and can serve as frameworks for future legislation by states seeking legislative options to help mitigate these risks

14 SOLAR ENERGY↗
DOE OSTI2017

Laboratory-Directed Research and Development 2016 Summary Annual Report

The Laboratory-Directed Research and Development (LDRD) Program at Idaho National Laboratory (INL) reports its status to the U.S. Department of Energy (DOE) by March of each year. The program operates under the authority of DOE Order 413.2C, “Laboratory Directed Research and Development” (April 19, 2006), which establishes DOE’s requirements for the program while providing the laboratory director broad flexibility for program implementation. LDRD funds are obtained through a charge to all INL programs. This report includes summaries of all INL LDRD research activities supported during Fiscal Year (FY) 2016. INL is the lead laboratory for the DOE Office of Nuclear Energy (DOE-NE). The INL mission is to discover, demonstrate, and secure innovative nuclear energy solutions, other clean energy options, and critical infrastructure with a vision to change the world’s energy future and secure our critical infrastructure. Operating since 1949, INL is the nation’s leading research, development, and demonstration center for nuclear energy, including nuclear nonproliferation and physical and cyber-based protection of energy systems and critical infrastructure, as well as integrated energy systems research, development, demonstration, and deployment. INL has been managed and operated by Battelle Energy Alliance, LLC (a wholly owned company of Battelle) for DOE since 2005. Battelle Energy Alliance, LLC, is a partnership between Battelle, BWX Technologies, Inc., AECOM, the Electric Power Research Institute, the National University Consortium (Massachusetts Institute of Technology, Ohio State University, North Carolina State University, University of New Mexico, and Oregon State University), and the Idaho university collaborators (i.e., University of Idaho, Idaho State University, and Boise State University). Since its creation, INL’s research and development (R&D) portfolio has broadened with targeted programs supporting national missions to advance nuclear energy, enable clean energy deployment, and secure and modernize critical infrastructure. INL’s research, development, and demonstration capabilities, its resources, and its unique geography enable integration of scientific discovery, innovation, engineering, operations, and controls into complex large-scale testbeds for discovery, innovation, and demonstration of transformational clean energy and security concepts. These attributes strengthen INL’s leadership as a demonstration laboratory. As a national resource, INL also applies its capabilities and skills to the specific needs of other federal agencies and customers through DOE’s Strategic Partnership Program.

99 GENERAL AND MISCELLANEOUS↗
DOE OSTI2018

Framework for Shared Drinking Water Risk Assessment

Risk assessment plays a vital role in protecting our nation's critical infrastructure. Traditionally, such assessments have been conducted as a singular activity confined to the boarders of a particular asset or utility with little external sharing of information. In contrast other domains, e.g., disaster preparedness, cyber security, food-borne hazards, have demonstrated the benefits of sharing data, experiences and lessons learned in assessing and managing risk. Here we explore the concept of a Shared Risk Framework (SRF) in the context of critical infrastructure assessments. In this exploration, key elements of an SRF are introduced and initial instantiations demonstrated by way of three water utility assessments. Results from these three demonstrations were then combined with results from four other risk assessments developed using a different risk assessment application by a different set of analysts. Through this comparison we were able to explore potential challenges and benefits from implementation of a SRF. Challenges included both the capacity and interest of local utilities to conduct a shared risk assessment; particularly, wide scale adoption of any SRF will require a clear demonstration that such an effort supports the basic mission of the utility, adds benefit to the utility, and protects utility data from unintended access or misuse. In terms of benefits, anonymous sharing of results among utilities could provide the added benefits of recognizing and correcting bias; identifying ‘unknown, unknowns’; assisting self-assessment and benchmarking for the local utility; and providing a basis for treating shared assets and/or threats across multiple utilities.

60 APPLIED LIFE SCIENCES↗
DOE OSTI2021

A High-Fidelity Cyber-Physical Testbed-Based Benchmarking Dataset For Testing Operational Technology Specific Intrusion Detection Systems

Quality datasets serve a critical purpose in cyber security research. Data is needed to understand system behavior and develop security controls to protect critical systems. However, for critical infrastructure operational environments there is a lack of available datasets to study because of the high cost and specialized capabilities necessary to generate them. This paper documents the development of a dataset of high fidelity hardware in the loop laboratory simulated models of electric and natural gas distribution systems with real cyber attack test cases. A deep dive discussion for the experimental setup and controls for generating the data is provided along with observations from using the data in evaluating intrusion detection approaches.

Ashok, Aditya↗
DOE OSTI2023

Leveraging High-Fidelity Datasets for Machine Learning-based Anomaly Detection in Smart Grids

Data-driven intrusion detection systems are increasingly becoming essential for protecting critical cyber-physical infrastructure, such as the power grid, against the growing number of sophisticated cyber-attacks. The development of such tools is reliant on the availability of high-fidelity cyber-physical datasets that cover a diverse variety of potential cyber events. In this work, a high-fidelity smart grid platform is utilized to develop an extensive dataset, which is used to train and test a machine learning-based intrusion detection system. The evaluation of the developed IDS shows robust performance even when tested with statistically diverse test data not used in training.

Hyder, Burhan↗
DOE OSTI2017

Framework for Shared Drinking Water Risk Assessment.

Central to protecting our nation's critical infrastructure is the development of methodologies for prioritizing action and supporting resource allocation decisions associated with risk-reduction initiatives. Toward this need a web-based risk assessment framework that promotes the anonymous sharing of results among water utilities is demonstrated. Anonymous sharing of results offers a number of potential advantages such as assistance in recognizing and correcting bias, identification of 'unknown, unknowns', self-assessment and benchmarking for the local utility, treatment of shared assets and/or threats across multiple utilities, and prioritization of actions beyond the scale of a single utility. The constructed framework was demonstrated for three water utilities. Demonstration results were then compared to risk assessment results developed using a different risk assessment application by a different set of analysts.

99 GENERAL AND MISCELLANEOUS↗
DOE OSTI2018

Optimizing stadium evacuation by integrating geocomputation and affordance theory

Football is culturally and economically important in the United States, and football stadiums are part of the country's critical infrastructure, thus receiving government protection against hazard events. In this project, an agent-based evacuation model was implemented to optimize evacuation time from The University of Southern Mississippi's M.M. Roberts Stadium (football) by accounting for evacuees’ age, gender, physical fitness, alcohol consumption, and prior experience with hazard events. The findings revealed that (i) the age and gender of an individual impact his/her locomotion speed and (ii) evacuation route choice is influenced by evacuees’ perception of its safety and effectiveness. The estimated evacuation times for all evacuees to exit only the stadium and the stadium plus the surrounding campus were 20.82 and 165.01 minutes, respectively. Both of these times were shorter than the evacuation times determined by models employing location-unspecific locomotion speeds. One-way analysis of variance revealed that there were statistically significant differences between use of location-specific and location-unspecific within-stadium evacuation times (p ≤ 0.001 with α = 0.05). These results suggest that using local data is vital to accurately estimate evacuation time.

99 GENERAL AND MISCELLANEOUS↗
DOE OSTI2017

TCIA Secure Cyber Critical Infrastructure Modernization.

The Sandia National Laboratories (Sandia Labs) tribal cyber infrastructure assurance initiative was developed in response to growing national cybersecurity concerns in the the sixteen Department of Homeland Security (DHS) defined critical infrastructure sectors1. Technical assistance is provided for the secure modernization of critical infrastructure and key resources from a cyber-ecosystem perspective with an emphasis on enhanced security, resilience, and protection. Our purpose is to address national critical infrastructure challenges as a shared responsibility.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2017

Microgrid optimized resource dispatch for public-purpose resiliency and sustainability. The Olney Town Center Microgrid Project

Communities in Atlantic coastal regions have in recent years sought to improve the resiliency of their critical infrastructure and public services, especially to protect against hurricanes and other events capable of causing widespread damage and disruption. As the backbone of any community’s critical functions, the electricity distribution system requires high resiliency in order to maintain local energy delivery services. Against this backdrop, the Project sought to develop a resilient energy microgrid control system capable of integrating distributed renewable energy resources, natural gas CHP units, energy storage, and demand-side management technologies in near-real-time optimization schemes for the community of Olney, Md. The Montgomery County Planning Board in 2005 established the Olney Town Center area as a “civic center/town commons,” in part because it serves as a key point of interaction in the community – but also because it contains numerous vital community assets. With a total peak electrical load of about 8 MW (including Montgomery General Hospital with a 2.4 MW peak), the Project area is a business and essential services area, directly serving a suburban population of more than 33,000 residents. It contains a hospital, police station, two fire stations, two schools, grocery stores, and gas stations, and the community’s water tower, among other things. Moreover, the location stands at the crossroads of two state highways that represent major regional arteries for commerce and public safety in Montgomery County. These characteristics made the Project area an appropriate setting for considering microgrid deployment. It presented a model of a typical Maryland suburban community, with geographic dispersion of vital assets over a sizeable area, and a combination of overhead distribution lines and underground cables serving those critical loads. Such a representative model helped to ensure the solutions developed and the scenarios tested would be readily applicable to other communities in the state and the region. Further, the Project’s outcomes and lessons provide insights to guide community microgrid design and development in many locations. To achieve Project objectives – including those established by the U.S. Department of Energy (DOE) National Energy Technology Laboratory – the Project team researched, developed, and tested in simulation a set of microgrid controls capable of maintaining electricity supplies for critical community loads in the event of a regional utility outage lasting many days or even weeks. Testing and analysis showed that the microgrid would be capable of maintaining electricity supply to critical loads essentially indefinitely in most outage scenarios, while also substantially improving overall reliability for microgrid customers. With targeted improvements in local utility distribution infrastructure, test analysis showed that the microgrid would be capable of reducing annual electricity outages for critical loads by 98%. Further, to help achieve environmental and efficiency policy goals established by both the State of Maryland and the federal government, the team designed the system to reduce the annual carbon footprint of served loads by 20%, and to improve system energy efficiency for those loads by at least 20%. Testing showed that, as designed, the system is capable of meeting these performance requirements, with potential for further improvements through more effective thermal energy utilization. This Final Report, comprised of four volumes and 11 annexes, presents the results of these project efforts, including feasibility assessment (section F) and guidance for decision-makers considering prospective deployment of public-purpose microgrid systems in Maryland communities.

24 POWER TRANSMISSION AND DISTRIBUTION↗
DOE OSTI2021

Critical Roles of Information, Analysis, Research, and Operations in the Cyber Realm

PNNL has developed an adaptive cyber integration framework (ACIF) to facilitate the timely sharing of cyber threat information along with the advancement of situational awareness tools to enhance protection against and respond to critical infrastructure cybersecurity threats. The ACIF comprises components implemented iteratively to achieve research and mission goals. The ACIF components include data generation technologies, analytic tools development and maturation, data enrichment and fusion, trust building with stakeholders, investigative research, analytic rigor, production, and dissemination. Each component, its importance to the ACIF, and how they can be adopted and applied across other information-sharing sectors and domains are discussed in this paper.

Cyber Threat Intelligence, Cyber Security, Data En↗
DOE OSTI2016

Critical Infrastructure Interdependencies Assessment

Throughout the world there is strong recognition that critical infrastructure security and resilience needs to be improved. In the United States, the National Infrastructure Protection Plan (NIPP) provides the strategic vision to guide the national effort to manage risk to the Nation’s critical infrastructure.”1 The achievement of this vision is challenged by the complexity of critical infrastructure systems and their inherent interdependencies. The update to the NIPP presents an opportunity to advance the nation’s efforts to further understand and analyze interdependencies. Such an important undertaking requires the involvement of public and private sector stakeholders and the reinforcement of existing partnerships and collaborations within the U.S. Department of Homeland Security (DHS) and other Federal agencies, including national laboratories; State, local, tribal, and territorial governments; and nongovernmental organizations.

98 NUCLEAR DISARMAMENT, SAFEGUARDS, AND PHYSICAL P↗
DOE OSTI2018

Presentation for LDRD FY19 proposal: An Innovative Secure millimeter wave (mmWave) Machine to Machine (M2M) Communication Network for Operating Drones

We propose to prove the principle that a novel 5G wireless network using newly available millimeter wave (mmWave) frequency bands can operate Unmanned Aerial Vehicles (UAVs) with Machine to Machine (M2M) communication. If successful, this proposed network will provide a superior alternative to existing methods with improved radio frequency (RF) coverage and resiliency against cyberattacks. The use of UAVs or drones for non-military applications has been advancing rapidly for a large number of applications in the United States. They include public safety search and rescue of natural disaster victims, surveillance of remote critical infrastructure, surveys of environmental quality in protected regions, and detection of threats during major public events. The proposed approach involves research with modeling, simulation, and experimentation to validate the hypothesis in the following thrusts: 1) Using mmWave beams with antennas tilted upward for RF coverage in the sky to analyze the security, reliability, and spectral efficiency of this wireless network for UAV/drone operation; 2) Adding non orthogonal multiple access (NOMA) to analyze increase in security and spectral efficiency when compared to existing methods; 3) Adding intra-drone communication among the swarm of drones to analyze further increase in reliability and spectral efficiency; 4) Concluding the proof of principle/concept with modeling and experiment to demonstrate that a swarm of drones controlled with this advanced network can be effectively used during the simulated recovery of a critical infrastructure e.g. a cyber compromised power grid that requires a black restart. The experiments will be executed at the North Carolina State University (NCSU) using NCSU’s 28 GHz mmWave system. A conceptual Invention Record Disclosure (IDR) has been filed and we expect Intellectual Property (IP) from this proposed research to advance the IRD towards patent filing by INL with support from NCSU. Successful outcome from this work will pave the way for significant future research needed to mature the technology for a nationwide secure and reliable network supporting a large number of government and public safety drones.

99 GENERAL AND MISCELLANEOUS↗
DOE OSTI2022

Domestic Extremism: How to Counter Threats Posed to Critical Assets

Although facilities with sensitive information, hazardous materials, critical infrastructure, or other sensitive items have security measures in place to protect those critical assets, the threat of domestic extremism (DE) has challenged those security measures in new ways. The project described in this brief report used focus groups to identify best practices, tools, or techniques relevant to preventing or countering DE and sought to identify gaps in security measures. Five focus groups with twenty-two subject matter experts from government, healthcare, and other stakeholder groups were conducted to understand how organizations protect critical assets against the DE threat. The results of the focus groups underscore the importance of organizational culture, codes of conduct, and behavior observation programs in prevention of DE events. In addition, results emphasized the value of multidisciplinary teams, employee assistance programs, and regular threat assessment as resources when responding to DE incidents. However, monitoring of social media and lack of adequate resources remain challenges when attempting to prevent or counter the DE threat.

98 NUCLEAR DISARMAMENT, SAFEGUARDS, AND PHYSICAL P↗