Search NASA⌕ Search

SEARCH · Search NASA

Results for “security analysis”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 91 records · Page 5
All sourcesNASA NTRSDOE OSTI
DOE OSTI2024

A hardware-in-the-loop (HIL) testbed for cyber-physical energy systems in smart commercial buildings

In recent years, there has been a growing trend toward the development of smart buildings that rely on cyber-physical systems (CPS) to optimize occupant comfort, safety, and energy efficiency. To ensure the reliable and efficient operation of CPS with designed control strategies, it is important to evaluate their performance under various scenarios before deploying them in the real world. This is where a Hardware-in-the-loop (HIL) testbed designed for studying sensor and control-related studies in smart buildings can be highly valuable. With the growing threat of cyber-attacks and physical faults targeting smart buildings, it is essential to ensure the security of building operations. A HIL testbed can emulate cyber-attack and physical fault scenarios, allowing researchers to develop and test threat detection and mitigation algorithms. This enables researchers to identify potential issues and optimize the algorithms in a safe and controlled environment before they are deployed in real-world settings, reducing the risk of failures that can negatively impact occupant comfort, safety, and energy efficiency. Therefore, this paper developed a HIL testbed designed for cyber-physical energy systems (e.g. buildings automation system (BAS)) in smart commercial buildings. The HIL testbed is comprised of a real-time building and Heating, Ventilation, and Air-Conditioning (HVAC) emulator using Modelica-based dynamic models, a set of BAS controllers, and a BAS computer server. The data generation capability of the HIL testbed is demonstrated by tracking normal and faulty operating data in the BAS, as well as monitoring detailed network traffic in the local BAS network. Here, this study further demonstrates the HIL testbed’s capability by conducting case studies on real-time physical fault and cyber-attack experiments using a Department of Energy (DOE) prototype commercial building. It is anticipated that the fully functional HIL testbed will be utilized for a variety of sensor and control-related studies, including but not limited to testing, developing, validating of different HVAC control strategies, fault detection & diagnosis, energy monitoring and analysis, cyber security study, etc.

32 ENERGY CONSERVATION, CONSUMPTION, AND UTILIZATI↗
DOE OSTI2023

Halide Perovskites and Their Derivatives for Efficient, High‐Resolution Direct Radiation Detection: Design Strategies and Applications

Abstract The past decade has witnessed a rapid rise in the performance of optoelectronic devices based on lead‐halide perovskites (LHPs). The large mobility‐lifetime products and defect tolerance of these materials, essential for optoelectronics, also make them well‐suited for radiation detectors, especially given the heavy elements present, which is essential for strong X‐ray and γ‐ray attenuation. Over the past decade, LHP thick films, wafers, and single crystals have given rise to direct radiation detectors that have outperformed incumbent technologies in terms of sensitivity (reported values up to 3.5 × 10 6 µC Gy air −1 cm −2 ), limit of detection (directly measured values down to 1.5 nGy air s −1 ), along with competitive energy and imaging resolution at room temperature. At the same time, lead‐free perovskite‐inspired materials (e.g., methylammonium bismuth iodide), which have underperformed in solar cells, have recently matched and, in some areas (e.g., in polarization stability), surpassed the performance of LHP detectors. These advances open up opportunities to achieve devices for safer medical imaging, as well as more effective non‐invasive analysis for security, nuclear safety, or product inspection applications. Herein, the principles behind the rapid rises in performance of LHP and perovskite‐inspired material detectors, and how their properties and performance link with critical applications in non‐invasive diagnostics are discussed. The key strategies to engineer the performance of these materials, and the important challenges to overcome to commercialize these new technologies are also discussed.

36 MATERIALS SCIENCE↗
DOE OSTI2022

Shifting Left for Machine Learning: An Empirical Study of Security Weaknesses in Supervised Learning-based Projects

Context: Supervised learning-based projects (SLPs), i.e., software projects that use supervised learning algorithms, such as decision trees are useful for performing classification-related tasks. Yet, security weaknesses, such as the use of hard-coded passwords in SLPs, can make SLPs susceptible to security attacks. A characterization of security weaknesses in SLPs can help practitioners understand the security weaknesses that are frequent in SLPs and adopt adequate mitigation strategies. Objective: The goal of this paper is to help practitioners se-curely develop supervised learning-based projects by conducting an empirical study of security weaknesses in supervised learning-based projects. Methodology: We conduct an empirical study by quantifying the frequency of security weaknesses in 278 open source SLPs. Results: We identify 22 types of security weaknesses that occur in SLPs. We observe ‘use of potentially dangerous function’ to be the most frequently occurring security weakness in SLPs. Of the identified 3,964 security weaknesses, 23.79 % and 40.49 % respectively, appear for source code files used to train and test models. We also observe evidence of co-location, e.g., instances of command injection co-locates with instances of potentially dangerous function. Conclusion: Based on our findings, we advocate for a shift left approach for SLP development with security-focused code reviews, and application of security static analysis.

Bhuiyan, Farzana Ahamed↗
DOE OSTI2022

Remote Monitoring Systems/Remote Data Transmission for International Nuclear Safeguards.

The use of remotely transmitted data from a nuclear facility under international nuclear safeguards to an inspectorate headquarters has been rapidly growing since inception as its value in reducing inspection effort and cost is demonstrated. There are opportunities for further growth moving forward including (1) the number of spent fuel casks in dry interim storage are increasing, leading to strain on inspection resources and potentially increased radiation exposure to inspectors, (2) the frequency of encapsulating spent nuclear fuel for final disposal in geological repositories occurs at a rate that may lead to the need for on-site inspectors unless systems can be developed to remotely transmit data, and (3) new facility types such as small modular reactors may rely heavily on remotely transmitted data due in part to remote locations of operation and mobility. Challenges need to be addressed too and include (1) hesitancy to implement remote data transmission by states, (2) data collection, transmission, security, and analysis, and (3) reliable power and communications. This report examines the evolution, equipment deployed, status, and opportunities/challenges of remote data transmission moving forward.

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗
DOE OSTI2022

Scenario Exploration and Timeline Analysis for Advanced Reactors [Slides]

Slides created to discuss the report "Approach and Model Used to Represent a Timeline Analysis for Security Design Enhancements" (August 2022 INL/ RPT-22-68664) for an upcoming DOE security workshop. Advanced reactors will be able to use risk insights for many design aspects. We need realistic scenarios for input into the licensing basis safety-case. These scenarios must include timing and physics. We need to automate the safety-case creation as much as possible.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2022

Energy Emergency and Preparedness Data: Frequently Asked Questions (FAQs) and Quick Guidance on Crisis Communications

State Energy Offices and Public Utility Commissions rely on timely, accurate, and actionable information to perform their energy emergency response duties and execute their roles as state energy security planners. In support of this need, the National Association of State Energy Officials (NASEO) and the National Association of Regulatory Utility Commissions (NARUC) hosted an Energy Security and Data Analysis Workshop in Washington, DC to identify energy security response and planning data sources; and to share successful methods of data use and integration in state, federal, and private sector tools. Following the workshop, NASEO and NARUC hosted two topical data-centric webinars based on state priorities to identify best practices in Geographic Information Systems (GIS) and Crisis Communications programs leveraged in energy assurance planning and response. The Crisis Communications webinar covered best practice tactics for how states can respond during energy emergencies and other crises. Based on the workshop and webinars, this document summarizes commonly used data sources and includes frequently asked questions which may be used by state energy officials (i.e., consisting of staff from Public Utility Commissions and Governor-designated State Energy Offices) to help guide them in developing or improving their Crisis Communications capabilities. A strong public information program is a key crisis management tool. Timely and accurate information helps prevent confusion and uncertainty and encourages public support and cooperation. As energy subject matter experts, state energy officials are vital in the distilling, clarifying, and conveying energy sector information and implications to decision-makers and the public. Other participants in an effective public information program include the Governor’s Office, other state agencies, local governments, energy providers, local businesses, state legislature, and the federal government. It is essential to provide stakeholders and the public with information about the nature, severity, and duration of an emergency because inadequate understanding and awareness can lead to undesirable actions that could further exacerbate the situation. Before a state government can provide information to the public, it must gather information, describe the emergency accurately, and develop recommendations to manage the situation.

29 ENERGY PLANNING, POLICY, AND ECONOMY↗
DOE OSTI2025

Local-Regional Surface Wave Dispersion Analysis using Ambient Noise Data of the Southern Nevada National Security Site Area

This report details seismic ambient noise analysis to improve seismic velocity estimates of the southeastern Nevada National Security Site (NNSS). We compare two different methods for estimating surface wave dispersion curves from ambient noise cross-correlations: frequency time analysis (FTAN) and Aki’s cross-spectral method (XSpec). We find that XSpec performs better for our local-regional dataset and frequency content. Using phase velocity estimates from XSpec, we build a preliminary phase velocity dispersion dataset, which contains data for 1,054 station pairs and 8,905 discrete phase velocity measurements for periods between 0.5 and 13 s. This phase velocity dataset will be incorporated into an updated local-regional P and S wave velocity model of the southeastern NNSS in the future and is expected to improve upon shallow velocity estimates.

47 OTHER INSTRUMENTATION↗
DOE OSTI2024

Emerging Technologies for Privacy Preservation in Energy Systems

This study explores the intersection of digitalization and privacy within the energy sector, focusing on the emerging challenges and opportunities presented by integrating Distributed Energy Resources (DERs) and advanced metering infrastructure. The need for robust digital privacy measures has become crucial as the energy industry evolves towards a more decentralized, digitalized, and decarbonized future. This study delves into four cutting-edge privacy-preserving technologies—Homomorphic Encryption (HE), Secure Multiparty Computation (SMPC), Differential Privacy (DP), and Federated Learning (FL)—each offering unique solutions to safeguard consumer data by increasing digital connectivity and data exchange. Through a detailed examination of these methods, the study explains how each technology operates, its applications within the energy sector, and the specific privacy challenges it addresses. Homomorphic Encryption allows for secure computations on encrypted data, enabling data analysis without compromising privacy. Secure Multiparty Computation enables collaborative data analysis across different entities while protecting the confidentiality of the inputs. Differential Privacy introduces randomness into the assembled data set, preventing the identification of individual records in statistical databases. Lastly, Federated Learning offers a paradigm shift in data analysis, where machine learning models are trained at the edge, minimizing the centralization of sensitive data. The research underscores the significance of implementing these privacy-enhancing technologies to comply with strict data protection regulations, foster consumer trust, and enhance the security of the energy infrastructure. By providing a comprehensive overview of these methodologies and their practical implications for the energy sector, this study aims to contribute to the ongoing discourse on digital privacy, offering insights into how the energy industry can navigate the complexities of data privacy in the digital age.

Cali, Umit↗
DOE OSTI2022

Analysis of Transient Groundwater Flow Near the Cheshire Test at Pahute Mesa, Nevada National Security Site

This report focuses on analysis and determination of the causes of transient water levels measured between 1964 and 2017 near the Cheshire underground nuclear test, which was detonated on February 14, 1976 in Area 20 (USDOE, 2015) of the Pahute Mesa (PM) testing areas of the Nevada National Security Site (NNSS) located in southern Nevada (Figure 1). Transient water levels near Cheshire indicate influences of a water-production well and yet-unexplained water level rise attributed to testing effects (Jackson and Fenelon, 2018; Jackson et al. 2021). Transient groundwater flow is relevant to the implementation of the hydrologic source term (HST), which prescribes the quantity and release rates of radionuclide source terms to be applied at individual test locations in assessment of regional-scale radionuclide transport (Carle and Tompson, 2021; Carle et al., 2021), as previously investigated for NNSS testing areas at PM (Pawloski et al., 2001), Frenchman Flat (Carle et al, 2007), Yucca Flat (Mcnab, 2009; Tompson, 2009), and Rainier Mesa (Carle, 2011; Tompson et al., 2011).

54 ENVIRONMENTAL SCIENCES↗
DOE OSTI2022

Analysis of Transient Groundwater Flow Near the Cheshire Test at Pahute Mesa, Nevada National Security Site

This report focuses on analysis and determination of the causes of transient water levels measured between 1964 and 2017 near the Cheshire underground nuclear test, which was detonated on February 14, 1976 in Area 20 (USDOE, 2015b) of the Pahute Mesa (PM) testing areas of the Nevada National Security Site (NNSS) located in southern Nevada (Figure 1). Transient water levels near Cheshire indicate influences of a water-production well and yet-unexplained water level rise attributed to testing effects (Jackson and Fenelon, 2018; Jackson et al. 2021). Transient groundwater flow is relevant to the implementation of the hydrologic source term (HST), which prescribes the quantity and release rates of radionuclide source terms to be applied at individual test locations in assessment of regional-scale radionuclide transport (Carle and Tompson, 2021; Carle et al., 2021), as previously investigated for NNSS testing areas at PM (Pawloski et al., 2001), Frenchman Flat (Carle et al, 2007), Yucca Flat (Carle et al., 2009; Mcnab, 2009; Tompson et al., 2009), and Rainier Mesa (Carle, 2011; Tompson et al., 2011).

54 ENVIRONMENTAL SCIENCES↗
DOE OSTI2026

Performance evaluation of neutron noise analysis in detecting special nuclear materials

Reliable and rapid inspection techniques play a vital role in preventing illicit trafficking of special nuclear materials. Active interrogation systems using neutrons produced by portable, high-flux deuterium-deuterium or deuterium-tritium neutron generators are being actively developed as a secondary scanning tool for this purpose. In this study, a neutron noise analysis-based approach for detecting unshielded and shielded special nuclear materials by using a pulsed deuterium-tritium neutron generator was evaluated. Here, this approach analyzes the fluctuation of neutron counts. Its performance was quantified with regard to time-to-detection to achieve a minimum probability of detection of 99% and a probability of false alarm of less than 1% considering various amounts of special nuclear materials and different shielding configurations. It was demonstrated that this approach could detect 17 uranium slugs in 5 s given a neutron generator yield of 8.1 × 10 7 n/s. These slugs could be detected within a reasonable time frame (200 s) when they were shielded by 10.16 cm of high-density polyethylene. The results obtained using the neutron noise analysis approach were compared with those obtained using the commonly used differential die-away analysis technique, a sensitive technique for detecting the presence of fissile materials by utilizing the prompt fission neutrons produced when the source neutrons from a neutron generator are completely diminished. For example, the time to detect 2 unshielded uranium slugs was 2.1 s when using the differential die-away analysis technique; it increased to 93 s for the neutron noise analysis approach. Although the noise analysis-based approach exhibits an overall performance which is not as good as that of differential die-away, neutron noise provides an alternative method for effective detection of special nuclear materials.

46 INSTRUMENTATION RELATED TO NUCLEAR SCIENCE AND ↗
DOE OSTI2025

Xenith Scalable Security Economics

These slides present a high level overview of an ongoing project sponsored by NNSA. The project is focused on economic analysis of physical security design of micro reactors. The slides will be presented to NNSA's office of International Nuclear Security (INS) at a program update meeting on May 28th, 2025.

98 - NUCLEAR DISARMAMENT, SAFEGUARDS, AND PHYSICAL↗
DOE OSTI2024

Leveraging graph clustering techniques for cyber‐physical system analysis to enhance disturbance characterisation

Abstract Cyber‐physical systems have behaviour that crosses domain boundaries during events such as planned operational changes and malicious disturbances. Traditionally, the cyber and physical systems are monitored separately and use very different toolsets and analysis paradigms. The security and privacy of these cyber‐physical systems requires improved understanding of the combined cyber‐physical system behaviour and methods for holistic analysis. Therefore, the authors propose leveraging clustering techniques on cyber‐physical data from smart grid systems to analyse differences and similarities in behaviour during cyber‐, physical‐, and cyber‐physical disturbances. Since clustering methods are commonly used in data science to examine statistical similarities in order to sort large datasets, these algorithms can assist in identifying useful relationships in cyber‐physical systems. Through this analysis, deeper insights can be shared with decision‐makers on what cyber and physical components are strongly or weakly linked, what cyber‐physical pathways are most traversed, and the criticality of certain cyber‐physical nodes or edges. This paper presents several types of clustering methods for cyber‐physical graphs of smart grid systems and their application in assessing different types of disturbances for informing cyber‐physical situational awareness. The collection of these clustering techniques provide a foundational basis for cyber‐physical graph interdependency analysis.

97 MATHEMATICS AND COMPUTING↗