Search NASA⌕ Search

SEARCH · Search NASA

Results for “System Security”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 901 records · Page 50
All sourcesNASA NTRSDOE OSTI
DOE OSTI2019

Interconnection Requirements for Renewable Generation and Energy Storage in Island Systems: Puerto Rico Example: Preprint

On September 20, 2017, Hurricane Maria made landfall in Puerto Rico, incapacitating the central power system and leaving the entire island without power. To ensure the long-term recovery of Puerto Rico's electric power grid in the most secure and resilient way, the U.S. Department of Energy funded research to develop recommendations for a cohesive new framework of interconnection standards for utility-scale renewable electrical generation and energy storage that ensure cross-technology compatibility and enable high deployment levels without compromising grid reliably, safety, or security. This paper provides a summary of work conducted by the National Renewable Energy Laboratory to analyze and address many shortcomings and areas of improvement to help the Puerto Rico Electric Power Authority (PREPA) establish minimum technical requirements for interconnecting single-technology and hybrid renewable generation because of their importance for PREPA system security and impacts on future integrated resource planning scenarios. Results and findings presented in this paper are important for any island power system.

24 POWER TRANSMISSION AND DISTRIBUTION↗
NASA NTRS2012

ELaNa - Educational Launch of Nanosatellite Providing Routine RideShare Opportunities

Since the creation of the NASA CubeSat Launch Initiative (NCSLI), the need for CubeSat rideshares has dramatically increased. After only three releases of the initiative, a total of 66 CubeSats now await launch opportunities. So, how is this challenge being resolved? NASA's Launch Services Program (LSP) has studied how to integrate PPODs on Athena, Atlas V, and Delta IV launch vehicles and has been instrumental in developing several carrier systems to support CubeSats as rideshares on NASA missions. In support of the first two ELaNa missions the Poly-Picosatellite Orbital Deployer (P-POD) was adapted for use on a Taurus XL (ELaNa I) and a Delta n (ELaNa III). Four P-PODs, which contained a total eight CubeSats, were used on these first ELaNa missions. Next up is ELaNa VI, which will launch on an Atlas V in August 2012. The four ELaNa VI CubeSats, in three P-PODs, are awaiting launch, having been integrated in the NPSCuLite. To increase rideshare capabilities, the Launch Services Program (LSP) is working to integrate P-PODs on Falcon 9 missions. The proposed Falcon 9 manifest will provide greater opportunities for the CubeSat community. For years, the standard CubeSat size was 1 U to 3U. As the desire to include more science in each cube grows, so does the standard CubeSat size. No longer is a 1 U, 1.5U, 2U or 3U CubeSat the only option available; the new CubeSat standard will include 6U and possibly even 12U. With each increase in CubeSat size, the CubeSat community is pushing the capability of the current P-POD design. Not only is the carrier system affected, but integration to the Launch Vehicle is also a concern. The development of a system to accommodate not only the 3U P-POD but also carriers for larger CubeSats is ongoing. LSP considers payloads in the lkg to 180 kg range rideshare or small/secondary payloads. As new and emerging small payloads are developed, rideshare opportunities and carrier systems need to be identified and secured. The development of a rideshare carrier system is not always cost effective. Sometimes a launch vehicle with an excellent performance record appears to be a great rideshare candidate however, after completing a feasibility study, LSP may determine that the cost of the rideshare carrier system is too great and, due to budget constraints, the development cannot go forward. With the current budget environment, one cost effective way to secure rideshare opportunities is to look for synergy with other government organizations that share the same interest.

Skrobot, Garrett Lee↗
DOE OSTI2025

Reactor System Facility Modification to Detect Compromised Human Machine Interfaces

This study focuses on a multi-layered Industrial Control System (ICS)/Operational Technology (OT) security architecture to aid in the discovery and mitigation of compromised Human Machine Interface (HMI)/Instrumentation & Control (I&C) based systems for modifying a prototypical reactor condition test facility called the Flowing Autoclave System (FAS) at Idaho National Laboratory (INL). This is achieved through a three-layered combination of network security solutions, hash-based algorithms, and blockchain technologies. Hash algorithms are mathematical functions used to generate a predetermined set of fixed-length values. They are widely used in computer security to verify the integrity of system information and data, both on a local network and the wider internet. Even small amounts of unauthorized system modification will cause the hash algorithm to output a set of characters that deviate significantly from its original value. Assisting secure hash functions, blockchain technology is a secure and distributed technology used to provide an immutable set of records replicated on all devices within a decentralized network. Blockchain offers a cost-effective solution to detect system compromise by providing a traceable breadcrumb trail of all network activity and data modification happening on a system. If both are used in conjunction with network monitoring tools, the integration of this three-pronged approach can become an asset in detecting suspected system compromises before any real damage can occur.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗
DOE OSTI2025

Secure and Resilient Operations Using Open-Source Distributed Systems Platform (OpenDSP)

The goal of this project is to identify and address cybersecurity gaps by developing a multi-layer multi-channel cyber-physical defense and survival mechanism for operating distribution networks with high penetration of solar / inverter-based resource (IBR) / distributed energy resource (DER). The proposed security enhancements are built upon the distributed framework and solution architecture for both information technology (IT) and operational technology (OT) systems. The technical solutions consist of two composite functionalities and six layers: proactive defense (vulnerability assessment, communication protection, and attack detection, as layers 1-3), and adaptive self-healing (attack-resilient control, adaptive recovery, and resilient survival, as layers 4-6). These layers, built on and extended from DHS CISA Cyber Framework, establish an integrated and robust cybersecurity framework for operating large-scale distribution networks.

14 SOLAR ENERGY↗
DOE OSTI2018

Day-Ahead Optimal Operation for Multi-Energy Residential Systems with Renewables

The intermittency and stochasticity nature of distributed renewable energy sources has introduced great challenges to the efficiency and security of energy distribution system operations. To address the negative impacts of intermittent renewable energy sources, this paper proposes here a day-ahead optimal operation strategy utilizing distributed energy resources based on the framework of the interconnected multi-energy system. First, a framework and mathematical models of multi-energy residential systems (MERS) are proposed. Based on the characteristics of residential energy distribution networks, the complex MERS models are reformulated to relieve the computational burden. Furthermore, the uncertainty factors such as renewable energy generation fluctuations and demand variations are handled by a reformulated chance con-strained programming technique. The feasibility and effectiveness of the proposed method are validated through a combined electric power and natural gas test system. Compared to similar models and methods in the existing literature, the proposed method performs better in terms of solution time, model scalability, and robustness in handling uncertainties.

24 POWER TRANSMISSION AND DISTRIBUTION↗
DOE OSTI2026

Security Constrained Economic Optimization of Photovoltaic and Other Distributed Assets

The rapid growth of distributed energy resources (DERs), especially photovoltaic (PV) systems, has introduced new complexities in maintaining grid reliability, stability, and cost-effective operation. This project addresses these challenges by developing and demonstrating a scalable GridOS Distributed Energy Resource Management System (DERMS) that enables secure, real-time optimization and control of DERs at the distribution feeder level.

14 SOLAR ENERGY↗
DOE OSTI2020

International Symposium on Transport Security of Nuclear and other Radioactive Material; Tokyo, Japan, November 2019

As an outcome of the Fourth Nuclear Security Summit of 2016, held in Washington D.C., the Governments of Australia, Canada, Czech Republic, Finland, France, Hungary, Italy, Japan, Kazakhstan, Morocco, Spain, the Republic of Korea, Thailand, the United Kingdom, and the United States reaffirmed, through INFCIRC/909, their will to further improve the overall security in the transport of nuclear and other radioactive materials. With this goal in mind, each expressed their commitment to further exchange national practices with other countries through the IAEA and the Global Initiative to Combat Nuclear Terrorism (GICNT). They also committed to actively support the IAEA as the central organization for coordinating activities and developing guidance documents and to support the GICNT and the Global Partnership Against the Spread of Weapons and Materials of Mass Destruction in developing and implementing its nuclear transport security activities. Both of these organizations address the commitments regarding nuclear transport security as outcomes of the Nuclear Security Summit 2016. In an effort to continue the momentum from the Nuclear Security Summit, the Government of Japan, in cooperation with the Integrated Support Center for Nuclear Nonproliferation and Nuclear Security of Japan Atomic Energy Agency (ISCN/JAEA), hosted the International Transport Security Symposium in November 2019. With over fifty countries invited to attend, the event exchanged and promoted good practices in several topical area sessions related to the security of nuclear and other radioactive material in transport. Topical sessions included Laws and Regulatory Framework, Physical Protection Systems, Response Actions, and Insider/Information Security. The Symposium built support for transport security and encouraged IAEA Member States to actively work regionally and internationally with the IAEA’s transport security programme through the practical implementation and incorporation of IAEA Nuclear Security Series recommendations and guidance into their national frameworks for transport security. From these sessions, to the host detailed a recommended path forward for future engagements in the security of nuclear and radioactive material in transport. The paper will discuss the Symposium’s outcomes and highlight the forward momentum made by both signatories and non-signatories for the strengthening of all the critical elements of a State’s transport security regime, including physical protection systems, insider threats to the nuclear and radioactive material supply chains, planning and capabilities for law enforcement response to malicious transport security events, and employment of technology to address critical vulnerabilities to the transport of nuclear and other radioactive materials.

Holt, Katherine↗
DOE OSTI2023

NREL Project CloudZero

The National Renewable Energy Laboratory's (NREL's) CloudZero project is evaluating the ability to reliably and securely manage complex energy systems from the cloud, identifying major technical and regulatory barriers to cloud adoption, suggesting new security controls and best practices for cloud applications, and empowering industry to embrace the cloud, where appropriate.

cloud↗
DOE OSTI2023

AI-based Detection and Defense Against Cyberattacks in Distributed Energy Resources

This study will provide comprehensive artificial intelligence (AI)-based solution tools for network security, malware prevention, and sensor data anomaly detection for distributed energy resource (DER) research, development, and demonstration. DER technologies are energy systems (e.g., solar panels, wind turbines, and energy storage systems) that are often connected to the internet and thus vulnerable to cyberattacks. Cybersecurity should be of primary concern for DERs, which is why we propose an integrated multi-layer cyber-defense system for DERs. This system encompasses risk assessments, network security, malware prevention, and detection of anomalies in the sensor data. Implementation of a comprehensive risk assessment with an overview of the model architecture should be the primary step, and should include the potential impact of experiencing, at a given time, one or more cyberattacks on the system. The second step is to ensure that the network security includes firewalls, intrusion detection, and malware prevention. The third step is to provide solution tools that enable sensor data anomaly detection for DERs. By incorporating these considerations into DER research, development, and demonstration, organizations can help ensure the safety and security of their systems and protect against potential cyberattacks.

20 FOSSIL-FUELED POWER PLANTS↗
DOE OSTI2016

Detector-device-independent quantum key distribution: Security analysis and fast implementation

One of the most pressing issues in quantum key distribution (QKD) is the problem of detector side-channel attacks. To overcome this problem, researchers proposed an elegant “time-reversal” QKD protocol called measurement-device-independent QKD (MDI-QKD), which is based on time-reversed entanglement swapping. However, MDI-QKD is more challenging to implement than standard point-to-point QKD. Recently, an intermediary QKD protocol called detector-device-independent QKD (DDI-QKD) has been proposed to overcome the drawbacks of MDI-QKD, with the hope that it would eventually lead to a more efficient detector side-channel-free QKD system. Here, we analyze the security of DDI-QKD and elucidate its security assumptions. We find that DDI-QKD is not equivalent to MDI-QKD, but its security can be demonstrated with reasonable assumptions. On the more practical side, we consider the feasibility of DDI-QKD and present a fast experimental demonstration (clocked at 625 MHz), capable of secret key exchange up to more than 90 km.

46 INSTRUMENTATION RELATED TO NUCLEAR SCIENCE AND ↗
DOE OSTI2025

Internship Presentation: Reactor System Facility Modification to Detect Compromised Human Machine Interfaces

This study presents a multi-layered Industrial Control System (ICS)/Operational Technology (OT) security architecture aimed at detecting and mitigating compromised Human Machine Interface (HMI) and Instrumentation & Control (I&C) systems within the Flowing Autoclave System (FAS) at Idaho National Laboratory (INL). The approach combines network security solutions, hash-based algorithms, and blockchain technologies to verify system integrity and provide an immutable record of network activity. This integrated three-pronged strategy enhances the detection of system compromises, enabling preemptive action before significant damage occurs.

21 - SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLAN↗
DOE OSTI2023

Transactive Energy System Deployment Over Insecure Communication Links

Here, in this paper, the privacy and security issues associated with the transactive energy system (TES) deployment over insecure communication links are addressed. In particular, it is ensured that 1) individual agents’ bidding information is kept private throughout hierarchical market-based interactions; and 2) any extraneous data injection attack can be quickly and easily detected. An implementation framework is proposed to enable the cryptography-based enhancement of privacy and security for the deployment of any general hierarchical systems including TESs. Under the proposed framework, a unified cryptography-based approach is developed to achieve both privacy and security simultaneously. Specifically, privacy preservation is realized by an enhanced Paillier encryption scheme, where a block design is proposed to significantly improve computational efficiency. Attack detection is further achieved by an enhanced Paillier digital signature scheme, where a stamp-concatenation mechanism is proposed to enable detection of data replace and reorder attacks. Simulation results verify the effectiveness of the proposed cyber-resilient design for transactive energy systems. Note to Practitioners—This paper is motivated by addressing the issues of cyber resiliency for practically deploying transactive energy system (TES) but it is also applicable to the problem of enhancing the privacy and security for any general hierarchical control systems. TES is an emerging control approach that engages energy suppliers and customers through market operations and uses the price to optimally allocate energy resources. While it has been shown to be promising for power system applications, the underlying market-based interactions raise significant concerns of privacy (data leakage) and security (data tampering). However, existing TES works only focus on the coordination mechanism instead of privacy and security issues. This paper proposes a new cryptography-based TES design for practical deployment. Specifically, to protect privacy, individual supply and demand amounts to be exchanged are all encrypted in a particular way such that the original amounts cannot be inferred from the encrypted amounts, while the desired computation for setting the market clearing price can be carried out over the encrypted amounts, thus generating an encrypted result which, when decrypted, matches that of the same computation over the original amounts. To achieve security, for each exchanged data, its sender generates a particular digital signature which is exchanged together with the data. This enables the receiver to automatically detect the integrity by checking whether a mathematical relationship holds for the pair of data and signature. In our future research, we will investigate more challenging scenarios where some suppliers and customers themselves could be corrupted and purposely submit distorted amounts.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2019

Identity-based quantum signature scheme with strong security

Recently, Chen et al. proposed an identity-based quantum signature scheme (IDQSS). Their scheme has the advantages of the classical identity-based signature (IDS) scheme. However, Chen et al.’s scheme cannot resist against the private key generator (PKG)’s forgery attack. On the other hand, in their scheme, many rounds of quantum swap tests have to be performed by the verifier during the signature verification phase. To improve the security and efficiency of the IDQSS, a new IDQSS is proposed. In our scheme, the private key of the signer is generated by PKG according to the signer’s identity, which is used as the corresponding public key. The signer generates a quantum signature with her private key and the secret parameters shared with the verifier. Anyone can verify the quantum signature with the identity of the signer. Our scheme overcomes the security drawback of Chen et al.’s scheme and inherits the merits of the classical IDS system. It has the security properties such as information-theoretical security, non-repudiation and unforgeability. At the same time, in our scheme, the verifier need not perform any quantum swap test. Therefore, our IDQSS is more secure and efficient.

71 CLASSICAL AND QUANTUM MECHANICS, GENERAL PHYSIC↗
DOE OSTI2021

Design and Operation of Energy Systems with Large Amounts of Variable Generation: IEA Wind TCP Task 25 (Final Summary Report)

This report summarizes findings on wind integration from the 17 countries or sponsors participating in the International Energy Agency Wind Technology Collaboration Program (IEA Wind TCP) Task 25 from 2006-2020. Both real experience and studies are reported. Many wind integration studies incorporate solar energy, and most of the results discussed here are valid for other variable renewables in addition to wind. The national case studies address several impacts of wind power on electric power systems. In this report, they are grouped under long-term planning issues and short-term operational impacts. Long-term planning issues include grid planning and capacity adequacy. Short-term operational impacts include reliability, stability, reserves, and maximizing the value of wind in operational timescales (balancing related issues). The first section presents the variability and uncertainty of power system-wide wind power, and the last section presents recent studies toward 100% shares of renewables. The appendix provides a summary of ongoing research in the national projects contributing to Task 25 for 2021-2024. The design and operation of power and energy systems is an evolving field. As ambitious targets toward net-zero carbon energy systems are announced globally, many scenarios are being made regarding how to reach these future decarbonized energy systems, most of them involving large amounts of variable renewables, mainly wind and solar energy. The secure operation of power systems is increasingly challenging, and the impacts of variable renewables, new electrification loads together with increased distribution system resources will lead to somewhat different challenges for different systems. Tools and methods to study future power and energy systems also need to evolve, and both short-term operational aspects (such as power system stability) and long-term aspects (such as resource adequacy) will probably see new paradigms of operation and design. The experience of operating and planning systems with large amounts of variable generation is accumulating, and research to tackle the challenges of inverter-based, nonsynchronous generation is on the way. Energy transition and digitalization also bring new flexibility opportunities, both short and long term.

24 POWER TRANSMISSION AND DISTRIBUTION↗
NASA NTRS1990

Considerations of persistence and security in CHOICES, an object-oriented operating system

The current design of the CHOICES persistent object implementation is summarized, and research in progress is outlined. CHOICES is implemented as an object-oriented system, and persistent objects appear to simplify and unify many functions of the system. It is demonstrated that persistent data can be accessed through an object-oriented file system model as efficiently as by an existing optimized commercial file system. The object-oriented file system can be specialized to provide an object store for persistent objects. The problems that arise in building an efficient persistent object scheme in a 32-bit virtual address space that only uses paging are described. Despite its limitations, the solution presented allows quite large numbers of objects to be active simultaneously, and permits sharing and efficient method calls.

Campbell, Roy H.↗
DOE OSTI2024

End-to-End Encryption for Cyber-Physical Systems Using Fully Homomorphic Encryption

Cyber-physical systems require reliable, safe, and secure control of critical infrastructure, combining computational and networking capabilities, which heighten the risk of cyber attacks. These attacks can disrupt the physical process, causing unforeseen consequences. One solution is the use of fully homomorphic encryption (FHE) to protect the control loop, allowing for secure computations and communications without compromising signal and control system privacy. The challenge with FHE, however, is its requirement for inputs to be integers. This presentation introduces a modified Learning With Errors (LWE) FHE approach that encodes control system dynamics and signals into integers. Our proposed scheme leverages a generalized LWE encoding function and modifies the Gentry-Sahai-Waters gadget decomposition tool to encrypt the control system. Using the modified LWE scheme, we formalize a fully encrypted control system, supported by simulated results.

97 MATHEMATICS AND COMPUTING↗