Search NASA⌕ Search

SEARCH · Search NASA

Results for “System Security”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 919 records · Page 51
All sourcesNASA NTRSDOE OSTI
DOE OSTI2023

Designing an Intrusion Detection for an Adjustable Speed Drive System Controlling a Critical Process

In this article, we address the cyber-security problem of industrial control systems (ICSs) when their sensor measurements may be compromised due to an attacker who has intercepted those measurements via a network. We introduce a general-purpose method “Dynamic Watermarking (DW)” to detect potential cyber-intrusions on speed sensor measurements within industrial control systems, which deploy an adjustable speed drive (ASD) to control a critical process. The DW method is injecting a random private low-amplitude signal with a zero mean Gaussian distribution, “watermark”, into one of the input phase voltages powering the ASD system. The watermark signal propagates through the system including pulse width modulation (PWM) power conversion stage and motor, then ultimately appears in the speed sensor measurements. By deploying two statistical DW tests with two proper thresholds, the system can detect potential cyber-intrusions or unobservable cyber-attacks such as replay attacks and false data injection attacks (FDIA). The DW method tested on a laboratory-scale ASD system experimentally to protect the system against cyber-intrusions. This system, powered by a commercial PWM drive operating at 208 V, 3-phase, and 3.7 kW, served as our experimental platform.

42 ENGINEERING↗
DOE OSTI2018

System Integration for Remote Systems at DOE Hanford Nuclear Site - 18712

The deployment of remotely operated technology that functions in environments too hazardous for worker entry are often needed at the Hanford Site to perform functions like infrastructure inspection; decommissioning and decontamination; characterization; environmental sampling; and nuclear waste sampling, mobilization, and retrieval. The development and production of Hanford remote systems typically requires the integration of robotic components and sensor technologies that have been engineered or adapted to meet function and performance requirements. Pacific Northwest National Laboratory has led the engineering and integration of robotic and sensor/manipulator technology for several remote system deployments at Hanford and for national security sponsors. This paper describes the system integration process for ensuring that the mechanical, electrical, and software aspects of each component are successfully brought together to produce a remote system that meets function and performance requirements under extreme environments and limited-access operational demands. A brief summary of previous and current remote system projects is also provided. (authors)

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗
DOE OSTI2022

Demonstrating Advanced Nuclear Energy Solutions for Net Zero

Background/Objectives. The aggressive goals being set by nation states, communities, and private industry for decarbonization of grid electricity, industrial heat sources, and transportation around the world are imperative to mitigating the devastating effects that we are seeing from climate change. Although many of these goals focus on accomplishments by 2035 or 2050, the decisions that we make today won’t just impact the landscape of energy systems for the next 20 or 30 years—they will shape the world’s environment for centuries to come. That means that we can’t just focus on technologies that will get us to 2050, but technologies that will withstand our energy demands over that long-ranging future. Success will require us to utilize all of the clean energy resources that we have available to meet demands for electricity, heat, and steam, and we will need energy carriers such as hydrogen that do not emit additional greenhouse gases at the point of use. Nuclear energy, ranging from technologies in service today to advanced, higher temperature and modular systems that will be in service this decade, will provide a robust complement to renewable energy resources that operate variably. Researchers across the U.S. Department of Energy laboratory complex are working to advance multiple aspects of these clean energy solutions, with many focusing on integrated energy system solutions that leverage all available clean energy assets to meet wide-ranging energy demands. Approach/Activities. Nuclear energy is a proven, zero-emission option during operation that can provide consistent, dispatchable power to meet electricity demands while also providing high-quality heat that can meet energy demands beyond the electricity sector. Energy system design should seek to maximize these assets. As a dispatchable energy source with a small land utilization footprint, nuclear energy can be collocated with renewable resources, and the smaller systems that will be deployed this decade (ranging from a few megawatts to hundreds of megawatts) can be installed right where that energy is needed. Integrated nuclear and renewable systems will enhance power grid reliability and resilience, and they will help stabilize the grid through their increasingly flexible operation. Licensing, installation, and broad adoption of these advanced nuclear energy systems are expected to progress significantly in the 2020s, but this may be longer than desired by some stakeholders wishing to implement impactful clean energy decisions today. However, one must recall that nuclear energy systems will operate for 80 or more years, as is being demonstrated by current fleet nuclear systems. The nuclear community is extremely thorough in reviewing these systems with regard to safety and security; these efforts ensure that the deployed systems will continue to provide reliable, resilient energy over that operational lifetime. That investment of time up front will ensure that we can support energy demands over the centuries to come. While advanced nuclear technologies move through this process, communities and private industry may choose to install renewable generation systems that can later be coupled to the complementary nuclear systems as they become available—thus moving closer to the net zero goals in the near term. Choosing technologies and deployment configurations that allow small modular nuclear powerhouses to be added to these “energy parks” as they become available will ensure that advanced technologies can be readily adopted to support growing demands for clean energy. Results/Lessons Learned. The primary focus of integrated energy systems (IES) research is to assess the technical and economic potential of novel multi-input, multioutput solutions that are expected to enhance energy system flexibility, reliability, and resilience as we pursue a clean energy transition. Various energy applications and product streams beyond electricity are being evaluated, ranging from generation of potable water to production of hydrogen, fertilizers, synthetic fuels, and various chemicals. In early FY23 Idaho National Laboratory (INL) will commission thermal energy generation systems that emulate nuclear fission energy input using electric heating and will allow for integrated system testing with thermal energy storage, hydrogen production via high temperature electrolysis (HTE), and power systems hardware to demonstrate operation of a clean energy park within a microgrid or larger grid infrastructure, supporting up to 450 kW of heat input via electric heating and demonstrating operation of HTE systems at the multi-hundred kW scale. This presentation will highlight the wide array of RD&D being conducted at INL and partner laboratories to develop and deploy nuclear and renewable-based IES that will be key to achieving our net zero goals, including both computational and experimental demonstrations. By working with key collaborators in industry, analytical st

08 HYDROGEN↗
DOE OSTI2024

Water Security: Trends, Capabilities, and Research Directions to Secure Water Infrastructure

Water and wastewater sector is target rich and resource poor ~153k water utilities, serve 80% of US population ~16k publicly-owned wastewater systems in the US serve 75% of the population Need scalable solutions to fit small and medium to large systems Federal attention to critical infrastructure continues to grow – particularly in the water sector Increase in water sector incidents and threats for large scale disruption – particularly by nation-state actors and their proxies EPA is the SRMA DHS CISA focuses on critical infrastructure protection across sectors They must work together to secure WWW systems Research capabilities to enable secure water systems Current and future threats Resilience – natural disasters, accidents, cyber-physical attacks

99 - GENERAL AND MISCELLANEOUS↗
NASA NTRS2018

Securing and Auto-Synchronizing Communication over Free-Space Optics Using Quantum Key Distribution and Chaotic Systems

Free-Space Optical (FSO) communication provides very large bandwidth, relatively low cost, low power, low mass of implementation, and improved security when compared to conventional Free-Space Radio-Frequency (FSRF) systems. In this paper, we demonstrate a communication protocol that demonstrates improved security and longer-range FSO communication, compared to existing FSO security techniques, such as N-slit interferometers. The protocol integrates chaotic communications with Quantum Key Distribution (QKD) techniques. A Lorenz chaotic system, which is inherently secure and auto-synchronized, is utilized for secure data communications over a classical channel, while QKD is used to exchange crucial chaotic system parameters over a secure quantum channel. We also provide a concept of operations for a NASA mission combining chaotic communications and QKD operating synergistically in an end-to-end space communications link. The experimental simulation results and analysis are favorable towards our approach.

Chaotic Communication↗
NASA NTRS1979

Private sector involvement in civil space remote sensing. Volume 1: Report

A survey of private sector developers, users, and interpreters of Earth resources data was conducted in an effort to encourage private investment and participation in remote sensing systems. Results indicate positive interest in participation beyond the current hardware contracting level, however, there is a substantial gap between current market levels and system costs. Issues identified include the selection process for an operating entity, the public/private interface, data collection and access policies, price and profit regulation in a subsidized system, international participation, and the responsibility for research and development. It was agreed that the cost, complexity, and security implications of integrated systems need not be an absolute bar to their private operation.

Source record↗
NASA NTRS2004

Education, Technology, and Media: A Peak into My Summer Internship at NASA Glenn Research Center in Cleveland, Ohio

My name is James Moon and I am a senor at Tennessee State University where my major is Aeronautical and Industrial Technology with a concentration in industrial electronics. I am currently serving my internship in the Engineering and Technical Services Directorate at the Glenn Research Center (GRC). The Engineering and Technical Service Directorate provides the services and infrastructure for the Glenn Research Center to take research concepts to reality. They provide a full range of integrated services including engineering, advanced prototyping and testing, facility management, and information technology for NASA, industry, and academia. Engineering and Technical Services contains the core knowledge in Information Technology (IT). This includes data systems and analysis, inter and intranet based systems design and data security. Including the design and development of embedded real-time sohare applications for flight and supporting ground systems, Engineering and Technical Services provide a wide range of IT services and products specific to the Glenn Research Center research and engineering community.

Moon, James↗
DOE OSTI2023

CRITICAL FUNCTION ASSURANCE: Understanding Critical Function and Critical Function Delivery is Foundational for Meaningful ICS Security Improvement and Policy Efforts

Modern life is enabled by a complex and interdependent web of critical functions, including energy, communications, transportation, food, and water. Automation has significantly reduced or replaced human interactions in the delivery of these functions, resulting in a web of goods and services that are made available 24/7 only through unique and intentional deployments of microprocessors, software, and firmware technologies. The prospect of cyber-enabled sabotage of these processes disrupts traditional risk determination models. Critical Function Assurance (CFA) is a foundational approach to identifying, prioritizing, and mitigating the risk that is inherent in the delivery of critical functions that depend on digital technology. It provides rapid focus to what matters most and illuminates elements and areas of risk that otherwise are often overlooked. This focus enables effective application of available security resources and optimizes security strategy and policy efforts. This paper introduces CFA to decision makers and risk executives (including CEOs, COOs, CFOs, and CISOs) whose organizations support and deliver the critical functions that underpin national defense, societal health and safety, and a vibrant economy.

29 ENERGY PLANNING, POLICY, AND ECONOMY↗
NASA NTRSDate not supplied

Improving Drought Monitoring for the Middle East and North Africa Region via Data Assimilation Using the NASA Land Information System (LIS)

Food and water security become an increasingly pressing concern for countries within the Middle East and North Africa (MENA) region under climate change. Droughts are among the most important issues facing this region in both economic and social terms, which have become much more severe in recent decades. An effective drought monitoring and early warning system is, therefore, critical to support drought impact assessment and risk management. This presentation describes the effort to improve the simulation of hydrological conditions for such semi-arid environment by Noah Multi-parameterization Land Surface Model within the NASA Land Information System (LIS) via assimilating remotely sensed leaf area index and soil moisture in the presence of irrigation. Multi-source satellite evapotranspiration products are used to evaluate the model performance under the impact of the choice of met-forcings, the presence of irrigation and data assimilation. The improved model configuration is aimed to deliver a better soil moisture estimation for the composite drought indicator (CDI) for drought monitoring and to provide a better initial condition in support for hydrological drought forecasting.

Wanshu Nie↗
DOE OSTI2017

Transient Stability Assessment of Power Systems With Uncertain Renewable Generation: Preprint

The transient stability of a power system depends heavily on its operational state at the moment of a fault. In systems where the penetration of renewable generation is significant, the dispatch of the conventional fleet of synchronous generators is uncertain at the time of dynamic security analysis. Hence, the assessment of transient stability requires the solution of a system of nonlinear ordinary differential equations with unknown initial conditions and inputs. To this end, we set forth a computational framework that relies on Taylor polynomials, where variables are associated with the level of renewable generation. This paper describes the details of the method and illustrates its application on a nine-bus test system.

24 POWER TRANSMISSION AND DISTRIBUTION↗
DOE OSTI2024

PLC Vulnerabilities and Mitigations

Programmable Logic Controllers (PLCs) are used extensively in many high-importance industrial and nonindustrial settings including controlling elevators, manufacturing machines, and utility facilities such as power and natural gas, however cybersecurity protection for them has been neglected. Within recent years, PLCs have been put under more security scrutiny and experts have advocated for changes from the addition of protocol encryption and network segmentation to intrusion detection systems on the PLCs themselves. While PLC security is critical, a large portion of the PLCs available today will never receive these changes due to being legacy or the difficulty of overhauling the security on existing systems. Due to the infeasibility of applying many recommended security measures towards currently available machines, we aim to provide realistic and affordable best practices for hardening PLCs. We will first conduct security analysis and consider attack vectors within our target PLC. Once we’ve analyzed the device’s security, we will evaluate a variety of mitigation methods and create guidelines to effectively reduce the threat posed by PLC attacks with minimal disruption to operations.

42 ENGINEERING↗
DOE OSTI2016

Evaluating the Maturity of Cybersecurity Programs for Building Control Systems

The cyber-physical security threat to buildings is complex, non-linear, and rapidly evolving as operational and information technologies converge and connect buildings to cyberspace. Cyberattacks on buildings can exploit smart building controls and breach corporate networks, causing financial and reputational damage. This may result in the loss of sensitive building information or the disruption of, or damage to, the systems necessary for the safe and efficient operation of buildings. For the buildings and facility infrastructure, there is a need for a robust national cybersecurity strategy for buildings, guidance on the selection and implementation of appropriate cybersecurity controls for buildings, an approach to evaluate the maturity and adequacy of the cybersecurity programs. To provide an approach for evaluating the maturity of the cybersecurity programs for building control systems, the US Department of Energy’s widely used Cybersecurity Capability and Maturity Model (C2M2) has been adapted into a building control systems version. The revised model, the Buildings-C2M2 (B-C2M2) provides maturity level indicators for cybersecurity programmatic domains. A “B-C2M2 Lite” version allows facility managers and building control system engineers, or information technology personnel to perform rapid self-assessments of their cybersecurity program. Both tools have been pilot tested on several facilities. This paper outlines the concept of a maturity model, describes the B-C2M2 tools, presents results and observations from the pilot assessments, and lays out plans for future work.

Glantz, Clifford S.↗
DOE OSTI2024

Investigate the Security of Electric Vehicle (EV) Ecosystem Applications

Apps that run on mobile devices are one of critical components of the electric vehicle (EV) ecosystem and pose possible threat actor points of entry that may impact the trust and security of EV charging systems in the future. Mobile apps often rely on communication between cloud servers and users, thereby creating potential points of entry for cyberattacks. Although app stores such as Apple App Store or Google Play Store generally test the security of apps, the cyber aspects may not be sufficient for many entities including DOD, federal fleets, and commercial entities. A more thorough inspection and the ability to influence developers is imminently needed. This research studies security attributes and vulnerabilities of a sample of mobile applications that support key user functions in the EV ecosystem. The study shows that all analyzed apps have security risks, categorized as either high or medium or both and a comprehensive cybersecurity guideline for developing mobile apps is necessary.

33 ADVANCED PROPULSION SYSTEMS↗
DOE OSTI2025

Cyber-Physical Tabletop Exercise for Small Modular Reactor Facilities

U.S. nuclear power facilities face increasing challenges in meeting dynamic security requirements caused by evolving and expanding threats while keeping costs reasonable to make nuclear energy competitive. This evolving threat landscape includes adversaries having offensive cyber capabilities to attack information technology (IT) systems and operation technology (OT) systems. These adversaries may have the ability to attack the physical protection system (PPS) networks with potential consequential impacts that could degrade the effectiveness of the PPS. These cyber attacks may also be used to attack the safety and operational systems used to operate and ensure the safety of the reactor. Additionally, adversaries may gain access to unmanned aerial systems (UAS) that may be used to provide reconnaissance and surveillance of the facility, provide information to the adversaries, and be equipped with kinetic capabilities such as explosives or weapons that can be used to directly attack the facility. The Department of Energy’s Office of Nuclear Energy’s Advanced Reactor Safeguards and Security (ARSS) program funded Sandia National Laboratories (SNL) and Idaho National Laboratory (INL) to develop a cyber-physical tabletop exercise (TTX). This exercise was conducted on a hypothetical small modular reactor (SMR) facility, and only considered a potential adversary cyber attack on the PPS to a physical attack on the hypothetical facility to achieve a radiological release. This cyber-physical TTX is meant to provide lessons learned to integrate the cyber security system design and the physical protection system (PPS) design to decrease design, operation, and maintenance costs as well as increase effectiveness for defending against design basis threat attacks at the facility. This TTX will also provide a framework and method for SMR and microreactor vendors to conduct their own cyber-physical TTX and gain impactful insights to improving the cyber and physical protection system design for their SMR or microreactor facility design.

42 ENGINEERING↗
DOE OSTI2022

Enabling Floating Solar Photovoltaic (FPV) Deployment: Exploring the Operational Benefits of Floating Solar-Hydropower Hybrids

The Southeast (SE) Asia region is undergoing rapid energy sector transitions and exploring the potential role of renewables - including solar photovoltaics (PV) - as it becomes increasingly competitive as a result of technological advances and falling capital costs. Low-cost solar PV provides countries in the region with an option to meet increasing energy demand and diversify generation portfolios, complementing hydropower and thermal-dominant systems and strengthening energy security throughout the region. Floating solar PV (FPV) has emerged as an attractive application of solar PV that allows for systems to be floated on water bodies. Pairing FPV in hybrid systems with hydropower may also provide significant value for power systems in the region, beyond oft-cited co-benefits of stand-alone FPV. Despite growing interest in FPV systems, few applications of hybrid FPV-hydropower systems exist in SE Asia, and limited information is available about the co-benefits these systems may provide for potential adopters. This work, funded by the U.S. Agency for International Development (USAID) through the Advanced Energy Partnership for Asia, explores the value that hybrid FPV-hydropower systems may provide to the power systems of SE Asian countries. This work on the value of hybrid FPV-hydropower systems is accompanied by a recent report, Creating an Enabling Policy and Regulatory Environment for Floating Solar Photovoltaics: Review of Barriers to FPV Deployment in Southeast Asia, also focused on SE Asia.

14 SOLAR ENERGY↗
DOE OSTI2024

Clean Energy Cybersecurity Accelerator: Cohort 2 - runZero Public Report

The U.S. Department of Energy (DOE) Office of Cybersecurity, Energy Security, and Emergency Response (CESER) sponsors the Clean Energy Cybersecurity Accelerator™ (CECA) to expedite the deployment of emerging security technologies that address the most urgent security concerns facing modern and future electric grids. CECA Cohort 2 assessed solutions focused on hidden risks due to incomplete system visibility and device security and configuration. Improving visibility can be achieved through operational technology (OT) asset identification solutions, including capabilities like automatic discovery, vulnerability reporting, and configuration monitoring. Solutions that monitor and identify assets in information technology (IT) networks in other domains are widely used; however, there is far less adoption of monitoring solutions for operational technology environments. Wider adoption may increase with increased confidence in the ability for these solutions to understand and respond to the specific requirements of OT environments. CECA Cohort 2 evaluated the active and passive asset discovery capabilities of market-ready solutions, documented and analyzed results, and identified gaps in functionality or capabilities. This report and describes how these results can help advance the adoption of these and similar solutions in the electric sector.

24 POWER TRANSMISSION AND DISTRIBUTION↗
DOE OSTI2024

Clean Energy Cybersecurity Accelerator: Cohort 2 - Asimily Public Report

The U.S. Department of Energy (DOE) Office of Cybersecurity, Energy Security, and Emergency Response (CESER) sponsors the Clean Energy Cybersecurity Accelerator (TM) (CECA) to expedite the deployment of emerging security technologies that address the most urgent security concerns facing modern and future electric grids. CECA Cohort 2 assessed solutions focused on hidden risks due to incomplete system visibility and device security and configuration. Improving visibility can be achieved through operational technology (OT) asset identification solutions, including capabilities like automatic discovery, vulnerability reporting, and configuration monitoring. Solutions that monitor and identify assets in information technology (IT) networks in other domains are widely used; however, there is far less adoption of monitoring solutions for operational technology environments. Wider adoption may increase with increased confidence in the ability for these solutions to understand and respond to the specific requirements of OT environments. CECA Cohort 2 evaluated the active and passive asset discovery capabilities of market-ready solutions, documented and analyzed results, and identified gaps in functionality or capabilities. This report and describes how these results can help advance the adoption of these and similar solutions in the electric sector.

24 POWER TRANSMISSION AND DISTRIBUTION↗
NASA NTRS2006

Runway Safety Monitor Algorithm for Single and Crossing Runway Incursion Detection and Alerting

The Runway Safety Monitor (RSM) is an aircraft based algorithm for runway incursion detection and alerting that was developed in support of NASA's Runway Incursion Prevention System (RIPS) research conducted under the NASA Aviation Safety and Security Program's Synthetic Vision System project. The RSM algorithm provides warnings of runway incursions in sufficient time for pilots to take evasive action and avoid accidents during landings, takeoffs or when taxiing on the runway. The report documents the RSM software and describes in detail how RSM performs runway incursion detection and alerting functions for NASA RIPS. The report also describes the RIPS flight tests conducted at the Reno/Tahoe International Airport (RNO) and the Wallops Flight Facility (WAL) during July and August of 2004, and the RSM performance results and lessons learned from those flight tests.

Green, David F., Jr.↗