A Multiplex Complex Systems Model for Engineering Security Systems-Slides.
Abstract not provided.
Williams, Adam David↗
SEARCH · Search NASA
Results for “System Security”
Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.
Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.
CYDRES: CYber Defense and REsilient System for securing grid-interactive efficient buildings
Smart buildings, especially Grid-interactive Efficient Buildings (GEBs), suffer from cyber-attacks and physical faults due to the integration of a large number of sensors and controls, connected devices, and associated communication networks. This study demonstrated a real-time advanced building resilient platform, called CYber Defense and REsilient System (CYDRES), which is deployable for existing and emerging Building Automation Systems (BASs). CYDRES aims to empower GEBs with cyber-attack-immune capabilities through multi-layer prevention and adaptation mechanisms to monitor, detect, and respond to cyber-attacks and physical operational faults. CYDRES is demonstrated through real-time experiments in a Hardware-in-the-Loop (HIL) testbed.
Building automation system, Cyber-attacks, Physica↗
Module-OT: A Turnkey Solution for Securing Energy Systems
The Modular Security Apparatus for Managing Distributed Cryptography for Command-and-Control Messages on Operational Technology Networks (Module-OT) is a flexible and lightweight solution for grid-edge devices focusing on end-to-end security. It is a bump- in- the-wire solution acting as a secure conduit for data between devices or systems across a network. It improves the cybersecurity posture of DER systems by providing authentication, authorization, and data integrity to secure DER communications. Additionally, it performs key management, provides data security through whitelisting Internet Protocol addresses and ports, blocks unauthorized connections, controls user access, and allows serial or Ethernet connections for added flexibility. The core software is portable to various Linux-based operating systems and is developed to be customized by the developer and researcher communities. Module-OT has been validated in the lab, has been demonstrated at a 500-KW PV-plus-storage site, and has been proven ready to secure operational technology devices. Its core functionality meets current standards, including validation procedures of the NIST Cryptographic Algorithm Validation Program (CAVP) and the Federal Information Processing Standard (FIPS 140-2). Because of its capability to provide an accessible and affordable option for stepping up security across modern energy systems, Module-OT can serve as an effective technological option to standardize cybersecurity moving forward.
cryptography↗
Analyzing the Static Security Functions of a Power System Dynamic Security Assessment Toolbox
Not Available
Narasimham Arava, V. S.↗
Empirical Insights for a Multi-Layered Network Complex Systems Model for Engineering Nuclear Security Systems-Slides.
Abstract not provided.
Williams, Adam David↗
Security warning system monitors up to fifteen remote areas simultaneously
Security warning system consisting of 15 television cameras is capable of monitoring several remote or unoccupied areas simultaneously. The system uses a commutator and decommutator, allowing time-multiplexed video transmission. This security system could be used in industrial and retail establishments.
Fusco, R. C.↗
Cybersecurity Risk Assessment Framework for Externally Exposed Energy Delivery Systems
Securing the energy delivery system (EDS) from complex, nonlinear, and evolving cyber threats requires a complex set of changing and interwoven classes of technologies, policies, relationships, and personnel. One key area in this technological milieu is assessment methodologies to compare information, gathered by a variety of means, about networked devices with publicly known possible threat information about said devices. This information is used to generate risk-based characterizations that allow for the adjudication and proper corresponding management action chains to be assigned.
Gourisetti, Sri Nikhil G.↗
Random digital encryption secure communication system
The design of a secure communication system is described. A product code, formed from two pseudorandom sequences of digital bits, is used to encipher or scramble data prior to transmission. The two pseudorandom sequences are periodically changed at intervals before they have had time to repeat. One of the two sequences is transmitted continuously with the scrambled data for synchronization. In the receiver portion of the system, the incoming signal is compared with one of two locally generated pseudorandom sequences until correspondence between the sequences is obtained. At this time, the two locally generated sequences are formed into a product code which deciphers the data from the incoming signal. Provision is made to ensure synchronization of the transmitting and receiving portions of the system.
Doland, G. D.↗
Tools, Techniques, and Methodologies: A Survey of Digital Forensics for SCADA Systems
Security aspects of SCADA environments and the systems within are increasingly a center of interest to researchers and security professionals. As the rise of sophisticated and nation-state malware targeting such systems flourishes, traditional digital forensics tools struggle to transfer the same capabilities to systems lacking typical volatile memory primitives, monitoring software, and the compatible operating-system primitives necessary for conducting forensic investigations. Even worse, SCADA systems are typically not designed and implemented with security in mind, nor were they purpose-built to monitor and record system data at the granularity associated with traditional IT systems. Rather, these systems are often built to control field devices and drive industrial processes. More succinctly, SCADA systems were not designed with a primary goal of interacting with the digital world. Consequently, forensics investigators well-versed in the world of digital forensics and incident response face an array of challenges that prevent them from conducting effective forensic investigation in environments with vast amounts of critical infrastructure. In order to bring SCADA systems within the reach of the armies of digital forensics professionals and tooling already available, both researchers and practitioners need a guide to the current state-of-the-art techniques, a road-map to the challenges lying on the path forward, and insight into the future directions R&D must move towards. To that end, this paper presents a survey into the literature on digital forensics applied to SCADA systems. We cover not only the challenges to applying digital forensics to SCADA like most other reviews, but also the range of proposed frameworks, methodologies, and actual implementations in literature.
Asmar Awad, Rima↗
Application of the Associated Particle Technique to Fieldable Prompt Gamma-Ray Neutron Activation Analysis Systems
Secure and Resilient Cyber-physical Systems: Holistic Approaches to Critical Infrastructure Resilience Challenges Poster.
46 INSTRUMENTATION RELATED TO NUCLEAR SCIENCE AND ↗
Stucco System
Security event data, such as intrusion detection system alerts, provide a starting point for analysis, but are information impoverished. To provide context, analysts must manually gather and synthesize relevant data from myriad sources within their enterprise and external to it. Analysts search system logs, network flows, and firewall data; they search IP blacklists and reputation lists, software vulnerability information, malware and threat data, OS and application vendor blogs, and news sites. All of these sources are manually searched for data relevant to the event being investigated. Relevant results must then be brought together and synthesized to put the event in context and make decisions about its importance and impact.
42 ENGINEERING↗
Deep Cyber-Physical Situational Awareness for Energy Systems: A Secure Foundation for Next-Generation Energy Management
This document provides the final report for the CYPRES project. The purpose is (1) to highlight and summarize its major accomplishments and (2) to provide guidance on how its outcomes have informed and can inform important additional research and technology transfer. The goal of CYPRES was the research, development, and demonstration of a security-oriented next generation cyber-physical EMS for electric power systems that detects malicious and abnormal events through the fusion of cyber and physical data. To achieve this, the CYPRES project team researched, developed, and built a prototype of the solution, referred to as the CYPRES EMS. The CYPRES EMS is a proof-of-concept cyber-physical platform that demonstrates the management of the energy system, communications, security, and cyber-physical grid modeling and analytics. As part of the capabilities of the CYPRES EMS, the team designed and developed a suite of power system applications for monitoring, risk analyses, detection, and control that are inherently cyberaware. At its core, the project aimed to research, develop, and demonstrate a security-oriented next-generation cyber-physical Energy Management System (EMS) capable of detecting malicious and abnormal events through the innovative fusion of cyber and physical data. This approach represents a fundamental shift from traditional EMS, reimagining how critical infrastructure can be protected through unified cyber-aware and physics-aware secure data flow pipelines. The project’s cornerstone deliverable, the CYPRES EMS, serves as a proof-of-concept cyber-physical platform that revolutionizes the management of energy systems, communications, security, and cyber-physical grid modeling and analytics. This prototype implements a comprehensive suite of power system applications for monitoring, risk analyses, detection, and control, all designed with inherent cyber awareness. The system’s architecture extends from end-devices in the field through to control center applications, establishing a secure and resilient control framework that addresses the challenges posed by diverse devices of unknown trustworthiness connecting to modern power systems. Through this innovative approach to deep cyber-physical situational awareness, the CYPRES project not only advances the state-of-the-art in energy infrastructure protection but also establishes a new paradigm for how EMS can be designed, deployed, and operated in an increasingly complex threat landscape. The findings and developments from this project provide crucial insights for stakeholders across the energy sector, offering a blueprint for enhancing the reliability and resilience of our nation’s critical energy infrastructure in the face of evolving cyber threats.
24 POWER TRANSMISSION AND DISTRIBUTION↗
An islanding detection methodology combining decision trees and Sandia frequency shift for inverter-based distributed generations
Distributed generations (DGs) for grid-connected applications require an accurate and reliable islanding detection methodology (IDM) for secure system operation. This paper presents an IDM for grid-connected inverter-based DGs. The proposed method is a combination of passive and active islanding detection techniques for aggregation of their advantages and elimination/minimisation of the drawbacks. In the proposed IDM, the passive method utilises critical system attributes extracted from local voltage measurements at target DG locations as well as employs decision tree-based classifiers for characterisation and detection of islanding events. The active method is based on Sandia frequency shift technique and is initiated only when the passive method is unable to differentiate islanding events from other system events. Thus, the power quality degradation introduced into the system by active islanding detection techniques can be minimised. Furthermore, a combination of active and passive techniques allows detection of islanding events under low power mismatch scenarios eliminating the disadvantage associated with the use of passive techniques alone. Finally, detailed case study results demonstrate the effectiveness of the proposed method in detection of islanding events under various power mismatch scenarios, load quality factors and in the presence of single or multiple grid-connected inverter-based DG units.
24 POWER TRANSMISSION AND DISTRIBUTION↗
Solar Living House Final Technical Report
The Solar Living House is a high-performance solar-powered dwelling designed by a team of faculty and students from the University of Florida, in collaboration with Santa Fe College, the National University of Singapore, and Alachua Habitat for Humanity. The project was designed in accordance with the Solar Decathlon 2015, a research, design, education, and outreach program developed by the U.S. Department of Energy (DOE). The Solar Living House is fundamentally a house for living, centered on people and the activities of daily life while quietly introducing advanced design, construction, and engineering technologies. The 993 square-foot two-bedroom one-bath home was designed to embrace and frame an exterior courtyard space. This courtyard acts as an extension of the interior living spaces, maximizing the spatial potentials of a modest building footprint and introducing natural light into the primary living spaces of the house. Research Outcomes: The Solar Living House advances work on high-performance buildings through three principal technological innovations: wet/dry modular construction, a building automation system, and solar dehumidification systems. Wet / Dry Modular Construction: The house is designed as a series of five modules, including one that is designated as the “wet core.” The wet core consolidates the mechanical systems and bathroom into a single module to reduce plumbing runs, efficiency losses, and on-site construction time. The other four modules are designed to eliminate interior load bearing walls to allow for maximum flexibility in the reconfiguring of the space over time. The modules are designed to meet the structural challenges of both Florida’s hurricanes and California’s earthquakes. Building Automation System: The house is equipped with an integrated building automation system, allowing the houses environmental systems, lights, security systems, and smoke detectors to be programmed, monitored, and controlled through any mobile or computing device. These systems allow for more precise calibrations of temperature/humidity/lighting to correspond with user needs and preferences, minimizing energy losses with economical night- or day-time setbacks. Solar Dehumidification System: The most significant technological innovation in the Solar Living House is the solar thermal dehumidification system. This system generates hot water through two rooftop-mounted evacuated tube solar thermal collectors. The hot water is used to continually dry a regenerative solid desiccant material, typically white silica gel. The solid desiccant is used to adsorb moisture and humidity from the air without additional mechanical cooling. This strategy allows humidity to be modulated independently of air temperature, providing greater thermal comfort and reducing the opportunity for the growth of mold spores within the house while also reducing the overall energy consumption of the HVAC system. Economic Feasibility: The team set aggressive goals for affordability, targeting a construction cost of $138,710. An independent professional cost estimator determined the overall project costs, as designed, would be $333,799, or $336.15 per square foot of finished floor area. This is more than 2.4 times the target construction cost. By comparison, the average construction cost for a home in the United States in 2015 was $289,415, or $103.29 per square foot of finished floor area. Following work on the Solar Living House, team leaders incorporated many of its objectives into a net-zero energy home on a site in Gainesville, Florida. This site-built home avoided many of the constraints and complications of modular construction necessitated by the Solar Decathlon, allowing it to be built for a much more modest budget. This two-bedroom two bath 1,800 square foot home was constructed for $135.39 per square foot, including active photovoltaic solar systems, careful attention to continuous air barriers, increased insulation levels, and permanent site constructions. This project suggest that high-performance buildings can be realized for more modest budgets. Public Benefits: Work on the Solar Living House and Solar Decathlon 2015 offered our student team unparalleled learning opportunities. Because of the duration of the project, a number of students participated at different points in their education, from first year undergraduates all the way through to advanced graduate students. The opportunity for collaboration with students and faculty from the National University of Singapore was also extraordinary, allowing for a sharing of technical knowledge and cultural exchange. The wider public has benefited from this work as its findings have been shared through public presentations and publications. It serves as a useful stepping stone along the path towards affordable, high-performance buildings.
14 SOLAR ENERGY↗
A Modular, Reusable Latch and Decking System for Securing Payloads During Launch and Planetary Surface Transport
Efficient handling of payloads destined for a planetary surface, such as the moon or mars, requires robust systems to secure the payloads during transport on the ground, in space and on the planetary surface. In addition, mechanisms to release the payloads need to be reliable to ensure successful transfer from one vehicle to another. An efficient payload handling strategy must also consider the devices available to support payload handling. Cranes used for overhead lifting are common to all phases of payload handling on Earth. Similarly, both recent and past studies have demonstrated that devices with comparable functionality will be needed to support lunar outpost operations. A first generation test-bed of a new high performance device that provides the capabilities of both a crane and a robotic manipulator, the Lunar Surface Manipulation System (LSMS), has been designed, built and field tested and is available for use in evaluating a system to secure payloads to transportation vehicles. A payload handling approach must address all phases of payload management including: ground transportation, launch, planetary transfer and installation in the final system. In addition, storage may be required during any phase of operations. Each of these phases requires the payload to be lifted and secured to a vehicle, transported, released and lifted in preparation for the next transportation or storage phase. A critical component of a successful payload handling approach is a latch and associated carrier system. The latch and carrier system should minimize requirements on the: payload, carrier support structure and payload handling devices as well as be able to accommodate a wide range of payload sizes. In addition, the latch should; be small and lightweight, support a method to apply preload, be reusable, integrate into a minimal set of hard-points and have manual interfaces to actuate the latch should a problem occur. A latching system which meets these requirements has been designed and fabricated and will be described in detail. This latching system works in conjunction with a payload handling device such as the LSMS, and the LSMS has been used to test first generation latch and carrier hardware. All tests have been successful during the first phase of operational evaluations. Plans for future tests of first generation latch and carrier hardware with the LSMS are also described.
Doggett, William R.↗
A Modular, Reusable Latch and Decking System for Securing Payloads During Launch and Planetary Surface Transport
Efficient handling of payloads destined for a planetary surface, such as the moon or Mars, requires robust systems to secure the payloads during transport on the ground, in-space and on the planetary surface. In addition, mechanisms to release the payloads need to be reliable to ensure successful transfer from one vehicle to another. An efficient payload handling strategy must also consider the devices available to support payload handling. Cranes used for overhead lifting are common to all phases of payload handling on Earth. Similarly, both recent and past studies have demonstrated that devices with comparable functionality will be needed to support lunar outpost operations. A first generation test-bed of a new high performance device that provides the capabilities of both a crane and a robotic manipulator, the Lunar Surface Manipulation System (LSMS), has been designed, built and field tested and is available for use in evaluating a system to secure payloads to transportation vehicles. National Institute of Aerospace, Hampton Va 23662 A payload handling approach must address all phases of payload management including: ground transportation, launch, planetary transfer and installation in the final system. In addition, storage may be required during any phase of operations. Each of these phases requires the payload to be lifted and secured to a vehicle, transported, released and lifted in preparation for the next transportation or storage phase. A critical component of a successful payload handling approach is a latch and associated carrier system. The latch and carrier system should minimize requirements on the: payload, carrier support structure and payload handling devices as well as be able to accommodate a wide range of payload sizes. In addition, the latch should; be small and lightweight, support a method to apply preload, be reusable, integrate into a minimal set of hard-points and have manual interfaces to actuate the latch should a problem occur. A latching system which meets these requirements has been designed and fabricated and will be described in detail. This latching system works in conjunction with a payload handling device such as the LSMS, and the LSMS has been used to test first generation latch and carrier hardware. All tests have been successful during the first phase of operational evaluations. Plans for future tests of first generation latch and carrier hardware with the LSMS are also described.
Doggett, William R.↗
Integrating PCTRAN with AI-Driven Host-Intrusion Detection and Secured Container Systems for Advanced Malware Analysis (Summer Internship Report)
This study presents a solution for enhancing the security of the Personal Computer Transient Analyzer (PCTRAN) PC-based Nuclear Power Plant Simulator by integrating the software with an artificial intelligence (AI)-driven host-intrusion detection system (HIDS), in addition to a secured container system, for malware analysis. PCTRAN is a Windows XP-based software package that has the ability to simulate a variety of accident and transient conditions for nuclear power plants (NPPs). It offers a high-resolution replica of the Nuclear Steam Supply System (NSSS) and displays the status of important parameters allowing for operator interaction. By including AI-driven HIDS for the NSSS, the framework can identify security threats in real-time, ensuring the integrity of the nuclear simulation environment. Additionally, the secured container system offers the ability to isolate and analyze malware, preventing potential threats from affecting core systems. The integration process involves extensive testing and validation in order to ensure accuracy, reliability, and compliance with security policies. This framework sets a new precedent for secure simulation and training in NPP operations, and offers insight for future advancements in cybersecurity.
21 SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLANTS↗
Potential Weaknesses in the Cyber Systems of High-Security Physical Protection Systems.
Abstract not provided.
Clem, John↗