SEARCH · Search NASA

Results for “monitoring verification and reporting”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

SourceResearch connectionFrom yearThrough year

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 109 records · Page 6

All sources NASA NTRS DOE OSTI

DOE OSTI2021

Development of a Framework for Data Integration, Assimilation, and Learning for Geological Carbon Sequestration (DIAL-GCS) (Final Report)

This project aimed to develop and demonstrate a Data Integration, Assimilation, and Learning framework for geologic carbon sequestration projects (DIAL-GCS). DIAL-GCS is an intelligence monitoring system (IMS) for automating GCS closed-loop management by leveraging recent developments in machine learning technologies, complex event processing (CEP), and reduced-order modeling. The safe and efficient operation of GCS repositories requires integrated monitoring to track the injected CO¬2 as it moves within a storage reservoir. GCS projects are data intensive, as a result of proliferation of digital instrumentation and smart-sensing technologies. GCS projects are also resource intensive, often requiring multidisciplinary teams performing different monitoring, verification, accounting (MVA) tasks throughout the lifecycle of a project to ensure secure containment of injected CO2. The success of GCS thus depends in a large part on our ability to access, assimilate, and analyze heterogeneous data and information sources in a timely manner. This project included a number of meaningful and necessary tasks to transform the human domain knowledge into machine-interpretable rules for automating knowledge extraction and discovery in GCS. The specific technical objectives of the proposed DIAL-GCS project were to develop an ontology-driven GCS data management module for storing, querying, and exchanging GCS data (both historic and live sensor data) from multiple sources and in heterogeneous formats. Incorporate a CEP engine for detecting abnormal situations by seamlessly combining expert knowledge, rule-based reasoning, and machine learning. Enable uncertainty quantification and predictive analytics using a combination of coupled-process modeling, AI/ML methods, and reduced-order modeling, and integrate and demonstrate the system’s capabilities with both real and simulated data. As far as we know, this is one of the first projects aimed to develop intelligent monitoring systems (IMS) targeting the GCS. Under this project, the team had developed a large number of web applications and scientific algorithms that contribute the main theme of intelligent monitoring. The team has published more than a dozen peer reviewed papers and disseminated the research results at multiple technical meetings.

29 ENERGY PLANNING, POLICY, AND ECONOMY↗

DOE OSTI2026

Online and Offline Analytical Techniques to Quantify Chloride Salts

This report serves as the deliverable for Milestone- M3FT-26AN080502017: Summary of Accomplishments for Online and Offline Analytical Qualification of Chloride Fuel Salts. The qualification of chloride fuel salts is a critical challenge for the development and deployment of molten salt reactors (MSRs), requiring precise control and verification of chemical and isotopic composition to ensure predictable neutronics, manageable radiological behavior, and safe plant operation. Currently, there is no universally accepted standard for fuel salt qualification, particularly for chloride-based systems, which underscores the need for robust, science-based analytical methodologies. This report presents a comprehensive evaluation of both online and offline techniques for quantifying chloride fuel salts, including multielectrode array voltammetry, differential thermal analysis (DTA) probes, inert gas fusion (IGF) analyzers, and gamma spectrometry using the Mirion NAIS-2x2 NaI(Tl) detector. The integration of these methods enables real-time monitoring of actinide concentrations, redox state, and thermophysical properties, as well as high-precision measurement of impurities and isotopic composition. The acquisition of advanced instruments such as the Bruker Leonardo G6 for IGF and the Mirion NaI detector enhances analytical capabilities, supporting the establishment of operational envelopes and impurity thresholds. These approaches provide essential data for neutronic impact evaluation, feedstock documentation, and compliance with nuclear safety standards. The methodologies developed and validated in this report lay the groundwork for future standardized protocols, bridging the gap between laboratory research and commercial reactor operation, and advancing the safe and efficient deployment of chloride-fueled MSRs.

Polke, Amber↗

DOE OSTI2021

Energy Management Information Systems Technical Resources Report

Guide supports federal facility staff in understanding, designing, procuring, and implementing Energy Management Information Systems (EMIS) as a valuable component of their portfolio-level energy and water planning and management strategies. As a broad and rapidly evolving family of tools that monitor, analyze, and control building energy use and system performance, EMIS tools present significant opportunities for federal sector energy savings and improved operational performance. EMIS are at the forefront of transforming energy management best practices by providing building owners and operators with well-organized building performance and energy consumption data, enabling a host of analytic capabilities. These capabilities include portfolio-wide energy benchmarking, data visualization, and key performance indicator tracking; automated fault detection and diagnostics (AFDD); artificial intelligence for predictive analytics and control; automated measurement and verification of energy conservation measures; and supervisory control enabling automated system optimization and demand management.

29 ENERGY PLANNING, POLICY, AND ECONOMY↗

NASA NTRS2019

Bridging the Gap Between Requirements and Model Analysis: Evaluation on Cyber-Physical Challenge Problems

We present a framework for introducing high-level requirement specifications in the automated analysis of dataflow models. By integrating the FRET requirements elicitation tool with the CoCoSim analyzer, our framework enables the analysis of hierarchical Simulink models against requirements written in a restricted English language. More precisely, we support: automatic extraction of Simulink model information and association of high-level requirements with target model signals and components; translation of temporal logic formulas into synchronous dataflow CoCoSpec specifications as well as Simulink monitors; and interpretation of counterexamples produced by the analysis both at the requirement and model level. The features provided by our framework are generic and can be used to integrate other requirements elicitation and Simulink/Lustre analysis tools. We report on the lessons learned from the application of our approach to the Lockheed Martin Cyber-Physical, aerospace-inspired challenge problems. For the analysis, we used the Kind2, Zustre, and Simulink Design Verifier (SLDV) tools.

Simulink↗

DOE OSTI2020

Pre-Commercial Scale-Up of a Gas-Fired Absorption Heat Pump

The project sought to advance the maturity of SMTI’s 80 kBTU/hr residential space and water heating GAHP from the engineering prototype stage (TRL-7) to pre-production readiness by addressing manufacturing, balance of system design and installation, cost, reliability, and field application questions. As part of this project, the project team has: (1) Matured the design package for a commercially ready product (2) Demonstrated compliance with relevant ANSI standards (3) Completed manufacturing and assembly process specifications (4) Completed total production cost estimates and capital equipment requirements (5) Initiated component and system level reliability assessments (6) Completed a small field demonstration including measured performance, installation requirements and expected costs, and customer/key stakeholder feedback. (7) Completed a Techno-economic analysis for representative applications and climate zones, including justification for utility incentive programs. (8) Completed a market intelligence report. Scope of Work: A multi-faceted project was completed that included: (a) design for manufacturing tasks for both the sealed system and balance of system, (b) development and trial of key manufacturing processes and techniques, (c) evaluation of component and system level reliability, (d) exploration of make/buy decisions including impact on cost and required capital. Additionally, (e) installation and monitoring of a small number of field test units was completed to demonstrate energy savings and collect customer/installer feedback, and (f) a focused market research task was completed to explore potential barriers and improve market introduction plans. These tasks addressed many of the remaining technical risks regarding long-term reliability, verification of manufacturing cost estimates and identification of cost concerns, identify installation and balance of system design criteria necessary to achieve energy savings and installed cost goals, and identify market barriers and strategies prior to product market introduction.

03 NATURAL GAS↗

NASA NTRS2000

Verification and Improvement of ERS-1/2 Altimeter Geophysical Data Records for Global Change Studies

This Final Technical Report summarizes the research work conducted under NASA's Physical Oceanography Program entitled, Verification And Improvement Of ERS-112 Altimeter Geophysical Data Recorders For Global Change Studies, for the time period from January 1, 2000 through June 30, 2000. This report also provides a summary of the investigation from July 1, 1997 - June 30, 2000. The primary objectives of this investigation include verification and improvement of the ERS-1 and ERS-2 radar altimeter geophysical data records for distribution of the data to the ESA-approved U.S. ERS-1/-2 investigators for global climate change studies. Specifically, the investigation is to verify and improve the ERS geophysical data record products by calibrating the instrument and assessing accuracy for the ERS-1/-2 orbital, geophysical, media, and instrument corrections. The purpose is to ensure that the consistency of constants, standards and algorithms with TOPEX/POSEIDON radar altimeter for global climate change studies such as the monitoring and interpretation of long-term sea level change. This investigation has provided the current best precise orbits, with the radial orbit accuracy for ERS-1 (Phases C-G) and ERS-2 estimated at the 3-5 cm rms level, an 30-fold improvement compared to the 1993 accuracy. We have finalized the production and verification of the value-added ERS-1 mission (Phases A, B, C, D, E, F, and G), in collaboration with JPL PODAAC and the University of Texas. Orbit and data verification and improvement of algorithms led to the best data product available to-date. ERS-2 altimeter data have been improved and we have been active on Envisat (2001 launch) GDR algorithm review and improvement. The data improvement of ERS-1 and ERS-2 led to improvement in the global mean sea surface, marine gravity anomaly and bathymetry models, and a study of Antarctica mass balance, which was published in Science in 1998.

Shum, C. K.↗

NASA NTRS2003

A Real-Time Rover Executive based On Model-Based Reactive Planning

This paper reports on the experimental verification of the ability of IDEA (Intelligent Distributed Execution Architecture) effectively operate at multiple levels of abstraction in an autonomous control system. The basic hypothesis of IDEA is that a large control system can be structured as a collection of interacting control agents, each organized around the same fundamental structure. Two IDEA agents, a system-level agent and a mission-level agent, are designed and implemented to autonomously control the K9 rover in real-time. The system is evaluated in the scenario where the rover must acquire images from a specified set of locations. The IDEA agents are responsible for enabling the rover to achieve its goals while monitoring the execution and safety of the rover and recovering from dangerous states when necessary. Experiments carried out both in simulation and on the physical rover, produced highly promising results.

Bias, M. Bernardine↗

DOE OSTI2025

Cleaned 5-Minute Resolution Air Quality and Meteorological Data from Nine TCEQ CAMS Sites in Houston, Texas (Nov 2021 – Oct 2022)

These data encompass 5-minute air monitoring and meteorological observations collected in the greater Houston, Texas metropolitan region, at nine (9) Continuous Ambient Monitoring Stations (CAMS) operated by the Texas Commission on Environmental Quality (TCEQ) between November 1, 2021 and October 31, 2022. The CAMS sites (CAMS 1, 8, 35, 45, 148, 403, 405, 410, and 1052) were chosen because their instrumentation includes measurements of PM2.5. These sites also provide continuous multi-parameter air-quality and meteorological measurements. Particulate matter (PM2.5, PM10) was sampled along with several trace gases, including ozone (O3), nitrogen oxides (NO, NO2, NOx), sulfur dioxide (SO2), and carbon monoxide (CO). The data set also contains standard surface meteorological parameters (temperature, humidity, pressure, wind speed, and wind direction). Several sites also include AutoGC-based measurements of volatile organic compounds (VOCs). Air monitoring instruments deployed at the selected sites comprise the following systems: BAM-1020 or TEOM (PM2.5), Thermo Scientific TEI 49i (O3), TEI 42i (NOx), and AutoGCs (VOCs). This data set is similar to the data included within the houairq5mX1.00 datastream, except for a few additional quality control steps. A systematic data cleaning and verification process was performed on the data set to ensure its quality and preparation for analysis. Removal of non-numeric status flags (e.g., [LIM], [QAS], [SPZ], [CAL], [PMA], [AQI], [SPN], [MAL]) was accomplished by employing rule-based string parsing to extract valid numerical values. Missing entries were set to -9999; however, invalid or anomalous values (e.g., 99999) were retained as originally reported by the TCEQ to preserve data provenance. The time sequence was verified for completeness, removal of duplicates, and uniformity at 5-minute intervals. Column labeling was standardized, and corresponding values were assessed for physical plausibility. All timestamps in the data set were reported in Coordinated Universal Time (UTC) as provided by the TCEQ. Further, the latitude and longitude coordinates were added for each CAMS site. A subset of the data (June 1–September 30, 2022) has been used in the following publication: Subba et al. 2025. “Implications of sea breeze circulations on boundary layer aerosols in the southern coastal Texas region.” EGUsphere 2025: 1–49, https://doi.org/10.5194/egusphere-2025-2659.

latitude↗

NASA NTRS1987

Ground testing of array modules for the photovoltaic array space power (PASP) experiment

One of the objectives of the PASP experiment is the verification of cost-effective ground simulations of high-voltage solar array/space-environment interactions by comparing the results with flight data. These ground tests consist of electrical characterization, thermal cycling, and plasma chamber simulations. The results of the latter tests are reported. Five array modules which are representative of the flight arrays were tested. The module types are planar silicon, planar gallium arsenide, planar silicon passivated with an integrally deposited cover glass, mini-Cassegrainian concentrator, and SLATS concentrator. The modules were biased to -1000 V in varying plasma densities from 4 x 103 to 2 x 105 e-/cu cm. Each array was tested in both dark and illuminated conditions with a load resistance. In addition to monitoring arcing during the plasma tests, the arrays were visually inspected and electrically characterized before and after exposure in the chamber. The electrical results are tabulated and briefly discussed.

Morris, Robert K.↗

DOE OSTI2022

Resilience Enhancements through Deep Learning Yields

This report documents the Resilience Enhancements through Deep Learning Yields (REDLY) project, a three-year effort to improve electrical grid resilience by developing scalable methods for system operators to protect the grid against threats leading to interrupted service or physical damage. The computational complexity and uncertain nature of current real-world contingency analysis presents significant barriers to automated, real-time monitoring. While there has been a significant push to explore the use of accurate, high-performance machine learning (ML) model surrogates to address this gap, their reliability is unclear when deployed in high-consequence applications such as power grid systems. Contemporary optimization techniques used to validate surrogate performance can exploit ML model prediction errors, which necessitates the verification of worst-case performance for the models.

24 POWER TRANSMISSION AND DISTRIBUTION↗

DOE OSTI2025

An In Situ Feed Monitoring System for Molten Salt Reactors with Fast Neutron Energy Spectrum Molten Salt Reactor Applications

Molten salt reactors (MSRs) are one of the six promising advanced reactor technologies selected for further research and development by the Generation IV International Forum. More than twenty MSR designs are actively being developed around the world. Several of these designs are liquid-fueled and intended for operation within the fast neutron energy spectrum.1 National regulations will require liquid-fueled MSRs to control and account for nuclear material within licensed facilities. Additionally, states with comprehensive safeguards agreements with the International Atomic Energy Agency (IAEA) are obligated to declare nuclear material quantities within facilities. In return, the IAEA Department of Safeguards independently verifies these quantities and provides assurance that the nuclear material and facility are being used only for peaceful purposes. One key distinction of liquid-fueled MSRs compared with other types of reactors is that in portions of the facility, the nuclear material is in bulk form rather than discrete items. Traditional nuclear material accounting techniques such as physical item counting and verification of serial numbers on fresh fuel assemblies do not translate directly to all process streams within liquid-fueled reactors. Liquid-fueled MSRs are typically designed with low excess reactivity. This feature provides safety benefits but also means that most MSRs require the addition of makeup fuel salt while a reactor is operational. The nuclear material in the initial fuel salt and in any makeup fuel salt must be quantified. Additionally, distinct nuclear material diversion and reactor misuse scenarios form the basis of the detection methods and monitoring systems developed for liquid-fueled MSRs. For example, the IAEA provides assurance that fuel salt containing nuclear material is not being diverted from the system, that the feed salt matches the reported actinide concentrations and uranium enrichment, and that no additional fertile material is being introduced into the system. Measurement systems currently used for nuclear material control and accounting are not directly applicable to achieving MSR safeguards goals. This paper concerns a system being designed to account for the nuclear material added to liquid-fueled MSRs and monitor for diversion and misuse scenarios related to MSR feed systems.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

DOE OSTI2020

Fast and Accurate Core Analysis by the Full-Immersion Pressure-Pulse Decay: Part 2—Practice and Demonstration

Summary This study continues the work of presenting a novel approach for making petrophysical assessments of tight core samples. This method, the full-immersion pressure-pulse decay (Hannon 2019), involves applying a rapid increase in pressure in a chamber surrounding the entire outer surface area of a cylindrical sample, shutting the system in, and monitoring the pressure decay in the chamber as it reaches a new equilibrium. A precursor article covered the numerical simulator designed to model flow through the sample, demonstrating its performance and accuracy in addition to providing a first-order comparison between the speed and shape of the pressure-decay responses of the full-immersion method with those of other similar transient methods. This study covers the parameter-estimation procedure and experimental verification through a proof-of-concept laboratory investigation. The investigations provided here demonstrate that under appropriate, achievable experimental conditions, the pressure data can be analyzed in such a way that returns an estimate of the porosity and apparent permeabilities both parallel and perpendicular to bedding from a single test performed on a single cylindrical sample. After determining these experimental conditions (the uniqueness window), this report outlines a data-inversion strategy to estimate the petrophysical properties (porosity, horizontal permeability, and vertical permeability) from each test. This strategy is put to the test through comparisons with measurements performed by a commercial core laboratory. A common set of samples recovered from an outcrop of a tight-gas sandstone formation were investigated using the full-immersion method, and their results are compared with those from conventional steady-state measurement procedures performed by the commercial laboratory. Comparisons between petrophysical characterizations of these samples, which had permeabilities between 25 nd and 2.3 μd, demonstrated close agreement in most cases. However, whereas steady-state measurements performed at the professional laboratory required 4 to 5 hours of testing time per measurement of a single permeability, similar assessments using the full-immersion technique, requiring approximately 5 to 10 minutes to complete, returned estimates of the horizontal and vertical permeability simultaneously. Additional analyses are provided to determine principal reasons of discrepancies in instances where agreement was not as strong. Based on lessons learned from these experiences, the report closes with suggestions on areas of improvement in the experimental approach. Once complete, these developments should propel this technology to fill a critical need to determine petrophysical properties (porosity and permeability) of tight rocks in a time-efficient manner and in a way that does not compromise their accuracy.

Energy & Fuels↗

DOE OSTI2020

Quantification of CO 2 Mineralization at the Wallula Basalt Pilot Project

In 2013, the Pacific Northwest National Laboratory led a geologic carbon sequestration field demonstration where ~1000 tonnes of CO 2 was injected into several deep Columbia River Basalt zones near Wallula, Washington. Rock core samples extracted from the injection zone two years after CO 2 injection revealed nascent carbonate mineralization that was qualitatively consistent with expectations from laboratory experiments and reactive transport modeling. In this study, we report on a new detailed analysis of the 2012 pre-injection and 2015 post-injection hydrologic tests that capitalizes on the difference in fluid properties between scCO 2 and water to assess changes in near-field, wellbore, and reservoir conditions that are apparent approximately two years following the end of injection. This comparative hydrologic test analysis method provides a new way to quantify the amount of injected CO 2 that was mineralized in the field test. Modeling results indicate that approximately 60% of the injected CO 2 was sequestered via mineralization within two years, with the resulting carbonates occupying ~4% of the available reservoir pore space. The method presented here provides a new monitoring tool to assess the fate of CO 2 injected into chemically reactive basalt formations but could also be adapted for long-term monitoring and verification within more traditional subsurface carbon storage reservoirs.

54 ENVIRONMENTAL SCIENCES↗

NASA NTRS1977

High-power and 2.5 kW advanced-technology ion thruster

Investigations for improving ion thruster components in the 30 cm engineering model thruster (EMT) resulted in the demonstration of useful techniques for grid short removal and discharge chamber erosion monitoring, establishment of relationships between double ion production and thruster operating parameters, verification of satisfactory specifications on porous tungsten vaporizer material and barium impregnated porous tungsten inserts, demonstration of a new hollow cathode configuration, and specification of magnetic circuit requirements for reproducing desired magnetic mappings. The capacity of a 30 cm EMT to operate at higher beam voltages and currents (higher power) was determined. Operation at 2 A beam current and higher beam voltage is shown to be essentially equivalent to operation at 1.1 kV with regard to efficiency, lifetime and operating conditions. The only additional requirement is an improvement in high voltage insulation and propellant isolator capacity. Operation at minimum voltage and higher beam currents is shown to increase thruster discharge chamber erosion in proportion to beam current. Studies to find alternatives to molybdenum for manufacturing ion optics grids are also reported.

Poeschel, R. L.↗

DOE OSTI2023

Verification of Spent Fuel Inside Dry Storage Casks by Cask Top Fast Neutron Mapping (FY2023 Mid-Year Report)

This project is developing a prototype scanner array verification system for detection of missing fuel assemblies in spent-fuel storage casks. The prototype consists of six fast-neutron scintillator detectors mounted to a linear actuator frame that is placed on the top of a spent fuel cask to scan across all fuel assembly positions. The scanner array was assembled and tested at LLNL in FY2022. A field test schedule has been requested at the Idaho National Laboratory (INL) Cask Farm site for FY2023. Note that the Cask Farm contractor determines this scheduling and not INL directly. Further system automation will be designed and implemented with the goal of obtaining a level of system operation that meets IAEA needs. This includes integration of the scanner array and data-acquisition control software into a single interface for operator use. In addition, commercial operators and the IAEA may have special requirements for portability, shipping, lifting, and installation. Prior to the Field Test at INL, the system will be operated at LLNL to exercise lifting procedure and linear actuators, monitor stability of detector energy and pulse-shape discrimination calibration, and test system software integration efforts. Following the Field Test, we will present results and discuss the technology with the IAEA. We will incorporate additional improvements to the system based on lessons learned from the field test and feedback from the IAEA. If successful, the technology can be transferred to the IAEA or other stakeholders for assessment.

73 NUCLEAR PHYSICS AND RADIATION PHYSICS↗

NASA NTRS1991

Space transfer vehicle concepts and requirements. Volume 1: Executive summary

The objectives of the Space Transfer Vehicle (STV) Concepts and Requirements studies were to provide sensitivity data on usage, economics, and technology associated with new space transportation systems. The study was structured to utilize data on the emerging launch vehicles, the latest mission scenarios, and Space Exploration Initiative (SEI) payload manifesting and schedules, to define a flexible, high performance, cost effective, evolutionary space transportation system for NASA. Initial activities were to support the MSFC effort in the preparation of inputs to the 90 Day Report to the National Space Council (NSC). With the results of this study establishing a point-of-departure for continuing the STV studies in 1990, additional options and mission architectures were defined. The continuing studies will update and expand the parametrics, assess new cargo and manned ETO vehicles, determine impacts on the redefined Phase 0 Space Station Freedom, and to develop a design that encompasses adequate configuration flexibility to ensure compliance with on-going NASA study recommendations with major system disconnects. In terms of general requirements, the objectives of the STV system and its mission profiles will address crew safety and mission success through a failure-tolerant and forgiving design approach. These objectives were addressed through the following: engine-out capability for all mission phases; built-in-test for vehicle health monitoring to allow testing of all critical functions such as, verification of lunar landing and ascent engines before initiating the landing sequence; critical subsystems will have multiple strings for redundancy plus adequate supplies of onboard spares for removal and replacement of failed items; crew radiation protection; and trajectories that optimize lunar and Mars performance and flyby abort capabilities.

Source record↗

NASA NTRS1989

Frame synchronization methods based on channel symbol measurements

The current DSN frame synchronization procedure is based on monitoring the decoded bit stream for the appearance of a sync marker sequence that is transmitted once every data frame. The possibility of obtaining frame synchronization by processing the raw received channel symbols rather than the decoded bits is explored. Performance results are derived for three channel symbol sync methods, and these are compared with results for decoded bit sync methods reported elsewhere. It is shown that each class of methods has advantages or disadvantages under different assumptions on the frame length, the global acquisition strategy, and the desired measure of acquisition timeliness. It is shown that the sync statistics based on decoded bits are superior to the statistics based on channel symbols, if the desired operating region utilizes a probability of miss many orders of magnitude higher than the probability of false alarm. This operating point is applicable for very large frame lengths and minimal frame-to-frame verification strategy. On the other hand, the statistics based on channel symbols are superior if the desired operating point has a miss probability only a few orders of magnitude greater than the false alarm probability. This happens for small frames or when frame-to-frame verifications are required.

Dolinar, S.↗

DOE OSTI2022

Feasibility of critical infrastructure protection using network functions for programmable and decoupled ICS policy enforcement over WAN

Industrial control systems (ICS) represent a major component of our critical infrastructure. With the increasing need for more control and monitoring of such systems, ICS have seen an increase in connectivity to wide area networks (WAN) exposing aging equipment to rapidly evolving cybersecurity threats. Furthermore, the ICS data requires a reliability measure from the networks for critical functions for infrastructure monitoring and control. Especially when remote plant sites are involved such as pipelines, energy distribution networks, and transportation, WAN transport impairments most often provide a best effort delivery with no strict reliability guarantees. Network functions can provide a vendor agnostic, programmable critical infrastructure protection with a single maintenance, policy determination, and reliability assurance surface. A network function (NF) can be utilized for policy enforcement over the communication between remote entities and the main control office. This paper presents the research on transparent integration with existing ICS without disrupting communications, resulting in minimal downtime while decoupling the fast paced evolution of defensive security measures from the upgrade cycle of expensive long term hardware. We report our measurements on the resource requirements and overhead in the network for successful NF insertion under a wide variety of network impairments (network packet delay, reordering, and loss). Our paired NF implementation provides a policy enforcement platform extensible to cover myriad cybersecurity-related communication goals, including packet signing for verification, encryption for data privacy, packet filtering and data diode operation (i.e. protecting against eavesdropping, packet injection, and denial-of-service). Furthermore, bundling communication specifications into packet flows allows for tunability in applying policies as coarse- or fine-grained as the needs of the operator. We report on network function resource requirements in the form of required queue depth and network utilization overhead to inform the decision making against hardware cost constraints.

42 ENGINEERING↗