Search NASA⌕ Search

SEARCH · Search NASA

Results for “System Security”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 1,099 records · Page 61

Promoting Domestic and International Consensus - Program Area 1: Carbon Capture & Storage & Clean Energy Systems

This is the Final Report for the U.S. Department of Energy Cooperative Agreement DE-FE-0024159, Promoting Domestic and International Consensus on Fossil Energy Technologies: Carbon Capture and Storage and Clean Energy Systems carried out by the United States Energy Association. It is a compendium of each quarterly report submitted over the 7-year period of the agreement accounting for all accomplishments, including major activities, significant results, major findings or conclusions, key outcomes or other achievements. Changes in approach or aims, and reasons for those changes, are included as well as any problems or delays and actions taken and planned to resolve them. It also summarizes budget statuses and any changes in key personnel throughout the life of the agreement. Originally planned for 5 years, the agreement was extended twice through back-to-back no-cost extensions, one to enable full completion of tasks critical to the program’s success and the other due to the Covid-19 Pandemic. The goals of the program were to provide increased knowledge regarding Carbon, Capture, and Storage (CCS) and Clean Energy Systems (CES) to Industry and Government decision makers, technology developers, educators, policymakers, environmental and other stakeholders, and the public by sharing research, technologies, and best practices with domestic and international partners. Increasing such knowledge was key to the other goals of the program of building of a broad consensus among domestic and international decision makers, stakeholders, and the public to take action to support and implement CCS and CES technologies and systems to ensure clean, secure, and affordable energy while enhancing environmental protection. The program accomplished these goals through a series of activities including hosting of conferences and workshops, in-person briefings, virtual webinars, reports and white papers, and keeping stakeholders informed of industry happenings through email distribution lists. It is the belief of the authors of this report, that these activities can be considered to have been successful in their goals.

01 COAL, LIGNITE, AND PEAT↗

Place-Based Energy Transitions

To move from ambitions to actions, communities need in-depth energy-sector expertise and insight. As a U.S. Department of Energy (DOE) research lab, NREL offers unbiased, best-in-class analysis and modeling capabilities supported by decades of scientific and applied research, expertise, and partnerships. This presentation highlights how NREL illuminates pathways to clean, affordable, equitable, secure, and resilient energy systems.

communities↗

Used fuel transportation considerations to support centralized interim storage

The deployment of a used fuel centralized interim storage facility (CISF) can offer a renewed opportunity for the U.S. to make real progress towards integrating of the back end of the fuel cycle. One of the key elements of success, and perhaps as important as the CISF project itself, is transportation-program readiness for large-scale rail shipments of spent fuel to a centralized storage facility. This paper offers an overview of the status of spent fuel transportation readiness in the U.S. The authors identify a number of technical and institutional challenges to be resolved before rail shipments of used fuel to a centralized storage facility can begin. Furthermore, 'NAC International', a transportation company, recommends a key action to ensure a safe, secure and efficient transportation system that meets stakeholder expectations is ready to meet milestone dates. NAC will address the challenges of deploying such a system, focused on leveraging existing U.S. transportation experience, capabilities and infrastructure. This paper concludes with the assertion, that spent fuel transportation to a CISF by 2021 is possible if we seriously commit resources now to address the critical institutional, operational, and system requirements implicit in a consent based transportation and storage program.

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗

Investigating Formal Methods Tools and their Applicability for Hardware Vulnerability Remediation

Formal methods use mathematical logic and equations to prove that a system or code is secure. In this poster, I examine existing formal methods tools and their application for projects working to remediate vulnerabilities in hardware and hardware description language. This poster is focused on the tools ReWire and AutoGenILA and I hope to evaluate their benefits and weaknesses with the intention of creating an internal report on the application and weaknesses of existing formal methods tools and identifying gaps for future formal methods tool creation.

97 - MATHEMATICS AND COMPUTING↗

Energy Technology Innovation Partnership Project

The U.S. Department of Energy's (DOE) Energy Technology Innovation Partnership Project (ETIPP) helps coastal, remote, and island communities increase the affordability, reliability, and security of their energy systems through energy planning and deep-dive technical assistance.

29 ENERGY PLANNING, POLICY, AND ECONOMY↗

Energy Technology Innovation Partnership Project (Bilingual)

The U.S. Department of Energy's (DOE) Energy Technology Innovation Partnership Project (ETIPP) helps coastal, remote, and island communities increase the affordability, reliability, and security of their energy systems through energy planning and deep-dive technical assistance. This is a English and Spanish translation.

29 ENERGY PLANNING, POLICY, AND ECONOMY↗

Technical Basis for the Uranium Processing Facility Criticality Accident Alarm System

The technical basis for the Y-12 National Security Complex (Y-12) Uranium Processing Facility (UPF) Criticality Accident Alarm System (CAAS) 90% design has been completed. The CAAS design was evaluated for two primary processing facilities, the Main Processing Building (MPB) and the Salvage and Accountability Building (SAB), and for connected facilities known as the Personnel Support Building (PSB) and the Highly Enriched Uranium Materials facility (HEUMF) Connector (HCON), which connects UPF to existing Y-12 facilities. The evaluation focused on three primary areas to address requirements of ANSI/ANS-8.3: (1) detectability of the minimum accident of concern; (2) determination of areas where total dose could exceed 12 rad for the maximum anticipated accident yield; and (3) evaluation of the radiation tolerance of the detectors and associated control cabinets. The design was based on extensive analyses performed in MCNP6.

38 RADIATION CHEMISTRY, RADIOCHEMISTRY, AND NUCLEA↗

Impact Analysis of Data Integrity Attacks on FACTS-based Wide-Area Voltage Control System

Energy management system (EMS) consists of several wide-area control applications that serve as a backbone for security, stability, and reliability of the power system. Wide-area voltage control system (WAVCS), one of the critical wide-area applications, operates in coordination with local Flexible AC Transmission System (FACTS) devices to provide voltage security and optimal management of active and reactive power resources. Since the WAVCS relies on wide-area communication and data sharing devices, possible cybersecurity vulnerabilities have to be addressed to ensure the closed-loop operation of WAVCS. In this paper, we present a methodology for performing an impact analysis of cyber-attacks in WAVCS cybersecurity. In particular, different types of data integrity attacks, such as malicious tripping, fault replay, and signal altering attacks, are considered, and detailed impact analysis is conducted in a testbed environment using the Kundur's four machine two-area system. For performing an impact analysis, the transient voltage stability of the sensitive bus voltage is studied, followed by the quantitative assessment and severity ranking using the voltage profile index. Our experimental evaluation reveals that the data integrity attacks on control signals exhibit a higher attack severity than on the measurement signals. Further, the severity of these attacks varies with nature (static or dynamic), location, and types of attacks.

24 POWER TRANSMISSION AND DISTRIBUTION↗

Anatomy of a Security Operations Center

Many agencies and corporations are either contemplating or in the process of building a cyber Security Operations Center (SOC). Those Agencies that have established SOCs are most likely working on major revisions or enhancements to existing capabilities. As principle developers of the NASA SOC; this Presenters' goals are to provide the GFIRST community with examples of some of the key building blocks of an Agency scale cyber Security Operations Center. This presentation viII include the inputs and outputs, the facilities or shell, as well as the internal components and the processes necessary to maintain the SOC's subsistence - in other words, the anatomy of a SOC. Details to be presented include the SOC architecture and its key components: Tier 1 Call Center, data entry, and incident triage; Tier 2 monitoring, incident handling and tracking; Tier 3 computer forensics, malware analysis, and reverse engineering; Incident Management System; Threat Management System; SOC Portal; Log Aggregation and Security Incident Management (SIM) systems; flow monitoring; IDS; etc. Specific processes and methodologies discussed include Incident States and associated Work Elements; the Incident Management Workflow Process; Cyber Threat Risk Assessment methodology; and Incident Taxonomy. The Evolution of the Cyber Security Operations Center viII be discussed; starting from reactive, to proactive, and finally to proactive. Finally, the resources necessary to establish an Agency scale SOC as well as the lessons learned in the process of standing up a SOC viII be presented.

Wang, John↗

Cyber Threat Screening Using a Queuing-Based Game-Theoretic Approach

Dynamic and uncertain security environments, such as cyber systems, often involve strategic interactions among multiple decision-making agents. In this paper, we consider a cybersecurity setting where a system administrator (defender) has to screen malicious service requests of an attacker who seeks to exhaust available cyber resources and inconvenience users with normal requests. We propose a novel cyber-threat inspection model, based on Stackelberg games, that unies aspects of Threat Security Games with the Erlang-B queuing framework to provide equilibrium strategies for both the attacker and defender. In our proposed model, the defender seeks to determine the optimal number of inspection nodes required to maximize detection probability of malicious requests, while the attacker maximizes the probability of legitimate requests dropping out of the system. We derive analytical expressions of the equilibrium solutions of the proposed Stackelberg game under realistic assumptions on system observability and payoff structure of the players. A numerical case study is presented, and steps for further research are identified.

Cybersecurity, Stackelberg game, Erlang-B loss sys↗

Bifurcations, chaos and adaptive backstepping sliding mode control of a power system with excitation limitation

The bifurcation and Lyapunov exponent for a single-machine-infinite bus system with excitation model are carried out by varying the mechanical power, generator damping factor and the exciter gain, from which periodic motions, chaos and the divergence of system are observed respectively. From given parameters and different initial conditions, the coexisting motions are developed in power system. The dynamic behaviors in power system may switch freely between the coexisting motions, which will bring huge security menace to protection operation. Especially, the angle divergences due to the break of stable chaotic oscillation are found which causes the instability of power system. Finally, a new adaptive backstepping sliding mode controller is designed which aims to eliminate the angle divergences and make the power system run in stable orbits. Numerical simulations are illustrated to verify the effectivity of the proposed method.

71 CLASSICAL AND QUANTUM MECHANICS, GENERAL PHYSIC↗

Orbiter door closure tools

Safe reentry of the shuttle orbiter requires that the payload bay doors be closed and securely latched. Since a malfunction in the door drive or bulkhead latch systems could make safe reentry impossible, the requirement to provide tools to manually close and secure the doors was implemented. The tools would disconnect a disabled door or latch closure system and close and secure the doors if the normal system failed. The tools required to perform these tasks have evolved into a set that consists of a tubing cutter, a winch, a latching tool, and a bolt extractor. The design, fabrication, and performance tests of each tool are described.

Acres, W. R.↗

Summary of ADTT Website Functionality and Features

This report summarizes development of the ADTT web-based design environment by the ELORET team in 2000. The Advanced Design Technology Testbed had been in development for several years, with demonstration applications restricted to aerodynamic analyses of subsonic aircraft. The key changes achieved this year were improvements in Web-based accessibility, evaluation of collaborative visualization, remote invocation of geometry updates and performance analysis, and application to aerospace system analysis. Significant effort was also devoted to post-processing of data, chiefly through comparison of similar data for alternative vehicle concepts. Such comparison is an essential requirement for designers to make informed choices between alternatives. The next section of this report provides more discussion of the goals for ADTT development. Section 3 provides screen shots from a sample session in the ADTT environment, including Login and navigation to the project of interest, data inspection, analysis execution and output evaluation. The following section provides discussion of implementation details and recommendations for future development of the software and information technologies that provide the key functionality of the ADTT system. Section 5 discusses the integration architecture for the system, which links machines running different operating systems and provides unified access to data stored in distributed locations. Security is a significant issue for this system, especially for remote access to NAS machines, so Section 6 discusses several architectural considerations with respect to security. Additional details of some aspects of ADTT development are included in Appendices.

Hawke, Veronica↗

Enhancing Security and Resiliency in Operational Technology Environments Through Network Slicing and Federated Learning

The growing convergence of Information Technology (IT) and Operational Technology (OT) within Industry 4.0 environments has introduced new demands on industrial network infrastructure. As cyber-physical systems become increasingly interconnected, ensuring the secure, timely, and efficient exchange of critical data is essential. This thesis explores how network slicing, a method of creating isolated virtual network segments, can be applied within OT environments to address challenges such as latency, security, and resource allocation. The first research question addressed in this thesis is: How can OT networks take advantage of NFV and SDN technology to become cyber resilient? This study examines the operational, security, and architectural implications of introducing network slicing into traditionally static OT infrastructures such as Industrial Control Systems (ICS) and SCADA. Through simulated deployments and case studies, the research demonstrates how slicing enables better isolation between critical and non-critical services, thereby improving response time, throughput, and security in sensitive environments. The second question considers: How to dynamically implement network slicing and take advantage of network resources towards integrating decentralized machine learning? In response, this thesis proposes a framework that combines Software-Defined Networking (SDN), Network Function Virtualization (NFV), and Federated Learning (FL) to enable real-time analytics while maintaining data locality. The proposed approach reduces the burden on centralized infrastructure and minimizes privacy risks by supporting on-site training of models across distributed OT nodes, coordinated through dynamically allocated network slices. The third focus explores: How slicing helps to increase the resiliency of OT networks through the orchestration of a dynamic DMZ? To answer this, the thesis presents a method for creating and managing Dynamic Demilitarized Zones (DMZs) using network slicing. This enables flexible and automated isolation of sensitive subsystems during threat scenarios or high-risk operations. Coupled with intelligent orchestration and containerized security services, the dynamic DMZ significantly enhances the system's ability to respond to cyber incidents without halting production. Ultimately, this thesis contributes a comprehensive architecture that blends network slicing with machine learning, secure segmentation, and automation, paving the way for resilient, adaptive, and intelligent OT environments. Performance evaluations across multiple scenarios show improvements in system reliability, threat response time, model accuracy, and resource utilization, providing a strong foundation for future industrial automation systems.

Rodiles Delgado, Brian G↗

Development of a Reference Design for a Cyber-Physical System

The purpose of this thesis is to develop a reference design to assist in the selection of security practices in power electronics design. A prototype will be developed from this reference design for evaluation. This evaluation will include a brief cost/benefit analysis to gauge the efficacy of implementing each layer of security throughout the power electronics design process. This thesis will also describe the obstacles and effectiveness of integrating a Trusted Platform Module (TPM) into a cyber-hardened grid-connected device. The TPM device is a secured crypto processor that assists in generating, storing, and restricting the use of cryptographic keys. The emphasis of this research is to establish integrity, authenticity, and confidentiality within a system by providing a baseline of security concerns for segments of the system. This research considers communication, control, and hardware level securities. The scope of this thesis will review the necessary security methods as well as consider the effects these methods have on the embedded system, to assess the desired security to responsiveness trade off. Applying this approach to a design process will alleviate various unknowns of appending security to a power electronics design. This thesis describes the specific vulnerabilities introduced within this grid-edge environment, and how the liabilities within the system can be mitigated. Initially, common security techniques will be considered to establish a guideline to benchmark performance and resource costs of the system. The foundation will be a non-hardened power electronic system platform with industry standard communication protocols. Several security techniques and attack vectors will then be evaluated to contribute to the base level platform. Other fail-safe features take place to gauge progress of the selected approach, non-inclusive to the TPM. Collectively, this investigation will determine a valid experiment by appraising and categorizing resource allocation, performance overhead, and monetary cost analysis results into a reference design. The prototype will then demonstrate methods to relieve common threats that are purposefully implemented into the design.

Blair, Nicholas Paul↗

A 15-Mev/nucleon Iso-Cyclotron for Security and Radioisotope Production

Cargo inspection systems exploit the broad bremsstrahlung spectrum from a 6-10 MeV, low-duty cycle electron accelerator which in the presence of significant backgrounds presents challenges in image and material identification. An alternative approach is to use ions which can excite nuclear states either directly, or through generation of secondary high-energy signature gammas produced from nuclear interactions in a target. RadiaBeam is designing a compact sector isocyclotron 1.25 m in radius, with high-gradient cavities to accelerate multi-ion species up to 15-20 MeV/u with large turn-to turn, centimeter-level separation for low-loss extraction without lossy foil stripping. A strong-focusing radial field profile will be optimized in a separated-sector format for control over machine tune simultaneous with isochronous orbist requirements for high-current (~0.5 milliamp) operation. Innovation in injection will be introduced to replace the high-loss central region. Non-security applications of the cyclotron include medical isotope production, ion radiobiology, as well as material science research and ion instrumentation development.

43 PARTICLE ACCELERATORS↗

Application of Cyber-Informed Engineering for Protecting BESS

This white paper synthesizes an array of crucial grid services provided by BESS technology, assesses its architecture and communications, and presents a case study for analysis against the principles introduced by Cyber-Informed Engineering (CIE). Furthermore, in walking through the analysis, this paper presents a framework to evaluate risks and solutions when considering BESS components. Asset owners and buyers could perform this analysis to assess their BESS product implementations, alternative inverter-based resources (IBR), and energy management systems (EMS). Battery systems fulfill various roles contingent on the unique market demands and the specific challenges presented by regional grid infrastructures. These roles also vary due to the differing utility models for ownership and operation, which are adapted to meet regional and local capabilities and requirements. Concerns have been raised regarding the potential for adversaries to exploit knowledge of battery operational patterns to orchestrate decisive attacks. However, the security of operational data for these systems may not be the primary vulnerability, as much of this information is already well-understood within the community. Applying a modest degree of subject matter expertise can often yield valuable predictions regarding how a battery will respond under certain conditions, such as grid emergencies, high or low-temperature days, Public Safety Power Shutoff (PSPS) events, and outages. The operational characteristics of batteries are well-documented, and their capabilities, including the risks associated with misoperation and the resulting consequences, are published and understood within the industry. CIE practices represent the next step in gaining functional assurance and providing an acceptable level of risk, regardless of whether a battery vendor can support a trusted and validated supply chain. While this issue has exacerbated supply chain challenges, it is not an isolated condition. This foreign supply route is the primary source of BESS for the U.S. market. Significant efforts are underway through the Bipartisan Infrastructure Law (BIL) to change that. Still, strategic short-term operational mitigations are needed to ensure the security of our operational technology (OT) systems, which are enhanced by instilling trust and are separate from vendors implementing CIE principles.

25 ENERGY STORAGE↗