Search NASA⌕ Search

SEARCH · Search NASA

Results for “Critical Infrastructure Protection”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 127 records · Page 7
All sourcesNASA NTRSDOE OSTI
DOE OSTI2019

All Hazards Analysis Core

The All Hazards Knowledge Framework (AHA) is a dynamic analytical framework that enables critical infrastructure knowledge discovery and decision support across the five mission areas – prevention, protection, mitigation, response and recovery. AHA provides the ability to store and model infrastructure systems as a linked multigraphs providing an intuitive and natural representation. This capability provides the foundation to rapidly evaluate and understand the potential consequences of manmade and natural disaster on these systems.

McGillivary, KentE.↗
DOE OSTI2018

Protecting water and wastewater utilities from cyber‐physical threats

Abstract Recent events have highlighted the need to address cybersecurity threats to systems supporting critical infrastructure and federal information systems which are evolving and growing. These threats have become ubiquitous in the United States, and throughout the world. Many information and communications technology (ICT) devices and other components are interdependent so that disruption of one component may have a negative, cascading effect on others. In the United States, the Federal role in cyber‐security has been debated for more than a decade but creating a policy is complicated because in the United States, State and local governments are the major institutions responsible for providing services to their populations. It is important that critical infrastructure such as Publically Owned Treatment Works (POTWs) and Public Water Systems (PWSs) adopt suitable countermeasures to prevent or minimise the consequences of cyber‐attacks. This paper discusses both technological and procedural techniques that can be used to protect against cyber‐threats.

Clark, Robert M.↗
DOE OSTI2017

Multi-Scenario Use Case based Demonstration of Buildings Cybersecurity Framework Webtool

The purpose of this paper is to demonstrate the cybersecurity and software capabilities of Buildings Cybersecurity Framework (BCF) webtool. The webtool is designed based on BCF document and existing NIST standards. It’s capabilities and features are depicted through a building usecase with four different investment scenarios geared towards improving the cybersecurity posture of the building. BCF webtool also facilitates implementation of the goals outlined in Presidential Executive Order (EO) on Strengthening the Cybersecurity of Federal Networks and Critical Infrastructure (May 2017. In realization of the EO goals, BCF includes five core elements: Identify, Protect, Detect, Respond, and Recover, to help determine various policy and process level vulnerabilities and provide mitigation strategies. With the BCF webtool, an organization can perform a cybersecurity self-assessment; determine the current cybersecurity posture; define investment based goals to achieve a target state; connect the cybersecurity posture with business processes, functions, and continuity; and finally, develop plans to answer critical organizational cybersecurity questions. In this paper, the webtool and its core capabilities are depicted by performing an extensive comparative assessment over four different scenarios.

Gourisetti, Sri Nikhil G.↗
DOE OSTI2023

Cyber-Physical Power Systems Protection: The Byzantine Cybersecurity Framework

Cybersecurity of smart grids have been topic of much interest in recent years. As this critical infrastructure operation increases dependency on automated processes and controls, exposure to cyber-physical threats become inevitable. Considering cyber-physical security of the grid, much focus of attention has been made towards smart grids real-time monitoring solutions, including the state estimation process. Analyzing the relevant literature, one can note though that seldom research has been done on cyber-physical security of smart grids protection systems. Protection systems have intangible value towards grid reliability. This paper presents a cybersecurity framework for smart grids protection systems. A physics-based inspired machine learning solution is at the core process of the framework. Processed relay inputs and outputs are used by a deep predictive coding network. Formal models, a quasi-static state estimator, provides an oracle when low confidence decision is reached. Evolving knowledge is derived through reinforcement learning. Implementation aspects considering the Pacific Northwest National Laboratory Electricity Infrastructure Operations Center are presented. Built as an extra control layer to protection systems, without hard-to-derive parameters, highlights potential aspects towards real-life applications.

Bretas, Arturo Suman↗
DOE OSTI2018

Cybersecurity Framework Tool and Training Game Help Utilities ID Cyber Attack Vulnerabilities

PNNL cybersecurity experts developed two novel cyber tools to help utilities and organizations that serve them combat malicious cyber attacks. The first is the Cybersecurity Framework Tool, or CFT. This patented tool provides a way for utilities and their associated vendors to identify, protect, detect, respond to, and recover from emerging cyber threats or vulnerabilities to critical infrastructure. CFT provides an easy-to-follow set of best practices, policies, and procedures to improve the cybersecurity postures of critical infrastructure. The second tool is the Cybersecurity Training Game Simulator, a dynamic “train the trainer” tool. The game provides interactive training scenarios based on major cyberattacks that happened in the U.S. during the past decade. Both innovations are available for commercialization. Contact Commercialization Manager Peter Christensen at peter.christensen@pnnl.gov to learn more.

45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗
DOE OSTI2016

Watchdog Project

The Watchdog Project completed 100% of the project Statement of Project Objective (SOPO). The Watchdog project was a very aggressive project looking to accomplish commercialization of technology that had never been commercialized, as a result it took six years to complete not the original three that were planned. No additional federal funds were requested from the original proposal and SEL contributed the additional cost share required to complete the project. The result of the Watchdog Project is the world’s first industrial rated Software Defined Network (SDN) switch commercially available. This technology achieved the SOPOO and DOE Roadmap goals to have strong network access control, improve reliability and network performance, and give the asset owner the ability to minimize attack surface before and during an attack. The Watchdog project is an alliance between CenterPoint Energy Houston Electric, Pacific Northwest National Laboratories (PNNL), and Schweitzer Engineering Laboratories, Inc. (SEL). SEL is the world’s leader in microprocessor-based electronic equipment for protecting electric power systems. PNNL performs basic and applied research to deliver energy, environmental, and national security for our nation. CenterPoint Energy is the third largest publicly traded natural gas delivery company in the U.S and third largest combined electricity and natural gas delivery company. The Watchdog Project efforts were combined with the SDN Project efforts to produce the entire SDN system solution for the critical infrastructure. The Watchdog project addresses Topic Area of Interest 5: Secure Communications, for the DEFOA- 0000359 by protecting the control system local area network itself and the communications coming from and going to the electronic devices on the local network. Local area networks usually are not routed and have little or no filtering capabilities. Combine this with the fact control system protocols are designed with inherent trust the control system owners have very little choice on how to protect communications on the local network. The Watchdog project reduces security risks in electric sector control system local area networks (LANs) by providing: Network access control (NAC) Multi-Layer firewall (physical through transport layer) Containment of malware or unauthorized traffic spreading across the network White list protocols and application message types filtering Configurable, proactive traffic engineering The Watchdog project achieved all of the above by developing an SDN switch.

24 POWER TRANSMISSION AND DISTRIBUTION↗
DOE OSTI2017

Regional Resiliency Assessment Program Dependency Analysis Framework

The purpose of this report is to develop a common understanding and consistent analytic approach for evaluating critical infrastructure dependencies and interdependencies that will inform the programs of the U.S. Department of Homeland Security (DHS) Protective Security Coordination Division (PSCD). The framework outlined here prioritizes a need to tie together top-down and bottom-up analyses to produce a comprehensive “system of systems” view of dependencies and interdependencies that integrates the best available data. Examples of dependency and interdependency analyses from recent Regional Resiliency Assessment Program (RRAP) projects are included to illustrate practical applications of these concepts in support of infrastructure resilience.

98 NUCLEAR DISARMAMENT, SAFEGUARDS, AND PHYSICAL P↗
DOE OSTI2023

Quantifying the Protectability of Power Systems for Restoration Applications

With the increasing availability of distributed energy resources, controllable switches, and advanced metering infrastructure, distribution systems are exploring opportunities for improving system reliability through fault location, isolation, and service restoration. During permanent outages, this requires islanding microgrids and/or reconfiguration of the feeders; however, it is critical to assess the protection of the islanded/reconfigured networks before transition because the rated load and fault current conditions change. This paper presents a novel “protectability” metric that quantifies the protection performance and allows the operators to compare the effectiveness of the protection between two or more possible reconfiguration and islanding approaches. We present the mathematical formulation and assumptions for the metric. Multiple configurations of the Electric Power Research Institute J1 feeder, both in grid-connected and weak-sourced islanded operation, are used to demonstrate the performance of the metric with reference to overcurrent protection. Takeaways for future studies on system planning integration are provided.

distributed energy resources↗
DOE OSTI2018

Sea Level Rise Impacts on Wastewater Treatment Systems Along the U.S. Coasts

As sea levels rise, coastal communities will experience more frequent and persistent nuisance flooding, and some low-lying areas may be permanently inundated. Critical components of lifeline infrastructure networks in these areas are also at risk of flooding, which could cause significant service disruptions that extend beyond the flooded zone. Thus, identifying critical infrastructure components that are exposed to sea level rise is an important first step in developing targeted investment in protective actions and enhancing the overall resilience of coastal communities. Wastewater treatment plants are typically located at low elevations near the coastline to minimize the cost of collecting consumed water and discharging treated effluent, which makes them particularly susceptible to coastal flooding. For this analysis, we used geographic information systems to assess the exposure of wastewater infrastructure to various sea level rise projections at the national level. We then estimated the number of people who would lose wastewater services, which could be more than five times as high as previous predictions of the number of people at risk of direct flooding due to sea level rise. We also performed a regional comparison of wastewater exposure to marine and groundwater flooding in the San Francisco Bay Area. Overall, this analysis highlights the widespread exposure of wastewater infrastructure in the United States and demonstrates that local disruptions to infrastructure networks may have far-ranging impacts on areas that do not experience direct flooding.Plain Language Summary Wastewater treatment plants are susceptible to flooding resulting from sea level rise. Previous estimates of wastewater exposure have only considered the impacts of marine flooding at the local or regional scale. In this analysis, we quantify the exposure to marine flooding across the coastal United States and then consider the relative impacts of marine and groundwater flooding at the regional scale in the San Francisco Bay Area. We also estimate the number of people who may lose access to wastewater services if no actions are taken to prevent flooding at wastewater treatment plants. We find that the number of people impacted by sea level rise due to loss of wastewater services could be five times as high as previous predictions of the number of people who experience direct flooding of their homes or property. We also find that groundwater flooding poses a significant threat to wastewater plants in the San Francisco Bay region.

54 ENVIRONMENTAL SCIENCES↗
DOE OSTI2016

Maintenance of Maywood Laboratory Operations Support During Contractor Transition and Replacement of the Project Databases - 16329

In December 2013, Cabrera Services (Cabrera) executed transition of the FUSRAP Maywood Superfund Site remediation project operations, including an on-site accredited environmental lab, from a large business that had established technology infrastructure in place for over a decade which required updating to support the expected remediation scope and client needs. As of November 2015, Cabrera has shipped over 116,000 yd{sup 3} of contaminated soil to disposal facilities. During the transition, the USACE FUSRAP Maywood Laboratory (UFML) continued to support project operations, providing the expected timely and reliable results and maintaining their New Jersey Department of Environmental Protection certification for all parameters of concern, while having to cope with new challenges and additional tasks having the potential to disrupt the laboratory's ability to support project operations. This case study examines the challenges with maintaining a certified radiochemistry laboratory and an aggressive remediation schedule during a period of prime contractor transition which included a complete IT infrastructure overhaul, and conversion of the existing Microsoft Access laboratory database and project Electronic Data Management System (EDMS) to a customized commercial solution. Challenges: I. Procurement of a new database subcontractor and working closely with them to achieve the following: a. Migration of all environmental (including radiological, chemical, and quality control), health and safety, and spatial data as well as reports, queries, and analytical instrument software processes from a MS Access data management system to a SQL server system; and b. Verification that the functionality and data integrity of the databases remained intact. II. The onsite laboratory was changed over to a new onsite network and the following tasks were completed with little or no interruption to site operations by January 10, 2014: i. Installation of new instrument personal computers (PCs) and making them fully operational; ii. Configuration of the lab domain and server to host the LIMS (replaced all servers/domain/workstations with Windows 7 and Server 2012 machines). iii. Networking of the laboratory building into the rest of the project site via fiber optic cabling across the site. iv. Upgrade of the wide area network (WAN) data connection to high-speed Fiber Optic service; v. Upgrade of the telephones into voice over internet protocol (VOIP) phones. vi. Splitting of the database into front ends and a centralized back-end hosted on the new server to allow simultaneous access for fixes and improvements. III. Phone service interruption; phone systems were operational by January 10, 2014. Additional Tasks: I. Revision of the USACE FUSRAP Maywood Laboratory (UFML) Quality Systems Manual Rev. 1 Submitted 01/16/14; II. Writing of the Uniform Federal Policy Quality Assurance Project Plan Rev. 1 (UFP-QAPP) submitted 1/21/14. This document replaced the prior project data quality plan, the Chemical Data Quality Management Plan. III. Support of USACE communications to the New Jersey Department of Environmental Protection (NJDEP) on lab management and personnel transition to Cabrera. This work was important since it ensured a smooth transition and shows how critical project records infrastructure such as databases, can be upgraded with minimal interruption of project support. Such work may provide benefit to other similar projects, especially long term projects where database infrastructure upgrades may be beneficial in terms of improved efficiencies in data recording and transfer, and improved security in data storage. (authors)

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗
DOE OSTI2023

Strengthening Cybersecurity for Industrial Control Systems: Innovations in Protecting PLC-Based Infrastructure

In this paper, we propose two new approaches aimed at enhancing the security of industrial control systems (ICS) that utilize programmable logic controllers (PLCs) for the control of critical processes. The first approach involves the addition of a unique digital watermark to the PWM control that adjusts the motor speed to control the critical process. This enables efficient detection and identification of any unauthorized modifications to the sensor signals responsible for controlling the plant. The second approach focuses on monitoring the input current (i.e power) drawn by the PLC during the execution of critical process control tasks. Malicious intrusions to change the PLC parameters and/or unauthorized firmware updates can be rapidly detected. Both approaches demonstrate a substantial improvement in the security of ICS, effectively safeguarding against potential cyber-attacks. Experimental results from a laboratory scale water tank level controlled via PLC showcases rapid intrusion detection capabilities.

Huang, Peng-Hao↗
DOE OSTI2019

Methodologies for Evaluation of Corrosion Protection for Ductile Iron Pipe

Repairing the nation’s infrastructure and ensuring its future durability are key issues facing the United States. It is important that these critical issues are addressed with appropriate and economical solutions based on the best modern scientific information. For example, in 2013 the American Society of Civil Engineers (ASCE), in its Report Card for America’s Infrastructure, gave the state of the critical water/wastewater infrastructure an overall grade of “D.” According to the ASCE, 6 billion gallons of drinking water disappear every day, mostly due to leaks in old pipes. Corrosion of water pipes plays a role in their durability and, for external pipe corrosion, the corrosivity of soils varies by location and is based on several factors, including soil resistivity. There is universal agreement that water pipes require some type of corrosion mitigation strategy (i.e., bare pipe is not installed). However, in specifying which strategy to employ for ductile iron pipe (DIP) in different soil types, the recommendations of the US Bureau of Reclamation (USBR) Technical Memorandum 8140-CC-2004-1 were subject to considerable debate. So much so that in 2009, this report was the subject of a study by the National Academy, which did not resolve the debate about the most effective and affordable solutions. Zinc-coatings have been explored in other parts of the world. Despite being widely used in Europe for almost 60 years, zinc coating was barely mentioned in either the 2004 or 2009 studies, which appeared to focus on North American data.

36 MATERIALS SCIENCE↗
DOE OSTI2016

TA-II Sub-Area Plan: Overview & Summary

Technical Area II is a brownfield site with a central, but “backyard” location that makes it a perfect area for site-support activities, particularly those that can be relocated from the TA-I “front-yard.” TA-II has a large amount of undeveloped land that should be held in reserve for future R&D mission work. Specifically, the Sub-Area Plan recommends: (1) Accommodating primarily site-support land uses, including site-support functions that can be relocated from TA-I; (2) Preserving land for future mission development opportunities which also protects sensitive environmental areas; (3) Locating future development along the Hardin and 9th Avenue corridors where existing infrastructure exists; and (4) Constructing critical infrastructure links (e.g., roads and utilities).

99 GENERAL AND MISCELLANEOUS↗
DOE OSTI2018

Decision Tree Based Anomaly Detection for Remedial Action Scheme in Smart Grid using PMU Data

The advanced and persistent cyber threats facing the critical infrastructure such as the smart grid are exponentially rising which require sophisticated defense strategy. Remedial Action Scheme (RAS), also known as Special Protection Scheme (SPS), relies on the interconnected cyber physical system for automated protection which is exposed to the multitude of vulnerabilities. In this paper, we propose an innovative approach to develop an Intelligent Remedial Action Scheme (IRAS) which can detect and distinguish cyber attacks from the physical disturbances in smart grid and later take smart corrective actions as required to minimize the impact on system reliability and economy. Specifically, we have proposed the decision tree based anomaly detection methodology which can distinguish between the normal tripping during power line faults and malicious tripping attack on the physical relays in the context of RAS. The classification model is developed using differential features of voltage and current phasors. Next, as a proof of concept, we have implemented and validated the proposed methodology in cyber physical environment at Iowa State's PowerCyber testbed. Finally, the proposed methodology is tested on modified IEEE 39 bus system in offline and real-time mode. Our experimental results show that the proposed method is efficient in detecting attacks and performing corrective actions within an acceptable time frame.

24 POWER TRANSMISSION AND DISTRIBUTION↗
DOE OSTI2020

A Mixed Length Scale Model for Migrating Fluvial Bedforms

With the expansion of hydropower, in-stream converters, flood-protection infrastructures, and growing concerns on deltas fragile ecosystems, there is a pressing need to evaluate and monitor bedform sediment mass flux. It is critical to estimate real-time bedform size and migration velocity and provide a theoretical framework to convert easily accessible time histories of bed elevations into spatially evolving patterns. In this study, we collected spatiotemporally resolved bathymetries from laboratory flumes and the Colorado River in statistically steady, homogeneous, subcritical flow conditions. Wave number and frequency spectra of bed elevations show compelling evidence of scale-dependent velocity for the hierarchy of migrating bedforms observed in the laboratory and field. New scaling laws were applied to describe the full range of migration velocities as function of two dimensionless groups based on the bed shear velocity, sediment diameter, and water depth. Further simplification resulted in a mixed length scale model estimating scale-dependent migration velocities, without requiring bedform classification or identification.

58 GEOSCIENCES↗
DOE OSTI2020

Resilient U.S. Land Ports of Entry

The continued operation of Land Ports of Entry (LPOE), managed by the Customs and Border Protection (CBP) and General Services Administration% is vital to the U.S. economy and security. Border faculties are included in the Department of Homeland Security (DHS) Government Facilities Sector2, one of the 16 critical infrastructures "whose assets, systems, and networks, whether physical or virtual, are considered so vital to the United States that their incapacitation or destruction would have a debilitating effect on security, national economic security, national public health or safety, or any combination thereof.'" Specifically, disruptions to the flow of border crossing traffic, in the form of closures or increased border crossing wait times, impact the economy and security of all countries involved. This paper describes a process for analyzing and improving the resilience of U.S. Land Ports of Entry. For LPOE, the team believes that energy resilience is the primary objective due to the complete reliance on the e-manifest system and the increasing use of Multi-Energy Portals (MEPs). Emanifests are part of CPB's Automated Commercial Environment (ACE). They document several key pieces of information about cargo vehicles wishing to cross the border into the United States and are submitted before arriving at the port. Vehicles can be flagged for more invasive inspection based on the content of the e-manifest. MEPs are a non-intrusive inspection (NII) technology used to scan the contents of the cargo. Together MEPs and ACE serve an important role in aiding CBP with their mission to protect "the public from dangerous people and materials", and "enabling legitimate trade and travel.'" To analyze resilience of a port, the team would need to understand the port's current energy usage, which systems depend on energy and what backup systems exist, and any emergency operation plans that dictate how systems are operated in the event of a power outage. The team would also need to determine the design basis threats (DBTs) for the LPOE which could include natural disasters, manmade events, and accidents. The magnitudes of the DBTs are calculated and are then translated to expected impacts on the infrastructure and systems at the port. With this information gathered, existing LPOE models developed here at Sandia National Laboratories could be extended to support decisions about resilience. Current models are implemented in FlexSim, a 3rd party discrete event simulator. FlexSim provides 3-D visuals of physical layout that can reveal valuable insights, allows input to be variable (e.g. time it takes to interact with the CBP officer at primary inspection can vary) so that a whole range of possibilities can be captured in the results, and can be used to collect user-defined output metrics. Current LPOE models focus on cargo vehicle traffic, and process changes caused by the installation of new drive-through MEPs. Extending them to address resilience questions would require the addition of key pieces of information learned during the resilience analysis including critical systems, failure rates, and process changes for when failures occur. The primary output metric for current models is border crossing wait time. Additional metrics would also be added to the model to gain a more complete understanding of impacts related to resilience, for example, MEP scan rate. Once complete, the model could be used to analyze the effectiveness of mitigation strategies representing some future state.

29 ENERGY PLANNING, POLICY, AND ECONOMY↗
DOE OSTI2024

Resilient Energy Delivery and Control Systems (REDCS) (Final Technical Report)

US critical infrastructure is increasingly the target of cyberattacks, where disturbances could cause considerable damage and disruption. To help provide a new layer of cyber-physical protection for one key energy delivery system, natural gas pipelines, GE Vernova Advanced Research along with partners Florida State University and Intel Corporation created an innovative technology called "Resilient Energy Delivery and Control Systems" (REDCS). This cybersecurity package helps detect anomalies caused by cyberattacks, isolate the subsystem being impacted by the attack, and provide functions that can allow for resiliency – giving better situational awareness to the operators and cybersecurity specialists or in the future perform closed loop control for continued operation while compromised.

03 NATURAL GAS↗
DOE OSTI2024

FiberFlex: Real-time FPGA-based Intelligent and Distributed Fiber Sensor System for Pedestrian Recognition

In recent years, security monitoring of public places and critical infrastructure has heavily relied on the widespread use of cameras, raising concerns about personal privacy violations. To balance the need for effective security monitoring with the protection of personal privacy, we explore the potential of optical fiber sensors for this application. This article proposes FiberFlex, an intelligent and distributed fiber sensor system. Ultizing Field Programmable Gate Arrays (FPGA) high-level synthesis (HLS) acceleration, FiberFlex offers real-time pedestrian detection by co-designing the entire pipeline of optical signal acquisition, processing, and recognition networks based on the principles of optical fiber sensing. As a promising alternative to traditional camera-based monitoring systems, FiberFlex achieves pedestrian detection by analyzing the vibration patterns caused by pedestrian footsteps, enabling security monitoring while preserving individual privacy. FiberFlex comprises three modules: First , fiber-optic sensing system: A fiber-optic distributed acoustic sensing (DAS) system is built and used to measure the ground vibration waves generated by people walking. Second , algorithms: We first collect the training data by measuring the ground vibration waves, label the data, and use the data to train the neural network models to perform pedestrian recognition. Third , hardware accelerators: We use HLS tools to design hardware modules on FPGA for data collection and pre-processing and integrate them with the downstream neural network accelerators to perform in-line real-time pedestrian detection. The final detection results are sent back from FPGA to the host CPU. We implement our system FiberFlex with the in-house built DAS system and AMD/Xilinx Kintex7 FPGA KC705 board and verify the whole system using the real-world collected data. We conduct recognition tests on five test subjects of varying ages, heights, and weights in a fixed sensing area. Each subject experienced 20 real-time recognition tests using their daily walking habits, and the subjects were given adequate rest between tests. After 100 tests on five test subjects, the overall real-time recognition accuracy exceeded \(88.0\%\) . The whole system uses 55 W of power, 33 W in the optical DAS system and 22 W in the FPGA. Relying on its end-to-end interdisciplinary design, FiberFlex seamlessly combines fiber-optic sensors with FPGA accelerators to enable low-power real-time security monitoring without compromising privacy, making it a valuable addition to the existing security monitoring network. According to FiberFlex, more valuable research can be conducted in the future, such as fall monitoring for the elderly, migration of identification networks between different application scenarios, and improvement of anti-interference performance in more complex environments. In future perception networks, where the “eyes” are not feasible, let’s use fiber optic touch instead.

Distributed↗