Real-World Challenges and Lessons-Learned from Cyber-Physical Security Technology Testing at a Utility Solar Photovoltaic Field Site
Explore the source record for details and available documents.
Chavez, Adrian R. [Sandia National Laboratories (S↗
SEARCH · Search NASA
Results for “Cyber security”
Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.
Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.
Cyber-Physical Security Analysis of a DER Application for IoT Communications.
Abstract not provided.
Jimenez, Yesid↗
Cybersecurity Standards for Photovoltaic Operations
Solar energy plays an important role in securing a more resilient, cyber-secure electrical grid in Pennsylvania. Solar's ability to be widely "distributed" on residential and large roofs, marginal lands, and many other locations across Pennsylvania - as opposed to being centralized - offers a strong option for addressing the myriad of potential disruptions that can occur to the grid's infrastructure. And when combined with energy storage, local energy needs can be met immediately without having to wait on the delivery of an off-site fuel source. As more and more distributed solar electricity generation is brought online, researchers, technology developers, solar developers and grid operators are paying close attention to the potential for solar to enhance grid cybersecurity. Although nobody may know when, where, or how the next cyberattack will take place, there are security measures, technical solutions, and management practices that are being implemented across the industry to protect against network control issues and grid operations. Everyone participating in the solar value chain stands to gain from a coordinated, iterative approach to protect against cyber vulnerabilities and build deeper resilience into the architecture of our grid.
cybersecurity↗
Quantum Lock Technologies: Innovation Crossroads Final Report
At Quantum Lock Technologies, our mission is to use future-proof hardware and software to bridge the gap between physical access control and cyber security. Physical security includes access to doors, lockboxes/containers, and machinery/robots. Connecting physical access control to the cloud allows for remote detection, fast ledger updates, and mobile or remote access. However, this also opens physical security up to the world of cyber-attacks. At Quantum Lock, we use quantum random number generation to generate completely random and unpredictable digital keys to be used by connected equipment in a facility. This quantum technology is then paired with end-to-end encryption and a one-time-key communication protocol to ensure the highest level of security. Through the Innovation Crossroads program at Oak Ridge National Laboratory, we have developed benchtop prototypes of our technology, connected with utility boards as our first target customers, and prepared for our first pilot with customers (target end of summer 2022). Below is a photograph of myself at an energy substation where we plan to eventually apply our technology.
45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗
Cyber Infrastructure for the Smart Electric Grid
As electric power systems undergo a transformative upgrade with the integration of advanced technologies to enable the smarter electric grid, professionals who work in the area require a new understanding of the evolving complexity of the grid. Cyber Infrastructure for the Smart Electric Grid delivers a comprehensive overview of the fundamental principles of smart grid operation and control, smart grid technologies, including sensors, communication networks, computation, data management, and cyber security, and the interdependencies between the component technologies on which a smart grid's security depends. The book offers readers the opportunity to critically analyze the smart grid infrastructure needed to sense, communicate, compute, and control in a secure way.
communication networks↗
Detection and Diagnosis of Data Integrity Attacks in Solar Farms Based on Multilayer Long Short-Term Memory Network
Photovoltaic (PV) systems are becoming more vulnerable to cyber threats. In response to this emerging concern, developing cyber-secure power electronics converters has received increased attention from the IEEE Power Electronics Society that recently launched a cyber-physical-security initiative. Here this letter proposes a deep sequence learning based diagnosis solution for data integrity attacks on PV systems in smart grids, including dc–dc and dc–ac converters. The multilayer long short-term memory networks are used to leverage time-series electric waveform data from current and voltage sensors in PV systems. The proposed method has been evaluated in a PV smart grid benchmark model with extensive quantitative analysis. As a comparison, we have evaluated classic data-driven methods, including K-nearest neighbor, decision tree, support vector machine, artificial neural network, and convolutional neural network. Comparison results verify performances of the proposed method for detection and diagnosis of various data integrity attacks on PV systems.
42 ENGINEERING↗
Vulnerability Assessments for Power-Electronics-Based Smart Grids
Here, in this paper, a novel method is proposed to evaluate the cyber security of the power-electronics-based smart grids (PESG). The proposed method considers the performance and stability of both the individual inverter and the grid. To our knowledge, this is a first attempt to evaluate the performance and stability of PESG due to cyber attacks. We first develop impedance-based modeling and cyber-attack modeling for PESG. Then we propose innovative two security criteria to evaluate the security of PESG, including stability-based and metrics-based. For metrics-based criteria, we propose to use both total harmonic distortion (THD) and space phasor model (SPM) to evaluate the inverter performance. The simulation results with a two-inverter-based power grid verify the validity and accuracy of the proposed security evaluation method. Results have shown that the performance and stability of PESG are significantly affected by cyber attacks, and thus there is indeed a need to further study cyber security issues of PESG.
24 POWER TRANSMISSION AND DISTRIBUTION↗
Capability Building Progression of an Insider Threat Mitigation Program at an International Research Reactor
The nuclear industry recognizes the difficulties involved in developing effective managerial and leadership skills in a highly technical and proficient workforce such as that found in nuclear facilities. Implementing an insider threat mitigation program (ITMP) within the nuclear industry is a complex and ongoing process that demands a comprehensive understanding of human behavior, an organization’s security culture, and rigorous regulatory requirements yet also accounts for facility characteristics, physical security, material flow, and activities involving nuclear material. Given the high-consequence nature of research reactor operations, even minor lapses can lead to safety, security, and reputational risks. An effective ITMP requires a defense-in-depth approach that incorporates behavioral analysis, robust vetting procedures, continuous monitoring, and cross-disciplinary coordination. It must also promote a culture of vigilance and accountability at all levels up to and including executive leadership but be flexible enough to adapt to evolving global threats and technological advances. Insider threat mitigation is not a one-time effort but rather a sustained commitment to excellence in safety and security. Establishing a culture in which personnel proactively report incidents and issues that could affect nuclear safety and security is vital to maintaining a safe and secure operational environment. This document was developed to guide senior management and research reactor organizations in creating comprehensive programs to effectively manage and mitigate insider threat behaviors and actions. It focuses on the key pillars of an effective ITMP, including the national legal framework, security culture, preventive and protective measures, cyber security, and performance evaluation. By using a systematic approach during implementation, facilities can foster environments conducive to insider threat detection and support long-term program sustainability. The document also provides strategies for improving communication across all levels of an organization, helping to eliminate barriers that hinder the development of robust ITMPs and enhance overall security culture. In today’s organizations, the concept of leveraging safety and security culture lessons to facilitate knowledge transfer is rapidly evolving to expedite insider threat management and security culture improvements. This document outlines the rationale for evaluating an ITMP based on national customs, culture, and stakeholders. The elements are all germane to reliability and trustworthiness and relate to security concerns that states may encounter. The document focuses not only on individual perceptions regarding security issues and capability building but also on team building and how to resolve concerns. The implementers of a facility’s ITMP may zero in on indicators of insider threats within their enterprise. This material will benefit organizations when it is applied using a systematic and structured approach as demonstrated throughout the document.
98 NUCLEAR DISARMAMENT, SAFEGUARDS, AND PHYSICAL P↗
A PROVEN APPROACH FOR EFFECTIVE COMPUTER SECURITY SELF-ASSESSMENTS AT NUCLEAR FACILITIES
A proven method for conducting cybersecurity self-assessments at nuclear power plants is now available for international use. This method was originally developed by Pacific Northwest National Laboratory, under the sponsorship of the U.S. Nuclear Regulatory Commission (NRC), for use at U.S. nuclear power plants. The “Method,” described in NUREG/CR-6847 “Cyber Security Self-Assessment Method for U.S. Nuclear Power Plants,” was originally a limited release document that was withheld from public disclosure but is now publicly available. The Method provides a systematic, phased, and risk-informed approach to help decision makers and security specialists understand their relative cybersecurity posture. Completed Method assessments may be used to support or validate selection of computer security controls to mitigate cyber threats as well as demonstrate compliance with regulations or statutes enacted by competent authorities. The Method assesses the cybersecurity posture of key systems at a nuclear facility with a focus on protection of design base functions. It considers both physical and digital elements of system vulnerabilities and the resulting potential consequences from exploitation. It is well-suited for addressing blended cyberattacks. A semi-quantitative analytical approach is used in the evaluation of potential vulnerabilities, consequences, and risks and provides a technical basis for the selection of security controls to mitigate cyberattacks. The Method’s application at U.S. nuclear power plants has been very encouraging. The only nuclear plant in the United States that did not have adverse findings during its initial NRC computer security inspection prepared for inspection through the diligent application of this self-assessment method and the implementation of recommendations that came out of that self-assessment. Nuclear facilities around the world might find application of the Method extremely helpful for making cost-effective, risk-based decisions regarding computer security and for preparing to pass computer security inspections by their competent authorities.
Cyber security, Nuclear security, Self-assessment↗
CRADA Number NFE-20-08292 with Quantum Lock Technologies LLC (CRADA Final Report)
At Quantum Lock Technologies, our mission is to use future-proof hardware and software to bridge the gap between physical access control and cyber security. Physical security includes access to doors, lockboxes/containers, and machinery/robots. Connecting physical access control to the cloud allows for remote detection, fast ledger updates, and mobile or remote access. However, this also opens physical security up to the world of cyber-attacks. At Quantum Lock, we use quantum random number generation to generate completely random and unpredictable digital keys to be used by connected equipment in a facility. This quantum technology is then paired with end-to-end encryption and a one-time-key communication protocol to ensure the highest level of security. Through the Innovation Crossroads program at Oak Ridge National Laboratory, we have developed benchtop prototypes of our technology, connected with utility boards as our first target customers, and prepared for our first pilot with customers (target end of summer 2022).
97 MATHEMATICS AND COMPUTING↗
Quantum Lock Technologies: Innovation Crossroads Final CRADA Report
At Quantum Lock Technologies, our mission is to use future-proof hardware and software to bridge the gap between physical access control and cyber security. Physical security includes access to doors, lockboxes/containers, and machinery/robots. Connecting physical access control to the cloud allows for remote detection, fast ledger updates, and mobile or remote access. However, this also opens physical security up to the world of cyber-attacks. At Quantum Lock, we use quantum random number generation to generate completely random and unpredictable digital keys to be used by connected equipment in a facility. This quantum technology is then paired with end-to-end encryption and a one-time-key communication protocol to ensure the highest level of security. Through the Innovation Crossroads program at Oak Ridge National Laboratory, we have developed benchtop prototypes of our technology, connected with utility boards as our first target customers, and prepared for our first pilot with customers (target end of summer 2022). Below is a photograph of myself at an energy substation where we plan to eventually apply our technology.
42 ENGINEERING↗
Power Sector Cybersecurity Building Blocks
The Power Sector Cybersecurity Building Blocks, developed through the USAID-NREL Partnership and the Resilient Energy Platform, are designed to help a variety of stakeholders improve security for the electrical grid. This effort grows out of USAID and NREL's discussions with utilities around the world, as well as past cybersecurity assessments performed by NREL on dozens of utilities and government agencies, with a focus on the cybersecurity challenges faced by small and under-resourced utilities. This document outlines eleven building blocks for power sector cyber security. It functions as a guide to help organizations develop a robust, balanced cybersecurity defense program. Individually, each building block represents a cluster of related activities within cybersecurity on which an organization should focus. Using the building blocks, organizations can effectively prioritize their cybersecurity efforts to best thwart a wide range of potential cyberattacks.
24 POWER TRANSMISSION AND DISTRIBUTION↗
Nuclear Fundamentals Orientation Module 1: LANL Security Overview [Slides]
The presentation covers the following areas: Personnel Security; Substance Abuse Program; Physical Security; Prohibited and Controlled Articles; Information Protection & Cyber Security; Operations Security (OPSEC); Policies and Resources; and, Questions and Answers.
99 GENERAL AND MISCELLANEOUS↗
Treatment of uncertainties for security-related design aspects of advanced reactors when using a risk-informed licensing approach
Sabotage of nuclear plants and theft of special nuclear material are different from many other issues potentially affecting public health and safety, and some of those differences drive the content of the present report. A high-level indication of these differences is provided in the US Nuclear Regulatory Commission’s Safety Goal Policy. Promulgated in the mid-1980’s, when it had become reasonably clear that risk analysis had improved to the point where it was possible to understand the risks associated with plant operation, the Safety Goal Policy articulates qualitative safety goals and quantitative health objectives that are meant to guide regulatory and risk management activities, with the following key exceptions noted in the original policy statement: The possible effects of sabotage or diversion of nuclear material are also not presently included in the safety goals. At present there is no basis on which to provide a measure of risk on these matters. It is the Commission’s intention that everything that is needed will be done to keep these types of risks at their present very low level; and it is the Commission’s expectation that efforts on this point will continue to be successful. With these exceptions, it is the Commission’s intent that the risks from all the various initiating mechanisms be considered to the best of the capability of current evaluation techniques. The present report discusses extensions of classical risk management to address some of the special issues that arise in the context of security. Although the present emphasis is on physical security, some attention will be paid to cyber security. A particular focus of the report is on quantitative framework to manage and address uncertainties. This framework is demonstrated via a couple of hypothetical examples.
98 NUCLEAR DISARMAMENT, SAFEGUARDS, AND PHYSICAL P↗
Enhancing grid reliability and resilience through novel DER control, total situational awareness and integrated distribution-transmission representation
High penetration of distributed energy resources (DERs) can lead to overvoltage and thermal violations, miscoordination of protection devices and potential adverse control interactions. The challenges are exacerbated by a lack of operator situational awareness of behind-the-meter DERs, and T&D interactions. Furthermore, the large attack surface of a DER environment creates significant cyber security challenges. The motivation is to address these barriers. The main goal is to enable extreme levels of DERs in distribution systems while simultaneously enhancing their reliability and resiliency. This is achieved by a data-driven approach for operation, planning and control of distribution systems with total situational awareness and real-time DER control enabled by a network of edge intelligent devices, a cloud-based analytical platform, and secure communications.
14 SOLAR ENERGY↗
Personal Resiliency Index
A plethora of information exists in literature focusing on different aspects of personal resilience. There are a number of questionnaires available to measure resilience in different aspects of an individual’s life, such as mental health. However, there is a lack of comprehensive information on the subject of personal resilience to natural and man-made disasters. A Personal Resiliency Index identifying four key areas of resilience related to natural and man-made disasters will help fill this gap by providing individuals an idea of where the stand comparatively to their peers on this topics. As an increasing amount of man-made disasters, natural disasters and pandemics occur, we realize that preparation is key.?“Crisis can be experienced at individual, group and mass levels and at local, regional, national or supra-national levels.” 1? Dr. Ron Fisher, the principal investigator has over 20 years’ critical infrastructure protection including developing vulnerability assessment methodology, risk and resiliency analyses and infrastructure interdependencies. Dr. Fisher and his team will research and develop a voluntary survey which evaluates the user’s personal resilience level to natural and man-made disasters. The research team is focusing on 4 main categories:? financial resilience, cyber security, physical and mental health, and emergency preparedness.?The web based application will?provide a resilience score for each of the categories and also a comprehensive personal resiliency score based on the voluntary survey. The application will also provide feedback to the user on actions to take to become more resilient to natural and man-made disasters. Through this effort, we will also be able to identify the areas where participants are excelling as well as opportunities for improvement in terms of resilience. This information will provide insight into areas of further investigation and identify potential areas of support needed for the general public to adopt strategies to become more resilient. 1 Lynott, William. “Surviving a Natural (or Man-Made) Disaster: How to Prepare for and Bounce Back? from a Crisis in Your Business | 2018-02-01 | NOLN.” Home Page, NOLN, 1 Feb. 2018, https://www.noln.net/articles/2683-surviving-a-natural-or-man-made-disaster-how-to-prepare-for-and-bounce-back-from-a-crisis-in-your-business.
99 GENERAL AND MISCELLANEOUS↗
West Virginia University Industrial Assessment Center (Final Progress Report)
The Industrial Assessment Center at West Virginia University has been successful in workforce development, and in generation of energy savings for manufacturing facilities during the period 2016 to 2021. Graduate and undergraduate students have benefited from energy assessment experience and most of them have found good positions as energy engineers and analysts in the industrial sector. Several peer reviewed research papers in archival journals as well as conference papers on the topic of energy engineering and assessment have been published. The implemented energy savings for manufacturing facilities have been significant in the areas of lighting, compressed air, process heating, steam, HVAC, chillers and cooling towers, and motors. In addition, water use reduction, smart manufacturing applications to save energy, cyber security evaluation, energy management, productivity improvements and waste reduction opportunities that lead to energy intensity reductions have been explored. The students have obtained an opportunity to interact with energy efficiency and productivity improvement professionals at various conferences and workshops and their research has generated important results. In summary, the West Virginia University Industrial Assessment Center (WVU-IAC) has fulfilled its mission in regard to workforce development, energy efficiency for manufacturing facilities, and laid a strong platform enhancing sustainability through reductions in carbon emissions achieved through energy efficiency and energy management initiatives and reductions in water usage and waste reduction. During the project period (2016-2021) the WVU-IAC has made numerous energy efficiency, water use reduction, waste reduction, and productivity improvement recommendations, a significant number of them having been implemented by the manufacturing facilities. The research adds significant understanding to the area of energy efficiency, water and waste reduction, and productivity improvement. The technical effectiveness and economic feasibility of the methods and techniques investigated and demonstrated through this project have been exemplary, resulting in significant recommended and implemented resource savings and reductions in carbon emissions. The project has been of significant benefit to the public owing to replication of results within the industrial sector, thus reducing operating costs for businesses that result in increase of growth and employment, as well as community benefits in terms of reductions in carbon emissions.
32 ENERGY CONSERVATION, CONSUMPTION, AND UTILIZATI↗
Envisioning the Future Renewable and Resilient Energy Grids—A Power Grid Revolution Enabled by Renewables, Energy Storage, and Energy Electronics
Today’s power grids are facing tremendous challenges because of the ever-increasing power demand, system complexity, infrastructure cost, knowledge base, and policy and regulatory issues to achieve supply–demand power balance and resiliency with respect to more frequent extreme weather events and cyberattacks. It is particularly challenging when the transition toward 100% intermittent renewable energy sources is considered. Many countries are calling for building up more transmission and distribution lines to increase power delivery capacities. This article is an attempt to answer two urgent questions: Is more transmission and distribution infrastructure really needed to meet the increasing power demand? What kind of future grid infrastructure should we envision and build? This article attempts to answer these questions and proposes the concept of community-centric asynchronous renewable and resilient energy grids. By clearly differentiating the concepts of grid resilience and reliability, the importance of building resilient power electronics’ devices and robust system-level control algorithms to achieve 100% renewable energy integrated resilient grids is presented. To identify the shortcomings and propose advancements, power electronics’ technologies are categorized using the proposed concepts of natural source frequencies (NSf), energy storage, direct energy conversion/control and fault protection (DeCaFp), and high-efficiency energy consumption and buffering (heECaB) technology. The ability of networked microgrids to greatly reduce power outages and power system restoration time is demonstrated by leveraging robust decentralized and centralized control algorithms, identified through a comprehensive literature review. Future research areas are proposed to further enhance grid stability, controllability, cybersecurity, and protection against faults in the presence of 100% renewable sources by leveraging the advanced capabilities of NSf, DeCaFp, and heECaB devices and system-level control algorithms.
14 SOLAR ENERGY↗