Search NASA⌕ Search

SEARCH · Search NASA

Results for “Operational Technology”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 145 records · Page 8

Portable Industrial Control Systems Simulator (Final Report)

Industrial Control Systems (ICS) are more integrated than they have ever been before, but also the division between IT (Information Technology) and OT (Operational Technology) is becoming a grey area. As the integration of IT and OT occurs more often, cyber attack will also increase. Cyber attacks on Critical Infrastructure can be highly detrimental to society, notably via compromised Industrial Control Systems (ICS). Virtual and physical simulation has been used in medical fields, mathematics, architecture, aeronautics, space, and many more. Virtualization & Simulation in a lab environment is ideal because there is a need for the ability to test theories and designs is a safe and cost-effective way without risking equipment damage or, more importantly, human life. Furthermore, OT and ICS are some of the most difficult systems to use for research and development. They are either committed to operations or widely expensive to set up in a life-like environment. Virtualization and simulation will allow these otherwise accessible systems to be a test bed for the training, development, and research of SRNL customers or engineers and scientists at SRNL. This will allow the testbed to fit into a small form factor and interact with a simulator with minimum hardware components for easy transports and replication effort within the environment.

42 ENGINEERING↗

Real-World Cyber Security Demonstration for Networked Electric Drives

In this article, we present the design and implementation of a cyber-physical security testbed for networked electric drive systems, aimed at conducting real-world security demonstrations. To our knowledge, this is one of the first security testbeds for networked electric drives, seamlessly integrating the domains of power electronics and computer science, and cybersecurity. By doing so, the testbed offers a comprehensive platform to explore and understand the intricate and often complex interactions between cyber and physical systems. The core of our testbed consists of four electric machine drives, meticulously configured to emulate small-scale but realistic information technology (IT) and operational technology (OT) networks. This setup both provides a controlled environment for simulating a wide array of cyber-attacks, and mirrors potential real-world attack scenarios with a high degree of fidelity. The testbed serves as an invaluable resource for the study of cyber-physical security, offering a practical and dynamic platform for testing and validating cybersecurity measures in the context of networked electric drive systems. As a concrete example of the testbed's capabilities, we have developed and implemented a Python-based script designed to execute step-stone attacks over a wireless local area network (WLAN). This script leverages a sequence of target IP addresses, simulating a real-world attack vector that could be exploited by adversaries. To counteract such threats, we demonstrate the efficacy of our developed cyber-attack detection algorithms, which are integral to our testbed's security framework. Furthermore, the testbed incorporates a real-time visualization system using InfluxDB and Grafana, providing a dynamic and interactive representation of networked electric drives and their associated security monitoring mechanisms. This visualization component not only enhances the testbed's usability but also offers insightful, real-time data for researchers and practitioners, thereby facilitating a deeper understanding of cyber-physical security dynamics in networked electric drive systems.

24 POWER TRANSMISSION AND DISTRIBUTION↗

Traffic Shaping to Traffic Engineering in Time-Sensitive OT Network

Modern industrial automation systems increasingly depend on network infrastructures for time-critical communication, driving the need for solutions that guarantee timely and reliable data delivery. IEEE 802.1 Time-Sensitive Networking (TSN) holds significant promise for converging Information Technology (IT) and Operational Technology (OT) networks, enabling interoperability and supporting the coexistence of mixed-critical traffic crucial for Industry 4.0 and IIoT. To achieve deterministic communication, TSN employs various traffic shapers such as the Time-Aware Shaper (TAS), Asynchronous Traffic Shaper (ATS), and Credit-Based Shaper (CBS). However, the effective deployment of TSN in industrial automation faces several challenges. These include the non-trivial mapping of diverse industrial traffic types to specific shapers, the complexity of optimizing shaper configurations. We present a model for effective traffic engineering within TSN enabled OT Network. Our experiments also demonstrate how shaping of certain traffic types get affected in absence of precise time synchronization and propose possible solutions based on experiment results. Based on our experimental results we provide recommendations on how traffic type assignments should be done and which traffic shaping mechanisms should be used for a particular traffic type.

Sarker, Taposh Kumer [University of Texas at El Pa↗

Bayesian Attack Model (BAM) User Story

This document presents a user story for the Bayesian Attack Model (BAM) tool designed to aggregate and analyze cyber-attack observables for operational technology (OT) systems. BAM aims to empower cybersecurity analysts by providing a streamlined interface for collecting observable data from various sources, enabling real-time analysis of potential adversary activity. By enhancing the response capabilities of security teams, BAM facilitates risk-informed decision-making and improves organizational security posture. This user story outlines the key functionalities, user interactions, and requirements necessary to successfully integrate BAM with other security information and event management (SIEM) technology and cybersecurity operations centers (CSOCs).

97 MATHEMATICS AND COMPUTING↗

User Guide to the Facility Cybersecurity Capability Maturity Model (F-C2M2) Assessment

The Facility Cybersecurity Capability Maturity Model (F-C2M2) assessment was designed to help facilities address their unique cybersecurity challenges. Building upon the foundational principles of the U.S. Department of Energy (DOE) Cybersecurity Capability Maturity Model (C2M2), the F-C2M2 was explicitly tailored for federal facilities to help evaluate, benchmark, and enhance the cybersecurity capabilities of both their information technology (IT) and operational technology (OT) environments. This user guide was developed to facilitate a thorough understanding of the tool. Whether users are familiar with the original C2M2 or are new to the maturity model concept, this guide was designed to offer clarity, direction, and support.

97 MATHEMATICS AND COMPUTING↗

Land-Based Wind Reference Architecture

This report describes a summary and the final deliverables for the Wind Reference Architecture project funded by the Department of Energy's (DOE) Wind Energy Technology Office (WETO). The project objective was to further refine the reference architecture of the existing wind power plant reference architecture developed by Idaho National Laboratory (INL) and Sandia National Laboratories (SNL) by expanding the wind turbine generator (WTG) into a separate individual wind turbine reference architecture. Additional details regarding the wind turbine system and how it integrates with a wind power plant were researched and reflected in the reference architecture. This addition is important because it allows researchers to understand the components and devices in a wind turbine, how they function and how a wind turbine integrates into a wind power plant to be able to perform cybersecurity evaluations on the system. The communication and control systems were the focus while developing this reference architecture to understand the cybersecurity posture of a wind turbine and power plant. The information technology (IT) and operational technology (OT) systems perspective are integral in helping improve the cybersecurity posture by creating a starting point to study how wind energy can be safely designed and deployed in our power grid from an integrated systems standpoint. A holistic wind power plant and turbine reference architecture and simulation was developed and made open-sourced for further research efforts.

17 WIND ENERGY↗

Developing space occupancy - Perspectives on NASA future space programme planning

NASA planning aspects of potential future manned space flight missions are examined and the necessity of long-range planning is pointed out. A listing of desirable future activities is considered, taking into account the permanent occupancy of near-earth orbit space, the permanent occupancy of earth-moon space, the full self-sufficiency of man in geolunar space, and the permanent occupancy of heliocentric space. The technological requirements for the considered activities are discussed, giving attention to transportation, habitation, engineering technology, life sciences, operations technology, and advanced management concepts. A description of future program phasing and advanced studies requirements is also given.

Von Puttkamer, J.↗

Simulation and Analysis of Technology and Operational Procedures to Reduce the Combined Effects of Emissions and Contrails

The development and evaluation of concepts and technology to support future air traffic management systems require a hierarchy of models ranging from real-time simulations to extensive field evaluations. Air traffic simulation models such as Airspace Concept Evaluation System, Center Tracon Automation System, Future Air traffic management Concept Evaluation Tool and others are used to design air traffic systems balancing the conflicting objectives of maximizing safety, meeting future demands for airports and airspace and increase efficiency of traffic flows in the presence of uncertain weather. The impact of aviation emissions and contrails on climate imposes another constraint on the design of aircraft and aviation operations. The understanding of the complex interaction between physical climate system, the carbon and other greenhouse gas emissions and aviation activity can be improved by the development of integrated assessment models that include emission and climate models together with air traffic simulations. The modeling of aircraft emissions and their interaction with each other to change the concentration levels of different gasses in the atmosphere and the resulting impact of the radiative forcing on the equilibrium of the Earth's atmosphere is complex and requires the use of coupled atmosphere-ocean general circulation models together with three-dimensional models of carbon cycle and chemistry of other non-CO2 greenhouse gases. These models are computationally intensive and unsuitable for studies involving the generation of multiple scenarios. Simple emission and climate models, based on the input-output relations of linear systems, capture the fundamental emission to climate impact behavior by careful selection of key variables and their dynamics. The impact of various greenhouse gases depends on the total concentration, effect per unit change in atmospheric concentration and the spatial distribution of the gas. All these quantities are influenced by the lifetime of the gas. The impact of a greenhouse gas depends on the interval of assessment, which may vary from a few decades to a few centuries. Climate metrics are aimed at providing a common scale to compare different greenhouse gases. If the metrics are to be used as a tool in developing and evaluating aviation operations, they should be transparent and easy to apply. Global Warming Potential and Aggregate Global Temperature Potential are some of the commonly used metrics. This paper integrates a national-level air traffic simulation and optimization capability with simple climate models and carbon cycle models, and climate metrics to assess the impact of aviation on climate. The capability brings together metrics, which are useful in aviation operations together with metrics used in climate studies. The capability can be used to make trade-offs between extra fuel cost and reduction in climate impact. There is considerable uncertainty in our understanding of the radiative forcing associated with emissions and contrails. The parameters in the simulation can be used to evaluate the effect of various uncertainties in emission models and contrails. It can also be used to evaluate the impact of different decision horizons. Alternatively, the optimization results from the simulation can be used as inputs to other tools that monetize global climate impacts like the FAA's Aviation Environmental Portfolio Management Tool for Impacts.

impact of aviation on the environment↗

Precursor Analysis Report: Doppelpaymer Ransomware Attack on Petroleos Mexicanos (PEMEX) 2019

The DoppelPaymer Ransomware Attack on Petroleos Mexicanos (PEMEX) 2019 Precursor Analysis Report leverages publicly available information about the PEMEX cyber attack and catalogs anomalous observables for each technique employed in the attack. This analysis is based upon the methodology of the Cybersecurity for the Operational Technology Environment (CyOTE) program. The 2019 DoppelPaymer ransomware attack on PEMEX, Mexico’s nationalized petroleum corporation, highlights a unique threat that ransomware and cybercriminal extortion poses to Operational Technology (OT) environments in critical infrastructure. The incident began with an employee downloading commodity malware that allowed adversaries to gain initial access to PEMEX’s enterprise environment. After conducting privilege escalation, tool ingress, and data exfiltration, the adversaries deployed DoppelPaymer ransomware throughout the PEMEX enterprise environment, resulting in the company having to take dozens of systems offline for at least several days. Although PEMEX stated that their operations were not affected, the data exfiltrated from PEMEX was made available for download on DoppelPaymer’s leak site, as well as on other illicit criminal forums. This stolen data included not only company information, but also sensitive OT-specific configuration data. This incident showcases how cybercriminal exfiltration and posting of sensitive OT architecture documentation can pose security concerns for the targeted organization for years due to the long lifespan of OT assets and architectures. Researchers and analysts identified 18 unique techniques utilized during the attack with a total of 190 observables using MITRE ATT&CK® for Industrial Control Systems. The CyOTE program assesses observables accompanying techniques used prior to the triggering event to identify opportunities to detect malicious activity. If observables accompanying the attack techniques are perceived and investigated prior to the triggering event, earlier comprehension of malicious activity can take place. Fifteen of the identified techniques used during the DoppelPaymer ransomware attack were precursors to the triggering event. Analysis identified 163 observables associated with these precursor techniques, 34 of which were assessed to have an increased likelihood of being perceived in the 60 days preceding the triggering event. The response and comprehension time could have been reduced if the observables had been identified earlier. The information gathered in this report contributes to a library of observables tied to a repository of artifacts, data sources, and technique detection references for practitioners and developers to support the comprehension of indicators of attack. Asset owners and operators can use these products if they experience similar observables or to prepare for comparable scenarios.

45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗

Technical Requirements for Application of Operator Support Technology across Multiple Plant Systems

Argonne National Laboratory (ANL) and Idaho National Laboratory (INL) are jointly developing and evaluating operator aids to: (i) facilitate more timely response to plant faults and grid disturbances; (ii) achieve better management of plant upsets and improved operator performance; and (iii) ultimately improve nuclear plant safety, production, and cost management. The overall objective of the collaborative effort in this third and final year of the project was to conduct human performance tests using nuclear plant operators in the Human Systems Simulation Laboratory (HSSL) control room at INL to assess the value of a computerized operator support system (COSS) as an aid to the operator. This report describes the work performed by ANL. A companion report describes the work performed by INL and the results of the human performance tests.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

Concepts, technology, and operations for a quick response, highly maneuverable launch vehicle

Preliminary results from the NASA orbit-on-demand study are used to identify major technology issues for development of a quick response vehicle. Reasonable vehicles are found to require significant advances in propulsion, structures, materials, and flight mechanics technology. Vehicle concepts using normal growth technology predicted for the 1990s are compromised by expendable hardware or by unmanageable size and complexity. Operational analyses of the vertical-launch and horizontal-launch takeoff vehicles show that the latter have more inherent operational utility. The supply of liquid hydrogen propellant at alternate sites is a major issue; however, propane may be a viable option for at least one concept. Propellant for orbital maneuvering significantly increases gross weight for many of the concepts. This increase is greater for horizontal-takeoff systems becasue of their larger orbiters.

Gabris, E. A.↗

User-Focused Tools to Enhance IT/OT Cyber Resilience within the Power Grid

The power grid is undergoing several changes that are increasing its complexity as nexuses between electric-gas, transmission-distribution, and energy-communications continue to become increasingly critical. This system is heavily dependent on communication infrastructure and controls, and it relies on humans in operational technology (OT) and information technology (IT) roles to manage the increasing breadth, depth, and speed of data. Many technical challenges have presented themselves and will need to be addressed to provide reliable grid operations. With increased reliance on distributed controls and communication infrastructure, cybersecurity becomes an inherent requirement. When considering current cyber-physical security solutions for the power grid, one can notice a clear divide between information technology and operation technology networks. However, in real-life applications, these networks are interdependent. This work presents results of interviews with key utility cybersecurity personnel, analyzes the results, and makes recommendations towards solution of existing technical and operational challenges realized. Existing workflows are presented, wireframe interviews are discussed, and tool requirements are described. The existence of easy-to-implement solutions, based on existing energy management systems, highlight the potential for real-life applications.

cybersecurity, resilience, user-centered design, p↗

Requirements and applications of marine geodesy and satellite technology to operations in the oceans

Marine geodesy is concerned with the determination of marine geographic positions, geodetic controls, and the geoid. The activities of marine geodesy are related to the utilization of satellite technology, electronic distance measurement, geodetic astronomy, gravimetric geodesy, and the potentially usable very long baseline interferometry. Assessments are made of the different accuracy and/or precision requirements involved in the various approaches. It is shown that marine geodesy is highly relevant to man's various practical and scientific operations at sea, including those on the continental shelves.

Mourad, A. G.↗

Testing the Efficacy of Synthetic Vision during Non-Normal Operations as an Enabling Technology for Equivalent Visual Operations

Synthetic Vision (SV) may serve as a revolutionary crew/vehicle interface enabling technology to meet the challenges of the Next Generation Air Transportation System Equivalent Visual Operations (EVO) concept that is, the ability to achieve or even improve on the safety of Visual Flight Rules (VFR) operations, maintain the operational tempos of VFR, and potentially retain VFR procedures independent of actual weather and visibility conditions. One significant challenge lies in the definition of required equipage on the aircraft and on the airport to enable the EVO concept objective. An experiment was conducted to evaluate the effects of the presence or absence of SV, the location (head-up or head-down) of this information during an instrument approach, and the type of airport lighting information on landing minima. Another key element of the testing entailed investigating the pilot s awareness and reaction to non-normal events (i.e., failure conditions) that were unexpectedly introduced into the experiment. These non-normals are critical determinants in the underlying safety of all-weather operations. This paper presents the experimental results specific to pilot response to non-normal events using head-up and head-down synthetic vision displays.

Kramer, Lynda J.↗

Evolution and Trends of Industrial Control System Cyber Incidents since 2017

The industrial control systems (ICSs) that manage our critical infrastructure are increasingly converging with corporate networks and the Internet as technology and businesses prioritize digital connectivity. These connections make them more vulnerable and available to malicious cyber actors who traditionally targeted the companies’ more public-facing information technology (IT) networks. This paper will review select publicly reported cyber incidents to highlight the continued and growing threat to ICS devices and operational technology (OT) environments. It will summarize the incident and when available, will provide information on the cyber actors, the vulnerabilities they exploited, and any publications the U.S. Government (USG) provided in response. Data belonging to the Department of Homeland Security (DHS) will be used to highlight quantitative trends concerning ICS incidents. This paper builds on “History of Industrial Control System Cyber Incidents” (Hemsley & Fisher 2018), a paper that highlighted select noteworthy threats and incidents to ICS systems up to 2017. This paper will similarly review select incidents occurring after the last previously reviewed incident, Triton/HatMan, December 2017, and will note ICS incident trends including IT/OT convergence and advances in cyber-threat actors’ capabilities in observed in the examined incidents.

99 GENERAL AND MISCELLANEOUS↗

Space Transportation System Technology Symposium: Operations, Maintenance, and Safety (Including Cryogenic Systems) - Volume 5

The prospect of undertaking a reusable launch vehicle development led the NASA Office of Manned Space Flight (OMSF) to request the Office of Advanced Research and Technology (OART) to organize and direct a program to develop the technology that would aid in selecting the best system alternatives and that would support the ultimate development of an earth-to-orbit shuttle. Such a Space Transportation System Technology Program has been initiated. OART, OMSF, and NASA Flight and Research Centers with the considerable inputs of Department of Defense personnel have generated the program through the efforts of several Technology Working Groups and a Technology Steering Group. Funding and management of the recommended efforts is being accomplished through the normal OART and OMSF line management channels. The work is being done in government laboratories and under contract with industry and universities. Foreign nations have been invited to participate in this work as well. Substantial funding, from both OART and OMSF, was applied during the second half of fiscal year 1970. The Space Transportation System Technology Symposium held at the NASA Lewis Research Center, Cleveland, Ohio, July 15-17, 1970, was the first public report on that program. The Symposium goals were to consider the technology problems, their status, and the prospective program outlook for the benefit of the industry, government, university, and foreign participants considered to be contributors to the program. In addition, it offered an opportunity to identify the responsible individuals already engaged in the program. The Symposium sessions were intended to confront each presenter with his technical peers as listeners, and this, I believe, was substantially accomplished. Because of the high interest in the material presented, and also because the people who could edit the output are already deeply involved in other important tasks, we have elected to publish the material essentially as it was presented, utilizing mainly the illustrations used by the presenters along with brief words of explanation. Those who heard the presentations, and those who are technically astute in specialty areas, can probably put this story together again. We hope that more will be gained by compiling the information in this form now than by spending the time and effort to publish a more finished compendium later.

Source record↗

Concept of Operations: National Technology Test Bed Network for Water Resource Recovery

There is an urgency to advancing wastewater technologies due to aging water infrastructure and emerging regulations. A crosscutting working group proposes a conceptual design for a test bed network to understand and evaluate wastewater technologies to drive acceptance and deployment of new technologies to enhance performance. The working group includes contributors from the U.S. Department of Energy, the U.S. Environmental Protection Agency, the U.S. National Science Foundation, and the Water Research Foundation (formerly known as the Water Environment & Reuse Foundation). Upgrading today's aging wastewater treatment infrastructure to a new generation of water resource recovery facilities (WRRFs) requires the development and deployment of innovative technologies. The path to technology adoption depends on expensive, time consuming, and often repetitive cycles of testing and validation. Existing water resource recovery technology testing facilities (e.g., test beds) are underutilized and cannot, by themselves, broaden technology uptake. It has been proposed that technology adoption could be accelerated by a network linking these test facilities with innovators, manufacturers, utilities, regulators, policymakers, and educators. This document proposes a structure for a National Test bed Network (TBN) for water resource recovery. The concepts for its operation are explored herein. This document identifies drivers to launch a TBN and critical needs for successful implementation of the network. An important driver to technology implementation at WRRFs is the relationship between local utilities and state regulators. The TBN could provide access to validated performance data and facilitate deployment. To link the stakeholders and accelerate deployment, the TBN will require standards for methods, data quality, data management, and data security. These standards will enable validation of performance and will expand the “toolbox” that utilities and regulators could consider. Design, set up, and launch of this toolbox is beyond the scope of operations of utilities and regulators and will likely require external support to achieve full operation. Herein, a pathway is proposed to achieve this full operation. This document defines the function of a WRRF TBN. It also proposes a structure for the TBN to achieve its stated goals and mission. Finally, this document summarizes findings from several sources, including a series of workshops about the TBN concept, operators of test beds in ancillary industries, and discussions with regulators and permitting agencies. A description of this work was published in the peer-reviewed literature (Mihelcic 2017).

29 ENERGY PLANNING, POLICY, AND ECONOMY↗