Search NASA⌕ Search

SEARCH · Search NASA

Results for “current attack”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 145 records · Page 8

Achieving Cyber-Resilience for Power Systems using a Learning, Model-Assisted Blockchain Framework

The secure integration and management of distributed energy resources (DER) and power aggregators in the electric grid requires secure communications and a physics-aware Command and Control (C2) strategy. A Blockchain (BC)-based overlay network was developed to provide a security layer for the existing power grid network that mitigates risks in current and legacy network and C2 protocols. By integrating a Model-Assisted Machine Learning (MAML) framework with a Secure Blockchain Overlay Network (SBON) a defense-in-depth strategy was achieved. In our approach, the MAML framework leveraged a smart contract framework to gather network data and learn the dynamics of DER to develop detection strategies for attacks targeting sensors and actuators used by DER. The MAML framework learned dynamical systems models for individual DERs to detect sensor attacks. For DER we utilized a Digital Twin (DT) to accelerate the learning process for a model resistant to stealthy attacks. The project created DT for PV inverters and BESS. The DTs were coupled with a model-assisted, data-driven learning of DER behavior. Specifically, we evaluated architectures for model-based learning with model-free fine-tuning. Additionally, differential privacy techniques were used to obfuscate data, while still allowing the computation of attack detection results based on obfuscated data. The SBON developed leverages a private permissioned blockchain network orchestrated with the Hyperledger Fabric framework. To connect the cyber world, which orchestrates the blockchain fabric, and the physical world where the power network resides, we developed a system implementation to enable the secure interaction of the physical world and the abstracted blockchain.

97 MATHEMATICS AND COMPUTING↗

Counter Unmanned Aircraft System (CUAS) Implementation Storyline

This report is an FY21 Deliverable for NA-21.1, International Nuclear Security, WBS 21.1.1.1.4 Counter Unmanned Aircraft Systems (CUAS), under C.1.4, Develop Suite of Engagement Materials and Tools for Country/Regional Teams. The responsibility for protecting nuclear assets is an immense challenge for governments. Policy changes based on geopolitics, instability of government regimes, and technological advances that facilitate theft of nuclear material all contribute to the enduring task of staying current with these and other threats. One of the recent threats to come along is the use of drones or Unmanned Aircraft Systems (UAS) to circumvent traditional Physical Security Systems. There are significant resources invested on physical protection systems for securing nuclear assets, but many of these systems can now be bypassed by simply flying over these measures intended to guard against ground attacks. In recent years the threat increased to hostile groups to attack or surveil due to advances and availability of UAS platforms. It is now more urgent to implement systems and procedures to counter the UAS threat. The United States (U.S.) federal government granted authority to the Department of Energy (DOE) to implement a Counter UAS to protect nuclear assets. This document provides a very practical and transparent view of the trials, tribulations and challenges we encountered while implementing the first Counter-Unmanned Aircraft System (CUAS) Program in the DOE at Los Alamos National Laboratory (LANL).

98 NUCLEAR DISARMAMENT, SAFEGUARDS, AND PHYSICAL P↗

SEDONA: SpEctroscopic Detection of Nerve Agents

Los Alamos National Laboratory developed the only portable screener to accurately detect the chemical nerve agents, providing results in seconds. Current airport detection system cannot scan for the threat of organophosphorus nerve agents and insecticides. Small quantities of these toxic chemicals can very quickly cause widespread exposure and severe symptoms. SEDONA screens through an unopened bottle using the principles of nuclear magnetic resonance spectroscopy. The system could be deployed and operated with minimal training. SEDONA dramatically reduces the likelihood of a successful nerve agent attack at airports, government buildings, embassies, sporting events, concerts, and political rallies.

47 OTHER INSTRUMENTATION↗

Refinement of Salt Dissolution Inhibitor Requirements (Final Report)

At Savannah River Site (SRS), High-Level Waste is stored in below-grade carbon steel tanks. This waste in part consists of sludge, salt cake, and/or supernate. Preparation of this waste for future processing involves dissolution of the salt cake layer. The salt dissolution process can create conditions that leave the carbon steel tanks susceptible to localized corrosion. The salt to be dissolved contains high concentrations of nitrate, that once released, create an environment that may be conducive to pitting corrosion and/or stress corrosion cracking (SCC) of carbon steel. The salt dissolution process also liberates interstitial liquid trapped between the salt crystals. This liquid is initially high in nitrite and hydroxide concentration. High pH and greater ratios of nitrite to nitrate act as inhibitors to minimize corrosion of carbon steel in high nitrate environments. However, as dissolution proceeds, the concentration of nitrate will increase, while the hydroxide and nitrite concentration of the interstitial liquid will deplete and become insufficient to prevent the onset of corrosion attack. Tank blending and addition of inhibitors are used to ensure adequate concentrations of hydroxide and nitrite. However, this is not desirable during salt dissolution as it can reduce process efficiency and increase the amount of waste that needs processing. It has been proposed that these corrosion control limits be revisited to evaluate the corrosion susceptibility of carbon steel in environments that more closely resemble current operating conditions at SRS. An experimental matrix was designed to evaluate the use of the pitting factor for supernate chemistries characteristic to SRS, particularly during the salt dissolution process. Two electrochemical methods were identified to determine the susceptibility of A537 and A285 low-carbon steels to pitting corrosion with this chemistry envelope at temperatures up to 75 °C. The predominant electrochemical test method was Cyclic Potentiodynamic Polarization (CPP) studies. Through CPP, the pitting factor was used, based on Hanford Site corrosion studies, to accurately identify pitting susceptibility within the compositional range studied with some conservatism. Additionally, sulfate was determined to have no statistically significant influence, at concentrations up to 0.6 M, on pitting behavior in more concentrated solutions where other aggressive species govern pitting susceptibility. Where CPP was inconclusive, Modified ASTM G192 was successfully used to evaluate pitting susceptibility conditions and allowed for a pass/fail result to be determined. In all cases, the pitting factor was determined to be applicable to the simulants tested, with this metric accurately predicting incidences in which pitting occurred. Based upon the findings in this work, a pitting factor of 1.2 is being proposed to build in a safety factor and remain consistent with the Hanford Site approach. Additionally, a minimum pH limit of 12 is proposed to ensure carbon steel passivity and localized corrosion the primary degradation mechanism. Susceptibility to SCC was evaluated using a reduced matrix of tests at 75 °C. No failures due SCC were observed at open circuit. In addition, tests polarized anodically by 200 mV only resulted in failures for trials with pitting factors less than 0.86. However, a test with a passing condition based upon the pitting factor metric (pitting factor = 1.40) did exhibit a failure with an applied potential of +300 mV vs. OCP. This result is contrary to the prediction based upon the pitting factor, however, a polarization of 300 mV, or even 200 mV, from open circuit is substantial. The relationship between these testing parameters and service environment/conditions and the desired level of conservatism in the metric should be further evaluated in the determination of the significance of this result. While the pitting factor accurately predicted susceptibility to SCC at temperatures up to 75 °C and with positive overpotentials up to 200 mV, the relatively small sample matrix and failure of a passing pitting factor with a 300 mV polarization resulted in an inconclusive determination of whether the pitting factor may be used for predicting susceptibility to SCC at temperatures between 50 °C and 75 °C. As such, additional testing is recommended to evaluate the validity of the pitting factor for SCC susceptibility prediction at temperatures between 50 °C and 75 °C.

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗

Defensive Cybersecurity Architecture Design Using Force-on-Force Cyber-Physical Modeling

Currently, nuclear power plant physical security systems are highly dependent on air-gaps as a protective measure against cyber-threats. Cyber-physical threats become more likely as advanced cyber-threat capabilities to jump air-gaps transition into common use. Defending against the emerging threat of cyber-enabled physical intrusions is poorly understood. The consequence of these cyber-physical attacks has no quantitative analysis method to inform risk-informed, performance-based cybersecurity approaches. By modifying the physical security simulation tool Dante, cyber-physical threat consequence was able to be analyzed on a notional facility. The results of this analysis are used to design a Defensive Cybersecurity Architecture (DCSA) for the physical security system to produce example resilience measures for this notional facility. A DCSA defines security levels to provide a graded approach for defending plant functions, and security zones for trusted communication between systems. This approach can be applied to real world systems to produce physical protection systems and response measures that are resilient to cyber-physical threats.

45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗

Blockchain Smart Contracts for Transactive Energy Systems

This report demonstrates the impact of blockchain technology underlying a transactive energy system and articulates details and principle components of each of five stages in a transactive energy system. This report depicts the engineering requirements of a sample market system, blockchain features, and the relationship between those requirements and features (Section 2.2). Clear value propositions of blockchain features for transactive energy systems are: identity management, security of data, resiliency, decentralization and smart contract trustworthiness, performance, integrity in a trustless environment and access control. Due to the immutability afforded by blockchain architecture, increased data fidelity could potentially help detect targeted cyber-attacks and increase resiliency of grid integration. A distributed system can be more fault tolerant and enable transactive energy by supporting machine-to-machine transactions that can be integrated directly into complex grid operations without the need of trust in a third party. Energy auctions, and potentially registration processes, can be carried out according to transparent rules implemented as smart contracts (Section 4.0). In this current experiment, we ran a use-case/table-top exercise that imitated a real-time 5-min double auction market. The objective of this demonstration is to investigate the applicability of blockchain with transactive energy systems (Section 3.0).

24 POWER TRANSMISSION AND DISTRIBUTION↗

Novel Foaming Solutions for High Level Waste (HLW) Processing - 20195

Foaming occurs during treatment of high level waste (HLW) at Savannah River Site's Defense Waste Processing Facility (DWPF) in the Chemical Process Cell (CPC) due to high gas generation from process steam and chemical offgas products [1]. The presence of amphiphilic particles in the waste slurry stabilizes the foam [2], [3]. Efficient processing of HLW requires foam control, as foam-overs lead to lower productivity and potential radioactive contamination of condensate streams. DWPF currently employs Siovation Antifoam 747, a surfactant produced by Momentive Performance Materials, as an antifoaming agent during waste treatment. Despite its ability to control foam generation, processing issues have arisen from its use [4]. During DWPF chemical processing, a chemical antifoam agent must be effective at temperatures up to 103 deg. C between pH 3-13. Antifoam 747 is effective at pH 7 but degrades as pH deviates [5]. Antifoam 747 is 90% by weight Momentive{sup TM} L77 and 10% by weight Momentive{sup TM} Y-17580. These ingredients are trisiloxane products, which are especially vulnerable to attack in acidic and caustic environments. Since Antifoam 747 readily degrades, periodic addition is required. Several processing concerns related to Antifoam 747 have affected DWPF operation. Its overuse warranted concern of potential flammable melter offgas under upset conditions due to the generation of carbon dioxide and hydrogen. As a result, a Potential Inadequacy in the Safety Analysis (PISA) was declared [6]. Antifoam contribution has been included in the melter offgas flammability strategy and the quantity of antifoam is monitored to ensure limits are not exceeded. Testing at Savannah River National Laboratory (SRNL) determined that propanal, tri-methylsilanol, and hexamethyldisiloxane are generated as Antifoam 747 degrades, leading to a second PISA [7]. The formation of these byproducts poses additional flammability risks. Furthermore, the methyl and ethyl groups of these compounds may be responsible for the formation of the methyl and ethyl mercury discovered in DWPF [8], [9]. The formation of organomercury has specifically been called out by DOE as a need for increased research. The effectiveness of non-chemical methods for foam control and the efficiency of alternative antifoam agents were evaluated as part of an effort to improve HLW treatment operations at DWPF and to reduce, or eliminate, the flammability hazards associated with Antifoam 747 currently in use. Foaming of high-level waste (HLW) slurries is an issue at the Defense Waste Processing Facility (DWPF) Chemical Process Cell (CPC) which is currently mitigated with a chemical antifoam agent. The effectiveness of non-chemical methods for foam control and the efficiency of alternative antifoams were examined to improve HLW treatment at DWPF and to eliminate the flammability hazards associated with Siovation Antifoam 747 currently in use. Non-chemical foam control methods were deemed unviable for chemical processing at DWPF, as the spray/mist technique requires too much water and space limitations make installation and implementation of headspace agitators unfeasible. The use of ultrasonic energy thickened and further stabilized the foam. Two suitable alternative defoaming agents, Momentive{sup TM} Y- 17112 and Evonik Surfynol{sup R} MD-20, were identified. Both defoamers control foam over a pH range of 4- 13 at boiling, with no flammable degradation products, and only minimal quantities (100-200 mg/kg) are required under glycolic acid conditions. In order to validate the effectiveness of these defoaming agents, SRNL recommends irradiation testing and laboratory scale SRAT/SME experiments with actual radioactive waste. (authors)

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗

Prospective Application, Mechanism, and Deficiency of Lithium Bis(oxalate)Borate as the Electrolyte Additive for Lithium-Batteries

Lithium bis(oxalate)borate (LiBOB) is one of the most common film-forming electrolyte additives used in lithium ion batteries (LIBs), since it can form a dense boron-containing polymer as a solid electrolyte interlayer (or cathode electrolyte interlayer) in order to isolate the electrode material from the electrolyte and prevent side reactions. LiBOB can serve as HF scavenger to maintain the structural integrity of electrodes via avoiding the transition metal dissolution caused by HF attack. Additionally, LiBOB also can react with LiPF 6 to generate lithium difluoro (oxalate)borate (LiDFOB) that can be further used as a clean-up agent for reactive oxygen radicals. This article lists the application of LiBOB in high capacity and high voltage cathode materials, and also reviews the working mechanisms of LiBOB used in these materials to improve the performance of LIBs. Finally, it presents the current shortcomings of LiBOB and strategies to overcome these. This article is expected to provide useful insights for employing LiBOB as a feasible method of dealing with the difficulty of running high capacity LIBs stably under high voltage.

25 ENERGY STORAGE↗

Stress Birth and Death: Disruptive Computational Mechanics and Novel Diagnostics for Fluid-to-Solid Transitions

Many materials of interest to Sandia transition from fluid to solid or have regions of both phases coexisting simultaneously. Currently there are, unfortunately, no material models that can accurately predict this material response. This is relevant to applications that "birth stress" related to geoscience, nuclear safety, manufacturing, energy production and bioscience. Accurately capturing solidification and residual stress enables fully predictive simulations of the evolving front shape or final product. Accurately resolving flow of proppants or blood could reduce environmental impact or lead to better treatments for heart attacks, thrombosis, or aneurism. We will address a science question in this proposal: When does residual stress develop during the critical transition from liquid to solid and how does it affect material deformation? Our hypothesis is that these early phases of stress development are critical to predictive simulation of material performance, net shape, and aging. In this project, we use advanced constitutive models with yield stress to represent both fluid and solid behavior simultaneously. The report provides an abbreviated description of the results from our LDRD "Stress Birth and Death: Disruptive Computational Mechanics and Novel Diagnostics for Fluid-to-Solid Transitions," since we have written four papers that document the work in detail and which we reference. We give highlights of the work and describe the gravitationally driven flow visualization experiment on a model yield stress fluid, Carbopol, at various concentrations and flow rates. We were able to collapse the data on a single master curve by showing it was self-similar. We also describe the Carbopol rheology and the constitutive equations of interest including the Bingham-Carreau-Yasuda model, the Saramito model, and the HB-Saramito model including parameter estimation for the shear and oscillatory rheology. We present several computational models including the 3D moving mesh simulations of both the Saramito models and Bingham-Carreau-Yasuda (BCY) model. We also show results from the BCY model using a 3D level set method and two different ways of handling reduced order Hele-Shaw modeling for generalized Newtonian fluids. We present some first ever two-dimensional results for the modified Jeffries Kamani-Donley-Rogers constitutive equation developed during this project. We include some recent results with a successful Saramito-level set coupling that allows us to tackle problems with complex geometries like mold filling in a thin gap with an obstacle, without the need for remeshing or remapping. We report on some experiments for curing systems where fluorescent particles are used to track material flow. These experiments were carried out in an oven on Sylgard 184 as a model polymerizing system. We conclude the report with a summary of accomplishments and some thoughts on follow-on work.

36 MATERIALS SCIENCE↗

A Survey of Intrusion Detection Systems Leveraging Host Data

This survey focuses on intrusion detection systems (IDS) that leverage host-based data sources for detecting attacks on enterprise network. The host-based IDS (HIDS) literature is organized by the input data source, presenting targeted sub-surveys of HIDS research leveraging system logs, audit data, Windows Registry, file systems, and program analysis. While system calls are generally included in audit data, several publicly available system call datasets have spawned a flurry of IDS research on this topic, which merits a separate section. To accommodate current researchers, a section giving descriptions of publicly available datasets is included, outlining their characteristics and shortcomings when used for IDS evaluation. Related surveys are organized and described. All sections are accompanied by tables concisely organizing the literature and datasets discussed. Finally, challenges, trends, and broader observations are throughout the survey and in the conclusion along with future directions of IDS research. Overall, this survey was designed to allow easy access to the diverse types of data available on a host for sensing intrusion, the progressions of research using each, and the accessible datasets for prototyping in the area.

97 MATHEMATICS AND COMPUTING↗

Autonomous System Subversion Tactics: Prototypes and Recommended Countermeasures

One of the fielding requirements for Advanced and Small Modular Reactors (AR/SMR) is the ability to support remote and autonomous operations. Autonomous Control Systems (ACS) are found on platforms such as Autonomous Space Vehicles, Cruise Missiles, and advanced driver-assistance systems. Each of these ACS implementations depends upon a set of decision support subsystems responsible for supporting Autonomous Mission Managers (names vary based upon field and author preferences). These Autonomous Mission Managers receive inputs from system sensors (e.g., LIDAR collection from an automobile travelling down a street; transients from a nuclear reactor), and perform a set of classifications (e.g., Red Traffic Light; Small Pedestrian at 10m; Load Rejection; Single Coolant Pump Trip), and then use these classifications in combination with recommendation algorithms to achieve platform goals (e.g., Stop the Vehicle at the Traffic Light, Avoid the Small Pedestrian; Trip the Reactor to prevent a Safety Event). The design, implementation, and fielding of an ACS capability will alter the cyber-attack surface such that existing risk management plans will need to be updated to include how to protect and defend against data-science and decision-support-system attack classes. These attack classes would include protection of the design and training environments where algorithm selection and testing and training data would be obvious attack vectors. These attack classes would also require an informed set of detection and response procedures to identify anomalous behaviors and document best practices for anomaly assessment and vulnerability mitigation and remediation. Last year we published a Cyber Threat Assessment Methodology for Autonomous and Remote Operations for AR/SMRs along with a companion publication on Cyber Attack and Defense Use Cases. The focus of the methodology was on describing and enumerating ACS processes, components, and functions such that security engineers could: evaluate subversion options against the target; identify threat actor attributes and capabilities derived from each subversion option; and identify security controls and response countermeasures. The Use Cases document offered detailed methodology examples including an assessment of a Military Base SMR, an Autonomous System Decision Loop, and implementation of AR/SMR Machine Learning algorithms. Our proposal at the end of last year was to focus on implementation of subversion prototypes related to the last Use Case area: AR/SMR Machine Learning (ML) Algorithms. We included six attack scenarios in our Use Cases paper: a Poisoning Attack against ML functions implemented using an FPGA; a Trojaning Attack against ML classifiers exploiting the excitability of Nuclear Engineers; a Backdooring Attack against ML Training environments to ensure persistence of an attack vector; a False Positive Evasion Attack against multi-factor Access Control Systems using clever inputs; an Inference Attack against ML models by an Insider with access to the Operational environment; and an Adversarial Reprogramming Attack against a Material Access Control Video Surveillance System. At the beginning of this year these six attack scenarios were provided to our research teams at Georgia Tech and Idaho State University and each team successfully implemented a subversion attack against a ML implementation to include transient misclassifications. While this is a notable outcome from this type of research, this paper offers the reader insight into not only how to structure and execute these types of attacks, but into the thought process behind how the researcher investigated the problem space, performed initial algorithm implementation, and the trial-and-error behind arriving at the successful subversion prototypes. We include in this paper a set of associated Scenarios on how these subversion prototypes could be implemented and an initial set of guidance for AR/SMR architects, Nuclear Regulators, and Cyber Defenders to implement awareness and defense capabilities into their current operational portfolios.

42 ENGINEERING↗

Technical Performance of Refractory Liners for Molten Chloride Salt Thermal Energy Storage Systems

A chloride-based molten-salt system that uses a ternary blend of MgCl2/KCl/NaCl is investigated to provide higher temperature thermal energy storage capability. Despite higher thermal stability, molten chlorides present several unique challenges, including the design of internal refractory-ceramic liners to prevent the corrosion and thermal stress of alloy tank shells. This work discusses issues and potential solutions related to containment of molten chloride salt, specifically the optimization of the refractory material at the molten salt interface (hot face). The down-selected hot face candidate limits permeation of salt through the material and forms a highly stable secondary surface phase in equilibrium with the molten salt. A mortar is created using the corrosion resistant hot face brick. Brick and mortar composite are subjected to mechanical stress/strain analysis, in order to calculate composite material properties and better inform thermomechanical models. The U.S. Department of Energy Generation 3 (DOE Gen3) program seeks to develop higher efficiency CSP plants that can provide cost-competitive, flexible power in the U.S. electric grid. The proposed Gen3 Liquid Pathway CSP plant closely resembles the configuration of current nitrate salt power towers with two-tank storage (Gen2). The differences between Gen2 and Gen3 include the types of compatible materials used in salt storage tank construction. Stainless steel loses strength at Gen3 temperatures, and although nickel superalloys would be capable of withstanding sustained high temperatures, these materials are prohibitively expensive at scale. Uninsulated tank shells also pose a significant risk as common steels are highly susceptible to chemical attack from molten chloride salt. To address these concerns, refractory-ceramic based containment materials are proposed to line the inside of the hot and cold storage tanks. In doing so, stainless or carbon steel shells may be used in construction depending on the level of insulation provided. The composition of the internal liner requires careful consideration to maximize the efficacy of multiple parameters including corrosion resistance, strength at operating temperature, durability, and cost. This is particularly true for the material at the interface with the salt, known as the "hot face", which is responsible for protecting the insulating layers between the tank shell and the hot face brick layer. The molten salt in this system is superheated over 300 °C above its freeze temperature. Therefore, unlike other industrial processes which use refractory-lined vessels, it is not expected that a freeze plane will develop in the hot face. Therefore, the hot face must be designed to withstand chemical corrosion and inhibit permeation of molten salt into the insulating layers. A down selection was performed to identify a hot face candidate best equipped to maintain thermal, mechanical, and chemical integrity when exposed to molten salt over extended periods of time. Long-duration chemical capability experiments were conducted with the down selected hot face refractory fully immersed in molten chloride salt for up to 3000 hours. The average salt penetration does not exceed 100 microns. When extrapolated to 20 and 30 years of continuous exposure, the expected salt penetration depth is approximately 2.0 mm and 2.9 mm, respectively. A magnesium-rich secondary phases develops at the salt/refractory interface. X-ray diffraction identifies the material as forsterite (Mg2SiO4), which is reported to form synthetically in molten chloride salt solutions. These results suggest the selected hot face will adequately inhibit salt permeation. While there is optimism that the hot face brick will inhibit salt permeation, mortar joints are typically the weakest point of a refractory brick liner. From a thermochemical perspective, differing thermal expansion coefficients may result in the mortar and brick to grow independent of each other, creating gaps through which molten salt can penetrate. To address this issue, NREL has developed an in-house mortar composed of the down selected hot face brick that has been shown to be compatible with the salt. Compressive stress/strain analyses have been performed on the brick/ mortar composites to generate stress/strain curves. Modulus of elasticity and Poisson's ratio of the composite may be calculated from the stress/strain curves, in order to provide more representative data to finite element mechanical models for accurate approximation of stress on the tank shell and the amount of thermal expansion expected within the tank liner.

41 EE - Solar Energy Technologies Office (EE-4S)↗

Prioritizing ICS Beachhead Systems for Cyber Vulnerability Testing

Cyber Testing for Resilient Industrial Control Systems™ (CyTRICS™) is the Department of Energy’s (DOE’s) program for cybersecurity vulnerability testing, digital subcomponent enumeration, and forensic assessment. CyTRICS leverages best-in-class test facilities and analytic capabilities at six DOE National Laboratories and strategic partnerships with key stakeholders including technology developers, manufacturers, asset owners and operators, and interagency partners. During the program’s development, CyTRICS established a unique methodology for prioritizing digital components within operational technology (OT) and industrial control systems (ICS) in the Energy Sector Industrial Base (ESIB) for cyber vulnerability testing. The CyTRICS Prioritization Process leverages multiple characteristics of systems, components, and their contextual deployment to calculate a quantification of individual digital components for CyTRICS testing. The initial version of the CyTRICS Prioritization Process was premised largely upon the impact which could result to an industrial control system if the digital component under testing was compromised, either through malicious means, faulty engineering, or other modes. The worldwide compromise of the SolarWinds Orion platform, first reported in December 2020, through malicious interference with the digital patching cycle was a watershed event in cyber supply chain security. The SolarWinds compromised demonstrated the strategic importance of certain types of ubiquitous software, and the ability to generate widespread cybersecurity effects. To address this challenge and as a part of the Department of Energy’s response to the SolarWinds compromise, DOE’s Office of Cybersecurity, Energy Security, and Emergency Response (CESER) directed the National Laboratories to evolve the CyTRICS Prioritization Process methodology to encompass additional factors related to the strategic importance of digital components. CESER directed CyTRICS researchers to identify, characterize, and append strategic factors to the CyTRICS Prioritization Process to provide additional weight to these characteristics. National Laboratory expert researchers identified functionality, distribution, and platform characteristics for digital components in ICS and OT that they assessed would be likely targeted in strategic initial-access cyber attack. CyTRICS has termed these factors “ICS Beachhead Systems,” leveraging a definition first advanced by Schneider Electric, which is intended as a blanket term to encompass digital components, products, and systems in OT. This paper describes the ICS Beachhead Systems identified and the rationale for inclusion. As a next step in the research and refinement process, the National Laboratories will validate this initial set of characteristics against digital components evaluated by the CyTRICS program and current implementation of the CyTRICS Prioritization Process. After validation, CyTRICS researchers will then develop a scoring methodology to generate a quantitative score to assess the degree to which a digital component is characterized as an ICS Beachhead System. Finally, the National Laboratories will append this scoring to the existing CyTRICS Prioritization Process algorithm.

97 MATHEMATICS AND COMPUTING↗

NuQKD: A Modular Quantum Key Distribution Simulation Framework for Engineering Applications

Abstract An experimental Quantum Key Distribution (QKD) implementation requires advanced costly hardware, unavailable in most research environments, making protocol testing and performance evaluation complicated. This has been a major motivation for the development of QKD simulation frameworks, to allow researchers to obtain insight before proceeding into practical implementations. Several simulators have been introduced over the recent years. However, only four are publicly available, only one of which models equipment imperfections. Currently, no open‐source simulator includes all following capabilities: channel attenuation modelling, equipment imperfections and effects on key rates, estimation of elapsed time during classical and quantum‐ channel processes, use of truly random binary sequences for qubits and measurement bases, shared ‐bit fraction customization. In this paper, we present NuQKD, an open‐ source modular, intuitive simulator, featuring all the above capabilities. NuQKD establishes communication between two computer terminals, accepts custom user inputs (iterations, raw key size, attacker interception rate etc.) and evaluates the sifted key, Quantum Bit Error Rate (QBER), elapsed communication time, and more. NuQKD capabilities include optical fiber and free ‐space simulation, modeling of equipment/channel imperfections, bitstrings from True Random Number Generators, decoy‐state protocol support, and automated evaluation of performance metrics. We expect NuQKD to enable convenient and accurate representation of actual experimental conditions.

Gkouliaras, Konstantinos↗

Kelvin Probe Force Microscopy for High-Resolution Imaging of Hydrogen in Steel and Aluminum Alloys

SRNL is working with Sandia NL, Pacific Northwest NL and Oak Ridge NL in the H-Mat consortium with the objective of developing materials with a higher resistance to hydrogen attack. Understanding the mechanism of hydrogen interactions in metal alloys is continually a topic of interest for applications which involve the long-term storage of hydrogen. Atomic hydrogen segregates to regions of extended defects, such as grain and phase boundaries, and can cause stress and premature cracking through a process known as hydrogen embrittlement. Advanced microstructural imaging techniques, with minimal sample preparation needs, that are capable of resolving hydrogen segregation at the nanometer scale is needed. Current imaging technologies to aid in understanding the effects of hydrogen in metals involve primarily fractography after mechanical testing. Hydrogen segregated at the surface and particularly at surface defect sites changes the local work function of the material. This can be measured by Kelvin Probe Force Microscopy, KPFM, a variant of atomic force microscopy (AFM). KPFM produces surface potential images and is capable of measuring the local change in work function of surfaces with very high spatial resolution. The spatial resolution of KPFM is optimally ~5 nm, yielding very high hydrogen concentration/microstructure coloration capabilities. By locating the presence of hydrogen and its relationship with extended defects, it may be possible to develop microstructures less susceptible to hydrogen embrittlement. The objective of this effort is to assess the utility of KPFM to determine the H 2 concentration profiles surrounding complex microstructural features in high strength steel and aluminum alloys subjected to high pressure hydrogen exposure.

08 HYDROGEN↗

Electrochemical Behaviors of Bilayer Oxygen Electrode for Reversible Solid Oxide Cells

Reducing the resistances of oxygen reduction reaction (ORR) and oxygen evolution reaction (OER) while retaining the stability of an oxygen electrode, even in the presence of air contaminants such as Cr, H2O and CO2, is of paramount importance to the current commercial development of intermediate-temperature reversible solid oxide cells (IT-RSOCs). In this presentation, a multifunctional, coarsening-resistant, air-contaminants-tolerant and yet ORR/OER-active oxygen electrode (OE) for IT-RSOCs is described. The testing results show that new bilayer OE exhibits a much better ORR/OER activity and stability than the single-layer benchmark LSCF-GDC OE. Remarkably, the new bilayer OE also demonstrates an exceptionally high resistance to Cr-attack, a critical issue to the development of commercial meal-interconnect loaded SOFC/SOEC stacks/systems. Theoretical analysis is also presented to understand the fundamental reasons for the improved ORR/OER activity and stability observed under real-world operating conditions.

Huang, Kevin↗

Development of an Open-source Alloy Selection and Lifetime Assessment Tool for Structural Components in CSP

Lack of sufficient data on high temperature mechanical and corrosion behavior of structural materials is a huge barrier in the technological maturity of current and future Concentrating Solar Power (CSP) technologies. Rapid development and selection of materials cannot be achieved by expensive and time-consuming acquisition of experimental data. The goal of the proposed work is development of an open-source alloy selection and lifetime prediction tool that will integrate validated physics-based models to describe influence of temperature, alloy composition, environment and component geometry (thickness) on mechanical and corrosion behavior of Ni and Fe-based alloys employed in molten salts/sCO 2 heat exchangers. This one-year project leveraged the extensive dataset on the creep\corrosion behavior of candidate materials generated at ORNL through past projects and input from current collaborations with industrial partners. Based on previous experience and the feedback provided by industry (Brayton Energy and Echogen), three candidate materials of interest, Ni-based alloys 740H, 282 and 625 and application-specific operating conditions (max. temperature of 730 °C and stress of 150 MPa) were identified for the heat exchanger. An extensive corrosion and creep dataset was assimilated for the relevant operating conditions and was supported by detailed characterization of about 100 metallographic cross-sections. The corrosion dataset consisted of scanning electron microscopy images (secondary electron and backscatter electron), measured concentration profiles of alloying elements using energy dispersive X-ray spectroscopy (EDS), widths of denuded zones (dissolution of strengthening phases) and depths of attack in molten KCl-MgCl 2 mixtures using image analyses. The creep dataset comprised of creep rupture data and creep strain curves (for 740H and 282). Coupled thermodynamic-kinetic microstructure-based models were employed to predict the stress-corrosion induced compositional and phase evolutions in the alloy during operation under the identified operating conditions. Reduced order models were developed from advanced physics-based models and were integrated in a user-friendly alloy selection tool. The corrosion model was able to predict the time to a critical Cr concentration at the oxide/alloy interface (chemical lifetime) within ±10% (1 standard deviation) of typical statistical variation in corrosion tests and EDS measurement errors (±0.5 wt%). The initial scope of the project was limited to predict creep rupture times (Larson-Miller parameter). Based on the input provided by industry, the mechanical lifetime of the heat exchanger is governed by accumulated creep strains (2%) rather than creep rupture. To be able to predict the times to specific creep strains, a more extensive creep model development was undertaken largely beyond the initial scope of the project. The continuum damage mechanics creep model was able to predict times to 2% creep strain, t 2% with an accuracy of ±500h. Ultimately, a screening protocol for SiC was generated to demonstrate the pathway for integration of one of the currently immature materials from a commercial adoption standpoint in the current material evaluation tool. The modeling tool developed here is accessible to the science community and stakeholders and lays the foundation for methods that will enable a rapid evaluation of optimum materials for CSP applications and reliable prediction of material degradation thereby considerably reducing operational costs, improving reliability and increasing overhaul intervals. However, the complete potential of such a tool to include a wider range of materials and test conditions can only be realized with a more concentrated combined experimental-characterization-computation effort.

14 SOLAR ENERGY↗