Search NASA⌕ Search

SEARCH · Search NASA

Results for “System Security”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 1,585 records · Page 88

NASA's Plan for SDLS Testing

The Space Data Link Security (SDLS) Protocol is a Consultative Committee for Space Data Systems (CCSDS) standard which extends the known Data Link protocols to secure data being sent over a space link by providing confidentiality and integrity services. This plan outlines the approach by National Aeronautics Space Administration (NASA) in performing testing of the SDLS protocol using a prototype based on an existing NASA missions simulator.

Testing↗

User and Task Analysis of the Flight Surgeon Console at the Mission Control Center of the NASA Johnson Space Center

Astronauts in a space station are to some extent like patients in an intensive care unit (ICU). Medical support of a mission crew will require acquisition, transmission, distribution, integration, and archiving of significant amounts of data. These data are acquired by disparate systems and will require timely, reliable, and secure distribution to different communities for the execution of various tasks of space missions. The goal of the Comprehensive Medical Information System (CMIS) Project at Johnson Space Center Flight Medical Clinic is to integrate data from all Medical Operations sources, including the reference information sources and the electronic medical records of astronauts. A first step toward the full CMIS implementation is to integrate and organize the reference information sources and the electronic medical record with the Flight Surgeons console. In order to investigate this integration, we need to understand the usability problems of the Flight Surgeon's console in particular and medical information systems in general. One way to achieve this understanding is through the use of user and task analyses whose general purpose is to ensure that only the necessary and sufficient task features that match users capacities will be included in system implementations. The goal of this summer project was to conduct user and task analyses employing cognitive engineering techniques to analyze the task of the Flight Surgeons and Biomedical Engineers (BMEs) while they worked on Console. The techniques employed were user interviews, observations and a questionnaire to collect data for which a hierarchical task analysis and an information resource assessment were performed. They are described in more detail below. Finally, based on our analyses, we make recommendations for improvements to the support structure.

Johnson, Kathy A.↗

Annual Stormwater Report for the Y-12 National Security Complex Oak Ridge, Tennessee

This is the eighth annual stormwater report prepared in accordance with the modified National Pollutant Discharge Elimination System permit issued to the Y-12 National Security Complex (Y-12) on April 1, 2014. This modified permit removed the authorization to augment flow in East Fork Poplar Creek (EFPC) and thus removed the requirement to sample this effluent in conjunction with other major outfalls on EFPC. The general condition of the site continues to improve. The repair of Outfall 014 is complete and sampling was performed in 2020 from the new Outfall 014 structure. This repair marks a significant improvement in the storm drain network infrastructure. There are several construction and demolition activities currently in progress at Y-12. These include the construction of the Uranium Processing Facility, the Mercury Treatment Facility on EFPC, the site-wide power grid upgrade, and the demolition of the Biology Complex. Current stormwater protections have proven effective in 2020; however, moving forward, these projects will present challenges for the protection of stormwater. Therefore, oversight of these activities, and all other construction and demolition projects, will continue to be a priority in 2021. Y-12 will continue to implement appropriate best management practices and reduce outside material storage areas where possible.

54 ENVIRONMENTAL SCIENCES↗

Annual Stormwater Report for the Y-12 National Security Complex Oak Ridge, Tennessee

This is the ninth annual stormwater report prepared in accordance with the modified National Pollutant Discharge Elimination System permit issued to the Y-12 National Security Complex (Y-12) on April 1, 2014. This modified permit removed the authorization to augment flow in East Fork Poplar Creek (EFPC) and thus removed the requirement to sample this effluent in conjunction with other major outfalls on EFPC. There are several construction and demolition activities currently in progress at Y-12. These include the construction of the Uranium Processing Facility (UPF), the Mercury Treatment Facility (MTF) on EFPC, the site-wide power grid upgrade, construction of an Emergency Operations Center, construction of a new Fire Station, Security Improvement Revitalization Program (SIRP), West End Protection Area Reduction (WEPAR) Project, and the demolition of the Biology Complex. Current stormwater protections have proven effective in 2021. However, moving forward, challenges to protect stormwater will continue from these projects. Therefore, oversight of these activities, and all other construction and demolition projects, will continue to be a priority in 2022. Y-12 will continue to implement appropriate Best Management Practices and reduce outside material storage areas where possible.

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗

A Review of Behind-the-Meter Solar Generation Modeling and Forecasting

Solar photovoltaic systems largely integrated within the distribution grid are operated 'behind-the-meter' and power generation cannot be directly monitored by most utilities. The increasing penetration of behind-the-meter solar photovoltaic systems can deter efficient network and market operations due to variability and uncertainty in net load, which is exacerbated by limited visibility and the difficulty in analyzing the hosting capacity. Risk introduced by behind-the-meter solar contributions may hinder reliable and secure grid operations due to biased system monitoring and forecasts. Accurate behind-the-meter estimations, together with capacity and specification forecasts, thus play a key role in balancing supply and demand and this article reviews the pertinent literature, identifying key characteristics and predictive methods for efficient behind-the-meter solar photovoltaic generation. Forecasting is central to methods herein. The fundamental characteristics of behind-the-meter solar forecasting, including which methods are applicable for scenario-driven use cases, are driven by the metrics most useful for system-wide performance evaluation. To this aim, the literature is reviewed with a focus on forecasting applications for aggregate, regional behind-the-meter generation useful to bulk system and utility operations. As distinguished from net load forecasting, subtleties in these coincident tasks are explored before concluding with recommendations for current practice and future implementations.

behind-the-meter↗

Air Conditioning Systems Fault Detection and Diagnosis-Based Sensing and Data-Driven Approaches

The air conditioning (AC) system is the primary building end-use contributor to the peak demand for energy. The energy consumed by this system has grown as fast as it has in the last few decades, not only in the residential section but also in the industry and transport sectors. Therefore, to combat energy crises, urgent actions on energy efficiency should be taken to support energy security. Consequently, the faults in AC system components increase energy consumption due to the degradation of the system’s performance and the losses in the energy conversion procedure. In this work, AC system fault detection and diagnosis (FDD) methods are investigated to propose analytic tools to identify faults and provide solutions to those problems. The analysis of existing work shows that data-driven approaches are more accurate for both soft and hard fault detection and diagnosis in AC systems. Therefore, the proposed methods are not accurate for simultaneous fault detection, while in some works, authors tested the method with several faults separately without investigating scenarios that combine more than one fault. Moreover, this study shows that integrating data-driven approaches requires deploying an optimal sensing and measurement architecture that can detect a maximum number of faults with minimally deployed sensors. The new sensing, information, and communication technologies are discussed for their integration in AC system monitoring in order to optimize system operation and detect faults.

32 ENERGY CONSERVATION, CONSUMPTION, AND UTILIZATI↗

Photovoltaics and Energy Security in the Greater Arctic Region

The greater Arctic region (>60°N latitude) has been largely overlooked as a promising location for photovoltaic (PV) installations, with lower latitude and warmer regions receiving more attention. While few large PV installations currently exist in the Arctic, a closer examination of the region's geography, climate, PV technology characteristics, and energy needs reveals that PV systems can significantly contribute to energy security in high-latitude areas. This report examines both the opportunities and significant challenges for such a vision.

14 SOLAR ENERGY↗

Nuclear Power Plant Simulation and Cybersecurity

Critical infrastructure protection is vital to the day-to-day operation of any country, and those systems need to be protected to the fullest extent possible. As with what was seen in Ukraine in late 2016, with the cyber attack on the power grid, these systems are susceptible to attacks that can cause serious damage, both physically and economically. This incident shut down the power grid for 6 hours, with nearly 80,000 people affected. Cyber security can be referred to as the protection of data and systems in networks, both wired and wireless, from unauthorized access or attack. In nuclear power plants, assessments of cyber security are critical to ensuring the safe and reliable operation of the systems used. According to the Nuclear Regulatory Commission (NRC), the purpose of cyber security assessments is to detect and then eliminate or mitigate vulnerabilities in the digital system that could be exploited either from outside or inside the digital system protected area. These cyber security assessments are essentially intended to reduce cyber security risk. The NRC refers to cyber security risk as the combination of the consequence to the nuclear power plant and the susceptibility of a digital system to internal and external cyber attack.

21 SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLANTS↗

Photovoltaic at Hollywood and Desert Breeze Recreational Centers

In accordance with the goals of the Department of Energy (DOE) Office of Energy Efficiency and Renewable Energy for promoting solar energy as clean, carbon-free and cost-effective, the County believed that a recreational center was an ideal place to promote solar energy technologies to the public. This project included the construction of solar electricity generation facilities (40kW) at two Clark County facility sites, Desert Breeze Recreational Center and Hollywood Recreational Center, with educational kiosks and Green Boxes for classroom instruction. The major objectives and goals of this Solar Project include demonstration of state of the art technologies for the generation of electricity from solar technology and the creation of an informative and educational tool in regards to the benefits and process of generating alternative energy. Clark County partnered with Anne Johnson (design architect/consultant), Affiliated Engineers Inc. (AEI), Desert Research Institute (DRI), and Morse Electric. The latest photovoltaic technologies were used in the project to help create the greatest expected energy savings for60443 each recreational center. This coupled with the data created from the monitoring system will help Clark County and NREL further understand the real time outputs from the system. The educational portion created with AEI and DRI incorporates material for all ages with a focus on K - 12. The AEI component is an animated story telling the fundamentals of how sunlight is turned into electricity and DRI‘s creation of Solar Green Boxes brings environmental education into the classroom. In addition to the educational component for the public, the energy that is created through the photovoltaic system also translates into saved money and health benefits for the general public. This project has helped Clark County to further add to its own energy reduction goals created by the energy management agenda (Resolution to Encourage Sustainability) and the County’s Eco-initiative. Each site has installed photovoltaic panels on the existing roof structures that exhibit suitable solar exposure. The generation systems utilize solar energy creating electricity used for the facility’s lighting system and other electrical requirements. Unused electricity is sent to the electric utility grid, often at peak demand times. Educational signage, kiosks and information have been included to inform and expand the public’s understanding of solar energy technology. The Solar Green Boxes were created for further hands on classroom education of solar power. In addition, data is sent by a Long Term PV performance monitoring system, complete with data transmission to NREL (National Renewable Energy Laboratory), located in Golden, CO. This system correlates local solar irradiance and weather with power production. The expected outcomes of this Solar Project are as follows: (1) Successful photovoltaic electricity generation technologies to capture solar energy in a useful form of electrical energy. (2) Reduction of greenhouse gas emissions and environmental degradation resulting from reduced energy demand from traditional electricity sources such as fossil fuel fired and nuclear power plants. (3) Advance the research and development of solar electricity generation. (4) The education of the general public in regards to the benefits of environmentally friendly electricity generation and Clark County’s efforts to encourage sustainable living practices. (5) To provide momentum for the nexus for future solar generation facilities in Clark County facilities and buildings and further the County’s energy reduction goals. (6) To ultimately contribute to the reduction of dependence on foreign oil and other unsustainable sources of energy. This Solar Project addresses several objectives and goals of the U.S. Department of Energy’s Solar Energy Technology Program. The project improves the integration and performance of solar electricity directly through implementation of cutting edge technology. The project further addresses this goal by laying important ground work and infrastructure for integration into the utility grid in future related projects. There will also be added security, reliability, and diversity to the energy system by providing and using reliable, secure, distributed electricity in Clark County facilities as well as sending such electricity back into the utility electric grid. A final major objective met by the Solar Project will be the displacement of energy derived by fossil fuels with clean renewable energy created by photovoltaic panels.

14 SOLAR ENERGY↗

CEEP (Cyber-Energy Emulation Platform) [SWR-20-102]

NREL's Cyber-Energy Emulation Platform (CEEP) provides the capability to realize cyber-energy security and resilience through automation and orchestration of virtualized systems and software defined networks for the electric grid. CEEP enables testing and validation of grid-security and -control methodologies as the grid evolves to include smart technologies/systems, such as virtualization and containerization of grid components, software defined networking, simulation and co-simulation frameworks, and hardware in the loop. CEEP is a modular system that can be distributed and deployed across different hardware infrastructure sizes and network architectures. For example, CEEP can visualize, emulate, and/or coordinate the Smart-Grid Network Visualization, Intrusion Detection, and Network Healing system. Using CEEP, intrusion-detection and network-self-healing solutions can be deployed at grid control centers, within secure private clouds, and in cyber-energy appliances.

Vaughan, Evan↗

Cyber Energy Emulation Platform (CEEP) [SWR-20-102]

NREL's Cyber-Energy Emulation Platform (CEEP) provides the capability to realize cyber-energy security and resilience through automation and orchestration of virtualized systems and software defined networks for the electric grid. CEEP enables testing and validation of grid-security and -control methodologies as the grid evolves to include smart technologies/systems, such as virtualization and containerization of grid components, software defined networking, simulation and co-simulation frameworks, and hardware in the loop. CEEP is a modular system that can be distributed and deployed across different hardware infrastructure sizes and network architectures. For example, CEEP can visualize, emulate, and/or coordinate the Smart-Grid Network Visualization, Intrusion Detection, and Network Healing system. Using CEEP, intrusion-detection and network-self-healing solutions can be deployed at grid control centers, within secure private clouds, and in cyber-energy appliances.

Rivera, Joshua↗

Cybersecurity Resiliency of Marine Renewable Energy Systems Part 2: Cybersecurity Best Practices and Risk Management

Marine renewable energy (MRE) is an emerging source of power for marine applications, marine devices, and coastal communities. This energy source relies on industrial control systems and IT to support operations and maintenance activities, which create a pathway for an adversary to gain unauthorized access to systems and data and disrupt operations. Incorporating cybersecurity risk prevention measures and mitigation capabilities from inception, development, operation, to decommissioning of the MRE system and components is paramount to the protection of energy generation and the security of network architecture and infrastructure. To improve the resilience of MRE systems as a predictable, affordable, and reliable source of energy, cybersecurity guidance was developed to enable operators to assess cybersecurity risks and implement security measures commensurate with the risk. This publication is the second of a two-part series, with Part 1 addressing a framework to determine cybersecurity risk by assessing the vulnerability of an MRE system to potential cyber threats and the consequences a cyberattack would have on the end user. This Part 2 publication describes an approach to select appropriate cybersecurity best practices commensurate with the MRE system's cybersecurity risk. The guidance includes 86 cybersecurity best practices, which are associated with 36 cybersecurity domains and grouped into nine categories. The best practices follow the core functions of the National Institute of Science and Technology Cybersecurity Framework (e.g., identify, detect, protect, respond, and and recover) and insights from both maritime and energy industry guidance documents to identify security measures effective in protecting information and operational technology assets prevalent in MRE systems.

97 MATHEMATICS AND COMPUTING↗

Smart Packaging for Critical Energy Shipment (SPaCES)

Recent technical advances have brought forth revolutionary Smart Packaging (SP) technology. SP incorporates multiple electronics, chemical, and mechanical sensing technologies into packaging materials, and utilizes them to monitor and display package content status. SP can also employ embedded micro actuators to react to undesirable package conditions such as moisture/temperature anomalies or harmful chemical reactions and neutralize it. When further integrated with wireless sensing and secure networking, SP provides wholistic system-wide remote situation awareness capability for real-time crisis management. Finally, we also see that SP can be further integrated with 3D printing technology to offer form-factor customization and application specific solutions suitable for DOE (Department of Energy) NNSA’s (National Nuclear Security Administration) R/N (radiological/nuclear) material shipment and management needs; this has the potential to improve safety, security, and overall operation process quality. This report surveys SP technology as the state of the art (SOTA) and analyzes how it can integrate with cybersecurity and 3D printing to address NNSA’s critical R/N material shipment and storage requirements. This report further presents our FY23/24 investigation plan describing project background, goal, motivation, proposed work, and statement of work and cost.

47 OTHER INSTRUMENTATION↗

Colloquium : Neutrino detectors as tools for nuclear security

For over 40 years, physicists have discussed possible uses for neutrino detectors in nuclear nonproliferation, arms control, and fissile materials security. Neutrinos are an attractive fission signature because they readily pass through matter. The same property makes neutrinos challenging to detect in systems that would be practical for nuclear security applications. This Colloquium presents a broad overview of several potential neutrino applications, including the near-field monitoring of known reactors, far-field monitoring of known or discovery of undeclared reactors, detection of reactor waste streams, and detection of nuclear explosions. Recent detector advances have made near-field monitoring feasible, whereas farther-field reactor detection and waste stream detection monitoring may be possible in some cases with further research and development. Very long-range reactor monitoring and nuclear explosion detection do not seem feasible for the foreseeable future due to considerable physical and/or practical constraints.

42 ENGINEERING↗

System and method for leveraging human physiological traits to control microprocessor frequency

A system and method for leveraging physiological traits to control microprocessor frequency are disclosed. In some embodiments, the system and method may optimize, for example, a particular processor-based architecture based on, for example, end user satisfaction. In some embodiments, the system and method may determine, for example, whether their users are satisfied to provide higher efficiency, improved reliability, reduced power consumption, increased security, and a better user experience. The system and method may use, for example, biometric input devices to provide information about a user's physiological traits to a computer system. Biometric input devices may include, for example, one or more of the following: an eye tracker, a galvanic skin response sensor, and/or a force sensor.

97 MATHEMATICS AND COMPUTING↗

Development and Demonstration of a Security Core Component

In recent years, the convergence of a number of trends has resulted in Cyber Security becoming a much greater concern for electric utilities. A short list of these trends includes: · Industrial Control Systems (ICSs) have evolved from depending on proprietary hardware and operating software toward using standard off-the-shelf hardware and operating software. This has meant that these ICSs can no longer depend on “security through obscurity. · Similarly, these same systems have evolved toward using standard communications protocols, further reducing their ability to rely upon obscurity. · The rise of the Internet and the accompanying demand for more data about virtually everything has resulted in formerly isolated ICSs becoming at least partially accessible via Internet-connected networks. · “Cyber crime” has become commonplace, whether it be for industrial espionage, reconnaissance for a possible cyber attack, theft, or because some individual or group “has something to prove.” Electric utility system operators are experts at running the power grid. The reality is, especially at small and mid-sized utilities, these SCADA operators will by default be “on the front line” if and when a cyber attack occurs against their systems. These people are not computer software, networking, or cyber security experts, so they are ill-equipped to deal with a cyber security incident. Cyber Security Manager (CSM) was conceived, designed, and built so that it can be configured to know what a utility’s SCADA/EMS/DMS system looks like under normal conditions. To do this, CSM monitors log messages from any device that uses the syslog standard. It can also monitor a variety of statistics from the computers that make up the SCADA/EMS/DMS: outputs from host-based security tools, intrusion detection systems, SCADA alarms, and real-time SCADA values – even results from a SIEM (Security Information and Event Management) system. When the system deviates from “normal,” CSM can alert the operator in language that they understand that an incident may be occurring, provide actionable intelligence, and informing them what actions to take. These alarms may be viewed on CSM’s built-in user interface, sent to a SCADA alarm list, or communicated via email, phone, pager, or SMS message. In recognition of the fact that “real world” training for cyber security events is impractical, CSM has a built-in Operator Training Simulator capability. This can be used stand alone to create simulated event scenarios for training purposes. It may also be used in conjunction with the recipient’s SCADA/EMS/DMS Operator Training Simulator. In addition to providing cyber security situational awareness for electric utility operators, CSM also provides tools for analysts and support personnel; in fact, the majority of user interface displays are designed for use in analyzing current and past security events. CSM keeps security-related information in long-term storage, as well as writing any decisions it makes to a (syslog) log for use forensic or other post-event analysis.

Turke, Andy↗

Spline-Screw Multiple-Rotation Mechanism

Mechanism functions like combined robotic gripper and nut runner. Spline-screw multiple-rotation mechanism related to spline-screw payload-fastening system described in (GSC-13454). Incorporated as subsystem in alternative version of system. Mechanism functions like combination of robotic gripper and nut runner; provides both secure grip and rotary actuation of other parts of system. Used in system in which no need to make or break electrical connections to payload during robotic installation or removal of payload. More complicated version needed to make and break electrical connections. Mechanism mounted in payload.

Vranish, John M.↗